$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json) Hash identifier: gBpMp4TwXnH7tljzr7kAqROODN2GSexWCeiZmmMNfwQ= Subject key identifier: B3:89:E3:28:98:B9:87:F5:D9:02:30:15:13:B1:0E:2D:CA:75:9A:C4 Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Certificate serial: 2DDC4C624C3E1C6FEC3E3F9CD080EAB4111D1388 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft Manifest number: AC Signing time: Sat 28 Jun 2025 15:11:19 +0000 Manifest this update: Sat 28 Jun 2025 15:06:19 +0000 Manifest next update: Wed 02 Jul 2025 00:15:19 +0000 Files and hashes: 1: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: 8H6c23nkYBW9KvsqeabIlQf8d7FOFl0pNVNesc1RjNw=) 2: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: yvjq0+mX9UVVGH4hrgAy0kHkjD5STbq2ZndxXPg4Qok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:dc:4c:62:4c:3e:1c:6f:ec:3e:3f:9c:d0:80:ea:b4:11:1d:13:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Validity Not Before: Jun 28 15:06:19 2025 GMT Not After : Jul 2 00:15:19 2025 GMT Subject: CN=B389E32898B987F5D902301513B10E2DCA759AC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:72:7f:1d:16:3b:3d:7a:fa:40:de:71:27: 55:7b:a1:ba:d4:70:32:ab:49:a2:ba:7d:61:79:50: 1f:b9:f8:61:9d:29:03:f6:e3:2e:59:e3:30:5f:d6: f1:1c:c7:15:26:8e:3b:63:72:ff:f6:b2:40:cd:42: 60:ea:26:94:da:33:7c:31:5a:11:85:73:04:d9:81: 6c:e6:65:eb:5d:57:ff:71:e4:dd:51:ec:75:d0:b4: 3d:de:10:fa:9b:63:a8:29:1d:9c:60:1b:c5:58:e5: ea:cc:50:ce:e1:05:14:90:37:39:5a:a6:70:b6:44: 31:95:cd:e0:9f:0b:8b:44:83:6a:85:21:6e:63:73: 77:a4:ea:dc:68:df:24:06:ba:a8:23:4c:5b:b0:3b: 5a:f0:2c:c5:bc:1a:e9:43:d4:eb:c6:a3:14:f7:3f: b4:c8:3d:d8:1b:13:8f:86:5a:f5:7b:7e:94:87:78: be:96:26:7a:09:05:59:19:48:d8:4c:99:d9:07:48: 7e:54:07:31:32:ba:fd:d3:95:50:6f:2a:52:ff:6e: 9a:31:1c:09:b6:78:4c:10:0b:85:1d:93:21:32:63: 8b:c2:ec:ed:50:ac:75:ef:1d:08:0d:06:e5:3c:95: 62:84:3b:e8:11:4a:a9:de:a5:e3:76:cd:c5:91:a7: be:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:89:E3:28:98:B9:87:F5:D9:02:30:15:13:B1:0E:2D:CA:75:9A:C4 X509v3 Authority Key Identifier: keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:33:3a:4f:87:d0:a0:14:ad:4f:82:e0:ef:3e:60:39:99:01: 81:93:c4:cb:99:f4:54:a5:17:02:b4:78:e0:0a:f7:a2:e2:bf: cd:c4:be:6a:19:79:b8:cb:66:40:72:e1:5c:eb:b6:91:54:d6: 0d:05:83:02:fa:07:0e:84:74:40:ef:78:b3:54:fd:26:ec:44: a1:d9:d7:13:18:0b:d5:00:53:9d:39:1e:75:9d:b8:61:b4:c1: 89:93:b9:79:76:04:12:86:69:27:b8:75:4d:21:f4:2c:39:3e: b9:18:11:b0:9a:32:42:77:04:df:e3:0f:25:92:68:e4:42:ad: f8:ac:50:f9:3f:d3:fc:23:13:82:6f:fa:d0:4f:01:da:cb:75: 0d:8a:59:ce:fb:7d:e7:54:2a:5a:f6:93:b2:21:86:38:f0:e6: 05:a9:67:09:ff:3d:e6:2a:ed:61:0b:35:4b:94:19:bc:e1:9e: ed:06:52:42:6b:d5:58:ee:af:f5:f3:58:c6:69:ea:ee:ab:99: 51:bb:65:ce:54:20:14:2d:60:39:ad:8e:2d:2d:ca:f2:b1:50: e4:d5:e9:91:ce:b9:1b:4f:74:86:52:0b:a1:8f:e6:6b:b6:dc: 4a:79:05:ee:66:61:49:62:47:6f:27:f1:2a:36:13:f6:83:72: 44:35:e7:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdxMYkw+HG/sPj+c0IDqtBEdE4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0Ex NUM4NUIxNzAeFw0yNTA2MjgxNTA2MTlaFw0yNTA3MDIwMDE1MTlaMDMxMTAvBgNV BAMTKEIzODlFMzI4OThCOTg3RjVEOTAyMzAxNTEzQjEwRTJEQ0E3NTlBQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzinJ/HRY7PXr6QN5xJ1V7obrU cDKrSaK6fWF5UB+5+GGdKQP24y5Z4zBf1vEcxxUmjjtjcv/2skDNQmDqJpTaM3wx WhGFcwTZgWzmZetdV/9x5N1R7HXQtD3eEPqbY6gpHZxgG8VY5erMUM7hBRSQNzla pnC2RDGVzeCfC4tEg2qFIW5jc3ek6txo3yQGuqgjTFuwO1rwLMW8GulD1OvGoxT3 P7TIPdgbE4+GWvV7fpSHeL6WJnoJBVkZSNhMmdkHSH5UBzEyuv3TlVBvKlL/bpox HAm2eEwQC4UdkyEyY4vC7O1QrHXvHQgNBuU8lWKEO+gRSqnepeN2zcWRp753AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs4njKJi5h/XZAjAVE7EOLcp1msQwHwYDVR0j BBgwFoAU73yoLFtF/UEt6JLLbaeoyhXIWxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMC9FRjdDQTgyQzVC NDVGRDQxMkRFODkyQ0I2REE3QThDQTE1Qzg1QjE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0ExNUM4 NUIxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4 Q0ExNUM4NUIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwzOk+H0KAUrU+C4O8+YDmZAYGTxMuZ9FSl FwK0eOAK96Liv83EvmoZebjLZkBy4VzrtpFU1g0FgwL6Bw6EdEDveLNU/SbsRKHZ 1xMYC9UAU505HnWduGG0wYmTuXl2BBKGaSe4dU0h9Cw5PrkYEbCaMkJ3BN/jDyWS aORCrfisUPk/0/wjE4Jv+tBPAdrLdQ2KWc77fedUKlr2k7Ihhjjw5gWpZwn/PeYq 7WELNUuUGbzhnu0GUkJr1Vjur/XzWMZp6u6rmVG7Zc5UIBQtYDmtji0tyvKxUOTV 6ZHOuRtPdIZSC6GP5mu23Ep5Be5mYUliR28n8So2E/aDckQ156A= -----END CERTIFICATE-----Generated at Mon Jun 30 04:32:03 2025 by rpki-client