$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json) Hash identifier: g91A6O2tKfs7FB7fs3xASwi7Jb00vjQRdEABAkmiqNE= Subject key identifier: 87:8E:B8:46:ED:DC:EA:5B:40:B7:C9:36:D8:49:D7:D0:CC:D3:A2:8E Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Certificate serial: 1AAA1FF4B9757ACE150F0AFF82C84B610396AB4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft Manifest number: C4 Signing time: Fri 22 Aug 2025 06:41:22 +0000 Manifest this update: Fri 22 Aug 2025 06:36:22 +0000 Manifest next update: Mon 25 Aug 2025 15:22:22 +0000 Files and hashes: 1: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: tiMNtbKhjSnuIbUHgBxknJLaedQ7Tj4q9SqBjQS4U9k=) 2: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: yvjq0+mX9UVVGH4hrgAy0kHkjD5STbq2ZndxXPg4Qok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:aa:1f:f4:b9:75:7a:ce:15:0f:0a:ff:82:c8:4b:61:03:96:ab:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Validity Not Before: Aug 22 06:36:22 2025 GMT Not After : Aug 25 15:22:22 2025 GMT Subject: CN=878EB846EDDCEA5B40B7C936D849D7D0CCD3A28E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:58:6c:90:ce:8a:48:d0:3c:f9:20:9f:95: e6:41:b7:b6:f2:c1:7e:0d:8f:5f:a0:5c:8a:f2:0a: ce:5c:2a:19:b9:4a:22:f7:89:c5:9b:7c:02:ef:b8: d1:3e:15:fc:77:04:8c:21:2f:f1:f8:65:56:7f:4f: ef:a0:f9:68:79:61:1c:bc:84:a3:58:dc:17:fc:5d: 12:cd:10:4c:14:dd:55:67:57:41:04:1d:85:b1:df: f6:1d:c7:83:82:d2:dc:dd:a1:67:42:70:72:1c:f9: dd:76:4f:89:57:c4:e4:43:60:6d:86:75:50:a8:0b: 89:df:94:79:d6:7a:e3:02:58:5b:9a:68:d2:60:d9: e2:de:03:91:bf:91:2c:89:bc:98:56:bf:9b:e5:58: 7d:d2:82:17:a2:92:f4:ea:fd:84:f5:77:ab:87:53: 0b:24:f1:24:65:1d:c2:21:1c:be:b7:fb:26:8a:08: ef:21:bc:28:aa:f7:d7:03:f9:1d:a7:42:62:ac:cd: b7:76:a3:5d:17:e3:7a:a3:a1:21:d1:bb:7c:2e:64: 2e:88:33:12:8e:31:f6:99:e3:47:fe:33:82:94:a9: 7a:0b:0d:cf:ad:fd:4f:5c:dd:0c:0d:24:d5:40:6d: 01:37:1f:1d:96:1e:d7:4d:e0:71:7f:4d:6e:3b:fc: 21:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8E:B8:46:ED:DC:EA:5B:40:B7:C9:36:D8:49:D7:D0:CC:D3:A2:8E X509v3 Authority Key Identifier: keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:f4:bf:93:8a:bd:e8:87:71:44:34:6f:e7:82:44:23:49:3b: e8:80:72:2f:a6:c7:1e:04:d2:94:0b:90:a1:51:3b:58:03:c9: 25:74:62:95:b1:d8:6c:93:cd:e1:4e:85:86:49:ce:3f:c2:72: a1:f3:e9:1c:42:7a:f2:11:65:9a:2e:7e:cf:af:5e:1d:ed:61: b2:59:5a:6a:31:d4:35:56:d5:06:52:7e:16:02:c7:5b:fb:ce: df:fa:e9:f2:08:42:a7:65:b1:e7:70:ee:0e:a2:9e:aa:97:be: 9a:e8:e4:9e:7b:ac:0f:82:50:f4:18:7f:ec:31:3e:23:07:84: 71:fe:d8:60:52:99:28:7c:e9:e3:f9:48:1d:46:45:41:71:d8: 45:64:33:59:6c:b7:75:b9:ea:1a:9c:2c:fd:ae:26:b1:8c:b9: e6:9a:b5:0a:27:fe:1e:f0:57:2f:6c:b8:fa:fe:30:54:1d:92: a0:42:e1:ae:9f:6a:62:a8:19:87:65:9c:0a:e0:13:1d:83:9b: fa:be:6e:e9:f4:03:dc:72:5e:42:a3:e6:93:69:88:01:88:44: 5e:2e:e7:3e:ec:30:bd:c1:d9:a8:ed:2a:28:dd:1a:dd:71:f4: da:bd:fd:4f:4c:83:c6:6f:7b:ef:c3:e7:d8:c7:a3:9e:10:8d: f5:f3:0b:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqof9Ll1es4VDwr/gshLYQOWq0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0Ex NUM4NUIxNzAeFw0yNTA4MjIwNjM2MjJaFw0yNTA4MjUxNTIyMjJaMDMxMTAvBgNV BAMTKDg3OEVCODQ2RUREQ0VBNUI0MEI3QzkzNkQ4NDlEN0QwQ0NEM0EyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChhVhskM6KSNA8+SCfleZBt7by wX4Nj1+gXIryCs5cKhm5SiL3icWbfALvuNE+Ffx3BIwhL/H4ZVZ/T++g+Wh5YRy8 hKNY3Bf8XRLNEEwU3VVnV0EEHYWx3/Ydx4OC0tzdoWdCcHIc+d12T4lXxORDYG2G dVCoC4nflHnWeuMCWFuaaNJg2eLeA5G/kSyJvJhWv5vlWH3SgheikvTq/YT1d6uH Uwsk8SRlHcIhHL63+yaKCO8hvCiq99cD+R2nQmKszbd2o10X43qjoSHRu3wuZC6I MxKOMfaZ40f+M4KUqXoLDc+t/U9c3QwNJNVAbQE3Hx2WHtdN4HF/TW47/CFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh464Ru3c6ltAt8k22EnX0MzToo4wHwYDVR0j BBgwFoAU73yoLFtF/UEt6JLLbaeoyhXIWxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMC9FRjdDQTgyQzVC NDVGRDQxMkRFODkyQ0I2REE3QThDQTE1Qzg1QjE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0ExNUM4 NUIxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4 Q0ExNUM4NUIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALr0v5OKveiHcUQ0b+eCRCNJO+iAci+mxx4E 0pQLkKFRO1gDySV0YpWx2GyTzeFOhYZJzj/CcqHz6RxCevIRZZoufs+vXh3tYbJZ Wmox1DVW1QZSfhYCx1v7zt/66fIIQqdlsedw7g6inqqXvpro5J57rA+CUPQYf+wx PiMHhHH+2GBSmSh86eP5SB1GRUFx2EVkM1lst3W56hqcLP2uJrGMueaatQon/h7w Vy9suPr+MFQdkqBC4a6famKoGYdlnArgEx2Dm/q+bun0A9xyXkKj5pNpiAGIRF4u 5z7sML3B2ajtKijdGt1x9Nq9/U9Mg8Zve+/D59jHo54QjfXzCwU= -----END CERTIFICATE-----Generated at Sun Aug 24 03:51:04 2025 by rpki-client