$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: SYjCdo77IWPYsvXL30S9XsbQJBOWGOFuKqnY48XBiwU= Subject key identifier: 37:BE:82:9F:55:85:84:02:A9:9C:CA:4C:87:7F:DE:09:E8:04:DE:D1 Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 54AF4FDD4B7DCCE4DE390CDB27DBAA9AD4B74EE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: 013E Signing time: Mon 20 Apr 2026 08:31:37 +0000 Manifest this update: Mon 20 Apr 2026 08:26:37 +0000 Manifest next update: Thu 23 Apr 2026 18:04:37 +0000 Files and hashes: 1: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: tgLh3Of/j98xQJcUZ8gvQmvGwoKO7vXHq7jp3Sw+/M8=) 2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: OPt+rRhjeG41N/mJaT0mB4Dryaw/j8pB0Q5pO3mWwpU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:af:4f:dd:4b:7d:cc:e4:de:39:0c:db:27:db:aa:9a:d4:b7:4e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Apr 20 08:26:37 2026 GMT Not After : Apr 23 18:04:37 2026 GMT Subject: CN=37BE829F55858402A99CCA4C877FDE09E804DED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f8:33:6c:2f:f5:10:66:47:5d:ad:94:ea:38: 94:0b:9e:71:a1:ab:05:95:29:a9:ec:d9:d2:7b:1d: 01:65:9f:51:f1:1c:ac:64:8a:ce:79:b9:67:2b:1f: b5:c5:5b:af:af:7a:b1:22:ae:df:11:92:c8:40:67: c9:ea:7d:bf:a5:dd:7e:d4:3e:4f:8a:9e:f1:fb:5d: 10:8c:73:55:31:1c:05:e6:b8:52:b4:51:18:a8:33: ef:c5:4e:1b:8f:6b:59:4a:47:7b:b1:3f:af:02:ae: f9:e3:52:64:5c:06:70:cb:8f:ab:55:0e:2a:3d:7e: 18:8c:d9:3a:66:a5:7a:04:e3:19:16:42:c1:1e:02: 90:97:f9:4a:2a:e3:29:9a:cd:36:61:a7:14:23:83: 6c:f6:19:f0:94:93:81:da:6a:3a:0f:10:d1:2c:d5: 20:57:ea:e8:d7:f5:5b:a8:31:e8:cb:4b:aa:cc:a4: 34:65:93:b0:53:6e:61:0d:76:2b:13:7e:9b:4a:30: 45:4a:32:d8:59:1f:55:7f:11:d2:d2:dd:f3:72:c5: 6d:5a:88:0d:d4:f6:bd:8a:f1:af:3e:14:07:ab:71: 13:04:fc:0e:19:ec:d3:6e:c6:36:e3:cc:c7:07:7e: 29:24:5e:e5:28:00:53:08:3b:16:24:9c:57:e1:aa: da:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BE:82:9F:55:85:84:02:A9:9C:CA:4C:87:7F:DE:09:E8:04:DE:D1 X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cf:6a:4d:4d:d8:48:cc:13:34:ab:a1:f7:81:96:dc:44:af: 5c:14:8e:1b:86:ec:eb:5b:8a:d9:5d:87:0b:a9:c6:10:23:7f: 84:69:21:2a:15:8e:fd:fc:2c:5e:6f:cc:b0:e7:48:a2:45:99: 75:bf:7b:b4:16:9d:88:d8:74:bd:0e:e4:44:43:a0:54:19:0d: 4a:1a:21:94:43:0d:ad:d3:d3:69:51:3d:84:b2:cd:46:50:bc: ed:f7:57:13:13:db:8b:fd:a5:5e:f0:c8:13:15:58:d2:a7:e1: 36:9e:80:5b:0f:ee:f6:9a:fc:71:55:55:5b:fa:36:66:72:a3: f5:68:b7:b4:fd:db:36:be:da:20:03:44:73:68:1a:11:b9:59: bd:c3:d7:c5:cb:eb:47:3b:11:4f:b5:7e:89:b7:2d:b7:d7:0a: db:9c:a0:84:a9:22:27:e4:e2:4c:32:86:08:10:6a:c4:b3:1e: a2:45:24:c6:30:56:fc:72:8f:d0:3a:3e:f7:db:08:2a:5f:92: 4b:f9:f2:3b:35:97:65:d1:aa:b7:46:d9:93:31:b9:79:60:fa: 63:8d:25:3c:43:1f:ae:40:85:64:9b:57:fb:22:59:82:cf:56: b3:2b:42:6f:69:88:00:e4:7b:49:32:f5:8a:15:73:ee:b0:70: 34:eb:62:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVK9P3Ut9zOTeOQzbJ9uqmtS3TugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNjA0MjAwODI2MzdaFw0yNjA0MjMxODA0MzdaMDMxMTAvBgNV BAMTKDM3QkU4MjlGNTU4NTg0MDJBOTlDQ0E0Qzg3N0ZERTA5RTgwNERFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+DNsL/UQZkddrZTqOJQLnnGh qwWVKans2dJ7HQFln1HxHKxkis55uWcrH7XFW6+verEirt8RkshAZ8nqfb+l3X7U Pk+KnvH7XRCMc1UxHAXmuFK0URioM+/FThuPa1lKR3uxP68CrvnjUmRcBnDLj6tV Dio9fhiM2TpmpXoE4xkWQsEeApCX+Uoq4ymazTZhpxQjg2z2GfCUk4HaajoPENEs 1SBX6ujX9VuoMejLS6rMpDRlk7BTbmENdisTfptKMEVKMthZH1V/EdLS3fNyxW1a iA3U9r2K8a8+FAercRME/A4Z7NNuxjbjzMcHfikkXuUoAFMIOxYknFfhqtofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN76Cn1WFhAKpnMpMh3/eCegE3tEwHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzPak1N2EjMEzSrofeBltxEr1wUjhuG7Otb itldhwupxhAjf4RpISoVjv38LF5vzLDnSKJFmXW/e7QWnYjYdL0O5ERDoFQZDUoa IZRDDa3T02lRPYSyzUZQvO33VxMT24v9pV7wyBMVWNKn4TaegFsP7vaa/HFVVVv6 NmZyo/Vot7T92za+2iADRHNoGhG5Wb3D18XL60c7EU+1fom3LbfXCtucoISpIifk 4kwyhggQasSzHqJFJMYwVvxyj9A6PvfbCCpfkkv58js1l2XRqrdG2ZMxuXlg+mON JTxDH65AhWSbV/siWYLPVrMrQm9piADke0ky9YoVc+6wcDTrYh0= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:21 2026 by rpki-client