$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft File: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft (raw, json) Hash identifier: I0rY6XZjKC9wDnv83oKP7U+JVi5MCwkumJ1M8hb6+mw= Subject key identifier: 66:8A:CE:F1:52:56:60:2E:F1:1D:34:E4:A5:6B:56:28:1E:37:E6:CB Authority key identifier: EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E Certificate issuer: /CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E Certificate serial: 6B4F9CEAA5770DC72681E5FA58BC96E5539EA843 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft Manifest number: DF Signing time: Thu 15 Oct 2026 11:08:33 +0000 Manifest this update: Thu 15 Oct 2026 11:03:33 +0000 Manifest next update: Fri 16 Oct 2026 14:50:33 +0000 Files and hashes: 1: 3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa (hash: BZhn4U/UvZ5+wud72EXtfRQcfjbr1V+Ji6U8Qf15hk4=) 2: EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl (hash: n+kRVzpoZPunIc4FeCKjZdw6EBibySiGsRrucvrv18o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4f:9c:ea:a5:77:0d:c7:26:81:e5:fa:58:bc:96:e5:53:9e:a8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E Validity Not Before: Oct 15 11:03:33 2026 GMT Not After : Oct 16 14:50:33 2026 GMT Subject: CN=668ACEF15256602EF11D34E4A56B56281E37E6CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:df:0d:b4:ff:c5:86:3a:be:8d:61:dd:53: 9a:4e:93:67:23:b2:49:59:7e:27:51:ca:38:5e:64: a4:ac:e2:7e:dc:33:2f:a3:c0:31:21:89:03:33:e4: 43:bb:7d:47:86:4a:df:b5:e0:46:1a:84:cf:da:50: 87:54:f4:42:b2:ab:b4:ac:0d:64:46:90:0d:85:46: fe:e5:ab:c5:23:0a:5c:bc:03:a1:c8:8c:1d:d9:22: 54:c7:58:2c:31:d0:f2:99:f8:c0:19:e0:13:0b:e6: 04:14:1f:31:65:f0:cb:b8:d9:37:49:a2:e9:f0:fa: 3e:ad:14:55:1d:4c:2a:41:dd:42:e1:52:ce:74:fd: b9:f9:6d:b3:d5:9c:c0:f0:3d:09:db:87:30:bc:e3: 20:ac:76:56:bc:78:5a:f4:3e:43:99:0a:00:b3:54: 92:04:47:70:46:40:65:a0:76:3b:89:35:f1:46:89: 1d:22:ae:cc:fb:97:1c:43:91:51:41:b1:06:c1:bf: f0:9b:76:2a:c3:3a:39:80:82:50:f7:1b:26:db:55: 85:e8:d0:92:c2:eb:b1:c5:ad:aa:46:8d:d0:d7:6a: 1e:dd:3b:bd:3d:a9:3a:a4:2f:0c:75:4e:2a:0f:40: d8:70:f1:6b:7b:29:70:6c:0d:df:61:6c:47:2e:a9: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8A:CE:F1:52:56:60:2E:F1:1D:34:E4:A5:6B:56:28:1E:37:E6:CB X509v3 Authority Key Identifier: keyid:EF:DB:09:4B:3A:4B:DD:FF:AE:7A:31:18:46:33:B6:D1:4D:8E:5F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/EFDB094B3A4BDDFFAE7A31184633B6D14D8E5F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d4:d0:ba:5d:10:68:98:7f:8f:e9:0b:30:8e:ef:59:60:bc: 85:44:f6:b8:36:ff:af:01:a8:9f:a4:79:5c:0d:aa:89:e9:a4: 64:a5:6d:2e:42:c8:ee:4b:eb:36:10:d4:55:81:63:ed:1c:75: 9e:2b:ef:60:a7:f5:5b:2f:c9:25:23:15:c5:72:dd:0a:96:dd: d9:5b:68:a7:9c:72:79:8c:af:dc:1b:ec:dd:8f:ba:90:51:9c: a1:5c:ff:cb:ff:b5:38:ef:cf:c4:a1:fc:b2:57:e0:80:cf:cc: a3:d7:b4:e8:6f:77:16:e1:30:31:fe:14:2c:04:1f:22:ca:65: b5:1b:e3:2d:98:43:b2:17:ea:52:b5:98:b4:1b:f1:15:2d:ba: a7:d4:8e:1c:16:09:8f:bb:84:d0:a5:0e:70:57:d5:9c:64:77: cb:2b:bb:3c:36:2c:82:af:bd:04:c8:d9:78:58:59:91:e0:87: bb:73:49:d6:1d:8f:87:58:92:8c:de:a3:c4:77:46:2c:21:81: fc:9e:68:f9:b7:23:8a:eb:3c:ca:91:5b:ad:bd:10:24:7e:47: 01:a2:a0:fd:c9:05:bc:5c:6b:b2:d9:c5:e4:25:91:3e:8e:de: 7e:34:e5:f3:9a:0d:f3:ec:dd:b2:f9:2f:ee:14:1c:91:39:15: 88:b8:28:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0+c6qV3DccmgeX6WLyW5VOeqEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEQjA5NEIzQTRCRERGRkFFN0EzMTE4NDYzM0I2RDE0 RDhFNUY1RTAeFw0yNjEwMTUxMTAzMzNaFw0yNjEwMTYxNDUwMzNaMDMxMTAvBgNV BAMTKDY2OEFDRUYxNTI1NjYwMkVGMTFEMzRFNEE1NkI1NjI4MUUzN0U2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmV98NtP/Fhjq+jWHdU5pOk2cj sklZfidRyjheZKSs4n7cMy+jwDEhiQMz5EO7fUeGSt+14EYahM/aUIdU9EKyq7Ss DWRGkA2FRv7lq8UjCly8A6HIjB3ZIlTHWCwx0PKZ+MAZ4BML5gQUHzFl8Mu42TdJ ounw+j6tFFUdTCpB3ULhUs50/bn5bbPVnMDwPQnbhzC84yCsdla8eFr0PkOZCgCz VJIER3BGQGWgdjuJNfFGiR0irsz7lxxDkVFBsQbBv/CbdirDOjmAglD3GybbVYXo 0JLC67HFrapGjdDXah7dO709qTqkLwx1TioPQNhw8Wt7KXBsDd9hbEcuqV0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZorO8VJWYC7xHTTkpWtWKB435sswHwYDVR0j BBgwFoAU79sJSzpL3f+uejEYRjO20U2OX14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmY2NDQwZjYtNmY1YS00ZjRiLWE1OTctZTc0YjU0M2U3ODViLzAvRUZEQjA5NEIz QTRCRERGRkFFN0EzMTE4NDYzM0I2RDE0RDhFNUY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkRCMDk0QjNBNEJEREZGQUU3QTMxMTg0NjMzQjZEMTREOEU1 RjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmY2NDQwZjYtNmY1YS00ZjRiLWE1 OTctZTc0YjU0M2U3ODViLzAvRUZEQjA5NEIzQTRCRERGRkFFN0EzMTE4NDYzM0I2 RDE0RDhFNUY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLU0LpdEGiYf4/pCzCO71lgvIVE9rg2/68B qJ+keVwNqonppGSlbS5CyO5L6zYQ1FWBY+0cdZ4r72Cn9VsvySUjFcVy3QqW3dlb aKeccnmMr9wb7N2PupBRnKFc/8v/tTjvz8Sh/LJX4IDPzKPXtOhvdxbhMDH+FCwE HyLKZbUb4y2YQ7IX6lK1mLQb8RUtuqfUjhwWCY+7hNClDnBX1Zxkd8sruzw2LIKv vQTI2XhYWZHgh7tzSdYdj4dYkozeo8R3RiwhgfyeaPm3I4rrPMqRW629ECR+RwGi oP3JBbxca7LZxeQlkT6O3n405fOaDfPs3bL5L+4UHJE5FYi4KOo= -----END CERTIFICATE-----Generated at Thu Oct 15 19:45:24 2026 by rpki-client