$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft File: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft (raw, json) Hash identifier: WSoZnDUFeoK//y9ZPwTeQweBrR9qWB99N8CbG5YPvbI= Subject key identifier: 40:40:17:3A:44:1E:EE:4C:68:FF:C7:09:E4:5D:28:96:1A:05:80:9D Authority key identifier: EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9 Certificate issuer: /CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9 Certificate serial: 6BB5E8603BE0A2139E0493CF802CF20017323151 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft Manifest number: A4 Signing time: Thu 03 Sep 2026 05:29:28 +0000 Manifest this update: Thu 03 Sep 2026 05:24:28 +0000 Manifest next update: Fri 04 Sep 2026 09:01:28 +0000 Files and hashes: 1: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: gKWl4c7FQdp4tPgMGVABYRuitakyfACS20kjMIxhrq4=) 2: EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl (hash: WWLo/edBSxooxHN0FYZveuGQEvCmiIXh37QPL7LBn7I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b5:e8:60:3b:e0:a2:13:9e:04:93:cf:80:2c:f2:00:17:32:31:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF52E239F082CFB1C35BB8D60B4615A60D4926E9 Validity Not Before: Sep 3 05:24:28 2026 GMT Not After : Sep 4 09:01:28 2026 GMT Subject: CN=4040173A441EEE4C68FFC709E45D28961A05809D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4c:d6:59:26:16:3c:3a:20:cf:3b:40:b4:bd: 0e:ba:79:11:6f:33:ca:f1:74:7e:a5:30:33:c5:03: 61:3f:80:ac:e9:6d:48:cd:7c:c5:9c:66:6a:f4:3f: 25:ee:f8:63:9d:39:be:45:e1:9f:41:fa:2f:da:d1: 74:10:46:b5:24:ab:9d:4f:90:da:ed:6b:48:70:d5: 67:09:cb:00:24:c3:63:e5:2a:91:2b:a3:8c:ab:c5: 65:4a:9b:80:3c:56:e5:2c:c5:cc:48:cb:67:eb:b8: bc:4e:cd:d4:fb:bc:65:0f:80:fe:08:d3:e7:84:e3: da:c1:cd:b7:e5:65:5b:a7:89:22:62:aa:5d:d8:c4: 28:24:2f:ee:1e:12:bf:8d:e0:b5:81:db:69:a6:c8: b7:55:53:36:69:ae:41:9a:ad:77:89:a3:06:67:6f: b8:7e:59:5f:24:f3:8a:de:c3:a8:de:f9:f3:33:7f: 0f:ee:f4:e3:fe:0b:7e:c4:7b:28:a5:f6:53:fb:ab: 89:7e:b4:4c:7d:21:ca:b3:8f:6c:a3:7d:22:cc:1b: 8c:82:91:35:d9:c1:a0:36:93:81:2a:72:e3:9a:4b: 6f:58:82:cc:48:26:67:c1:8c:22:0a:c7:73:cb:ac: 04:0e:58:21:35:30:1c:8f:55:0f:ab:7f:14:5e:8a: 4b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:40:17:3A:44:1E:EE:4C:68:FF:C7:09:E4:5D:28:96:1A:05:80:9D X509v3 Authority Key Identifier: keyid:EF:52:E2:39:F0:82:CF:B1:C3:5B:B8:D6:0B:46:15:A6:0D:49:26:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/EF52E239F082CFB1C35BB8D60B4615A60D4926E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ce:c7:fb:ba:93:3d:e8:2b:17:f7:06:c2:34:45:f9:3b:f0: 2e:c6:1a:91:d4:44:32:44:9b:f6:82:1f:30:53:c8:c1:a7:3b: 45:9c:09:a2:32:47:a9:87:cf:85:0f:b0:73:30:6d:a4:b2:6a: a6:d8:5b:57:fb:45:65:2e:89:18:09:cb:3f:8e:44:e5:42:a3: 3c:ac:ff:fa:06:35:74:d3:4e:62:93:05:79:8e:3b:a4:c7:8d: 74:10:20:df:70:b7:62:91:59:ec:a8:21:09:03:59:87:cf:78: 01:a5:fb:a7:5c:de:63:2e:fe:ad:67:bc:1f:85:4a:c2:6f:bb: a0:e9:d7:e7:b9:bb:ba:1d:82:a7:30:65:7a:08:8e:33:98:ca: 60:9b:a6:52:48:b4:7e:af:1d:57:2e:2b:38:75:b0:f4:1c:33: fd:ce:ed:64:ee:55:9d:80:eb:6a:7e:1e:68:e5:b2:6e:d2:d5: ff:34:7a:2e:b6:5b:db:cd:b7:0f:31:39:a9:28:62:69:a3:2e: 99:e7:34:a6:8e:dd:35:64:78:24:9b:ae:6f:57:f5:c6:09:61: 24:68:a8:f1:b3:5d:36:5e:86:4d:95:26:9c:06:41:18:95:8a: 78:fd:67:f5:43:d1:74:d5:64:9e:d4:ee:08:c1:8f:b1:10:32: 95:9b:26:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7XoYDvgohOeBJPPgCzyABcyMVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY1MkUyMzlGMDgyQ0ZCMUMzNUJCOEQ2MEI0NjE1QTYw RDQ5MjZFOTAeFw0yNjA5MDMwNTI0MjhaFw0yNjA5MDQwOTAxMjhaMDMxMTAvBgNV BAMTKDQwNDAxNzNBNDQxRUVFNEM2OEZGQzcwOUU0NUQyODk2MUEwNTgwOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTNZZJhY8OiDPO0C0vQ66eRFv M8rxdH6lMDPFA2E/gKzpbUjNfMWcZmr0PyXu+GOdOb5F4Z9B+i/a0XQQRrUkq51P kNrta0hw1WcJywAkw2PlKpEro4yrxWVKm4A8VuUsxcxIy2fruLxOzdT7vGUPgP4I 0+eE49rBzbflZVuniSJiql3YxCgkL+4eEr+N4LWB22mmyLdVUzZprkGarXeJowZn b7h+WV8k84rew6je+fMzfw/u9OP+C37Eeyil9lP7q4l+tEx9Icqzj2yjfSLMG4yC kTXZwaA2k4EqcuOaS29YgsxIJmfBjCIKx3PLrAQOWCE1MByPVQ+rfxReikv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQEAXOkQe7kxo/8cJ5F0olhoFgJ0wHwYDVR0j BBgwFoAU71LiOfCCz7HDW7jWC0YVpg1JJukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjRiNGVjOTgtNGQxZi00ZTZmLWE3NjgtMDI2ODk0MjAyMjIzLzAvRUY1MkUyMzlG MDgyQ0ZCMUMzNUJCOEQ2MEI0NjE1QTYwRDQ5MjZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjUyRTIzOUYwODJDRkIxQzM1QkI4RDYwQjQ2MTVBNjBENDky NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvRUY1MkUyMzlGMDgyQ0ZCMUMzNUJCOEQ2MEI0NjE1 QTYwRDQ5MjZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3Ox/u6kz3oKxf3BsI0Rfk78C7GGpHURDJE m/aCHzBTyMGnO0WcCaIyR6mHz4UPsHMwbaSyaqbYW1f7RWUuiRgJyz+OROVCozys //oGNXTTTmKTBXmOO6THjXQQIN9wt2KRWeyoIQkDWYfPeAGl+6dc3mMu/q1nvB+F SsJvu6Dp1+e5u7odgqcwZXoIjjOYymCbplJItH6vHVcuKzh1sPQcM/3O7WTuVZ2A 62p+Hmjlsm7S1f80ei62W9vNtw8xOakoYmmjLpnnNKaO3TVkeCSbrm9X9cYJYSRo qPGzXTZehk2VJpwGQRiVinj9Z/VD0XTVZJ7U7gjBj7EQMpWbJs4= -----END CERTIFICATE-----Generated at Thu Sep 3 09:48:46 2026 by rpki-client