$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft File: EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft (raw, json) Hash identifier: sbuh8svljlVAnB74xKksghstUYVp5u4gxjWxhsyV3GI= Subject key identifier: B1:09:C3:FA:74:25:7A:E5:01:EB:43:69:99:7B:D6:96:88:F3:F3:B3 Authority key identifier: EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02 Certificate issuer: /CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02 Certificate serial: 2BF65FD01C8EB7FDDC8A4703BF71CCADB7BF0069 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft Manifest number: EA Signing time: Sun 25 Oct 2026 10:04:07 +0000 Manifest this update: Sun 25 Oct 2026 09:59:07 +0000 Manifest next update: Mon 26 Oct 2026 11:14:07 +0000 Files and hashes: 1: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: wEHPqNpq5E7BaSWEXPsPlsqnHz7+5ItTw/UwUrelTsw=) 2: EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl (hash: +e1CSfOIc9/2BKRTRL2JTzmWx2FZN/d+sQNG4G7ffwQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 11:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f6:5f:d0:1c:8e:b7:fd:dc:8a:47:03:bf:71:cc:ad:b7:bf:00:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02 Validity Not Before: Oct 25 09:59:07 2026 GMT Not After : Oct 26 11:14:07 2026 GMT Subject: CN=B109C3FA74257AE501EB4369997BD69688F3F3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d6:d1:c2:06:10:70:0b:1b:b0:45:3a:a3:5f: cd:ef:eb:1b:13:5d:c1:4a:42:d5:cb:7e:38:f9:a0: 09:33:ae:91:09:7c:e4:a8:c4:77:d8:d7:34:e0:de: 06:22:2e:eb:93:e7:65:c4:24:b6:1b:9e:93:2f:57: 68:0c:70:0b:81:05:82:2b:c9:41:a9:42:13:0d:bd: 00:01:32:33:dc:d2:eb:f3:df:03:87:dd:c8:cb:1d: 23:e5:3a:bc:bf:3b:c2:96:ea:4a:91:ef:d7:04:dc: 9b:95:2b:71:7d:db:52:1a:4e:36:c4:71:30:b3:8a: 08:68:ef:11:f3:d3:fa:04:6b:ed:7a:2f:15:7c:3f: 82:32:b4:f0:76:f5:f2:dd:6d:b1:0f:91:92:86:7d: 3f:29:53:7d:d5:5f:9e:5f:65:8c:a7:a4:9d:db:06: 04:25:2f:33:dc:49:71:32:26:ea:5f:33:98:ed:6f: ba:d7:ea:f1:2f:9c:7c:50:6d:c2:74:60:dd:9f:ce: ee:f5:52:4c:2e:67:f4:10:20:9a:0b:2c:2b:07:3c: 43:0f:c6:e7:8f:0f:3d:20:d2:22:e1:ef:c3:49:c1: 3f:2e:11:61:3e:e6:f0:1b:98:44:f2:24:ca:95:9a: 32:2f:96:39:2d:02:f8:c6:0e:7b:af:91:4e:86:22: 58:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:09:C3:FA:74:25:7A:E5:01:EB:43:69:99:7B:D6:96:88:F3:F3:B3 X509v3 Authority Key Identifier: keyid:EF:BC:69:85:9D:4C:E7:D4:7B:71:A9:D2:30:22:FD:EA:93:DF:1A:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/EFBC69859D4CE7D47B71A9D23022FDEA93DF1A02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4c:d2:aa:20:5d:95:fd:fb:25:c5:d8:16:c0:aa:36:bc:4c: b1:6a:87:3d:1c:3b:cc:6b:56:aa:d8:9b:26:b7:98:01:5b:65: c6:d4:4b:30:85:0f:2f:ef:07:b6:cd:61:fc:f3:4c:2e:0a:84: d9:9d:e1:ee:ed:21:ba:27:ff:5a:50:20:2b:36:82:50:6b:43: 62:5f:6a:c6:9c:95:7f:6b:b7:fa:12:e7:07:dd:80:f4:89:15: 10:0c:bf:2a:f6:7c:c8:8d:80:66:6d:e6:ec:c7:67:ea:ad:0e: c7:df:8a:76:32:fd:3e:cf:95:81:68:01:52:77:96:7f:a6:12: ea:2f:7a:4c:df:92:7c:92:1a:ab:7a:f5:8a:06:c3:74:35:65: 51:11:8b:89:20:53:bf:83:c5:d5:f1:af:5c:8f:e6:7c:8d:fe: b0:e8:c1:1a:38:b9:70:30:27:a3:13:90:c4:a3:cb:65:85:04: fa:2f:64:40:a9:5b:9b:a4:3b:60:76:9d:25:d8:27:f6:10:1e: db:10:bf:02:eb:47:af:7e:8d:a9:54:0d:00:b5:82:f9:40:e0: ba:5c:b5:05:3b:97:f7:c6:97:3f:35:66:73:b6:46:4a:a9:31: 72:14:5d:c1:c6:f4:e2:89:a7:9c:26:e0:c9:34:f4:04:31:e3: c4:eb:9a:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/Zf0ByOt/3cikcDv3HMrbe/AGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCQzY5ODU5RDRDRTdENDdCNzFBOUQyMzAyMkZERUE5 M0RGMUEwMjAeFw0yNjEwMjUwOTU5MDdaFw0yNjEwMjYxMTE0MDdaMDMxMTAvBgNV BAMTKEIxMDlDM0ZBNzQyNTdBRTUwMUVCNDM2OTk5N0JENjk2ODhGM0YzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1tHCBhBwCxuwRTqjX83v6xsT XcFKQtXLfjj5oAkzrpEJfOSoxHfY1zTg3gYiLuuT52XEJLYbnpMvV2gMcAuBBYIr yUGpQhMNvQABMjPc0uvz3wOH3cjLHSPlOry/O8KW6kqR79cE3JuVK3F921IaTjbE cTCzigho7xHz0/oEa+16LxV8P4IytPB29fLdbbEPkZKGfT8pU33VX55fZYynpJ3b BgQlLzPcSXEyJupfM5jtb7rX6vEvnHxQbcJ0YN2fzu71UkwuZ/QQIJoLLCsHPEMP xuePDz0g0iLh78NJwT8uEWE+5vAbmETyJMqVmjIvljktAvjGDnuvkU6GIlhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsQnD+nQleuUB60NpmXvWlojz87MwHwYDVR0j BBgwFoAU77xphZ1M59R7canSMCL96pPfGgIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjAwMTAyZDAtNzE0Zi00YjUyLTliZTUtZGVkMTZlZGZlNGEyLzAvRUZCQzY5ODU5 RDRDRTdENDdCNzFBOUQyMzAyMkZERUE5M0RGMUEwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRkJDNjk4NTlENENFN0Q0N0I3MUE5RDIzMDIyRkRFQTkzREYx QTAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRUZCQzY5ODU5RDRDRTdENDdCNzFBOUQyMzAyMkZE RUE5M0RGMUEwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9M0qogXZX9+yXF2BbAqja8TLFqhz0cO8xr VqrYmya3mAFbZcbUSzCFDy/vB7bNYfzzTC4KhNmd4e7tIbon/1pQICs2glBrQ2Jf asaclX9rt/oS5wfdgPSJFRAMvyr2fMiNgGZt5uzHZ+qtDsffinYy/T7PlYFoAVJ3 ln+mEuovekzfknySGqt69YoGw3Q1ZVERi4kgU7+DxdXxr1yP5nyN/rDowRo4uXAw J6MTkMSjy2WFBPovZECpW5ukO2B2nSXYJ/YQHtsQvwLrR69+jalUDQC1gvlA4Lpc tQU7l/fGlz81ZnO2RkqpMXIUXcHG9OKJp5wm4Mk09AQx48TrmpQ= -----END CERTIFICATE-----Generated at Mon Oct 26 01:43:19 2026 by rpki-client