$ rpki-client -vvf repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft File: EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft (raw, json) Hash identifier: 3YNthYTbtOlfdr7AibqykK/s2KMLByEoCgeKVesfNGY= Subject key identifier: B7:9F:80:18:11:D3:5F:D0:D9:50:B6:6D:1E:35:95:9D:92:C7:4F:44 Authority key identifier: EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66 Certificate issuer: /CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66 Certificate serial: 4249FE3FED2AA9B447FD45B040D44A2A2515AEC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft Manifest number: BF Signing time: Sun 20 Jul 2025 05:51:33 +0000 Manifest this update: Sun 20 Jul 2025 05:46:33 +0000 Manifest next update: Wed 23 Jul 2025 13:21:33 +0000 Files and hashes: 1: 3130332e32382e32312e302f32342d3234203d3e203536323536.roa (hash: lgU3Sd0WykJyELTKj2IglQHmtI2jqlICc7rdQuDN4Fw=) 2: 3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (hash: 4q/gs/czBNAuO23mv17/FKccDK6uDnn2+DC2kwXpKAc=) 3: EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl (hash: ZCxAb435gRReKragNri9Yw2xx30i4n9pV0Y+cPK/Brg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:49:fe:3f:ed:2a:a9:b4:47:fd:45:b0:40:d4:4a:2a:25:15:ae:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66 Validity Not Before: Jul 20 05:46:33 2025 GMT Not After : Jul 23 13:21:33 2025 GMT Subject: CN=B79F801811D35FD0D950B66D1E35959D92C74F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:e3:60:cb:b7:c4:39:f0:b3:7e:a2:85:1b: 5f:49:c2:70:5d:be:be:9f:43:7c:78:6a:1f:3d:37: e1:f8:78:04:b6:cf:e9:01:4d:b4:20:1e:8a:51:dd: 62:fb:a4:6a:b1:1e:08:d5:2a:0d:ff:77:d3:7a:09: 42:02:10:87:3b:2b:c0:b1:f3:3b:79:4f:03:71:30: cb:4f:c7:53:11:fd:1d:82:bd:22:b7:c5:ec:a4:0f: d5:6b:46:50:85:d4:29:67:86:f7:a2:1a:b5:03:e9: c5:a8:e7:b8:bc:2b:26:cb:0f:9a:19:c7:22:f9:a8: 71:cb:02:de:f7:72:1c:f1:a2:b2:a4:78:7e:f3:7a: 47:64:5c:be:5f:36:ab:6f:8b:0f:aa:0a:eb:6f:bb: a1:f0:ab:8e:89:36:0e:81:b4:9c:19:5e:55:f4:8d: b0:b4:d5:83:11:db:b3:67:3f:94:a9:4c:13:0f:ef: b2:41:59:07:8b:08:0a:5e:27:b4:6b:7c:54:82:da: c2:e7:8d:6a:d4:7d:43:08:b3:6a:44:4a:54:26:25: 75:17:b9:36:9e:18:3c:4e:c6:e5:b0:96:86:06:7e: 7b:5b:65:17:cc:b5:ef:b9:d6:8e:3a:e9:71:12:c7: 53:71:7c:00:b4:6c:63:af:ac:dd:a0:a3:5d:b9:d5: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9F:80:18:11:D3:5F:D0:D9:50:B6:6D:1E:35:95:9D:92:C7:4F:44 X509v3 Authority Key Identifier: keyid:EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:8c:29:ad:54:d6:27:7b:5a:53:40:ba:9d:b4:3a:0f:44:08: f4:bc:d6:6d:df:c7:aa:c5:78:ba:9b:bb:b7:bd:b8:87:b1:98: d1:0f:34:33:93:cd:44:e0:76:61:31:90:9b:b1:04:36:54:0d: 99:c2:83:43:8e:f7:c8:38:e8:5c:1d:12:43:c1:23:9c:80:99: 97:9e:49:1b:84:57:ef:f0:27:1d:f2:ef:12:56:b7:9b:c4:dc: 7a:60:88:b4:dd:b6:b3:34:84:2d:b4:08:b0:e4:26:21:0a:d2: fc:89:69:df:bd:ac:57:86:60:2d:a8:44:6f:85:7f:48:bc:7d: 55:7a:71:2f:36:53:84:e8:6c:c7:34:3b:e7:e7:4f:fe:38:2b: 44:d8:64:2e:b8:7c:dd:e0:48:11:9b:52:9d:77:98:8a:99:51: 15:8b:d0:cb:34:28:3c:09:35:d4:5b:93:29:81:ca:53:3c:70: ea:93:a7:8c:b6:38:0b:ce:ca:dd:08:fa:02:4e:c0:9e:ed:e4: 50:e0:8f:25:be:b2:68:f4:e9:ed:8e:4f:2b:1d:43:f9:7d:3e: de:55:7e:c2:5b:27:90:0d:69:af:9e:59:33:fd:c9:d5:75:45: f4:a3:08:40:35:e7:07:dd:ff:0e:55:72:b5:38:e8:07:d3:4b: 9e:4b:6b:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkn+P+0qqbRH/UWwQNRKKiUVrsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY5NzkwNzJGQkY2REFCRDJBOEVBQzA4QTMwNDUwOUU4 REMwNEM2NjAeFw0yNTA3MjAwNTQ2MzNaFw0yNTA3MjMxMzIxMzNaMDMxMTAvBgNV BAMTKEI3OUY4MDE4MTFEMzVGRDBEOTUwQjY2RDFFMzU5NTlEOTJDNzRGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FeNgy7fEOfCzfqKFG19JwnBd vr6fQ3x4ah89N+H4eAS2z+kBTbQgHopR3WL7pGqxHgjVKg3/d9N6CUICEIc7K8Cx 8zt5TwNxMMtPx1MR/R2CvSK3xeykD9VrRlCF1ClnhveiGrUD6cWo57i8KybLD5oZ xyL5qHHLAt73chzxorKkeH7zekdkXL5fNqtviw+qCutvu6Hwq46JNg6BtJwZXlX0 jbC01YMR27NnP5SpTBMP77JBWQeLCApeJ7RrfFSC2sLnjWrUfUMIs2pESlQmJXUX uTaeGDxOxuWwloYGfntbZRfMte+51o466XESx1NxfAC0bGOvrN2go1251TxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt5+AGBHTX9DZULZtHjWVnZLHT0QwHwYDVR0j BBgwFoAU75eQcvv22r0qjqwIowRQno3ATGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmMwMDM3Ni0zMzUxLTRmYTMtOTdlZS01MjM4NWJhNGQ5MDMvMC9FRjk3OTA3MkZC RjZEQUJEMkE4RUFDMDhBMzA0NTA5RThEQzA0QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUY5NzkwNzJGQkY2REFCRDJBOEVBQzA4QTMwNDUwOUU4REMw NEM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZjMDAzNzYtMzM1MS00ZmEzLTk3 ZWUtNTIzODViYTRkOTAzLzAvRUY5NzkwNzJGQkY2REFCRDJBOEVBQzA4QTMwNDUw OUU4REMwNEM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6MKa1U1id7WlNAup20Og9ECPS81m3fx6rF eLqbu7e9uIexmNEPNDOTzUTgdmExkJuxBDZUDZnCg0OO98g46FwdEkPBI5yAmZee SRuEV+/wJx3y7xJWt5vE3HpgiLTdtrM0hC20CLDkJiEK0vyJad+9rFeGYC2oRG+F f0i8fVV6cS82U4TobMc0O+fnT/44K0TYZC64fN3gSBGbUp13mIqZURWL0Ms0KDwJ NdRbkymBylM8cOqTp4y2OAvOyt0I+gJOwJ7t5FDgjyW+smj06e2OTysdQ/l9Pt5V fsJbJ5ANaa+eWTP9ydV1RfSjCEA15wfd/w5VcrU46AfTS55La60= -----END CERTIFICATE-----Generated at Sun Jul 20 21:29:24 2025 by rpki-client