$ rpki-client -vvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft File: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft (raw, json) Hash identifier: 3BO8/cSXTdiguWOBuHxD3Cc8BcTpdhKE2JXLR0YgLLQ= Subject key identifier: 12:7D:A8:66:DA:40:B1:92:27:D8:47:71:13:B7:76:BF:10:DA:08:AC Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 Certificate issuer: /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Certificate serial: 17710D6433E68A343EE5B00EC2571AA5229C0C73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft Manifest number: 14 Signing time: Sat 16 May 2026 18:08:04 +0000 Manifest this update: Sat 16 May 2026 18:03:04 +0000 Manifest next update: Sun 17 May 2026 21:11:04 +0000 Files and hashes: 1: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: pbMg7J7P4kS8Sxdzt0uwVKMCDecvHVa7e/rU45LkW3I=) 2: EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl (hash: B2xV8jWyX1MX1nlQVC1TS4RKfTWxLwHqCzVX/me0V44=) 3: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: QuFmVmJ2dd3gMmUQt4P6SAtpf/EY7B6QH+WkpK0hIbk=) 4: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: uLpfvmOWPLMtCPKe67fDfTWwMZzd/ScnogVVWTCv8e4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 21:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:71:0d:64:33:e6:8a:34:3e:e5:b0:0e:c2:57:1a:a5:22:9c:0c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9 Validity Not Before: May 16 18:03:04 2026 GMT Not After : May 17 21:11:04 2026 GMT Subject: CN=127DA866DA40B19227D8477113B776BF10DA08AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:40:b3:93:f2:de:56:a7:08:1e:62:9c:ca: 2a:6f:2f:f7:0f:0a:3d:a4:85:e8:46:6e:ae:6a:f9: 27:b8:51:cf:b0:d3:5d:ff:16:7f:23:cb:2b:3e:b3: 17:d6:da:51:50:c8:66:4b:c3:41:a5:6e:da:a6:d4: 3b:02:f2:d3:c7:1d:ae:e5:c9:61:f1:dd:69:92:e7: 93:ea:0c:f7:14:c8:a0:3f:2d:f9:66:a3:45:5e:ab: f5:dc:7a:c2:39:8d:2d:58:70:f5:cf:f1:95:a1:40: 47:d5:7b:59:b3:1a:e1:13:30:57:d2:f4:ad:7b:9d: ae:d8:49:d8:43:08:4d:9f:98:1c:8a:8e:22:6a:f6: 52:7e:de:8d:93:40:9e:89:ba:41:65:be:39:38:13: fe:11:a6:82:a9:52:d4:f4:ec:c9:81:5c:7b:f5:92: a2:79:c6:35:b9:da:d6:85:b7:37:52:32:37:53:ac: 89:db:14:5b:3b:30:50:a7:12:69:27:9a:b3:10:67: 2d:ad:6e:13:85:56:c4:82:a1:f6:ae:01:05:ca:fb: aa:c3:b7:a8:38:79:21:37:3b:bd:b9:fd:c7:cf:53: 80:dd:66:10:36:ba:13:48:59:1b:0c:66:89:dc:1c: 1b:5c:a1:9a:c2:54:df:42:22:c3:b7:66:f0:95:44: 00:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7D:A8:66:DA:40:B1:92:27:D8:47:71:13:B7:76:BF:10:DA:08:AC X509v3 Authority Key Identifier: keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d5:87:c3:f9:4c:86:59:32:85:43:84:56:1c:3a:33:ae:72: fd:e5:6f:45:80:bd:52:eb:6a:6b:9b:9a:fa:d6:57:06:fa:24: 82:51:ed:da:1c:49:fd:3b:29:50:c8:4f:e7:3a:30:35:a1:fc: 25:39:f2:0c:f9:66:63:d4:e2:6d:a2:0a:d9:d4:3d:5f:e7:be: 19:04:22:8d:05:94:51:6d:c3:6f:19:8e:01:c5:b6:72:39:d7: 85:66:c2:a1:8f:d5:f6:e6:54:09:20:45:3a:f0:02:a1:b2:e3: 70:0f:2e:ff:bf:5f:13:95:4a:4f:19:7e:80:d2:2d:a9:75:35: a0:6c:a2:41:20:da:2f:ba:a4:46:0a:06:a3:60:d5:34:38:a8: 39:e5:eb:9b:82:19:27:c1:83:8b:f5:35:d1:b5:ff:d4:a3:c6: 5f:20:63:80:44:80:63:21:bc:d5:6f:f5:22:b0:ea:1d:8a:10: 48:12:a1:f9:79:0d:a4:96:0b:37:71:0c:2e:61:85:8e:ce:18: c0:e4:e6:81:fd:c0:5e:dc:2f:ff:a3:70:09:73:5b:e2:09:bd: 6c:6b:67:f1:45:11:96:2c:41:a1:93:81:da:96:c6:93:c5:a5: 17:ff:19:e3:e4:c8:41:4d:ac:a1:47:ff:92:77:88:6f:04:5e: c7:ad:61:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3ENZDPmijQ+5bAOwlcapSKcDHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdC MUI0QkNBOTAeFw0yNjA1MTYxODAzMDRaFw0yNjA1MTcyMTExMDRaMDMxMTAvBgNV BAMTKDEyN0RBODY2REE0MEIxOTIyN0Q4NDc3MTEzQjc3NkJGMTBEQTA4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp80Czk/LeVqcIHmKcyipvL/cP Cj2khehGbq5q+Se4Uc+w013/Fn8jyys+sxfW2lFQyGZLw0Glbtqm1DsC8tPHHa7l yWHx3WmS55PqDPcUyKA/Lflmo0Veq/XcesI5jS1YcPXP8ZWhQEfVe1mzGuETMFfS 9K17na7YSdhDCE2fmByKjiJq9lJ+3o2TQJ6JukFlvjk4E/4RpoKpUtT07MmBXHv1 kqJ5xjW52taFtzdSMjdTrInbFFs7MFCnEmknmrMQZy2tbhOFVsSCofauAQXK+6rD t6g4eSE3O725/cfPU4DdZhA2uhNIWRsMZoncHBtcoZrCVN9CIsO3ZvCVRAA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEn2oZtpAsZIn2EdxE7d2vxDaCKwwHwYDVR0j BBgwFoAU79QpB7KB552Ts6Vb535pV7G0vKkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmVkNDcyMDItZGU2MC00N2YzLWEyYTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdC MjgxRTc5RDkzQjNBNTVCRTc3RTY5NTdCMUI0QkNBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkQ0MjkwN0IyODFFNzlEOTNCM0E1NUJFNzdFNjk1N0IxQjRC Q0E5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvRUZENDI5MDdCMjgxRTc5RDkzQjNBNTVCRTc3RTY5 NTdCMUI0QkNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3Vh8P5TIZZMoVDhFYcOjOucv3lb0WAvVLr amubmvrWVwb6JIJR7docSf07KVDIT+c6MDWh/CU58gz5ZmPU4m2iCtnUPV/nvhkE Io0FlFFtw28ZjgHFtnI514VmwqGP1fbmVAkgRTrwAqGy43APLv+/XxOVSk8ZfoDS Lal1NaBsokEg2i+6pEYKBqNg1TQ4qDnl65uCGSfBg4v1NdG1/9Sjxl8gY4BEgGMh vNVv9SKw6h2KEEgSofl5DaSWCzdxDC5hhY7OGMDk5oH9wF7cL/+jcAlzW+IJvWxr Z/FFEZYsQaGTgdqWxpPFpRf/GePkyEFNrKFH/5J3iG8EXsetYc8= -----END CERTIFICATE-----Generated at Sun May 17 10:55:51 2026 by rpki-client