$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft File: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft (raw, json) Hash identifier: O3tTsEyOXWzN8LmFRr6vTpBwbiJoLMvfoP9vlQeyp5g= Subject key identifier: D5:B4:08:7C:7A:33:B1:51:67:18:80:FD:E3:E2:73:08:0D:8A:84:9B Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 Certificate issuer: /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Certificate serial: 01217299ED856F4E143A5C8279A8E405BD2B9DA7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft Manifest number: A9 Signing time: Thu 03 Sep 2026 08:02:27 +0000 Manifest this update: Thu 03 Sep 2026 07:57:27 +0000 Manifest next update: Fri 04 Sep 2026 09:31:27 +0000 Files and hashes: 1: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: pbMg7J7P4kS8Sxdzt0uwVKMCDecvHVa7e/rU45LkW3I=) 2: 3130332e3136372e3133322e302f32332d3233203d3e203538383230.roa (hash: MzMoXvwp2stngvRucIeMRj/ZickQ1zvi8Fxd3aMU4jw=) 3: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: uLpfvmOWPLMtCPKe67fDfTWwMZzd/ScnogVVWTCv8e4=) 4: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl (hash: vuNW1vM19/j9UlAnGVv/oeZvgBZGctPeIzEvRIEN3ZQ=) 5: 3130332e3136372e3133332e302f32342d3234203d3e20313339343536.roa (hash: 1J0/I4tqmUll60RJxwp6bFaa6UPkoQKQXxUGs5DsE7s=) 6: 3130332e3136372e3133322e302f32342d3234203d3e20313339343536.roa (hash: pKyTnDy4jjm+bK/0uv1ZCFmZNnZvfEkd2gMR4Mti5xA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 09:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:21:72:99:ed:85:6f:4e:14:3a:5c:82:79:a8:e4:05:bd:2b:9d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Validity Not Before: Sep 3 07:57:27 2026 GMT Not After : Sep 4 09:31:27 2026 GMT Subject: CN=D5B4087C7A33B151671880FDE3E273080D8A849B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a3:7c:98:b6:c2:51:1d:81:04:81:70:ef:71: c5:5c:8c:bb:f4:0a:da:6e:0b:4c:02:6b:a2:ab:ef: e9:5d:5f:af:1c:28:f8:be:27:e7:d4:28:47:96:88: ae:38:07:a8:a8:44:76:93:25:99:64:c3:02:59:20: c3:79:34:18:d7:4e:9a:0d:73:42:88:ee:61:cd:71: a4:ae:35:4d:1c:b3:59:09:c7:f8:e2:e1:df:af:71: 03:e1:37:e9:10:7d:95:d2:97:1a:72:d8:a3:40:2a: 1b:45:d0:67:be:f2:49:a4:ea:41:a5:e9:61:33:ad: 83:53:bc:00:86:c4:56:45:a2:61:44:0d:90:a3:d3: fe:91:d5:7e:90:1f:b4:fb:7e:fe:48:47:97:9d:61: d4:a9:ef:81:a7:1d:fd:f2:03:d3:53:2e:89:3b:b2: d3:e8:73:90:15:6e:0e:db:e9:5a:da:85:f4:63:fb: 03:7e:ac:c7:80:1a:db:14:ce:92:59:08:68:8f:b3: a8:ee:3b:d4:e2:d6:be:b1:c6:27:8f:33:17:c1:18: 12:b4:93:fa:42:7b:e5:61:f6:18:00:51:8f:87:7a: 88:47:f5:bb:13:2c:03:ba:88:cf:48:49:e0:4d:c6: 3e:fb:ee:ef:1f:c0:28:14:70:55:07:a0:04:fe:4f: 55:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B4:08:7C:7A:33:B1:51:67:18:80:FD:E3:E2:73:08:0D:8A:84:9B X509v3 Authority Key Identifier: keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:31:12:20:89:da:6c:39:c4:d4:ad:28:f6:c3:45:97:e5:d4: 88:cd:a7:bf:54:81:87:97:4c:cf:29:8d:d9:43:43:4e:71:84: 03:66:80:c1:37:cb:9f:f4:28:18:69:f6:cb:98:08:4c:1c:f7: 30:00:77:67:ab:f1:83:3d:6f:c9:ee:66:1f:f7:98:99:74:d3: 62:87:9b:62:9b:a7:9e:56:40:8b:23:d7:77:d7:e3:5b:12:f9: 2d:07:43:08:d0:af:ea:a3:ba:8e:63:be:70:b0:d8:2f:b6:89: 7d:a5:bb:ed:0f:bc:19:ce:f8:7b:eb:27:f4:d1:78:b7:38:40: 2a:46:50:62:ae:f5:f2:fe:d0:1a:36:83:97:c6:d9:d3:b9:8e: 54:d4:41:2d:95:d2:5a:69:64:b9:50:76:e8:9f:90:f0:67:41: 36:a0:d2:38:de:28:78:ff:74:4d:9f:0b:94:7d:be:ef:2e:d6: 8e:95:18:41:15:e9:fe:a8:30:87:20:af:2f:4a:8f:b2:71:7a: 29:d1:41:96:5e:89:f8:b7:9c:c7:a5:12:32:76:69:88:06:db: 1d:7b:a0:e4:8e:fb:9c:9d:db:d4:63:fb:6a:81:4a:7b:a7:03: ff:be:1e:8b:b1:d4:37:0e:15:40:9f:49:3c:8c:85:f2:d2:c0: 98:92:d7:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUASFyme2Fb04UOlyCeajkBb0rnacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdC MUI0QkNBOTAeFw0yNjA5MDMwNzU3MjdaFw0yNjA5MDQwOTMxMjdaMDMxMTAvBgNV BAMTKEQ1QjQwODdDN0EzM0IxNTE2NzE4ODBGREUzRTI3MzA4MEQ4QTg0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfo3yYtsJRHYEEgXDvccVcjLv0 CtpuC0wCa6Kr7+ldX68cKPi+J+fUKEeWiK44B6ioRHaTJZlkwwJZIMN5NBjXTpoN c0KI7mHNcaSuNU0cs1kJx/ji4d+vcQPhN+kQfZXSlxpy2KNAKhtF0Ge+8kmk6kGl 6WEzrYNTvACGxFZFomFEDZCj0/6R1X6QH7T7fv5IR5edYdSp74GnHf3yA9NTLok7 stPoc5AVbg7b6VrahfRj+wN+rMeAGtsUzpJZCGiPs6juO9Ti1r6xxiePMxfBGBK0 k/pCe+Vh9hgAUY+HeohH9bsTLAO6iM9ISeBNxj777u8fwCgUcFUHoAT+T1WFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1bQIfHozsVFnGID94+JzCA2KhJswHwYDVR0j BBgwFoAU79QpB7KB552Ts6Vb535pV7G0vKkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVkNDcyMDItZGU2MC00N2YzLWEyYTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdC MjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdCMUI0QkNBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkQ0MjkwN0IyODFFNzlEOTNCM0E1NUJFNzdFNjk1N0IxQjRC Q0E5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5 NTdCMUI0QkNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQxEiCJ2mw5xNStKPbDRZfl1IjNp79UgYeX TM8pjdlDQ05xhANmgME3y5/0KBhp9suYCEwc9zAAd2er8YM9b8nuZh/3mJl002KH m2Kbp55WQIsj13fX41sS+S0HQwjQr+qjuo5jvnCw2C+2iX2lu+0PvBnO+HvrJ/TR eLc4QCpGUGKu9fL+0Bo2g5fG2dO5jlTUQS2V0lppZLlQduifkPBnQTag0jjeKHj/ dE2fC5R9vu8u1o6VGEEV6f6oMIcgry9Kj7JxeinRQZZeifi3nMelEjJ2aYgG2x17 oOSO+5yd29Rj+2qBSnunA/++Houx1DcOFUCfSTyMhfLSwJiS14k= -----END CERTIFICATE-----Generated at Thu Sep 3 23:30:14 2026 by rpki-client