$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: 1CXhOt7tfsnOIO6K2rg2X7A5uqoSDyOx1/O9hsQTQJQ= Subject key identifier: 07:10:4A:F8:9A:1A:E1:2E:42:16:81:AB:7B:DC:F7:9F:95:37:20:28 Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 2E9548417B05C67B6D91BD587B564D9F9EA3B9E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 048B Signing time: Fri 22 Aug 2025 19:31:12 +0000 Manifest this update: Fri 22 Aug 2025 19:26:12 +0000 Manifest next update: Mon 25 Aug 2025 19:38:12 +0000 Files and hashes: 1: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: /afJJDhqLHEyFhgVDaHqEV2OiB3/NZ6i6GNwssoIGhk=) 2: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: /BYvra4DlfHnq4UOMzaF51N5Kus+HjkdFOsGHv9u+80=) 3: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: pAwAaLum0jYdUTsB6mT2CdQGQv2HQcF0heplULsgo1Y=) 4: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: GqDAB5JI+KFGZGNEUEt8pyqXV+y53dI+jNpA+7uSBpM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:95:48:41:7b:05:c6:7b:6d:91:bd:58:7b:56:4d:9f:9e:a3:b9:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Aug 22 19:26:12 2025 GMT Not After : Aug 25 19:38:12 2025 GMT Subject: CN=07104AF89A1AE12E421681AB7BDCF79F95372028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:13:8d:de:d1:d2:9f:56:d3:0e:84:7f:40: 4e:48:e5:22:08:19:71:3b:81:12:6b:53:bf:eb:79: d7:36:cb:4e:47:0a:73:3e:e5:12:fd:2f:c4:34:57: e2:32:3a:1c:cd:2a:f7:ad:a3:f1:c3:7c:82:4b:2b: f2:80:fa:ae:3f:84:fc:b1:d6:ab:0f:e8:f6:c9:2b: 6f:6d:e7:ac:10:10:24:d6:15:2e:6f:81:21:3a:d2: 7e:5e:30:5f:10:93:b6:68:31:2a:af:26:c9:2e:5e: 01:19:d5:4d:8f:5c:e2:a6:db:4b:f2:c1:3a:75:ff: 5e:09:55:4c:af:5d:02:79:e5:66:3c:bc:11:42:f8: 58:fe:55:ce:28:f9:39:6c:a9:40:a5:2f:dd:72:51: 85:50:4a:88:79:25:55:3c:8d:03:16:c9:e1:4d:55: 2c:7f:79:36:65:6e:8f:1c:0e:d0:60:7f:3d:4a:ce: 80:04:2f:9b:49:95:c8:95:f0:70:5a:d5:43:75:29: 26:28:96:74:18:1e:44:a0:ba:e3:a8:ca:08:7a:aa: 92:1d:2c:19:8c:23:52:fb:a5:8b:7c:0a:74:31:63: 48:39:95:5e:07:0c:f1:34:75:8c:6a:1d:30:41:83: 52:4f:00:25:e5:db:e2:88:ce:05:98:59:5e:61:9c: 57:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:10:4A:F8:9A:1A:E1:2E:42:16:81:AB:7B:DC:F7:9F:95:37:20:28 X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:75:ed:1f:52:44:65:ce:34:50:ac:6a:40:d2:b3:c6:a6:da: 14:ef:d5:d1:d2:c0:05:0c:cc:56:27:6c:64:a4:26:8b:c6:56: 10:d8:e3:36:66:18:45:49:16:dc:ec:96:53:3e:f0:a6:80:0e: 7e:89:58:9a:74:fd:66:04:d5:26:c8:85:66:24:68:33:ae:3e: 7f:8d:a7:33:e4:dd:fb:4c:4e:56:2a:75:bb:a4:c4:54:61:ae: 62:bd:d9:26:0d:f5:70:36:b7:12:bd:9a:9d:99:61:f6:aa:73: 58:8b:ff:b3:54:8d:1b:0c:1e:9d:8f:bf:f9:3b:5c:08:8d:57: 88:f5:ea:8a:4b:56:2b:57:37:a4:d9:e7:f2:d9:e4:d5:77:4a: 83:59:67:ed:31:df:64:90:1f:d8:3c:57:3f:0a:f2:a0:7c:cc: 74:19:e0:95:f4:94:1b:e3:a6:0b:ea:91:77:6d:0b:8a:57:40: c3:67:49:10:7a:a8:01:01:e3:fc:77:64:b2:a2:e5:9f:dd:17: d6:21:f6:6d:dd:33:7d:e4:6e:1c:b5:bb:55:3f:98:b4:10:55: cb:63:b6:03:54:7a:79:dd:22:67:ad:59:1f:97:d1:c8:f9:b2: 89:d4:b9:dd:33:09:5d:d7:28:cc:72:d7:7a:50:05:e8:ff:be: 63:68:51:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpVIQXsFxnttkb1Ye1ZNn56juecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTA4MjIxOTI2MTJaFw0yNTA4MjUxOTM4MTJaMDMxMTAvBgNV BAMTKDA3MTA0QUY4OUExQUUxMkU0MjE2ODFBQjdCRENGNzlGOTUzNzIwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ZhON3tHSn1bTDoR/QE5I5SII GXE7gRJrU7/redc2y05HCnM+5RL9L8Q0V+IyOhzNKveto/HDfIJLK/KA+q4/hPyx 1qsP6PbJK29t56wQECTWFS5vgSE60n5eMF8Qk7ZoMSqvJskuXgEZ1U2PXOKm20vy wTp1/14JVUyvXQJ55WY8vBFC+Fj+Vc4o+TlsqUClL91yUYVQSoh5JVU8jQMWyeFN VSx/eTZlbo8cDtBgfz1KzoAEL5tJlciV8HBa1UN1KSYolnQYHkSguuOoygh6qpId LBmMI1L7pYt8CnQxY0g5lV4HDPE0dYxqHTBBg1JPACXl2+KIzgWYWV5hnFdDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBxBK+Joa4S5CFoGre9z3n5U3ICgwHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD517R9SRGXONFCsakDSs8am2hTv1dHSwAUM zFYnbGSkJovGVhDY4zZmGEVJFtzsllM+8KaADn6JWJp0/WYE1SbIhWYkaDOuPn+N pzPk3ftMTlYqdbukxFRhrmK92SYN9XA2txK9mp2ZYfaqc1iL/7NUjRsMHp2Pv/k7 XAiNV4j16opLVitXN6TZ5/LZ5NV3SoNZZ+0x32SQH9g8Vz8K8qB8zHQZ4JX0lBvj pgvqkXdtC4pXQMNnSRB6qAEB4/x3ZLKi5Z/dF9Yh9m3dM33kbhy1u1U/mLQQVctj tgNUenndImetWR+X0cj5sonUud0zCV3XKMxy13pQBej/vmNoUXk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:12:41 2025 by rpki-client