$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft File: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json) Hash identifier: f3MSb7rhFoBzO+2Ii34svBghqLAg7EdK2YMOU+3TvNk= Subject key identifier: 82:A3:6C:85:DD:EE:4B:3D:BB:98:25:EA:98:95:D3:12:3F:FA:3C:03 Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 Certificate issuer: /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Certificate serial: 3FD11614C491C29EE757C9634A271DD2632C9B6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft Manifest number: 0159 Signing time: Sat 28 Jun 2025 17:51:10 +0000 Manifest this update: Sat 28 Jun 2025 17:46:10 +0000 Manifest next update: Tue 01 Jul 2025 19:33:10 +0000 Files and hashes: 1: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: mIcj9VBxgOww26iF54RsvnMqlNgZZpGJLd8qrnqRzsg=) 2: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: tiskF97htgFGOxcUjLLoNbBwjgTxxSKvgdsrNkZUkUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 19:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d1:16:14:c4:91:c2:9e:e7:57:c9:63:4a:27:1d:d2:63:2c:9b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Validity Not Before: Jun 28 17:46:10 2025 GMT Not After : Jul 1 19:33:10 2025 GMT Subject: CN=82A36C85DDEE4B3DBB9825EA9895D3123FFA3C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:13:bc:0f:78:aa:7a:fd:0a:d4:1d:7d:25:56: 08:4f:d8:0b:8d:13:0d:2e:5b:c0:5e:2d:26:92:cb: 7f:61:2b:09:39:88:e7:43:55:68:0a:d3:41:df:31: eb:30:cb:d8:0e:41:20:15:88:87:89:2f:05:07:e7: 48:eb:fa:e3:94:1b:cf:c9:63:09:dc:da:34:23:86: e5:29:49:61:cf:1b:e9:71:56:43:f5:67:ba:11:49: d8:6b:29:2a:8b:e4:78:f6:fb:f9:50:71:b3:8c:12: 0c:34:39:cc:68:33:2f:d1:ca:81:26:94:a4:e6:f1: a1:12:9d:75:4a:5b:56:06:43:e0:5a:64:eb:c3:eb: 51:57:23:0e:44:c1:0f:76:37:ee:27:15:81:01:dc: 0d:d5:45:78:89:63:d5:fe:93:40:79:ba:66:fb:dd: 3d:3e:8c:b8:ed:65:b5:ee:8e:16:f9:24:20:6f:9f: 49:f6:38:cf:4a:80:65:36:3e:2e:62:20:c9:59:40: 08:1b:73:4f:c2:98:87:21:70:e1:82:c4:8d:dc:fb: 1e:d5:ec:0c:96:81:7a:df:48:4a:a9:81:53:d4:f2: 1b:72:82:65:9f:bd:97:c9:aa:89:a0:7f:9f:32:e8: fa:6c:95:11:d2:bd:6c:2e:1c:d5:05:7c:c2:77:cd: 2a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A3:6C:85:DD:EE:4B:3D:BB:98:25:EA:98:95:D3:12:3F:FA:3C:03 X509v3 Authority Key Identifier: keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:85:c5:bc:a5:b6:0a:8d:94:1a:c4:6f:f0:30:9b:a5:98:f2: 87:65:90:0c:19:32:ce:f8:b5:91:9c:b6:9f:da:7f:8b:32:5d: c0:c3:24:48:3d:09:c9:d0:75:1f:9a:5f:12:ef:63:89:54:a5: 32:7b:a0:d0:3a:e2:d6:ca:14:72:2c:44:34:cf:bb:fc:a0:d3: 49:22:8b:bd:86:ee:9c:b5:06:e0:3e:09:ff:9c:af:bc:04:a6: fb:38:2f:de:44:a1:a2:f8:42:f9:c6:ef:34:90:94:87:bc:7b: ce:3b:87:da:19:60:ce:79:3b:07:61:db:a3:d9:1f:97:ca:d4: 56:c0:6e:f2:3f:70:9d:39:da:15:6c:57:ff:2b:14:4a:c3:15: 70:94:14:b2:ca:61:ca:98:c0:f5:17:98:c2:cf:ba:4d:a0:9c: 55:fb:fc:56:61:f2:0e:6d:c9:d1:d0:57:f6:b0:f1:4e:31:bf: e1:25:92:32:c4:3f:d5:5b:ec:96:44:b8:bb:38:90:be:d8:3b: 39:26:39:54:58:79:55:f4:d3:ea:5a:dc:47:c5:7a:91:20:c2: d2:b7:ba:08:40:5c:38:f8:e4:8b:75:1c:98:00:a1:c9:5a:5d: 7d:50:c2:10:ad:88:7d:e2:f2:1f:4b:96:83:36:22:36:39:7a: 6a:1e:95:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9EWFMSRwp7nV8ljSicd0mMsm2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgz OEUwQzY3NTAeFw0yNTA2MjgxNzQ2MTBaFw0yNTA3MDExOTMzMTBaMDMxMTAvBgNV BAMTKDgyQTM2Qzg1RERFRTRCM0RCQjk4MjVFQTk4OTVEMzEyM0ZGQTNDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkE7wPeKp6/QrUHX0lVghP2AuN Ew0uW8BeLSaSy39hKwk5iOdDVWgK00HfMeswy9gOQSAViIeJLwUH50jr+uOUG8/J Ywnc2jQjhuUpSWHPG+lxVkP1Z7oRSdhrKSqL5Hj2+/lQcbOMEgw0OcxoMy/RyoEm lKTm8aESnXVKW1YGQ+BaZOvD61FXIw5EwQ92N+4nFYEB3A3VRXiJY9X+k0B5umb7 3T0+jLjtZbXujhb5JCBvn0n2OM9KgGU2Pi5iIMlZQAgbc0/CmIchcOGCxI3c+x7V 7AyWgXrfSEqpgVPU8htygmWfvZfJqomgf58y6PpslRHSvWwuHNUFfMJ3zSrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgqNshd3uSz27mCXqmJXTEj/6PAMwHwYDVR0j BBgwFoAU76S/mg0t1XRGEmxX85rxCDjgxnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2UyN2RhOS1lNmU2LTQ0YTUtOThmNC01OTBlYjVhMWJkNjUvMC9FRkE0QkY5QTBE MkRENTc0NDYxMjZDNTdGMzlBRjEwODM4RTBDNjc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgzOEUw QzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYx MDgzOEUwQzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKFxbyltgqNlBrEb/Awm6WY8odlkAwZMs74 tZGctp/af4syXcDDJEg9CcnQdR+aXxLvY4lUpTJ7oNA64tbKFHIsRDTPu/yg00ki i72G7py1BuA+Cf+cr7wEpvs4L95EoaL4QvnG7zSQlIe8e847h9oZYM55Owdh26PZ H5fK1FbAbvI/cJ052hVsV/8rFErDFXCUFLLKYcqYwPUXmMLPuk2gnFX7/FZh8g5t ydHQV/aw8U4xv+ElkjLEP9Vb7JZEuLs4kL7YOzkmOVRYeVX00+pa3EfFepEgwtK3 ughAXDj45It1HJgAoclaXX1QwhCtiH3i8h9LloM2IjY5emoelWY= -----END CERTIFICATE-----Generated at Mon Jun 30 19:10:01 2025 by rpki-client