$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: 4xVCuMKpQH3AO0HXkgotcGNwjDmdvfKhtR8lGp/4ohc= Subject key identifier: F8:D6:85:81:73:7B:10:73:0F:8C:C3:A8:7A:99:FB:97:78:8B:AA:75 Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 04C2B406F0EE264651802D4BAE0BCFE92A33DF15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 047E Signing time: Fri 25 Jul 2025 08:31:07 +0000 Manifest this update: Fri 25 Jul 2025 08:26:07 +0000 Manifest next update: Mon 28 Jul 2025 10:35:07 +0000 Files and hashes: 1: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: bItOA74qW3zDdThtM48y4FjXwlz3xCZ+usNPRlCspjg=) 2: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: /BYvra4DlfHnq4UOMzaF51N5Kus+HjkdFOsGHv9u+80=) 3: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: /afJJDhqLHEyFhgVDaHqEV2OiB3/NZ6i6GNwssoIGhk=) 4: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: pAwAaLum0jYdUTsB6mT2CdQGQv2HQcF0heplULsgo1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 10:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c2:b4:06:f0:ee:26:46:51:80:2d:4b:ae:0b:cf:e9:2a:33:df:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Jul 25 08:26:07 2025 GMT Not After : Jul 28 10:35:07 2025 GMT Subject: CN=F8D68581737B10730F8CC3A87A99FB97788BAA75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:23:c0:0c:5e:2f:c5:85:05:55:b7:23:33:2c: c5:85:8b:10:d0:97:37:5d:c9:ad:bf:26:37:b5:48: 64:f9:5e:ea:72:a2:d2:bc:cb:5e:85:a2:51:ce:28: 90:ec:4c:1b:24:7e:2c:8a:db:c3:50:b2:e7:77:4d: 75:78:e2:59:5e:69:03:43:17:ab:20:8b:52:70:68: ae:0d:56:80:ac:cc:b6:8e:46:85:70:63:d4:f0:91: 0d:bd:f8:21:82:c0:de:1e:46:b5:29:ad:8d:0e:b8: 71:30:31:62:a8:40:b3:17:ce:4d:67:d2:1a:8c:9a: 19:18:48:f8:d9:bf:f6:06:4e:ed:75:fe:86:a4:23: db:61:55:71:8a:5a:1b:b8:fc:c1:84:13:30:df:35: a4:5b:bf:c5:25:f7:34:b2:08:9b:d7:4e:55:8a:9d: 1b:01:cc:de:af:2c:b1:00:e5:0f:db:4c:fa:a2:d0: 71:af:e4:a7:2c:b5:81:49:43:2a:90:b0:18:68:7e: 65:61:19:70:aa:ad:c0:5a:4c:ad:58:81:d5:a7:08: 7b:76:98:d9:a4:e3:d9:2c:d8:db:5b:a5:84:2c:eb: 6c:b1:ab:7b:8a:0c:b8:09:91:c9:54:80:36:bf:cd: 41:12:71:e7:13:4a:8d:70:41:70:80:d2:67:3c:34: 7b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D6:85:81:73:7B:10:73:0F:8C:C3:A8:7A:99:FB:97:78:8B:AA:75 X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e0:42:7c:fd:8c:41:6c:22:e1:21:5a:42:fe:c5:25:e7:32: b4:c6:e9:a7:81:a2:fb:3a:bd:9f:b9:39:6b:7b:e6:d6:57:ae: fb:f0:2e:c4:90:fc:74:2b:ea:98:59:ce:69:f8:a9:b6:70:c0: cb:a3:02:54:08:d0:49:24:86:0a:0a:a5:03:1d:8a:b2:c4:80: 85:a5:63:57:fa:8e:74:b6:88:52:17:20:ed:a9:ae:40:55:46: e8:bd:6e:31:05:a2:1f:9f:6e:c9:18:0c:8c:d4:89:87:80:49: 6d:09:6d:7c:49:a9:b6:53:77:1b:d6:07:a0:41:6e:29:62:72: dd:b5:ce:8a:62:24:67:89:84:00:38:2f:49:af:72:d2:2a:28: 1c:c4:6c:31:d7:51:1e:4a:d4:a9:87:21:36:6f:f1:fa:86:4f: 28:7e:40:15:69:06:c4:08:19:c2:0b:a8:f4:fc:e8:a5:fe:3b: 64:f9:9d:ba:d4:ec:3a:80:11:4e:d0:be:4a:88:73:85:8e:6e: d0:55:b4:7f:33:b8:c0:1e:ba:22:be:f4:73:e1:0a:f6:97:ce: ca:86:93:e0:19:ce:8c:a8:76:b8:6c:5d:8d:e2:fb:55:5f:99: fc:79:45:41:6c:67:34:0b:e1:f1:3f:e9:73:c5:55:41:e5:91: 19:36:cc:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMK0BvDuJkZRgC1LrgvP6Soz3xUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTA3MjUwODI2MDdaFw0yNTA3MjgxMDM1MDdaMDMxMTAvBgNV BAMTKEY4RDY4NTgxNzM3QjEwNzMwRjhDQzNBODdBOTlGQjk3Nzg4QkFBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDII8AMXi/FhQVVtyMzLMWFixDQ lzddya2/Jje1SGT5XupyotK8y16FolHOKJDsTBskfiyK28NQsud3TXV44lleaQND F6sgi1JwaK4NVoCszLaORoVwY9TwkQ29+CGCwN4eRrUprY0OuHEwMWKoQLMXzk1n 0hqMmhkYSPjZv/YGTu11/oakI9thVXGKWhu4/MGEEzDfNaRbv8Ul9zSyCJvXTlWK nRsBzN6vLLEA5Q/bTPqi0HGv5KcstYFJQyqQsBhofmVhGXCqrcBaTK1YgdWnCHt2 mNmk49ks2NtbpYQs62yxq3uKDLgJkclUgDa/zUEScecTSo1wQXCA0mc8NHvTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+NaFgXN7EHMPjMOoepn7l3iLqnUwHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7gQnz9jEFsIuEhWkL+xSXnMrTG6aeBovs6 vZ+5OWt75tZXrvvwLsSQ/HQr6phZzmn4qbZwwMujAlQI0EkkhgoKpQMdirLEgIWl Y1f6jnS2iFIXIO2prkBVRui9bjEFoh+fbskYDIzUiYeASW0JbXxJqbZTdxvWB6BB bilict21zopiJGeJhAA4L0mvctIqKBzEbDHXUR5K1KmHITZv8fqGTyh+QBVpBsQI GcILqPT86KX+O2T5nbrU7DqAEU7QvkqIc4WObtBVtH8zuMAeuiK+9HPhCvaXzsqG k+AZzoyodrhsXY3i+1Vfmfx5RUFsZzQL4fE/6XPFVUHlkRk2zFY= -----END CERTIFICATE-----Generated at Fri Jul 25 21:39:26 2025 by rpki-client