$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft File: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft (raw, json) Hash identifier: 8zdpNRml7/aCqRquX9GvFJTdbOyX2knmDWPE3UEcwq4= Subject key identifier: 31:2D:DA:B5:C9:5C:F5:17:53:8E:55:7D:0E:CD:53:08:4F:D0:15:EC Authority key identifier: EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC Certificate issuer: /CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Certificate serial: 45291F8FB3D0DE59E7FF2B3FA43C8A9719DF814C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:24:20 +0000 Manifest this update: Wed 16 Sep 2026 20:19:20 +0000 Manifest next update: Thu 17 Sep 2026 22:59:20 +0000 Files and hashes: 1: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: WBFw33DVjLMzvjb9A+5nTenZ7QhkAKAHSXyABZyuBhE=) 2: EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl (hash: B4lTz4ZR53jA7NT6icAKo7x3joHe2gGRhHtxA2Xc8bY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:29:1f:8f:b3:d0:de:59:e7:ff:2b:3f:a4:3c:8a:97:19:df:81:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC Validity Not Before: Sep 16 20:19:20 2026 GMT Not After : Sep 17 22:59:20 2026 GMT Subject: CN=312DDAB5C95CF517538E557D0ECD53084FD015EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:43:22:f1:d7:b7:99:c8:48:0c:c6:0e:d4:b8: ea:9f:a8:72:15:74:70:b4:ff:bd:00:b2:da:d1:fe: 65:13:05:5d:16:a0:e0:ef:48:a8:73:f4:b8:77:42: cd:71:de:50:3c:de:77:24:52:24:fa:3c:fc:7d:f3: 28:f8:f6:5f:79:ee:7d:de:b2:14:75:ed:70:f8:79: 61:84:31:8d:3d:eb:d4:0f:bb:43:3f:db:96:ef:02: 53:6b:d6:f5:5a:9c:4c:e0:15:b8:19:b2:03:74:5e: 99:2d:48:5a:ba:25:da:5f:4a:82:b5:98:ab:9c:f8: 3a:98:65:22:d1:43:8d:e1:e7:54:f3:17:29:0c:a3: 09:2d:4b:5d:ef:d2:7e:5b:34:10:1d:36:2e:9a:85: 93:a7:2c:44:41:bb:9b:9b:45:f4:da:30:0e:dd:c1: 98:e9:62:39:48:94:70:2f:dd:08:a6:ab:3d:62:02: be:9c:ce:ef:bb:f2:d6:d0:26:23:b2:a5:67:b4:50: 21:65:74:4e:67:77:ee:21:b0:49:34:f0:08:cb:a7: 8b:66:15:c6:9f:c6:9f:b6:66:30:33:45:8e:60:da: 50:ee:3d:3d:4b:9d:7c:eb:ac:51:3a:37:74:88:07: c5:b9:86:ef:85:fa:45:c7:04:ed:ed:bc:49:ff:0e: 3c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2D:DA:B5:C9:5C:F5:17:53:8E:55:7D:0E:CD:53:08:4F:D0:15:EC X509v3 Authority Key Identifier: keyid:EF:4A:2E:C5:53:79:CA:2F:E3:A7:D2:4D:D2:C2:85:E8:BF:3A:39:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/EF4A2EC55379CA2FE3A7D24DD2C285E8BF3A39FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:75:ba:93:ca:23:74:e6:c1:cc:86:15:39:6e:1d:29:b0:07: 56:84:07:f5:ea:34:a6:46:68:6e:60:ed:d0:9c:cc:8a:05:23: c5:0a:9c:19:ec:4a:e5:04:06:af:30:bd:5e:08:c5:f9:e7:ca: 15:de:06:53:76:c1:52:80:44:14:71:00:d5:be:d8:b2:47:d5: ba:ab:59:a2:73:9a:85:74:cb:63:c9:5a:91:1e:e1:23:6f:c9: 59:10:43:50:e7:a4:8d:14:2f:9c:59:c7:a6:92:25:4c:7b:05: cd:73:de:0c:d8:6a:70:b3:2f:cc:30:0e:2b:f8:12:af:3f:23: 23:52:5f:ac:70:2e:99:b8:cc:a1:21:53:cc:af:f8:11:04:52: 9e:2f:c0:73:02:bb:61:71:a9:79:9f:64:65:91:85:7a:6a:c8: c4:2d:b1:35:dc:67:99:d5:72:44:bc:7b:3d:1a:77:a0:d2:d9: 2d:a3:04:ae:ac:ef:38:85:86:37:d9:06:d6:7b:d4:f1:2e:3f: ab:42:59:2f:1b:34:8d:b0:65:e4:ba:b2:92:d7:d1:30:29:5d: 98:5c:9d:73:ff:e4:23:d6:00:36:06:da:24:a2:8a:48:1d:65: c0:81:65:95:a0:10:16:72:47:a2:4c:fe:86:94:8f:bf:69:72: ae:52:89:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURSkfj7PQ3lnn/ys/pDyKlxnfgUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThC RjNBMzlGQzAeFw0yNjA5MTYyMDE5MjBaFw0yNjA5MTcyMjU5MjBaMDMxMTAvBgNV BAMTKDMxMkREQUI1Qzk1Q0Y1MTc1MzhFNTU3RDBFQ0Q1MzA4NEZEMDE1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQyLx17eZyEgMxg7UuOqfqHIV dHC0/70AstrR/mUTBV0WoODvSKhz9Lh3Qs1x3lA83nckUiT6PPx98yj49l957n3e shR17XD4eWGEMY0969QPu0M/25bvAlNr1vVanEzgFbgZsgN0XpktSFq6JdpfSoK1 mKuc+DqYZSLRQ43h51TzFykMowktS13v0n5bNBAdNi6ahZOnLERBu5ubRfTaMA7d wZjpYjlIlHAv3Qimqz1iAr6czu+78tbQJiOypWe0UCFldE5nd+4hsEk08AjLp4tm Fcafxp+2ZjAzRY5g2lDuPT1LnXzrrFE6N3SIB8W5hu+F+kXHBO3tvEn/DjwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMS3atclc9RdTjlV9Ds1TCE/QFewwHwYDVR0j BBgwFoAU70ouxVN5yi/jp9JN0sKF6L86OfwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1 Mzc5Q0EyRkUzQTdEMjRERDJDMjg1RThCRjNBMzlGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRjRBMkVDNTUzNzlDQTJGRTNBN0QyNEREMkMyODVFOEJGM0Ez OUZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvRUY0QTJFQzU1Mzc5Q0EyRkUzQTdEMjRERDJDMjg1 RThCRjNBMzlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMR1upPKI3TmwcyGFTluHSmwB1aEB/XqNKZG aG5g7dCczIoFI8UKnBnsSuUEBq8wvV4IxfnnyhXeBlN2wVKARBRxANW+2LJH1bqr WaJzmoV0y2PJWpEe4SNvyVkQQ1DnpI0UL5xZx6aSJUx7Bc1z3gzYanCzL8wwDiv4 Eq8/IyNSX6xwLpm4zKEhU8yv+BEEUp4vwHMCu2FxqXmfZGWRhXpqyMQtsTXcZ5nV ckS8ez0ad6DS2S2jBK6s7ziFhjfZBtZ71PEuP6tCWS8bNI2wZeS6spLX0TApXZhc nXP/5CPWADYG2iSiikgdZcCBZZWgEBZyR6JM/oaUj79pcq5SifY= -----END CERTIFICATE-----Generated at Thu Sep 17 08:26:50 2026 by rpki-client