$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft File: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json) Hash identifier: TXsHD3BCW3c/4uH3E/V+78OQlz0CCWdr/dP13YRkyLo= Subject key identifier: B4:C9:0D:1C:DA:A7:8D:C3:8C:0B:94:E6:C9:A5:45:CF:F9:C9:74:D3 Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 Certificate issuer: /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Certificate serial: 3ADDADE95F7C92895B571561A55E5946EC93D990 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft Manifest number: 018C Signing time: Mon 20 Oct 2025 03:21:12 +0000 Manifest this update: Mon 20 Oct 2025 03:16:12 +0000 Manifest next update: Thu 23 Oct 2025 08:29:12 +0000 Files and hashes: 1: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: oIh6aoq3v5B1tGMJGTjwaoHGIot+iss/DyFL/T7wMkY=) 2: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: tiskF97htgFGOxcUjLLoNbBwjgTxxSKvgdsrNkZUkUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:dd:ad:e9:5f:7c:92:89:5b:57:15:61:a5:5e:59:46:ec:93:d9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Validity Not Before: Oct 20 03:16:12 2025 GMT Not After : Oct 23 08:29:12 2025 GMT Subject: CN=B4C90D1CDAA78DC38C0B94E6C9A545CFF9C974D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:07:70:de:68:fc:86:42:01:b9:3f:ac:08: 72:0f:c1:02:a4:79:7d:a7:f5:42:c0:6b:8a:98:b6: 43:c4:48:02:e6:b6:d8:37:3e:9a:c4:73:41:63:55: c0:44:a7:85:fc:c3:c4:93:56:22:02:d7:c4:5a:51: f5:1a:10:eb:20:65:6a:f4:06:bf:74:2b:ce:b6:f3: 97:84:75:18:18:75:1c:30:80:84:55:32:f0:eb:6b: 32:b1:ad:bc:6d:0b:e4:89:b7:09:21:50:95:62:16: e1:aa:34:54:21:59:1b:a3:00:28:81:56:4f:48:e2: 38:c9:d7:66:2e:40:c1:89:bf:e5:79:e4:32:7e:ff: 19:9d:ae:54:68:e4:ae:f9:9d:83:24:1e:2d:81:ef: 66:86:c3:5d:e6:7c:de:ff:19:b9:db:7d:19:4e:e3: 89:ec:ef:fd:25:96:ca:97:d3:85:fd:60:1e:dc:ef: 1d:59:fe:a1:06:83:09:d3:58:49:c5:ca:e6:95:43: 1c:8c:81:cb:be:a3:7a:34:dc:f7:38:0f:5e:74:e1: 39:29:3c:78:8d:43:e8:d0:ec:64:da:c7:e6:2f:2f: 23:f3:35:18:86:11:16:7c:4a:f7:59:cd:0f:e1:e6: 66:fa:39:20:58:2b:d6:85:02:b8:7b:08:6b:ad:88: 40:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C9:0D:1C:DA:A7:8D:C3:8C:0B:94:E6:C9:A5:45:CF:F9:C9:74:D3 X509v3 Authority Key Identifier: keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:86:f7:e6:7f:e9:9d:d6:c7:3e:28:eb:72:82:19:35:a5:f3: 1a:9c:7c:4f:cb:75:26:c2:f3:1a:57:b8:b2:f7:d2:9c:a6:d6: 52:57:4a:9d:c6:54:fc:23:c3:cd:5f:2c:f4:bb:56:1e:4b:27: 29:8a:53:cf:60:bf:75:3b:cf:a9:f7:2c:38:66:dc:bc:b3:79: cb:05:0f:cf:c6:88:07:30:9f:98:af:7b:e9:12:3d:30:d9:f4: 67:c3:90:f0:46:ed:f8:d6:51:9a:20:a6:b4:1e:fc:17:35:b2: f5:0b:40:7e:7e:b2:b0:22:b7:51:07:ec:96:8a:b9:cc:da:46: 60:83:6f:72:b5:b2:67:cb:a8:13:91:db:e7:a8:a8:47:d0:31: 51:0e:aa:e8:f9:e8:0b:91:8e:cc:73:39:e4:c0:1a:af:71:d3: 7f:fa:8a:11:71:5c:aa:d3:ef:15:4a:b9:26:71:7b:6f:7c:eb: e0:64:46:51:66:82:cb:03:8a:05:f9:92:99:69:a9:6f:fb:a7: 49:4c:39:5b:c2:f9:da:4b:d7:08:90:30:92:81:f7:93:05:d9: 4a:cf:25:47:a3:2d:15:ca:35:26:3d:2d:70:8d:17:da:c8:f3: 18:60:a9:7c:78:f5:0c:1f:25:1f:fe:ea:29:35:d9:ae:f7:17: ab:11:01:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOt2t6V98kolbVxVhpV5ZRuyT2ZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgz OEUwQzY3NTAeFw0yNTEwMjAwMzE2MTJaFw0yNTEwMjMwODI5MTJaMDMxMTAvBgNV BAMTKEI0QzkwRDFDREFBNzhEQzM4QzBCOTRFNkM5QTU0NUNGRjlDOTc0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcQdw3mj8hkIBuT+sCHIPwQKk eX2n9ULAa4qYtkPESALmttg3PprEc0FjVcBEp4X8w8STViIC18RaUfUaEOsgZWr0 Br90K86285eEdRgYdRwwgIRVMvDrazKxrbxtC+SJtwkhUJViFuGqNFQhWRujACiB Vk9I4jjJ12YuQMGJv+V55DJ+/xmdrlRo5K75nYMkHi2B72aGw13mfN7/GbnbfRlO 44ns7/0llsqX04X9YB7c7x1Z/qEGgwnTWEnFyuaVQxyMgcu+o3o03Pc4D1504Tkp PHiNQ+jQ7GTax+YvLyPzNRiGERZ8SvdZzQ/h5mb6OSBYK9aFArh7CGutiEC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtMkNHNqnjcOMC5TmyaVFz/nJdNMwHwYDVR0j BBgwFoAU76S/mg0t1XRGEmxX85rxCDjgxnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2UyN2RhOS1lNmU2LTQ0YTUtOThmNC01OTBlYjVhMWJkNjUvMC9FRkE0QkY5QTBE MkRENTc0NDYxMjZDNTdGMzlBRjEwODM4RTBDNjc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgzOEUw QzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYx MDgzOEUwQzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyG9+Z/6Z3Wxz4o63KCGTWl8xqcfE/LdSbC 8xpXuLL30pym1lJXSp3GVPwjw81fLPS7Vh5LJymKU89gv3U7z6n3LDhm3LyzecsF D8/GiAcwn5ive+kSPTDZ9GfDkPBG7fjWUZogprQe/Bc1svULQH5+srAit1EH7JaK uczaRmCDb3K1smfLqBOR2+eoqEfQMVEOquj56AuRjsxzOeTAGq9x03/6ihFxXKrT 7xVKuSZxe2986+BkRlFmgssDigX5kplpqW/7p0lMOVvC+dpL1wiQMJKB95MF2UrP JUejLRXKNSY9LXCNF9rI8xhgqXx49QwfJR/+6ik12a73F6sRAfc= -----END CERTIFICATE-----Generated at Tue Oct 21 04:46:08 2025 by rpki-client