$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft File: EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft (raw, json) Hash identifier: XUeMXwGKvoq6PHQcBrAll30wWgssu5+tN6zOtvbPVg0= Subject key identifier: BE:C1:4E:55:AC:08:89:40:39:92:8D:59:9E:DD:69:F0:5C:8B:40:09 Authority key identifier: EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F Certificate issuer: /CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F Certificate serial: 6E97A34C2C477A0FCA9428D87C37917E6D5DADB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 07:58:17 +0000 Manifest this update: Thu 17 Sep 2026 07:53:17 +0000 Manifest next update: Fri 18 Sep 2026 08:39:17 +0000 Files and hashes: 1: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: Z1qBcC8HhREP/iS2ZW6nzTxnpSKKD3Oek2Lz09Kit8U=) 2: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: cCW7eYSWOx2HeGcwXRHzekDYmrW8hp1mJ3VwAjVNaok=) 3: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: 6xX5hpFI3vfAbJBKIH+olFnqZn+fECnqjvCv45mqV+0=) 4: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: HZ438Kbp42EzorB5guWDSUbAmdr1EsWvtnLwdrcr+sI=) 5: EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl (hash: C3H7B9AVyFFgHmWwB308rBmvlUUrO2SIG+mdXEdcbIY=) 6: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: 1LTG4MgFRMZ7zoAbplTKMa6nhkiFff/vlGz+LTJuyUg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:97:a3:4c:2c:47:7a:0f:ca:94:28:d8:7c:37:91:7e:6d:5d:ad:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4CD1AC581004419A7468D03FF81EAA25D9E33F Validity Not Before: Sep 17 07:53:17 2026 GMT Not After : Sep 18 08:39:17 2026 GMT Subject: CN=BEC14E55AC08894039928D599EDD69F05C8B4009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:05:ac:57:0d:c5:f8:4a:fb:24:3a:d2:78:ef: 26:1d:33:c9:50:ef:a6:df:e0:f2:0e:7f:03:21:75: 53:a2:2e:d2:69:5f:b9:fd:24:1d:a3:f8:7b:6d:6e: ce:7d:50:71:ac:77:3c:f3:41:9a:8d:e7:d6:16:68: 7d:6b:6b:9e:66:63:a0:e2:9c:e1:95:04:1e:bc:33: 9b:af:29:91:1d:8c:1d:3b:24:05:d8:fc:4c:45:f2: 4f:3b:30:37:59:6d:02:b9:8a:c7:23:d4:38:ca:93: 75:c5:3c:4a:18:6b:79:51:44:4c:c4:43:e2:1d:61: 52:cd:7e:46:1f:47:43:1d:93:dd:34:9d:1e:2b:63: 17:c9:55:3f:b8:4c:2c:09:ce:21:6f:49:8a:2b:f8: 4c:5a:d9:79:76:6c:f2:e9:15:9e:cd:ba:50:3b:d9: a6:20:13:4e:4b:45:0e:ae:f2:95:7f:a6:d2:3f:ab: 40:10:2a:72:29:14:1c:ed:18:24:8b:f9:fb:91:d2: d6:56:77:a9:8e:ae:0f:83:06:8c:ad:c3:52:5b:38: 9f:05:e1:2e:c6:5d:38:ca:87:99:fc:ab:69:72:00: 15:eb:e2:71:65:9f:06:17:17:86:30:fa:5d:88:c3: 52:ba:bc:84:61:44:a3:76:ad:ab:77:eb:c6:1c:eb: bd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C1:4E:55:AC:08:89:40:39:92:8D:59:9E:DD:69:F0:5C:8B:40:09 X509v3 Authority Key Identifier: keyid:EF:4C:D1:AC:58:10:04:41:9A:74:68:D0:3F:F8:1E:AA:25:D9:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/EF4CD1AC581004419A7468D03FF81EAA25D9E33F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:dd:e5:c7:5a:f8:42:05:6d:f5:28:0c:60:33:f4:58:a7:21: 21:5c:bf:6c:12:7e:51:9a:ee:f6:bc:37:1d:53:04:bd:eb:78: 6a:f5:e7:4f:fc:7f:7e:77:23:c3:5e:f9:73:38:42:a0:9c:b3: 51:54:d6:30:11:70:f8:43:ed:d0:67:12:95:0f:7f:73:3f:4d: f0:19:e2:5a:4f:1e:c2:e9:00:80:69:8f:25:be:91:e5:32:30: d8:a9:c7:f1:60:b6:e5:53:0d:f0:ce:85:5d:bc:b9:f5:9a:88: d1:e6:a4:8e:8d:f5:b6:db:e8:2d:73:1e:00:a3:bc:0a:b2:59: 09:1d:53:f7:0d:70:ac:8e:1d:91:97:05:33:8a:77:ff:ce:77: 1d:7e:21:54:a3:01:b0:38:7a:8b:f7:16:04:de:aa:70:ae:7e: 62:3f:e7:6e:95:00:a0:a2:df:ea:43:6c:11:99:9a:6e:96:14: 11:79:65:aa:ee:c1:73:80:39:79:84:4e:c2:96:cc:10:83:a1: 71:8c:b9:f8:af:6b:27:75:c5:a7:e1:e7:79:29:79:3e:8d:a1: 04:6d:fd:19:6d:0f:2b:6d:68:f3:f5:77:5b:25:55:af:c3:9b: 3f:17:e8:42:6b:3c:ce:ad:ea:09:c9:de:41:18:07:99:27:d4: 3c:d9:3f:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpejTCxHeg/KlCjYfDeRfm1drbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0Q0QxQUM1ODEwMDQ0MTlBNzQ2OEQwM0ZGODFFQUEy NUQ5RTMzRjAeFw0yNjA5MTcwNzUzMTdaFw0yNjA5MTgwODM5MTdaMDMxMTAvBgNV BAMTKEJFQzE0RTU1QUMwODg5NDAzOTkyOEQ1OTlFREQ2OUYwNUM4QjQwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcBaxXDcX4SvskOtJ47yYdM8lQ 76bf4PIOfwMhdVOiLtJpX7n9JB2j+Httbs59UHGsdzzzQZqN59YWaH1ra55mY6Di nOGVBB68M5uvKZEdjB07JAXY/ExF8k87MDdZbQK5iscj1DjKk3XFPEoYa3lRREzE Q+IdYVLNfkYfR0Mdk900nR4rYxfJVT+4TCwJziFvSYor+Exa2Xl2bPLpFZ7NulA7 2aYgE05LRQ6u8pV/ptI/q0AQKnIpFBztGCSL+fuR0tZWd6mOrg+DBoytw1JbOJ8F 4S7GXTjKh5n8q2lyABXr4nFlnwYXF4Yw+l2Iw1K6vIRhRKN2rat368Yc672JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvsFOVawIiUA5ko1Znt1p8FyLQAkwHwYDVR0j BBgwFoAU70zRrFgQBEGadGjQP/geqiXZ4z8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTM2NDY1ZWMtOTE2MC00NTliLThkMTEtOTQ4ZmMyNmRhMWMwLzAvRUY0Q0QxQUM1 ODEwMDQ0MTlBNzQ2OEQwM0ZGODFFQUEyNUQ5RTMzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjRDRDFBQzU4MTAwNDQxOUE3NDY4RDAzRkY4MUVBQTI1RDlF MzNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvRUY0Q0QxQUM1ODEwMDQ0MTlBNzQ2OEQwM0ZGODFF QUEyNUQ5RTMzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjd5cda+EIFbfUoDGAz9FinISFcv2wSflGa 7va8Nx1TBL3reGr150/8f353I8Ne+XM4QqCcs1FU1jARcPhD7dBnEpUPf3M/TfAZ 4lpPHsLpAIBpjyW+keUyMNipx/FgtuVTDfDOhV28ufWaiNHmpI6N9bbb6C1zHgCj vAqyWQkdU/cNcKyOHZGXBTOKd//Odx1+IVSjAbA4eov3FgTeqnCufmI/526VAKCi 3+pDbBGZmm6WFBF5ZaruwXOAOXmETsKWzBCDoXGMufivayd1xafh53kpeT6NoQRt /RltDyttaPP1d1slVa/Dmz8X6EJrPM6t6gnJ3kEYB5kn1DzZP8c= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:46 2026 by rpki-client