$ rpki-client -vvvf rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft File: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft (raw, json) Hash identifier: CFFzx/5qBUHGYsFOUrZxVaQwjmyxFF110OFUp7q3YDQ= Subject key identifier: F9:04:D3:F6:47:1C:F4:15:53:83:DD:3C:71:AE:F7:61:46:D6:8A:53 Authority key identifier: EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7 Certificate issuer: /CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7 Certificate serial: 6798AEF5F8C255A29308C1A4482AFB7BD8C2FD9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 20:08:57 +0000 Manifest this update: Wed 16 Sep 2026 20:03:57 +0000 Manifest next update: Thu 17 Sep 2026 20:44:57 +0000 Files and hashes: 1: EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl (hash: Ap511CXF/LBaHnglReg52dnpAuMA0SsVka2BSTl60eM=) 2: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: iAkXuDNDYQX7aJrJUqwReqIZ7fKNDXS9mw/520ZULDA=) 3: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: Z33O96f3Xi269FHR6g3ynqUeqpUoR3vjVRTvXK+PrwU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:98:ae:f5:f8:c2:55:a2:93:08:c1:a4:48:2a:fb:7b:d8:c2:fd:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7 Validity Not Before: Sep 16 20:03:57 2026 GMT Not After : Sep 17 20:44:57 2026 GMT Subject: CN=F904D3F6471CF4155383DD3C71AEF76146D68A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:31:36:b3:f1:f1:91:38:c5:03:b7:fc:32:d0: 08:33:60:21:3e:61:03:05:8d:48:c2:5b:d6:cc:db: b8:ac:5b:2d:3d:51:0f:3d:3a:a0:54:78:e1:15:44: c6:b7:1a:f8:3a:05:4a:56:42:d4:cc:34:c2:6a:3f: aa:5b:c7:4c:b1:de:10:2d:41:11:09:86:ec:b5:0c: a8:ac:04:b3:ed:49:84:a0:f2:05:bd:62:6b:9f:29: 3f:c7:af:ec:e7:54:e4:16:27:aa:43:ca:8a:d6:56: b5:a0:28:54:ad:be:4b:73:c0:93:82:8b:ce:5c:41: 99:33:07:49:ff:b7:14:65:29:b2:53:14:6c:f8:f8: e6:56:33:95:3d:7b:e0:1b:15:7a:4c:1f:6a:80:0b: d4:e9:0f:f8:ab:ae:04:e7:36:8d:2c:b2:64:3d:44: 97:59:c2:2b:d5:fa:27:84:d7:48:62:a3:47:c2:68: 61:80:02:7d:24:01:32:9d:dc:15:5e:3b:7c:65:47: d4:15:ed:db:6c:93:25:f2:91:6a:9b:52:2a:1c:53: 3a:08:da:92:9b:d3:af:59:ef:43:1e:e0:23:84:2f: df:72:48:ff:8b:9d:cb:79:bb:d0:2c:37:50:d2:3c: 37:42:b9:72:1b:42:0c:16:8f:77:30:2f:54:da:da: 6a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:04:D3:F6:47:1C:F4:15:53:83:DD:3C:71:AE:F7:61:46:D6:8A:53 X509v3 Authority Key Identifier: keyid:EF:FE:71:94:4C:D7:DF:CA:7F:BD:C6:EF:06:3C:9A:6D:28:BB:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/EFFE71944CD7DFCA7FBDC6EF063C9A6D28BB47E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ac:ef:4e:28:9f:f8:43:e5:21:be:e6:f8:45:f1:a5:63:ea: 9a:2f:78:da:c9:99:b6:bc:76:39:dd:87:74:c6:65:24:9f:6c: ec:d2:22:9c:e0:38:7e:24:8b:83:2f:3d:1f:38:cd:96:11:dd: 92:08:51:72:43:ba:d0:42:62:c5:6c:e2:72:bb:1a:f2:01:fe: 2b:09:c8:c5:b0:ac:b9:33:76:1c:ca:18:dc:d8:31:b9:14:df: 53:65:86:e3:bb:a8:a5:9b:d6:b5:84:6b:8e:54:3a:e0:24:06: f7:86:b6:f0:0e:0b:5d:1d:61:9d:a0:6c:24:32:65:2f:e1:91: fb:3c:ea:f8:7c:14:21:a1:52:43:3f:6a:f4:6d:81:dd:9c:56: d6:2e:35:13:4c:f2:f2:2d:ac:56:51:dc:a6:01:47:30:70:c5: e3:2d:13:8f:6f:60:e5:05:d7:80:7a:63:fe:e8:ad:72:04:cb: 74:9d:a2:10:46:77:97:86:bf:c0:bb:dd:f9:c1:6e:63:04:4f: 8b:7e:4f:33:06:8e:58:97:d1:d9:b6:e2:b4:78:80:b2:a9:08: 26:25:b0:ad:ed:38:76:c2:a1:db:41:0c:b3:b3:34:85:51:6d: cf:d7:6c:b9:09:09:aa:11:e9:78:c1:3c:e3:8d:3c:08:ee:02: 5b:c3:e3:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5iu9fjCVaKTCMGkSCr7e9jC/ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQy OEJCNDdFNzAeFw0yNjA5MTYyMDAzNTdaFw0yNjA5MTcyMDQ0NTdaMDMxMTAvBgNV BAMTKEY5MDREM0Y2NDcxQ0Y0MTU1MzgzREQzQzcxQUVGNzYxNDZENjhBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqMTaz8fGROMUDt/wy0AgzYCE+ YQMFjUjCW9bM27isWy09UQ89OqBUeOEVRMa3Gvg6BUpWQtTMNMJqP6pbx0yx3hAt QREJhuy1DKisBLPtSYSg8gW9YmufKT/Hr+znVOQWJ6pDyorWVrWgKFStvktzwJOC i85cQZkzB0n/txRlKbJTFGz4+OZWM5U9e+AbFXpMH2qAC9TpD/irrgTnNo0ssmQ9 RJdZwivV+ieE10hio0fCaGGAAn0kATKd3BVeO3xlR9QV7dtskyXykWqbUiocUzoI 2pKb069Z70Me4COEL99ySP+Lnct5u9AsN1DSPDdCuXIbQgwWj3cwL1Ta2mrfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+QTT9kcc9BVTg908ca73YUbWilMwHwYDVR0j BBgwFoAU7/5xlEzX38p/vcbvBjyabSi7R+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU3ZDRkODEtM2JlOC00MjMwLTg5NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0 Q0Q3REZDQTdGQkRDNkVGMDYzQzlBNkQyOEJCNDdFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkZFNzE5NDRDRDdERkNBN0ZCREM2RUYwNjNDOUE2RDI4QkI0 N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvRUZGRTcxOTQ0Q0Q3REZDQTdGQkRDNkVGMDYzQzlB NkQyOEJCNDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOs704on/hD5SG+5vhF8aVj6poveNrJmba8 djndh3TGZSSfbOzSIpzgOH4ki4MvPR84zZYR3ZIIUXJDutBCYsVs4nK7GvIB/isJ yMWwrLkzdhzKGNzYMbkU31NlhuO7qKWb1rWEa45UOuAkBveGtvAOC10dYZ2gbCQy ZS/hkfs86vh8FCGhUkM/avRtgd2cVtYuNRNM8vItrFZR3KYBRzBwxeMtE49vYOUF 14B6Y/7orXIEy3SdohBGd5eGv8C73fnBbmMET4t+TzMGjliX0dm24rR4gLKpCCYl sK3tOHbCodtBDLOzNIVRbc/XbLkJCaoR6XjBPOONPAjuAlvD40Q= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:54 2026 by rpki-client