$ rpki-client -vvf repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft File: EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft (raw, json) Hash identifier: FeJVCV5LBrcVHKt0Q6qukhXVWcO472GeJAoxm2w7gp0= Subject key identifier: FA:E1:14:91:0C:AE:45:56:03:94:28:DE:25:53:6D:C8:94:56:78:4A Authority key identifier: EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF Certificate issuer: /CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF Certificate serial: 37CA680DD993ECB706DEE14DEE208EF1AC080D2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft Manifest number: 0124 Signing time: Thu 21 Aug 2025 22:52:04 +0000 Manifest this update: Thu 21 Aug 2025 22:47:04 +0000 Manifest next update: Mon 25 Aug 2025 08:51:04 +0000 Files and hashes: 1: EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl (hash: HLBv81T4zXQT3pWKcqJgyyrRDdBDsA9ooziKwlfB91s=) 2: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: Vy7RmXv6YbxOhDGsW/Z69ao7mBnWT2K/NkTuN4Glb7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ca:68:0d:d9:93:ec:b7:06:de:e1:4d:ee:20:8e:f1:ac:08:0d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF Validity Not Before: Aug 21 22:47:04 2025 GMT Not After : Aug 25 08:51:04 2025 GMT Subject: CN=FAE114910CAE4556039428DE25536DC89456784A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fb:01:36:9b:1c:cf:61:a0:16:fc:04:22:c3: fb:ea:9e:b3:c8:2a:20:0b:a3:c8:00:a3:d9:0d:76: fe:9c:eb:48:19:da:a1:f8:7d:22:40:93:95:bd:a5: b0:cd:56:40:49:7b:1e:da:45:54:21:e2:2d:7d:24: e5:2c:80:c8:cd:9a:93:c5:5d:ac:af:6b:0a:b4:2f: f6:98:1e:b2:9b:78:01:65:db:2b:71:b4:6a:7d:c5: 65:8e:65:df:f8:65:3d:bd:59:0f:bf:d9:7e:5e:21: e8:09:35:94:64:da:f5:f6:52:75:06:c1:46:fc:63: fb:51:14:b5:69:ad:68:42:24:9c:cf:53:db:4f:18: 1c:b7:9a:49:07:6d:61:78:b4:ef:b6:a7:07:0c:b5: 74:d2:73:2b:fc:de:3b:f2:19:7b:26:32:b2:68:8f: e1:1f:57:67:cc:36:66:35:95:56:b4:4a:94:61:83: c2:e9:66:b6:bd:ae:73:78:91:22:30:95:0b:80:d2: 53:62:98:b9:e9:75:a8:fa:cb:2f:8f:18:17:9c:c5: bc:f7:3b:fb:a1:d1:b5:69:38:9b:c8:93:37:6e:47: d0:64:09:f0:59:aa:36:e6:ce:e8:2f:55:db:ee:20: 61:db:35:c4:3d:0b:6e:c0:f6:16:16:96:25:10:c3: a4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E1:14:91:0C:AE:45:56:03:94:28:DE:25:53:6D:C8:94:56:78:4A X509v3 Authority Key Identifier: keyid:EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2c:31:11:ad:8f:92:1a:6d:6f:3b:88:61:f4:4e:80:0b:fe: 9d:cf:7e:72:a6:7e:95:df:e0:41:16:98:42:e9:e0:18:2d:ae: c2:f3:3d:ef:e9:dc:68:c1:67:48:b9:2f:2f:cc:fe:d3:26:fa: 2c:f7:e3:08:41:47:f6:93:fd:07:25:cf:18:3d:43:90:30:89: b9:43:a4:01:20:45:c2:1e:7f:f3:05:2f:fb:4f:cf:8e:3f:da: 55:4a:41:d5:74:89:ac:c9:e4:24:f9:b7:b3:f9:95:07:63:e2: fa:de:6b:de:4d:aa:1e:1f:76:2d:c2:d7:1c:86:14:78:03:05: 79:e5:26:b4:97:2d:3d:e6:70:00:d2:14:94:b1:e4:8a:03:b0: 22:b3:f9:ac:16:ef:32:17:db:63:b8:f2:b0:1a:39:9c:70:bf: d0:3e:34:3c:ca:25:a2:71:7c:db:98:74:44:92:09:d8:4a:b3: 99:a7:3e:1a:47:62:18:f7:c0:9e:a2:97:78:ec:89:95:78:2c: 83:02:b3:47:9e:83:31:3e:15:92:50:32:4f:89:b6:5b:1c:6a: 98:58:3e:03:23:df:32:98:45:4b:b9:0a:91:b9:2e:9e:ec:bb: 7c:74:47:87:a7:28:b2:02:f6:27:19:40:35:89:e4:cb:3c:cb: 51:63:81:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8poDdmT7LcG3uFN7iCO8awIDSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFCNTI1 RDgwNTBBRjAeFw0yNTA4MjEyMjQ3MDRaFw0yNTA4MjUwODUxMDRaMDMxMTAvBgNV BAMTKEZBRTExNDkxMENBRTQ1NTYwMzk0MjhERTI1NTM2REM4OTQ1Njc4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+wE2mxzPYaAW/AQiw/vqnrPI KiALo8gAo9kNdv6c60gZ2qH4fSJAk5W9pbDNVkBJex7aRVQh4i19JOUsgMjNmpPF Xayvawq0L/aYHrKbeAFl2ytxtGp9xWWOZd/4ZT29WQ+/2X5eIegJNZRk2vX2UnUG wUb8Y/tRFLVprWhCJJzPU9tPGBy3mkkHbWF4tO+2pwcMtXTScyv83jvyGXsmMrJo j+EfV2fMNmY1lVa0SpRhg8LpZra9rnN4kSIwlQuA0lNimLnpdaj6yy+PGBecxbz3 O/uh0bVpOJvIkzduR9BkCfBZqjbmzugvVdvuIGHbNcQ9C27A9hYWliUQw6QjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+uEUkQyuRVYDlCjeJVNtyJRWeEowHwYDVR0j BBgwFoAU77qZ0R9cB7SOxjnrERmrUl2AUK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDNjYzZhOC1lN2FhLTRmMzctYmQwOC1mMmViNTdlODg3MzYvMC9FRkJBOTlEMTFG NUMwN0I0OEVDNjM5RUIxMTE5QUI1MjVEODA1MEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFCNTI1RDgw NTBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzY2M2YTgtZTdhYS00ZjM3LWJk MDgtZjJlYjU3ZTg4NzM2LzAvRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFC NTI1RDgwNTBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcsMRGtj5IabW87iGH0ToAL/p3PfnKmfpXf 4EEWmELp4BgtrsLzPe/p3GjBZ0i5Ly/M/tMm+iz34whBR/aT/Qclzxg9Q5AwiblD pAEgRcIef/MFL/tPz44/2lVKQdV0iazJ5CT5t7P5lQdj4vrea95Nqh4fdi3C1xyG FHgDBXnlJrSXLT3mcADSFJSx5IoDsCKz+awW7zIX22O48rAaOZxwv9A+NDzKJaJx fNuYdESSCdhKs5mnPhpHYhj3wJ6il3jsiZV4LIMCs0eegzE+FZJQMk+JtlscaphY PgMj3zKYRUu5CpG5Lp7su3x0R4enKLIC9icZQDWJ5Ms8y1Fjgeo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:36:07 2025 by rpki-client