$ rpki-client -vvf repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft File: EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft (raw, json) Hash identifier: HKAk+AFU7/B0iJtUYIozkKbAbFm3SWiozWdD2if1OUE= Subject key identifier: 16:F9:44:83:CB:39:DD:3A:AD:4D:D9:25:E2:37:3A:9E:4B:61:04:B1 Authority key identifier: EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D Certificate issuer: /CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D Certificate serial: 69C90962F27BA35F6722EF0553DB32AD6A76D623 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft Manifest number: 051A Signing time: Sat 18 Oct 2025 08:01:39 +0000 Manifest this update: Sat 18 Oct 2025 07:56:39 +0000 Manifest next update: Tue 21 Oct 2025 10:47:39 +0000 Files and hashes: 1: 3130332e35342e3133342e302f32342d3234203d3e203633383736.roa (hash: rvPyF4pzz+NGPBxHBZxBP55s7GX0enQK9yL4BnvRk1A=) 2: EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl (hash: OSd6vfASTECtJA5Izb5Em+lSIuav7bsBY9CDfx9Ayyo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c9:09:62:f2:7b:a3:5f:67:22:ef:05:53:db:32:ad:6a:76:d6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D Validity Not Before: Oct 18 07:56:39 2025 GMT Not After : Oct 21 10:47:39 2025 GMT Subject: CN=16F94483CB39DD3AAD4DD925E2373A9E4B6104B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:81:91:87:68:08:25:8a:e7:29:62:29:53: 21:e5:fd:d6:84:cb:7d:2b:cf:28:ed:1f:00:18:e3: e2:02:13:61:ea:b8:c3:07:0a:78:e0:c5:84:b3:f5: 62:bd:d0:dd:c8:b8:78:7a:78:39:1e:39:5f:2e:f3: 0f:48:52:2d:bb:7b:0c:10:02:d3:c6:68:80:74:8d: f9:12:37:7f:c3:41:08:ca:bf:3d:9e:69:2f:ce:4e: 6c:6c:10:da:18:4e:3a:26:25:83:c7:0c:04:43:b6: 8e:68:57:69:f0:91:fd:16:a0:42:f3:da:aa:8f:b9: 96:a2:2d:8a:32:21:4a:c7:15:03:eb:a7:6f:03:94: 09:11:e9:59:c5:58:ae:2e:26:8e:53:76:c0:68:20: da:5a:64:66:7c:2f:60:42:f0:ce:21:e1:39:4e:e9: 64:b2:ea:86:24:ea:26:07:8a:f4:f9:c8:bc:01:cd: 3d:6b:39:92:56:50:6b:01:ec:f9:7e:b0:65:0c:e7: b9:ca:43:81:69:60:a4:1f:3b:22:2f:ac:3e:aa:06: 00:f0:43:b4:30:5d:bb:c6:a5:07:65:e1:b6:0e:82: 3c:91:7c:50:07:b2:0f:ab:00:cd:4e:58:ba:6b:1b: 39:36:97:74:b9:c7:51:6f:29:64:16:37:d1:3e:d4: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F9:44:83:CB:39:DD:3A:AD:4D:D9:25:E2:37:3A:9E:4B:61:04:B1 X509v3 Authority Key Identifier: keyid:EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:c2:e0:46:4c:bb:74:0a:c7:9c:3d:a6:d3:cf:73:d8:06:a7: fb:2a:77:96:da:55:89:35:58:17:bb:96:96:c1:10:d6:7a:2a: 01:10:0a:8a:c6:a1:5c:27:a2:3a:c1:56:fb:94:c7:35:4e:59: ca:20:64:f3:8a:d1:3d:1d:61:68:36:91:f9:62:1a:1f:35:cd: e4:9a:6d:d5:9d:c2:b1:2c:f1:76:3e:e9:e5:2b:10:9c:87:97: bd:a0:34:b2:80:16:63:a8:f8:ac:cd:c4:50:ab:ac:1c:dd:b4: dc:12:11:82:81:18:07:fc:c9:97:a6:b2:07:fc:1f:4d:80:fc: b0:bc:29:10:05:53:f9:bd:6e:c7:28:e5:a8:a0:d8:44:6f:e4: ed:7a:82:d2:68:37:58:03:4f:b6:2c:67:68:73:6c:a4:8c:b2: 47:51:28:3d:2e:5f:96:33:b3:d8:f4:5c:9f:2d:a1:dc:70:12: d6:ac:a3:8f:1b:5d:23:52:7c:eb:00:19:94:f0:75:e4:f5:7f: ec:f1:22:0b:83:d1:92:42:74:19:67:53:86:b6:13:8f:eb:5f: a4:30:bc:5f:da:e7:1d:cb:37:de:bc:d4:d8:05:1f:25:03:1d: 5e:41:f9:4b:1d:74:65:b7:d9:cc:0e:cc:73:81:82:21:0f:c5: c7:9e:ed:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUackJYvJ7o19nIu8FU9syrWp21iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0QzRENDUzNTFEQkIzNUM0MEM1ODc2OUQ3MTg5MzFC MUFBRDQ3RDAeFw0yNTEwMTgwNzU2MzlaFw0yNTEwMjExMDQ3MzlaMDMxMTAvBgNV BAMTKDE2Rjk0NDgzQ0IzOUREM0FBRDRERDkyNUUyMzczQTlFNEI2MTA0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwYGRh2gIJYrnKWIpUyHl/daE y30rzyjtHwAY4+ICE2HquMMHCnjgxYSz9WK90N3IuHh6eDkeOV8u8w9IUi27ewwQ AtPGaIB0jfkSN3/DQQjKvz2eaS/OTmxsENoYTjomJYPHDARDto5oV2nwkf0WoELz 2qqPuZaiLYoyIUrHFQPrp28DlAkR6VnFWK4uJo5TdsBoINpaZGZ8L2BC8M4h4TlO 6WSy6oYk6iYHivT5yLwBzT1rOZJWUGsB7Pl+sGUM57nKQ4FpYKQfOyIvrD6qBgDw Q7QwXbvGpQdl4bYOgjyRfFAHsg+rAM1OWLprGzk2l3S5x1FvKWQWN9E+1INLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFvlEg8s53TqtTdkl4jc6nkthBLEwHwYDVR0j BBgwFoAU70xNRTUduzXEDFh2nXGJMbGq1H0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzAyODJlZi0yNTAwLTRmZmItOGQ3ZC0xZjUwNTQzNTIyN2QvMC9FRjRDNEQ0NTM1 MURCQjM1QzQwQzU4NzY5RDcxODkzMUIxQUFENDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUY0QzRENDUzNTFEQkIzNUM0MEM1ODc2OUQ3MTg5MzFCMUFB RDQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcwMjgyZWYtMjUwMC00ZmZiLThk N2QtMWY1MDU0MzUyMjdkLzAvRUY0QzRENDUzNTFEQkIzNUM0MEM1ODc2OUQ3MTg5 MzFCMUFBRDQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPC4EZMu3QKx5w9ptPPc9gGp/sqd5baVYk1 WBe7lpbBENZ6KgEQCorGoVwnojrBVvuUxzVOWcogZPOK0T0dYWg2kfliGh81zeSa bdWdwrEs8XY+6eUrEJyHl72gNLKAFmOo+KzNxFCrrBzdtNwSEYKBGAf8yZemsgf8 H02A/LC8KRAFU/m9bsco5aig2ERv5O16gtJoN1gDT7YsZ2hzbKSMskdRKD0uX5Yz s9j0XJ8todxwEtaso48bXSNSfOsAGZTwdeT1f+zxIguD0ZJCdBlnU4a2E4/rX6Qw vF/a5x3LN9681NgFHyUDHV5B+UsddGW32cwOzHOBgiEPxcee7YQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:39 2025 by rpki-client