$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: vfjDp1X03ad2L5uT3azMV6jtqBdl3EeRo4NAJvMQ0U8= Subject key identifier: 07:83:80:95:5A:6F:F4:DD:C5:44:CD:47:1A:65:B5:18:D8:75:28:1F Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 3F4762C1FD2D61E09FA3CC32B74F14132B5BD99E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: 012A Signing time: Sat 07 Mar 2026 05:11:36 +0000 Manifest this update: Sat 07 Mar 2026 05:06:36 +0000 Manifest next update: Tue 10 Mar 2026 10:35:36 +0000 Files and hashes: 1: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) 2: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: YbUeQjWpM4CQSJYDmBvLzDfyK0/EmXwf7/crEwUfc80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:47:62:c1:fd:2d:61:e0:9f:a3:cc:32:b7:4f:14:13:2b:5b:d9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Mar 7 05:06:36 2026 GMT Not After : Mar 10 10:35:36 2026 GMT Subject: CN=078380955A6FF4DDC544CD471A65B518D875281F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ee:1b:a7:18:26:f6:6c:60:72:22:83:a2:61: 09:d1:68:fe:a0:af:e4:d1:d2:b2:3d:49:27:ce:d8: 3d:1d:fa:20:c8:7d:84:de:4d:cb:d0:bf:f2:09:a5: 2b:38:2e:4e:d1:dc:78:ce:f7:a6:db:2c:e9:eb:1e: 96:50:49:56:68:a1:46:09:8b:34:a9:56:f5:50:d5: 41:62:69:c3:3a:7f:2e:b7:5f:e8:12:47:57:cb:a3: 8f:92:b5:f5:61:d6:d9:b2:b2:39:37:a1:4a:59:94: 27:7b:5d:46:e5:53:ec:cb:e2:b1:1e:c0:d2:f1:dc: 1d:76:1e:6c:25:c9:31:2d:f7:8a:1a:e9:17:a0:d9: 03:57:a1:92:ef:ea:0d:b3:2f:e8:7c:e7:21:37:5f: 95:56:c2:21:8e:f8:ef:bc:e1:4b:23:78:9d:1f:a2: 3a:88:09:77:85:da:c3:a3:18:02:e1:60:03:74:bc: 78:72:92:9f:3a:82:66:4b:e3:de:bf:28:76:b3:0f: ce:1d:0d:ca:6d:f6:0d:b9:d8:76:e4:5f:17:d7:4c: 47:85:00:95:04:99:a8:09:52:c5:39:2d:01:d9:7d: 83:30:2b:8c:81:43:b6:95:fa:82:ce:5e:4a:a3:f7: 3f:b0:94:29:65:ab:c6:f3:61:31:fc:41:2e:40:66: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:83:80:95:5A:6F:F4:DD:C5:44:CD:47:1A:65:B5:18:D8:75:28:1F X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9c:8a:d7:5d:25:65:a3:04:e7:b4:8f:5f:85:67:32:01:c1: fa:d2:4f:02:91:11:0e:19:ca:67:fe:53:44:ab:9c:fa:4d:e0: 25:95:d4:cd:9c:97:42:1f:78:7b:cf:49:0b:ae:ac:cc:49:0d: 71:ee:66:ed:49:58:46:2a:81:3e:16:6f:15:88:fd:f6:c1:f7: 6c:b2:5d:f8:b9:ec:5e:5e:e9:ae:3a:ae:23:52:6a:b9:16:13: 5c:4c:30:d4:25:3d:39:84:a6:4f:a5:6b:a0:bb:17:10:85:15: fd:b7:26:a1:b5:bb:d7:a0:25:24:68:3a:75:a9:68:1a:89:7c: 44:46:67:6f:5b:f8:d9:30:00:71:bd:8a:f4:5d:65:5f:b5:f3: 62:28:77:50:6f:d1:dd:0f:ad:5f:08:d6:58:33:c0:cc:f7:29: 69:ab:a1:83:30:8f:1a:2b:77:9a:b6:50:29:c6:25:ce:29:f7: e7:35:0d:5d:b9:17:ba:c1:e9:42:0d:c7:78:5f:af:cc:36:81: 4c:71:cb:19:18:1a:d0:36:30:54:35:09:fa:c9:30:27:9c:5a: 6a:72:65:b8:04:0c:77:d4:a9:4e:db:22:bd:2e:d3:c9:89:05: 42:36:95:8e:1a:cd:e1:71:3d:94:7e:07:66:95:e5:29:93:99: b8:10:e7:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0diwf0tYeCfo8wyt08UEytb2Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNjAzMDcwNTA2MzZaFw0yNjAzMTAxMDM1MzZaMDMxMTAvBgNV BAMTKDA3ODM4MDk1NUE2RkY0RERDNTQ0Q0Q0NzFBNjVCNTE4RDg3NTI4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7hunGCb2bGByIoOiYQnRaP6g r+TR0rI9SSfO2D0d+iDIfYTeTcvQv/IJpSs4Lk7R3HjO96bbLOnrHpZQSVZooUYJ izSpVvVQ1UFiacM6fy63X+gSR1fLo4+StfVh1tmysjk3oUpZlCd7XUblU+zL4rEe wNLx3B12HmwlyTEt94oa6Reg2QNXoZLv6g2zL+h85yE3X5VWwiGO+O+84UsjeJ0f ojqICXeF2sOjGALhYAN0vHhykp86gmZL496/KHazD84dDcpt9g252HbkXxfXTEeF AJUEmagJUsU5LQHZfYMwK4yBQ7aV+oLOXkqj9z+wlCllq8bzYTH8QS5AZuM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB4OAlVpv9N3FRM1HGmW1GNh1KB8wHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABecitddJWWjBOe0j1+FZzIBwfrSTwKREQ4Z ymf+U0SrnPpN4CWV1M2cl0IfeHvPSQuurMxJDXHuZu1JWEYqgT4WbxWI/fbB92yy Xfi57F5e6a46riNSarkWE1xMMNQlPTmEpk+la6C7FxCFFf23JqG1u9egJSRoOnWp aBqJfERGZ29b+NkwAHG9ivRdZV+182Iod1Bv0d0PrV8I1lgzwMz3KWmroYMwjxor d5q2UCnGJc4p9+c1DV25F7rB6UINx3hfr8w2gUxxyxkYGtA2MFQ1CfrJMCecWmpy ZbgEDHfUqU7bIr0u08mJBUI2lY4azeFxPZR+B2aV5SmTmbgQ50M= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:35 2026 by rpki-client