$ rpki-client -vvvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft File: EFA0A80DF71CA377A289711EA4310F3117358BDA.mft (raw, json) Hash identifier: 478cp0f9Kmif/diQvFaD6/jHK7IIk4tqM4dEG3x3Y18= Subject key identifier: CB:0C:6E:40:FF:53:97:5E:A4:68:7E:0F:97:60:74:6D:3F:4C:E9:48 Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Certificate serial: 5FF3385E15EC6BB2FBF79F8C135F9D33108A9172 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft Manifest number: F6 Signing time: Sun 01 Nov 2026 07:37:10 +0000 Manifest this update: Sun 01 Nov 2026 07:32:10 +0000 Manifest next update: Mon 02 Nov 2026 11:16:10 +0000 Files and hashes: 1: EFA0A80DF71CA377A289711EA4310F3117358BDA.crl (hash: f51GmopvQIcMt0z0LhX1ZQWK06xWnh709hFxVBWlv9E=) 2: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: a1jLyYlI+XXOuvRXX5wEn6MAtEMedfGoxkqMvx1OXCk=) 3: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: CBM38ddIBA7ErC9KFszGB+2Go/rfydEsEM3u2nPHmFA=) 4: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: HsO0FzJAWLg2u6DKU2yDy0xpq+6RbfKYVFKlBWZw79M=) 5: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=) 6: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: BwtyTC6qI4XC3HBbimySaUxc14wJ6nXjYuM/+KpzQMU=) 7: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: 9DAVKa81esoccLZerAJimBEYho7HzR8tvV6sLPxdUYg=) 8: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: 1YWuY5HZqKiBZs805+vyXQB+d7lVGfJWx9YMEkEgtvQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 11:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f3:38:5e:15:ec:6b:b2:fb:f7:9f:8c:13:5f:9d:33:10:8a:91:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Validity Not Before: Nov 1 07:32:10 2026 GMT Not After : Nov 2 11:16:10 2026 GMT Subject: CN=CB0C6E40FF53975EA4687E0F9760746D3F4CE948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:90:09:13:d6:23:f0:12:29:a3:7d:94:13:3c: 5d:dc:c1:5c:de:9c:5a:9c:1e:59:4c:a5:87:20:2e: dc:24:ca:88:99:f8:a7:a9:97:38:a8:ed:d8:2e:32: e5:cb:7c:b3:e6:e3:c2:d4:64:96:39:f1:26:4c:5f: 10:00:9c:ff:aa:11:01:5a:77:ba:61:92:64:87:a4: 76:c5:a9:fc:13:e9:2b:b6:7d:8c:cd:da:8a:a6:f2: 99:54:09:b4:ee:aa:29:2e:1e:41:fd:be:65:5f:99: 9d:b2:ce:81:ff:1a:73:d9:e4:b2:2e:7b:5b:da:96: 24:5b:78:8a:a6:ad:59:b7:3c:46:c2:11:20:87:c3: eb:21:c1:cf:03:02:a0:e0:f4:cf:b0:66:2e:6e:f1: 13:4a:e8:00:03:b5:0d:9c:5a:a5:d4:c5:6d:a8:7e: 5c:c2:d6:8f:db:7e:09:8e:76:4f:8c:20:09:7b:93: a6:0e:fc:ab:45:68:58:eb:36:22:2a:30:89:fd:bf: 31:fc:90:65:0c:f0:fc:bb:63:cb:40:89:34:95:b4: 7d:1d:fa:ab:ae:cf:ab:30:7e:95:71:2a:4f:55:e7: 94:af:e2:31:94:26:ff:dc:26:0b:0a:7e:bc:27:04: 57:89:4c:95:51:9c:43:06:b7:3f:f5:fb:93:17:40: e2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0C:6E:40:FF:53:97:5E:A4:68:7E:0F:97:60:74:6D:3F:4C:E9:48 X509v3 Authority Key Identifier: keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cc:06:cc:05:86:0a:41:3b:22:23:6a:57:75:55:ea:76:7a: 8b:ba:95:d7:1d:73:0d:67:2f:e1:01:46:13:b3:08:61:11:83: 70:42:fb:4b:18:7b:c3:8f:a9:57:cb:66:c0:a7:94:04:cd:ef: 3e:97:4e:c8:09:23:c6:d9:fa:0e:3b:30:81:f8:6d:72:1e:2a: 87:24:d9:8d:24:15:ee:e6:ca:7b:86:bf:dd:0c:8f:cd:11:e1: 37:64:af:f1:f4:4e:1b:dc:cb:75:5b:66:87:67:d5:d6:bb:ad: 99:f8:2e:cb:d7:ce:b2:22:a3:88:61:33:c8:d9:b3:ab:6c:50: a6:09:7a:64:6a:5e:b9:70:38:d5:1e:b8:26:cb:5d:b5:23:99: f2:ac:0a:7e:79:02:9e:bf:95:13:f8:db:22:c3:ba:3a:8e:21: 30:49:55:40:df:95:22:d6:ef:36:94:6c:e6:aa:61:7c:a5:a1: 88:d7:98:31:c9:05:a4:a3:ea:46:d9:df:e3:2c:df:0a:43:25: a7:27:28:3b:72:29:95:a8:36:66:ae:bf:42:0d:c0:b1:ff:e1: f7:77:14:b2:16:77:5e:51:c8:64:66:56:01:3d:e4:ae:e5:65: cd:c8:4d:7c:57:02:9c:f2:c8:2c:53:9f:39:fa:05:67:11:bc: ee:8c:72:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/M4XhXsa7L795+ME1+dMxCKkXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBGMzEx NzM1OEJEQTAeFw0yNjExMDEwNzMyMTBaFw0yNjExMDIxMTE2MTBaMDMxMTAvBgNV BAMTKENCMEM2RTQwRkY1Mzk3NUVBNDY4N0UwRjk3NjA3NDZEM0Y0Q0U5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkAkT1iPwEimjfZQTPF3cwVze nFqcHllMpYcgLtwkyoiZ+Keplzio7dguMuXLfLPm48LUZJY58SZMXxAAnP+qEQFa d7phkmSHpHbFqfwT6Su2fYzN2oqm8plUCbTuqikuHkH9vmVfmZ2yzoH/GnPZ5LIu e1valiRbeIqmrVm3PEbCESCHw+shwc8DAqDg9M+wZi5u8RNK6AADtQ2cWqXUxW2o flzC1o/bfgmOdk+MIAl7k6YO/KtFaFjrNiIqMIn9vzH8kGUM8Py7Y8tAiTSVtH0d +quuz6swfpVxKk9V55Sv4jGUJv/cJgsKfrwnBFeJTJVRnEMGtz/1+5MXQOIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUywxuQP9Tl16kaH4Pl2B0bT9M6UgwHwYDVR0j BBgwFoAU76CoDfcco3eiiXEepDEPMRc1i9owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQzZTJlNjctYTE3MS00ZDllLWE5MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERG NzFDQTM3N0EyODk3MTFFQTQzMTBGMzExNzM1OEJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkEwQTgwREY3MUNBMzc3QTI4OTcxMUVBNDMxMEYzMTE3MzU4 QkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5 MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBG MzExNzM1OEJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7MBswFhgpBOyIjald1Vep2eou6ldcdcw1n L+EBRhOzCGERg3BC+0sYe8OPqVfLZsCnlATN7z6XTsgJI8bZ+g47MIH4bXIeKock 2Y0kFe7mynuGv90Mj80R4Tdkr/H0Thvcy3VbZodn1da7rZn4LsvXzrIio4hhM8jZ s6tsUKYJemRqXrlwONUeuCbLXbUjmfKsCn55Ap6/lRP42yLDujqOITBJVUDflSLW 7zaUbOaqYXyloYjXmDHJBaSj6kbZ3+Ms3wpDJacnKDtyKZWoNmauv0INwLH/4fd3 FLIWd15RyGRmVgE95K7lZc3ITXxXApzyyCxTnzn6BWcRvO6Mclk= -----END CERTIFICATE-----Generated at Sun Nov 1 21:07:30 2026 by rpki-client