$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: 6NITt/V6jJaEADL7AjOByF6bxJ/Y5znfuNGEmYA9XmE= Subject key identifier: 8A:7A:1F:7C:C8:63:C0:F2:60:5C:65:3D:1D:75:68:18:05:CF:A8:06 Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 60956D7D10C8F806CA77C89516A651675359F732 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 0472 Signing time: Sat 28 Jun 2025 15:11:07 +0000 Manifest this update: Sat 28 Jun 2025 15:06:07 +0000 Manifest next update: Tue 01 Jul 2025 22:36:07 +0000 Files and hashes: 1: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: YXS7XVUiccSa/nb51/t9dlASBmBl6k9sb128njGiAnc=) 2: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: /afJJDhqLHEyFhgVDaHqEV2OiB3/NZ6i6GNwssoIGhk=) 3: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: /BYvra4DlfHnq4UOMzaF51N5Kus+HjkdFOsGHv9u+80=) 4: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: pAwAaLum0jYdUTsB6mT2CdQGQv2HQcF0heplULsgo1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:95:6d:7d:10:c8:f8:06:ca:77:c8:95:16:a6:51:67:53:59:f7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Jun 28 15:06:07 2025 GMT Not After : Jul 1 22:36:07 2025 GMT Subject: CN=8A7A1F7CC863C0F2605C653D1D75681805CFA806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:13:28:c7:e6:ae:4f:f1:45:b3:54:8c:83: 53:4e:7a:9d:b5:26:3e:13:56:ee:56:e5:db:fd:03: 0a:06:6a:60:b7:ff:9b:85:49:54:5b:4c:db:1c:90: 26:bc:d9:ce:f9:c3:06:99:7b:67:12:c6:b0:6a:48: ab:12:32:88:25:a3:f3:22:5c:a4:6b:60:84:5b:b3: 3e:f9:5b:60:57:e6:a1:6d:73:22:7c:e4:f6:a3:2b: b8:93:cb:c4:c7:1f:66:3a:b5:ec:7a:d3:ce:59:f3: 31:a6:12:32:de:c4:f4:59:09:cd:04:c7:76:17:a2: 92:f3:88:49:0f:41:99:27:73:68:c4:e3:51:a1:4f: e0:69:f5:31:6f:88:03:c4:76:cc:f2:56:22:62:05: e3:2a:76:ea:75:c1:6c:29:ca:e6:34:c0:28:26:f1: 07:81:78:82:e2:16:3a:25:5b:dc:2d:b5:15:62:bc: 80:8f:fb:89:0d:73:f7:04:5c:9a:ca:52:87:53:4e: 5a:d8:f8:14:2d:b8:59:a1:db:5b:ce:1c:84:7b:a1: e2:78:11:99:9e:80:30:a5:bb:aa:1e:43:5e:ee:22: 82:94:44:eb:c4:6e:f2:ce:cf:8e:d3:3a:e4:6f:47: 22:c5:4e:15:41:0b:08:44:d4:85:9a:a7:cd:28:41: 92:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7A:1F:7C:C8:63:C0:F2:60:5C:65:3D:1D:75:68:18:05:CF:A8:06 X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:9d:0d:1d:22:bb:8c:2c:01:c2:65:3d:28:03:44:78:ae:17: 4d:98:be:b8:36:79:30:06:77:5b:23:7a:26:34:c6:00:23:01: 87:fa:52:0b:da:20:65:aa:63:30:5b:3a:76:e0:30:c7:be:96: 3b:44:5d:1e:fa:47:04:ad:32:aa:75:21:cd:b8:ae:b2:ec:1f: 03:80:ae:17:3e:3f:0e:97:22:1e:60:ea:02:6e:a9:20:34:58: f5:2c:ab:16:60:e0:86:91:e5:89:c0:f5:ec:3a:dc:d7:a3:56: f7:48:2c:62:d0:a2:21:3c:8b:cb:09:c8:b8:06:4e:1b:bf:fc: a9:21:df:45:64:0f:f5:09:77:ff:c3:c8:29:67:7b:05:77:c9: 59:63:d3:eb:26:53:ad:6f:59:e2:54:40:51:fe:63:25:ec:ce: 60:82:b3:34:f2:38:99:5e:cc:f8:40:be:ce:2a:62:bc:9e:c5: 1a:3f:7f:2c:88:a5:33:3e:2c:ad:00:a1:33:9c:5a:3a:68:e1: 8e:20:ca:d4:7f:bc:c5:b7:21:c8:5f:85:60:7b:4b:cd:a1:bc: 8d:f0:18:fe:f1:ab:01:71:80:fa:ff:9b:78:57:68:1e:98:67: 64:68:97:09:17:7a:55:a9:b9:a9:87:9a:d8:10:75:4d:ac:2e: 63:bf:06:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJVtfRDI+AbKd8iVFqZRZ1NZ9zIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTA2MjgxNTA2MDdaFw0yNTA3MDEyMjM2MDdaMDMxMTAvBgNV BAMTKDhBN0ExRjdDQzg2M0MwRjI2MDVDNjUzRDFENzU2ODE4MDVDRkE4MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0RMox+auT/FFs1SMg1NOep21 Jj4TVu5W5dv9AwoGamC3/5uFSVRbTNsckCa82c75wwaZe2cSxrBqSKsSMoglo/Mi XKRrYIRbsz75W2BX5qFtcyJ85PajK7iTy8THH2Y6tex6085Z8zGmEjLexPRZCc0E x3YXopLziEkPQZknc2jE41GhT+Bp9TFviAPEdszyViJiBeMqdup1wWwpyuY0wCgm 8QeBeILiFjolW9wttRVivICP+4kNc/cEXJrKUodTTlrY+BQtuFmh21vOHIR7oeJ4 EZmegDClu6oeQ17uIoKUROvEbvLOz47TOuRvRyLFThVBCwhE1IWap80oQZK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUinoffMhjwPJgXGU9HXVoGAXPqAYwHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKudDR0iu4wsAcJlPSgDRHiuF02Yvrg2eTAG d1sjeiY0xgAjAYf6UgvaIGWqYzBbOnbgMMe+ljtEXR76RwStMqp1Ic24rrLsHwOA rhc+Pw6XIh5g6gJuqSA0WPUsqxZg4IaR5YnA9ew63NejVvdILGLQoiE8i8sJyLgG Thu//Kkh30VkD/UJd//DyClnewV3yVlj0+smU61vWeJUQFH+YyXszmCCszTyOJle zPhAvs4qYryexRo/fyyIpTM+LK0AoTOcWjpo4Y4gytR/vMW3IchfhWB7S82hvI3w GP7xqwFxgPr/m3hXaB6YZ2RolwkXelWpuamHmtgQdU2sLmO/Br0= -----END CERTIFICATE-----Generated at Sun Jun 29 20:09:23 2025 by rpki-client