$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: 0bqq7dq9BxBIu50OjqMP62br2f0svLVVheTtepm7RRU= Subject key identifier: EB:92:79:1A:F0:42:7C:4C:01:48:39:27:83:66:87:F3:C0:7B:97:9C Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 6888277019C2F6635B1CB391981446139F907FEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 04A6 Signing time: Mon 20 Oct 2025 13:21:08 +0000 Manifest this update: Mon 20 Oct 2025 13:16:08 +0000 Manifest next update: Thu 23 Oct 2025 20:25:08 +0000 Files and hashes: 1: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: LyQVOVVD0SyWAzKbbigEAOPOxnvDfTq86SNZAm/SmRY=) 2: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: JlwdWybcHO3JOtxqLYH1cpJP1lvhqXRqKZK5jNQy9Y0=) 3: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: /BYvra4DlfHnq4UOMzaF51N5Kus+HjkdFOsGHv9u+80=) 4: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: pAwAaLum0jYdUTsB6mT2CdQGQv2HQcF0heplULsgo1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:88:27:70:19:c2:f6:63:5b:1c:b3:91:98:14:46:13:9f:90:7f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Oct 20 13:16:08 2025 GMT Not After : Oct 23 20:25:08 2025 GMT Subject: CN=EB92791AF0427C4C01483927836687F3C07B979C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:46:57:1c:93:e3:0d:9a:7e:a6:de:f2:3f: cd:2b:08:66:9f:79:37:9a:bc:36:87:ac:fe:01:79: 79:9f:8c:69:54:9e:f6:ab:6e:42:b3:d3:16:0a:15: ef:47:a7:44:d7:54:ec:57:3d:e3:9a:4d:ad:82:3b: ed:e9:cb:55:e2:d5:90:53:ae:9b:65:0f:dd:42:eb: 66:76:f2:87:2b:ae:49:9c:56:84:7f:97:26:e7:a9: 54:49:69:43:3e:2d:a0:8a:10:a7:2c:44:8a:1a:ea: 9d:db:48:4c:e4:f5:34:3a:f3:39:aa:75:af:ea:22: dd:80:65:ff:f1:17:95:60:84:50:89:56:70:81:54: 61:d0:33:16:ed:fc:9e:67:e0:05:ea:02:1a:d1:09: 4b:c5:25:54:f5:f7:d2:96:95:b3:a2:d5:5f:1a:4b: 46:c1:1b:27:04:19:a8:ca:65:f9:2e:c9:02:81:50: e7:74:e0:44:1d:ea:fe:91:12:00:a4:05:d9:bc:7f: ba:7b:2a:37:a0:ad:02:aa:e7:07:b5:24:fc:2e:23: e7:11:2e:51:50:82:39:62:60:22:b1:af:2e:ed:7f: 74:31:39:c5:19:99:ef:2e:9d:b8:2e:87:37:27:ac: 80:f9:4a:1c:9a:77:50:4b:19:25:5d:39:8d:ba:f3: d0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:92:79:1A:F0:42:7C:4C:01:48:39:27:83:66:87:F3:C0:7B:97:9C X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:95:37:eb:1a:09:b7:9e:41:f8:66:2d:e0:28:c2:3f:a6:c6: 9e:3e:1d:75:f9:6c:d2:f7:1a:4c:ed:7a:d4:26:10:91:2c:37: e0:bd:3f:9d:01:e6:9a:52:3d:85:57:3b:67:4b:60:f5:5e:f7: 86:c9:58:cc:3a:e7:7c:ce:30:79:a3:c9:f5:a2:1a:b2:bd:85: 1d:52:8e:a8:1f:d5:72:49:c3:f9:eb:0e:0d:75:d4:cd:38:d6: fa:ab:05:0f:95:e4:c7:c4:44:5e:b0:d1:5b:93:94:d0:ad:83: 50:97:83:6f:96:83:59:a0:a5:b8:01:9d:93:37:66:d5:76:c8: 11:76:a4:af:fd:b6:7c:5b:6f:8d:dd:cd:57:e5:a1:25:2d:4c: e2:d7:04:7f:7e:df:91:54:9a:e7:67:f1:67:fb:68:e2:96:84: 7c:bd:2c:64:1b:f0:13:89:85:53:ac:e3:e3:51:61:f6:f0:68: b7:f3:06:26:9c:51:d6:04:f4:e5:3d:50:fe:50:49:65:f3:e9: 94:e0:84:18:af:e2:d6:19:26:2c:52:ee:b6:f2:56:81:a8:09: 1b:1f:6f:85:80:3c:21:2f:b1:b7:9b:88:82:1e:c8:5a:87:30: 01:a3:3b:e9:b7:38:66:ea:66:38:6c:f1:34:60:93:02:b9:97: f4:47:90:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaIgncBnC9mNbHLORmBRGE5+Qf+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTEwMjAxMzE2MDhaFw0yNTEwMjMyMDI1MDhaMDMxMTAvBgNV BAMTKEVCOTI3OTFBRjA0MjdDNEMwMTQ4MzkyNzgzNjY4N0YzQzA3Qjk3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC010ZXHJPjDZp+pt7yP80rCGaf eTeavDaHrP4BeXmfjGlUnvarbkKz0xYKFe9Hp0TXVOxXPeOaTa2CO+3py1Xi1ZBT rptlD91C62Z28ocrrkmcVoR/lybnqVRJaUM+LaCKEKcsRIoa6p3bSEzk9TQ68zmq da/qIt2AZf/xF5VghFCJVnCBVGHQMxbt/J5n4AXqAhrRCUvFJVT199KWlbOi1V8a S0bBGycEGajKZfkuyQKBUOd04EQd6v6REgCkBdm8f7p7KjegrQKq5we1JPwuI+cR LlFQgjliYCKxry7tf3QxOcUZme8unbguhzcnrID5Shyad1BLGSVdOY2689D1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU65J5GvBCfEwBSDkng2aH88B7l5wwHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMyVN+saCbeeQfhmLeAowj+mxp4+HXX5bNL3 GkztetQmEJEsN+C9P50B5ppSPYVXO2dLYPVe94bJWMw653zOMHmjyfWiGrK9hR1S jqgf1XJJw/nrDg111M041vqrBQ+V5MfERF6w0VuTlNCtg1CXg2+Wg1mgpbgBnZM3 ZtV2yBF2pK/9tnxbb43dzVfloSUtTOLXBH9+35FUmudn8Wf7aOKWhHy9LGQb8BOJ hVOs4+NRYfbwaLfzBiacUdYE9OU9UP5QSWXz6ZTghBiv4tYZJixS7rbyVoGoCRsf b4WAPCEvsbebiIIeyFqHMAGjO+m3OGbqZjhs8TRgkwK5l/RHkFo= -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:29 2025 by rpki-client