$ rpki-client -vvf repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft File: EFCC7BEA840185763FF7624CF3DDE00563137A27.mft (raw, json) Hash identifier: EVJT3y4/qkSaJAqPZ0k8h9fLTvcCYq67o6CPkPCKK4U= Subject key identifier: 72:5D:58:54:04:15:B2:94:3B:A6:FE:35:B5:BE:E2:3D:DB:7C:A9:13 Authority key identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27 Certificate issuer: /CN=EFCC7BEA840185763FF7624CF3DDE00563137A27 Certificate serial: 223AA817AC1E772F243326276263CD6C960E4E33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft Manifest number: 037E Signing time: Sun 20 Jul 2025 14:31:05 +0000 Manifest this update: Sun 20 Jul 2025 14:26:05 +0000 Manifest next update: Wed 23 Jul 2025 14:52:05 +0000 Files and hashes: 1: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (hash: t9Dk6yRyxGtnxo9p6R4EHJZwYzMqbQXmpijhebxT1Co=) 2: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (hash: HlXbf2sqo1wPRmjyAMq3IzqSfph/qeQjUmYJ52xMgz8=) 3: EFCC7BEA840185763FF7624CF3DDE00563137A27.crl (hash: c7egJqBExLJjTVw8HzGDKKhDOBEuAxO2eXCrSFzENu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 14:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3a:a8:17:ac:1e:77:2f:24:33:26:27:62:63:cd:6c:96:0e:4e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27 Validity Not Before: Jul 20 14:26:05 2025 GMT Not After : Jul 23 14:52:05 2025 GMT Subject: CN=725D58540415B2943BA6FE35B5BEE23DDB7CA913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:57:17:39:44:9a:6a:0c:2e:98:73:33:8f:28: bd:ae:5a:a4:b6:73:aa:6d:2f:c7:a6:7a:df:f5:34: 2f:26:fe:3f:5f:68:60:08:83:46:e8:9a:af:d2:f5: 60:29:c3:6a:be:17:02:28:b2:1a:fd:e6:80:85:1e: 47:00:75:59:8f:8f:f7:2a:32:63:c8:4d:a1:7b:6d: e7:b4:fe:1a:4f:37:25:74:70:c4:89:a8:0c:62:da: ca:5c:87:8c:23:99:02:05:9c:ae:a2:bf:29:f5:70: be:79:dd:11:33:59:af:2c:e8:d2:59:ce:83:f1:a2: 71:9d:cc:9e:cb:b4:a6:4c:5d:fe:68:dd:fd:87:65: d0:7d:12:73:cf:51:b0:66:02:4a:db:29:a1:86:8c: 63:e4:38:b9:90:f1:f4:ff:1b:0f:06:2b:14:b8:7a: 02:49:79:73:c9:c7:8f:2f:f0:84:68:c1:d6:dc:62: 2e:44:e0:88:a0:3b:2e:19:61:61:5e:93:a3:48:8e: 8f:5d:30:78:08:d0:f4:df:a8:9a:6d:39:1b:3f:1f: dc:bd:47:f2:b4:29:e8:47:f8:34:48:dd:80:fd:59: b0:17:8e:98:e4:37:2d:68:05:d0:85:2e:ec:59:84: 48:83:7e:31:85:b3:e3:17:1f:c6:a1:8a:ea:f8:da: 79:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5D:58:54:04:15:B2:94:3B:A6:FE:35:B5:BE:E2:3D:DB:7C:A9:13 X509v3 Authority Key Identifier: keyid:EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:91:13:3f:1c:f1:06:bd:c9:38:4e:74:0e:23:9f:93:4f:1d: 54:83:7b:34:c8:48:d9:c6:2b:36:77:47:7a:7b:15:42:de:c2: ae:e3:32:ab:8b:16:74:8e:23:b6:6e:03:db:70:2f:3f:18:5c: 79:0c:45:31:14:82:1f:ae:22:21:6c:66:48:32:32:20:76:4e: 68:11:5b:1c:7f:37:a3:f4:f3:37:e7:2f:1d:b5:ea:be:13:fc: e7:c8:5e:02:68:e7:86:73:b5:65:f1:70:71:96:84:f7:28:7b: 0f:99:0c:ec:19:46:46:72:cf:ea:c0:2e:2a:af:aa:c3:03:1a: c4:f6:82:09:ab:bf:7c:6e:23:b6:37:d3:1a:bc:89:39:36:d0: 10:9e:16:40:9e:5d:27:f3:9c:bb:0e:e4:4a:9a:09:35:26:53: 3d:99:fa:fd:db:83:dc:2c:ed:66:98:54:1d:92:90:dd:a7:78: fd:e9:f7:ed:5e:a3:35:e7:f8:6e:5d:69:ea:ca:35:c0:96:4c: 32:97:01:cd:73:53:1f:6c:99:f5:52:c4:9a:da:4f:01:d9:6a: e0:51:c0:af:9a:a4:77:2b:f7:1c:41:7f:86:55:21:ca:0e:b5: 6d:fc:ed:63:4c:c8:0d:a0:b2:4d:c6:5e:8f:6c:75:13:ee:d3: 1a:d8:92:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjqoF6wedy8kMyYnYmPNbJYOTjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDQzdCRUE4NDAxODU3NjNGRjc2MjRDRjNEREUwMDU2 MzEzN0EyNzAeFw0yNTA3MjAxNDI2MDVaFw0yNTA3MjMxNDUyMDVaMDMxMTAvBgNV BAMTKDcyNUQ1ODU0MDQxNUIyOTQzQkE2RkUzNUI1QkVFMjNEREI3Q0E5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcVxc5RJpqDC6YczOPKL2uWqS2 c6ptL8emet/1NC8m/j9faGAIg0bomq/S9WApw2q+FwIoshr95oCFHkcAdVmPj/cq MmPITaF7bee0/hpPNyV0cMSJqAxi2spch4wjmQIFnK6ivyn1cL553REzWa8s6NJZ zoPxonGdzJ7LtKZMXf5o3f2HZdB9EnPPUbBmAkrbKaGGjGPkOLmQ8fT/Gw8GKxS4 egJJeXPJx48v8IRowdbcYi5E4IigOy4ZYWFek6NIjo9dMHgI0PTfqJptORs/H9y9 R/K0KehH+DRI3YD9WbAXjpjkNy1oBdCFLuxZhEiDfjGFs+MXH8ahiur42nlXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcl1YVAQVspQ7pv41tb7iPdt8qRMwHwYDVR0j BBgwFoAU78x76oQBhXY/92JM893gBWMTeicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGQwNzhmZS0wOTMwLTQ1ZGMtYjQwMy0zY2U0ZTg2M2Y4YjUvMC9FRkNDN0JFQTg0 MDE4NTc2M0ZGNzYyNENGM0RERTAwNTYzMTM3QTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDQzdCRUE4NDAxODU3NjNGRjc2MjRDRjNEREUwMDU2MzEz N0EyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRkMDc4ZmUtMDkzMC00NWRjLWI0 MDMtM2NlNGU4NjNmOGI1LzAvRUZDQzdCRUE4NDAxODU3NjNGRjc2MjRDRjNEREUw MDU2MzEzN0EyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6REz8c8Qa9yThOdA4jn5NPHVSDezTISNnG KzZ3R3p7FULewq7jMquLFnSOI7ZuA9twLz8YXHkMRTEUgh+uIiFsZkgyMiB2TmgR Wxx/N6P08zfnLx216r4T/OfIXgJo54ZztWXxcHGWhPcoew+ZDOwZRkZyz+rALiqv qsMDGsT2ggmrv3xuI7Y30xq8iTk20BCeFkCeXSfznLsO5EqaCTUmUz2Z+v3bg9ws 7WaYVB2SkN2neP3p9+1eozXn+G5daerKNcCWTDKXAc1zUx9smfVSxJraTwHZauBR wK+apHcr9xxBf4ZVIcoOtW387WNMyA2gsk3GXo9sdRPu0xrYkqs= -----END CERTIFICATE-----Generated at Sun Jul 20 21:24:17 2025 by rpki-client