$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: cOcn/TO6zR76tgc+eFA7tjh03c1Ncvtogv0OPaBAROo= Subject key identifier: 8D:82:68:77:4F:D8:B2:41:2F:1D:67:64:91:AC:D3:0E:09:18:48:0A Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 7A398C10788DB3B82E59A4251A3DD1DE56535B4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 04EC Signing time: Wed 25 Mar 2026 17:11:18 +0000 Manifest this update: Wed 25 Mar 2026 17:06:18 +0000 Manifest next update: Sat 28 Mar 2026 17:50:18 +0000 Files and hashes: 1: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: Gb96f0pZZf4ROjCPhGnx42qPhA6tHdi2ITprd8uRZuM=) 2: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: LyQVOVVD0SyWAzKbbigEAOPOxnvDfTq86SNZAm/SmRY=) 3: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: KdIUSWjYk6G6khIi44dRxNIcc82FtwrOj3DoMvqmaNE=) 4: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: T6Hicz2H8CuNDpKjhaA17WaIW/oy1qNlEePPsSxqMqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:39:8c:10:78:8d:b3:b8:2e:59:a4:25:1a:3d:d1:de:56:53:5b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Mar 25 17:06:18 2026 GMT Not After : Mar 28 17:50:18 2026 GMT Subject: CN=8D8268774FD8B2412F1D676491ACD30E0918480A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:0a:26:c8:1b:44:fc:7b:9e:38:79:a6:5f: 0e:a0:0e:5e:95:93:60:27:b5:00:1a:0c:a5:0d:4a: fc:67:bc:fb:e0:b3:47:81:28:9a:8c:3e:73:7f:d5: 02:64:45:39:50:91:e1:51:1e:35:c0:4f:16:39:05: bd:3a:cf:38:b8:9e:39:5b:37:83:21:22:d4:c1:82: c2:f3:26:70:f6:57:51:1e:c1:a4:e1:26:cd:20:5d: 6d:20:57:8a:2c:76:e6:19:11:7b:04:63:0c:19:99: 41:27:d5:80:fc:34:3c:d4:ea:5a:03:62:d0:18:f9: ab:b1:85:98:f6:54:93:2b:cb:7c:62:5c:87:b2:ff: 90:49:24:f7:71:7b:da:8c:80:44:06:8b:24:a7:fc: 53:fd:28:51:5f:07:b4:5a:17:d7:d2:00:c2:e2:af: 38:85:aa:00:a9:ab:7e:90:c5:ae:13:a5:58:bf:91: 14:b0:5b:f2:94:e4:fb:55:e7:c7:38:d8:8a:87:4f: c6:50:49:00:03:79:74:f1:5a:d2:d0:41:de:67:a4: 9d:88:5e:f3:f6:a4:80:3c:13:a0:24:fc:b8:22:b4: 03:87:18:e8:33:b6:0b:b0:51:8f:70:55:ab:0e:37: 26:67:b3:6c:67:a4:f3:09:c1:72:ff:dd:34:e5:6e: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:82:68:77:4F:D8:B2:41:2F:1D:67:64:91:AC:D3:0E:09:18:48:0A X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:5c:c6:b0:62:58:1e:db:53:e0:2d:b1:b5:02:26:a9:5a:fb: 43:ec:20:c5:75:16:95:b1:04:b1:05:7e:d5:3d:55:bc:f7:d7: fa:b9:e4:2d:7d:5a:4b:59:d3:f8:69:e2:51:7c:0b:a1:74:71: 34:e9:aa:9f:35:01:88:cd:6e:c2:eb:c8:1f:35:82:44:c0:ed: 31:04:c7:0b:dc:11:39:65:18:9c:87:5a:6c:b2:b0:f3:ed:5f: 77:0e:7a:f1:d4:e0:a7:a9:13:1c:a5:c8:46:b6:52:70:d2:6d: ca:58:ab:81:f5:16:c1:0f:19:fd:b7:75:b0:fe:a5:e7:34:0d: a6:a5:2e:12:9c:4d:72:ce:a6:f4:f5:d5:7c:5d:80:fe:16:e7: 06:5d:c1:8b:7e:ab:ea:23:ab:78:30:7e:11:a6:82:b4:a2:26: 06:95:0f:bf:fa:65:97:e9:3b:29:77:1c:b8:a4:40:bf:69:9d: 1a:c3:d1:80:8d:99:7f:ff:80:80:83:64:c5:0a:aa:fd:09:51: ea:53:e3:8f:12:54:8f:f4:2c:6b:e8:25:e4:3f:0d:ac:87:c4: cd:b9:72:c5:1b:83:06:f5:7f:bf:91:d3:26:bf:2b:ee:93:31: 27:0c:6f:14:d5:03:80:a5:c3:ce:c5:cc:3f:23:78:6a:d1:c6: f3:00:3e:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejmMEHiNs7guWaQlGj3R3lZTW00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNjAzMjUxNzA2MThaFw0yNjAzMjgxNzUwMThaMDMxMTAvBgNV BAMTKDhEODI2ODc3NEZEOEIyNDEyRjFENjc2NDkxQUNEMzBFMDkxODQ4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYgomyBtE/HueOHmmXw6gDl6V k2AntQAaDKUNSvxnvPvgs0eBKJqMPnN/1QJkRTlQkeFRHjXATxY5Bb06zzi4njlb N4MhItTBgsLzJnD2V1EewaThJs0gXW0gV4osduYZEXsEYwwZmUEn1YD8NDzU6loD YtAY+auxhZj2VJMry3xiXIey/5BJJPdxe9qMgEQGiySn/FP9KFFfB7RaF9fSAMLi rziFqgCpq36Qxa4TpVi/kRSwW/KU5PtV58c42IqHT8ZQSQADeXTxWtLQQd5npJ2I XvP2pIA8E6Ak/LgitAOHGOgztguwUY9wVasONyZns2xnpPMJwXL/3TTlbowZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjYJod0/YskEvHWdkkazTDgkYSAowHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZcxrBiWB7bU+AtsbUCJqla+0PsIMV1FpWx BLEFftU9Vbz31/q55C19WktZ0/hp4lF8C6F0cTTpqp81AYjNbsLryB81gkTA7TEE xwvcETllGJyHWmyysPPtX3cOevHU4KepExylyEa2UnDSbcpYq4H1FsEPGf23dbD+ pec0DaalLhKcTXLOpvT11XxdgP4W5wZdwYt+q+ojq3gwfhGmgrSiJgaVD7/6ZZfp Oyl3HLikQL9pnRrD0YCNmX//gICDZMUKqv0JUepT448SVI/0LGvoJeQ/DayHxM25 csUbgwb1f7+R0ya/K+6TMScMbxTVA4Clw87FzD8jeGrRxvMAPns= -----END CERTIFICATE-----Generated at Thu Mar 26 05:56:43 2026 by rpki-client