$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft File: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json) Hash identifier: pCWuAEJecR/KM+Vqnml2rP5qHeLbPKgTdC5YPAA/T8I= Subject key identifier: 48:3F:6C:99:B7:C8:03:4A:C7:4C:B8:13:22:A7:F3:DA:9C:E2:5C:DD Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 Certificate issuer: /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Certificate serial: 535A8FC1C0A7F2817EEAD181248C6C58F6F7F150 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft Manifest number: 01D1 Signing time: Tue 24 Mar 2026 05:41:20 +0000 Manifest this update: Tue 24 Mar 2026 05:36:20 +0000 Manifest next update: Fri 27 Mar 2026 17:10:20 +0000 Files and hashes: 1: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: voxN2P7kX4GQUAO4IrbkHnqoXvj00h4ITt9ygTaMeAk=) 2: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: YPOmQy/tQIaLLTTwOnPoznLl/0BdgL3jcNRmwk0B1XU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5a:8f:c1:c0:a7:f2:81:7e:ea:d1:81:24:8c:6c:58:f6:f7:f1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Validity Not Before: Mar 24 05:36:20 2026 GMT Not After : Mar 27 17:10:20 2026 GMT Subject: CN=483F6C99B7C8034AC74CB81322A7F3DA9CE25CDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:40:e6:f6:17:32:e0:8e:f3:9e:ee:f7:cd:0d: ec:42:ae:85:12:f0:af:01:65:5a:8e:5b:4b:df:39: f6:80:84:3c:b6:d8:9f:8e:95:d2:06:88:6a:ce:80: 7c:c8:eb:17:9a:88:96:9a:d8:8a:eb:4b:eb:6d:5a: 4d:1a:dd:48:0c:8b:27:4b:9b:7f:7e:cb:f3:1a:a0: 75:df:ba:53:86:07:6c:fd:1c:9c:12:e0:bc:63:d6: 27:40:f4:38:22:73:de:d1:e9:55:16:6e:94:fa:e4: 2a:a8:57:c7:6f:f6:82:78:bd:e6:d1:88:cd:e2:25: 2d:14:34:5a:6c:7a:23:af:26:a1:86:f3:07:68:97: 7b:18:4d:ab:32:6e:0c:85:1e:e3:b5:28:fd:3c:0b: ce:65:2d:f9:30:b9:d7:b6:38:81:3e:4b:d3:db:64: c9:6d:0c:ca:d1:92:44:fe:d5:9e:1a:0e:60:6a:ad: fb:61:fe:1e:b6:3c:89:48:ab:5a:83:06:0f:d4:b0: c9:f7:bf:71:1e:16:0e:36:3c:3d:4a:76:1b:3a:89: a0:3a:70:6d:1b:4d:ed:22:27:6c:ac:b4:32:e4:cb: cb:ab:35:8b:65:91:d4:88:94:66:5a:9c:ed:30:f5: d9:1b:19:88:b7:35:be:95:4a:6b:6d:1b:cb:15:a2: 92:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3F:6C:99:B7:C8:03:4A:C7:4C:B8:13:22:A7:F3:DA:9C:E2:5C:DD X509v3 Authority Key Identifier: keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:35:1c:a5:8e:39:c6:0e:97:e9:1b:9d:78:52:d4:a1:4a:a0: 0f:ff:f2:ed:44:f9:a4:d7:02:d6:de:b0:49:49:fd:b4:9c:25: b2:30:d0:4b:be:a8:31:c5:2c:8b:e4:c5:c7:ab:89:8b:09:d7: cb:8a:6d:85:36:08:66:1e:b8:84:4d:be:76:c9:35:54:82:ca: 09:66:df:50:1b:3a:7d:bd:d0:f9:0c:c3:50:c2:ac:91:95:b1: af:f1:b9:03:4f:9e:56:2c:03:cb:fb:6c:46:02:34:e7:df:a2: 09:c2:cb:18:26:d9:b0:a6:23:3e:32:66:9b:c0:2b:92:98:50: 2e:f4:b9:1c:64:21:c7:66:05:3d:6c:f2:13:8a:04:35:7d:1a: 04:40:a5:3e:14:6d:c2:75:4d:48:6a:3c:47:22:50:7a:a4:08: e8:c4:02:d0:30:40:3c:72:69:26:4a:61:17:c2:84:38:9a:57: fd:65:89:27:d8:6f:79:32:f7:bc:20:3c:19:01:9b:7e:d2:d0: 6d:2b:11:dd:94:52:b1:40:f2:56:6f:ba:cd:07:e2:1f:35:5d: ed:63:9c:a4:2b:ef:18:b5:b4:14:48:af:10:14:09:87:28:c9: 8f:0c:f4:8a:aa:d6:67:cf:b4:8c:91:33:90:51:86:09:17:6d: da:9a:ee:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1qPwcCn8oF+6tGBJIxsWPb38VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgz OEUwQzY3NTAeFw0yNjAzMjQwNTM2MjBaFw0yNjAzMjcxNzEwMjBaMDMxMTAvBgNV BAMTKDQ4M0Y2Qzk5QjdDODAzNEFDNzRDQjgxMzIyQTdGM0RBOUNFMjVDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQOb2FzLgjvOe7vfNDexCroUS 8K8BZVqOW0vfOfaAhDy22J+OldIGiGrOgHzI6xeaiJaa2IrrS+ttWk0a3UgMiydL m39+y/MaoHXfulOGB2z9HJwS4Lxj1idA9Dgic97R6VUWbpT65CqoV8dv9oJ4vebR iM3iJS0UNFpseiOvJqGG8wdol3sYTasybgyFHuO1KP08C85lLfkwude2OIE+S9Pb ZMltDMrRkkT+1Z4aDmBqrfth/h62PIlIq1qDBg/UsMn3v3EeFg42PD1Kdhs6iaA6 cG0bTe0iJ2ystDLky8urNYtlkdSIlGZanO0w9dkbGYi3Nb6VSmttG8sVopJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSD9smbfIA0rHTLgTIqfz2pziXN0wHwYDVR0j BBgwFoAU76S/mg0t1XRGEmxX85rxCDjgxnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2UyN2RhOS1lNmU2LTQ0YTUtOThmNC01OTBlYjVhMWJkNjUvMC9FRkE0QkY5QTBE MkRENTc0NDYxMjZDNTdGMzlBRjEwODM4RTBDNjc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgzOEUw QzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYx MDgzOEUwQzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEA1HKWOOcYOl+kbnXhS1KFKoA//8u1E+aTX AtbesElJ/bScJbIw0Eu+qDHFLIvkxceriYsJ18uKbYU2CGYeuIRNvnbJNVSCyglm 31AbOn290PkMw1DCrJGVsa/xuQNPnlYsA8v7bEYCNOffognCyxgm2bCmIz4yZpvA K5KYUC70uRxkIcdmBT1s8hOKBDV9GgRApT4UbcJ1TUhqPEciUHqkCOjEAtAwQDxy aSZKYRfChDiaV/1liSfYb3ky97wgPBkBm37S0G0rEd2UUrFA8lZvus0H4h81Xe1j nKQr7xi1tBRIrxAUCYcoyY8M9Iqq1mfPtIyRM5BRhgkXbdqa7jc= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:20 2026 by rpki-client