$ rpki-client -vvvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft File: EFA0A80DF71CA377A289711EA4310F3117358BDA.mft (raw, json) Hash identifier: ikI4JE3Q/3+aeh0N3+n9XQJDBZKeP2BvBlrzzCYNCTk= Subject key identifier: E7:5B:7E:1C:20:BF:0C:8C:1A:EF:52:3C:AA:2B:6C:78:77:BD:B2:CF Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Certificate serial: 353BBA817F64A3FD72DF54DF034E617763099E96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft Manifest number: BA Signing time: Wed 16 Sep 2026 20:49:46 +0000 Manifest this update: Wed 16 Sep 2026 20:44:46 +0000 Manifest next update: Thu 17 Sep 2026 22:53:46 +0000 Files and hashes: 1: 34332e3232392e3230342e302f32322d3234203d3e203234353332.roa (hash: BwtyTC6qI4XC3HBbimySaUxc14wJ6nXjYuM/+KpzQMU=) 2: 3230322e3132392e3138342e302f32322d3234203d3e203234353332.roa (hash: CBM38ddIBA7ErC9KFszGB+2Go/rfydEsEM3u2nPHmFA=) 3: 32372e3131312e33342e302f32342d3234203d3e203538343737.roa (hash: 1YWuY5HZqKiBZs805+vyXQB+d7lVGfJWx9YMEkEgtvQ=) 4: 3130332e3234352e3138302e302f32322d3234203d3e203234353332.roa (hash: HsO0FzJAWLg2u6DKU2yDy0xpq+6RbfKYVFKlBWZw79M=) 5: EFA0A80DF71CA377A289711EA4310F3117358BDA.crl (hash: M3FL06uT1xi/5B8/XLhqybXAGBo74s1MDbefybIkz6U=) 6: 3131392e3233352e31362e302f32302d3234203d3e203234353332.roa (hash: a1jLyYlI+XXOuvRXX5wEn6MAtEMedfGoxkqMvx1OXCk=) 7: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (hash: Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=) 8: 323430333a326530303a3a2f33322d3438203d3e203234353332.roa (hash: 9DAVKa81esoccLZerAJimBEYho7HzR8tvV6sLPxdUYg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3b:ba:81:7f:64:a3:fd:72:df:54:df:03:4e:61:77:63:09:9e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA Validity Not Before: Sep 16 20:44:46 2026 GMT Not After : Sep 17 22:53:46 2026 GMT Subject: CN=E75B7E1C20BF0C8C1AEF523CAA2B6C7877BDB2CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:59:f3:4f:67:44:a2:46:09:b8:90:04:e0: 35:f7:90:06:7f:ee:b4:54:b0:91:e1:27:30:b5:83: 50:73:17:09:6a:94:56:f3:48:1a:e4:e3:b3:db:13: 21:f8:5f:da:72:ed:2a:e3:eb:56:30:53:90:1f:71: 79:1e:8a:6c:10:fc:c2:b9:06:88:15:8d:3e:91:51: 3d:8b:b2:83:e1:c0:35:db:e4:13:05:bd:52:aa:c5: 6e:1f:8e:34:51:ab:28:3f:fd:bf:34:06:42:c9:46: 29:af:d3:d1:a9:be:03:31:4b:7c:99:23:09:9a:75: b1:7e:a8:ad:88:cd:96:4a:03:8d:4b:7c:02:82:09: 9c:17:b4:f5:1d:b7:3d:49:01:81:bc:c7:eb:a7:e3: eb:45:c3:dc:ef:7f:43:98:8c:43:f4:19:39:18:9f: 04:b5:26:0a:5c:0b:d7:39:f0:d2:38:fe:be:af:a1: 27:82:4b:e2:9b:d6:36:1f:98:67:a2:0f:47:6a:93: f4:36:af:ce:f5:69:3a:95:c6:c3:05:be:be:89:e9: ba:fb:df:2e:e8:82:e8:37:94:a2:14:f4:66:af:1c: 4d:00:5a:8e:ea:36:41:60:5c:c4:cf:12:99:30:41: 28:96:00:25:f1:e4:89:e2:5c:8d:4b:f3:75:9a:b2: 4b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5B:7E:1C:20:BF:0C:8C:1A:EF:52:3C:AA:2B:6C:78:77:BD:B2:CF X509v3 Authority Key Identifier: keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:73:32:a2:47:db:2d:b0:2b:a5:a4:60:d3:0d:d6:b6:27:38: 9d:da:88:02:fa:c4:bb:2a:4f:41:1d:65:0d:7e:25:71:dd:d5: e7:f4:92:2a:41:55:19:e4:c3:5c:fe:d9:30:4d:eb:ef:61:cd: 89:aa:cf:05:77:a9:cc:2a:06:0e:5d:bd:1f:f3:45:55:b5:8b: 9f:75:1d:68:d1:18:7f:99:2a:29:49:03:6b:75:a1:7c:04:f0: d3:7e:1c:c9:4f:1b:26:16:5c:db:31:36:1f:13:8d:e4:89:39: d0:a6:bb:d3:d4:fe:40:65:c3:33:f8:47:11:dc:af:f8:ee:fe: 57:2e:97:5f:10:8f:e5:1a:85:61:f6:49:eb:8f:f6:43:6a:a8: 61:b2:1e:0a:77:f4:c5:ff:8a:03:3d:86:e0:45:72:2d:9a:b2: 83:db:84:44:de:69:49:ba:4c:2a:96:1f:f9:4d:ff:c4:2d:9b: 5c:27:35:3d:4a:53:7c:c3:49:e7:81:59:4c:e5:b1:72:c8:37: 67:61:7a:ab:f4:52:ef:13:d5:8a:24:1c:29:2e:eb:0f:57:6e: 93:65:a8:ac:f3:61:99:bc:de:be:03:3e:ef:d2:ad:a4:bd:9d: 7a:b1:7c:f6:84:0c:5a:7f:68:1c:45:22:4b:83:ed:6c:5b:40: 55:e1:c8:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNTu6gX9ko/1y31TfA05hd2MJnpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBGMzEx NzM1OEJEQTAeFw0yNjA5MTYyMDQ0NDZaFw0yNjA5MTcyMjUzNDZaMDMxMTAvBgNV BAMTKEU3NUI3RTFDMjBCRjBDOEMxQUVGNTIzQ0FBMkI2Qzc4NzdCREIyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89VnzT2dEokYJuJAE4DX3kAZ/ 7rRUsJHhJzC1g1BzFwlqlFbzSBrk47PbEyH4X9py7Srj61YwU5AfcXkeimwQ/MK5 BogVjT6RUT2LsoPhwDXb5BMFvVKqxW4fjjRRqyg//b80BkLJRimv09GpvgMxS3yZ IwmadbF+qK2IzZZKA41LfAKCCZwXtPUdtz1JAYG8x+un4+tFw9zvf0OYjEP0GTkY nwS1JgpcC9c58NI4/r6voSeCS+Kb1jYfmGeiD0dqk/Q2r871aTqVxsMFvr6J6br7 3y7ogug3lKIU9GavHE0AWo7qNkFgXMTPEpkwQSiWACXx5IniXI1L83WaskshAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU51t+HCC/DIwa71I8qitseHe9ss8wHwYDVR0j BBgwFoAU76CoDfcco3eiiXEepDEPMRc1i9owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTQzZTJlNjctYTE3MS00ZDllLWE5MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERG NzFDQTM3N0EyODk3MTFFQTQzMTBGMzExNzM1OEJEQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkEwQTgwREY3MUNBMzc3QTI4OTcxMUVBNDMxMEYzMTE3MzU4 QkRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTQzZTJlNjctYTE3MS00ZDllLWE5 MzUtNDA2OTAyYjFlMTNiLzAvRUZBMEE4MERGNzFDQTM3N0EyODk3MTFFQTQzMTBG MzExNzM1OEJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZzMqJH2y2wK6WkYNMN1rYnOJ3aiAL6xLsq T0EdZQ1+JXHd1ef0kipBVRnkw1z+2TBN6+9hzYmqzwV3qcwqBg5dvR/zRVW1i591 HWjRGH+ZKilJA2t1oXwE8NN+HMlPGyYWXNsxNh8TjeSJOdCmu9PU/kBlwzP4RxHc r/ju/lcul18Qj+UahWH2SeuP9kNqqGGyHgp39MX/igM9huBFci2asoPbhETeaUm6 TCqWH/lN/8Qtm1wnNT1KU3zDSeeBWUzlsXLIN2dheqv0Uu8T1YokHCku6w9XbpNl qKzzYZm83r4DPu/SraS9nXqxfPaEDFp/aBxFIkuD7WxbQFXhyF8= -----END CERTIFICATE-----Generated at Thu Sep 17 10:04:52 2026 by rpki-client