$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft File: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft (raw, json) Hash identifier: kP1cLXerfoEEK9gS4cDrOQdCBCr2lxBk6mvHzED5Yx8= Subject key identifier: DE:EF:C2:CD:D5:66:D2:E0:BE:A5:7E:4A:FF:FA:72:79:19:A9:05:62 Authority key identifier: EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC Certificate issuer: /CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Certificate serial: 6F68034D99BB6D5637DB52D02196351ED2482C1A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 17:19:28 +0000 Manifest this update: Mon 02 Nov 2026 17:14:28 +0000 Manifest next update: Tue 03 Nov 2026 20:23:28 +0000 Files and hashes: 1: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl (hash: xS2RZ4IBTRKa8BI+/Ilfsy/HCGC7s+aTVyjXxX/+CUs=) 2: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: WBFw33DVjLMzvjb9A+5nTenZ7QhkAKAHSXyABZyuBhE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 20:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:68:03:4d:99:bb:6d:56:37:db:52:d0:21:96:35:1e:d2:48:2c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Validity Not Before: Nov 2 17:14:28 2026 GMT Not After : Nov 3 20:23:28 2026 GMT Subject: CN=DEEFC2CDD566D2E0BEA57E4AFFFA727919A90562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ed:7d:a8:08:7e:7a:ff:98:fd:52:ad:eb:a8: 7f:05:4d:71:46:78:be:11:1b:c6:54:18:d3:a9:83: 87:1b:01:3f:8f:c2:1f:9b:7f:d0:a7:2f:f5:3a:d8: 0e:4f:b4:31:94:0f:b7:66:e0:97:f7:06:91:b8:16: e3:1a:7b:b4:68:03:db:cf:31:64:44:3e:da:fe:b0: 63:97:3d:e2:6d:70:74:3c:53:9e:b2:15:d7:38:61: 58:6e:2d:a4:2c:bd:04:68:5d:32:00:f9:0e:4c:c7: 0f:71:73:d6:b3:02:81:00:34:d2:cc:2f:0e:c6:bb: a0:b8:46:d9:63:f5:f9:0a:ff:eb:16:60:89:30:9c: 77:b1:a1:9d:4c:78:08:10:eb:00:34:39:fa:55:5a: cb:82:53:ba:97:75:f4:9a:b9:f7:b9:73:61:18:54: 77:0d:d2:c7:b0:00:05:dc:86:e5:ad:ee:0b:f7:15: 3d:8b:3a:8e:f4:7f:c2:bd:b1:03:5f:f3:9b:4b:b3: 2b:55:c9:26:69:56:46:12:0e:4a:10:46:cd:bd:90: f6:29:8f:68:10:73:c1:4f:39:7e:01:88:91:c3:0a: c0:7a:cc:22:a0:9d:b2:0b:89:e5:0c:94:17:49:9d: 1a:8c:a9:51:e6:2a:67:f6:a0:d8:a7:ef:3e:5a:71: 42:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EF:C2:CD:D5:66:D2:E0:BE:A5:7E:4A:FF:FA:72:79:19:A9:05:62 X509v3 Authority Key Identifier: keyid:EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f7:9a:ed:dd:54:4e:65:c3:e3:47:cd:60:6c:6a:08:48:08: 63:e7:98:c4:1f:a1:8c:1b:69:40:02:35:c0:c1:f0:66:6d:ba: a0:5a:8d:65:d4:e3:61:c9:64:19:41:5c:df:a8:38:7f:c6:8d: 59:66:67:1f:76:0e:64:18:a0:c1:dd:53:12:e3:09:32:7d:93: 00:f6:40:07:f6:10:7a:70:b3:bc:09:f2:1c:b5:71:9d:61:2d: 9e:9c:3c:72:2e:2e:15:83:ae:78:fd:c1:1c:6c:11:97:4e:13: 7d:68:3d:97:99:4e:61:6e:bf:36:68:2e:60:67:7f:d8:43:84: c8:72:87:8e:67:a6:95:05:95:f9:f9:95:87:ce:41:6b:31:11: 6f:49:58:cc:f5:38:c5:f8:d0:3f:bc:39:29:e5:af:73:00:ad: dc:06:fb:46:7f:81:91:61:b2:d6:e0:21:16:16:57:25:fd:15: 53:a3:49:ec:3c:3c:65:8c:56:d4:ec:83:66:57:32:23:e5:90: 55:be:20:e5:3b:fd:32:44:e3:4d:df:2f:f5:67:98:b5:e6:30: e4:0f:ca:e1:b7:91:53:42:96:8e:44:13:b4:c2:5d:30:7b:af: 56:31:c3:df:61:6b:e4:f7:7b:6f:5a:93:3f:d3:f9:42:e1:c5: 1f:fd:35:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb2gDTZm7bVY321LQIZY1HtJILBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThC RjNBMzlGQzAeFw0yNjExMDIxNzE0MjhaFw0yNjExMDMyMDIzMjhaMDMxMTAvBgNV BAMTKERFRUZDMkNERDU2NkQyRTBCRUE1N0U0QUZGRkE3Mjc5MTlBOTA1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7X2oCH56/5j9Uq3rqH8FTXFG eL4RG8ZUGNOpg4cbAT+Pwh+bf9CnL/U62A5PtDGUD7dm4Jf3BpG4FuMae7RoA9vP MWREPtr+sGOXPeJtcHQ8U56yFdc4YVhuLaQsvQRoXTIA+Q5Mxw9xc9azAoEANNLM Lw7Gu6C4Rtlj9fkK/+sWYIkwnHexoZ1MeAgQ6wA0OfpVWsuCU7qXdfSaufe5c2EY VHcN0sewAAXchuWt7gv3FT2LOo70f8K9sQNf85tLsytVySZpVkYSDkoQRs29kPYp j2gQc8FPOX4BiJHDCsB6zCKgnbILieUMlBdJnRqMqVHmKmf2oNin7z5acUKzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3u/CzdVm0uC+pX5K//pyeRmpBWIwHwYDVR0j BBgwFoAU70ouxVN5yi/jp9JN0sKF6L86OfwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1 Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThCRjNBMzlGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjRBMkVDNTUzNzlDQTJGRTNBN0QyNEREMkMyODVFOEJGM0Ez OUZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1 RThCRjNBMzlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC73mu3dVE5lw+NHzWBsaghICGPnmMQfoYwb aUACNcDB8GZtuqBajWXU42HJZBlBXN+oOH/GjVlmZx92DmQYoMHdUxLjCTJ9kwD2 QAf2EHpws7wJ8hy1cZ1hLZ6cPHIuLhWDrnj9wRxsEZdOE31oPZeZTmFuvzZoLmBn f9hDhMhyh45nppUFlfn5lYfOQWsxEW9JWMz1OMX40D+8OSnlr3MArdwG+0Z/gZFh stbgIRYWVyX9FVOjSew8PGWMVtTsg2ZXMiPlkFW+IOU7/TJE403fL/VnmLXmMOQP yuG3kVNClo5EE7TCXTB7r1Yxw99ha+T3e29akz/T+ULhxR/9NWI= -----END CERTIFICATE-----Generated at Tue Nov 3 08:07:53 2026 by rpki-client