$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft File: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json) Hash identifier: qV34G4quEX0uvACbb2mQUEB0UsgNHpnvVfVh3uOmHkk= Subject key identifier: AF:60:85:9B:FB:26:A8:93:31:2F:94:44:5B:6E:FE:BA:D3:EC:CB:21 Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 Certificate issuer: /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Certificate serial: 0DD60B8A227DDB7398024FA12CD5E85DF1FC11BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft Manifest number: 0164 Signing time: Tue 22 Jul 2025 20:21:16 +0000 Manifest this update: Tue 22 Jul 2025 20:16:16 +0000 Manifest next update: Sat 26 Jul 2025 06:57:16 +0000 Files and hashes: 1: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: tiskF97htgFGOxcUjLLoNbBwjgTxxSKvgdsrNkZUkUk=) 2: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: UdsRNCsR09ocGMbZq2f+aJpf5Y4KkdwBQMDQfjPB50Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d6:0b:8a:22:7d:db:73:98:02:4f:a1:2c:d5:e8:5d:f1:fc:11:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Validity Not Before: Jul 22 20:16:16 2025 GMT Not After : Jul 26 06:57:16 2025 GMT Subject: CN=AF60859BFB26A893312F94445B6EFEBAD3ECCB21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:03:3d:08:0b:7b:d1:84:a9:b4:7c:39:13: 78:81:7f:02:84:f8:6c:d1:0a:cc:16:a0:a1:59:dc: 1b:2b:15:56:4d:ca:44:8b:fe:a0:7c:d4:f2:01:71: 41:1e:ac:0e:19:8b:0b:2e:28:d8:e8:b6:69:37:3c: 62:29:bf:0a:36:48:58:72:3e:d0:cf:24:87:6e:c0: 37:cc:c3:c6:3d:1f:39:60:4c:37:ff:d9:f1:d2:be: 2d:c4:1b:c1:c4:42:53:81:50:3c:6c:c7:55:4b:a5: ab:2d:bd:30:aa:1d:1e:b8:2d:e1:d4:58:4a:15:c5: 55:9c:a7:e7:68:cd:9f:b2:1b:2b:8b:ce:ae:36:96: 99:29:b6:d3:bf:01:6c:a5:4a:a3:c3:30:bd:1f:8d: 19:46:3d:83:54:0d:4d:3b:d0:f5:84:5c:93:23:1f: c6:b9:ad:78:dd:94:1d:52:b8:d4:b0:9c:d3:5b:60: f9:86:89:4e:1c:da:53:5e:9e:b1:17:2c:e2:d2:b2: b4:1c:ff:e8:2e:54:2d:c2:7b:f9:5e:1a:b3:da:62: 6f:34:a4:69:13:92:c0:a3:b8:eb:97:bf:8c:de:77: be:43:e7:c2:f4:cf:da:70:93:de:69:82:5e:13:e6: 5d:6f:a4:99:a5:f7:6f:19:4a:f8:6c:04:16:b9:63: 40:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:60:85:9B:FB:26:A8:93:31:2F:94:44:5B:6E:FE:BA:D3:EC:CB:21 X509v3 Authority Key Identifier: keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:82:a6:86:ad:d0:ec:05:fb:5c:01:b5:6e:08:c8:a0:18:de: ba:66:b8:2c:48:ad:09:09:3f:78:03:b4:88:64:9a:92:08:cb: c7:30:99:ab:53:02:40:78:52:a2:29:c7:35:a5:d2:39:b1:b2: 61:80:69:20:9e:c7:4e:83:f2:e6:9b:7e:8b:29:af:b4:fc:01: 86:d5:84:5a:b3:c3:df:7f:6b:b3:89:47:31:f7:c1:f0:f4:66: 25:29:d4:87:ac:d9:57:58:02:8b:1a:e2:96:ec:49:ac:74:25: 58:c0:66:b3:99:20:d9:69:d3:be:78:42:6c:7d:ce:a7:e6:fb: 8f:92:ad:df:b5:df:99:48:f0:9a:86:da:c7:91:6d:47:ae:af: a9:a4:09:12:84:a1:8e:d3:9c:1d:86:5d:50:53:78:f7:34:4c: 61:1b:8c:60:b7:17:1a:dc:05:10:90:aa:4d:48:f3:cb:18:5d: 51:37:e5:cf:06:6c:ec:28:16:c6:18:29:f4:93:e8:92:9e:19: 57:7f:f9:36:ff:79:12:2f:4d:6a:13:c3:a5:46:5e:77:14:bd: b7:3d:4a:3d:3a:03:7e:7e:8f:a9:15:2e:3f:d5:b8:55:fe:c9: bd:79:7b:c9:81:93:8a:9f:bc:fd:3e:80:ea:ac:dd:9b:e2:c7: a2:bb:ae:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDdYLiiJ923OYAk+hLNXoXfH8Eb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgz OEUwQzY3NTAeFw0yNTA3MjIyMDE2MTZaFw0yNTA3MjYwNjU3MTZaMDMxMTAvBgNV BAMTKEFGNjA4NTlCRkIyNkE4OTMzMTJGOTQ0NDVCNkVGRUJBRDNFQ0NCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFwM9CAt70YSptHw5E3iBfwKE +GzRCswWoKFZ3BsrFVZNykSL/qB81PIBcUEerA4ZiwsuKNjotmk3PGIpvwo2SFhy PtDPJIduwDfMw8Y9HzlgTDf/2fHSvi3EG8HEQlOBUDxsx1VLpastvTCqHR64LeHU WEoVxVWcp+dozZ+yGyuLzq42lpkpttO/AWylSqPDML0fjRlGPYNUDU070PWEXJMj H8a5rXjdlB1SuNSwnNNbYPmGiU4c2lNenrEXLOLSsrQc/+guVC3Ce/leGrPaYm80 pGkTksCjuOuXv4zed75D58L0z9pwk95pgl4T5l1vpJml928ZSvhsBBa5Y0BbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr2CFm/smqJMxL5REW27+utPsyyEwHwYDVR0j BBgwFoAU76S/mg0t1XRGEmxX85rxCDjgxnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2UyN2RhOS1lNmU2LTQ0YTUtOThmNC01OTBlYjVhMWJkNjUvMC9FRkE0QkY5QTBE MkRENTc0NDYxMjZDNTdGMzlBRjEwODM4RTBDNjc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgzOEUw QzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYx MDgzOEUwQzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOCpoat0OwF+1wBtW4IyKAY3rpmuCxIrQkJ P3gDtIhkmpIIy8cwmatTAkB4UqIpxzWl0jmxsmGAaSCex06D8uabfospr7T8AYbV hFqzw99/a7OJRzH3wfD0ZiUp1Ies2VdYAosa4pbsSax0JVjAZrOZINlp0754Qmx9 zqfm+4+Srd+135lI8JqG2seRbUeur6mkCRKEoY7TnB2GXVBTePc0TGEbjGC3Fxrc BRCQqk1I88sYXVE35c8GbOwoFsYYKfST6JKeGVd/+Tb/eRIvTWoTw6VGXncUvbc9 Sj06A35+j6kVLj/VuFX+yb15e8mBk4qfvP0+gOqs3Zvix6K7rqI= -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:48 2025 by rpki-client