$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: oPsIcjZ2cDwwvjbPNNZ9ayhFYxPIXZwWLabbNKt/jVc= Subject key identifier: 1F:7D:6D:C6:EF:E5:91:35:AE:29:A5:A0:3A:9E:B6:71:1B:83:4B:38 Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 21A4B936B17ECFBAD4242FD554E981AB692FBD68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 01B3 Signing time: Mon 21 Jul 2025 01:21:17 +0000 Manifest this update: Mon 21 Jul 2025 01:16:17 +0000 Manifest next update: Thu 24 Jul 2025 01:47:17 +0000 Files and hashes: 1: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: zhfT9dzqYt1bB25St2DI6pASSgOwxgdrMpQzPwr4zdA=) 2: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: FZiLxMb5dgCnj2ygAUMG+iOhbkvGD+JTx4oZ84Go9S0=) 3: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) 4: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: RJCqubu8qbtGpPN7MXXSa7nQdF5Bw0374TSVNQhH0cg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a4:b9:36:b1:7e:cf:ba:d4:24:2f:d5:54:e9:81:ab:69:2f:bd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Jul 21 01:16:17 2025 GMT Not After : Jul 24 01:47:17 2025 GMT Subject: CN=1F7D6DC6EFE59135AE29A5A03A9EB6711B834B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c4:ca:76:5c:bc:1e:37:1d:49:95:5e:cc:92: e5:2e:a2:9a:f2:19:1c:af:43:1a:87:fa:64:a5:29: 3a:c8:99:51:7f:84:da:de:b6:b4:d2:5f:23:d4:31: cb:da:4a:96:77:d9:62:9f:09:a0:3e:83:0e:5b:aa: 60:58:d0:48:61:47:93:01:df:10:de:11:6f:f7:c8: 01:6a:9a:63:b0:ab:55:f1:58:18:1b:e6:21:fa:37: bc:93:35:b9:28:fd:95:6f:9a:be:e6:2a:8b:be:ee: 3f:69:6c:2b:5f:ea:ee:a3:ea:32:96:5d:3a:9d:9a: 35:1a:a7:b2:ea:53:5a:8d:ef:33:e2:25:2e:1b:5e: a5:83:33:f4:d4:62:f0:35:4d:b5:bd:fd:b3:3b:e5: e7:9d:50:ba:86:98:80:53:84:e7:58:3e:0b:de:1c: a2:00:f4:b8:1b:10:86:f3:e1:d4:81:f2:d0:11:55: be:4c:2a:cf:96:1f:7d:cc:7a:cc:01:68:76:d3:3f: a8:cd:ee:67:91:41:b4:bd:4f:fd:0f:82:93:f8:8a: a0:fa:83:ad:92:85:d8:9e:e8:76:ce:4a:71:77:33: 15:f8:51:c9:d9:8f:d2:bc:b4:2a:b6:70:28:a3:6f: b4:80:3a:cf:28:15:19:55:5a:89:a9:f4:64:92:c2: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7D:6D:C6:EF:E5:91:35:AE:29:A5:A0:3A:9E:B6:71:1B:83:4B:38 X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:01:0e:fd:d5:37:15:91:16:f0:87:71:a8:f8:d3:ec:52:dd: 3c:1c:c5:e7:50:17:4b:7f:84:13:b4:75:04:ed:24:f7:18:a5: 9b:09:1c:1f:29:b2:4f:77:e4:8f:c4:bc:d1:28:28:87:d7:f8: 45:93:a8:3d:81:51:83:25:51:12:35:bd:49:34:ab:51:7e:73: 8a:5d:10:2b:dc:6e:4f:8a:44:ea:65:3e:cf:e6:59:2f:85:18: c4:64:30:f2:0a:fd:30:c1:f0:05:44:db:5c:ac:b6:d3:76:0c: 5e:bc:40:b6:52:ea:6e:13:9a:a3:f2:09:f4:d5:2a:28:ff:40: fa:b4:4b:e8:48:7f:50:92:d4:1b:21:3a:15:fa:62:26:ed:18: 36:2c:27:c2:61:26:cd:4d:51:ea:a1:23:6c:7d:7a:9d:d8:16: 2c:ef:47:71:e3:bc:3b:e9:d3:e8:d1:83:15:19:a6:2b:05:55: 8c:84:f1:95:d3:2f:da:54:e3:c5:ee:84:f6:bc:08:c5:4b:4d: da:5d:d6:84:4b:fb:e3:2d:4e:cc:fc:a6:d0:de:40:fc:97:9f: 04:88:91:5f:4f:6c:47:85:d8:7c:da:3f:ea:5f:fb:ba:10:a2: 1c:55:9c:22:af:2c:db:79:ef:20:b9:4a:26:b7:a0:b0:75:4e: b7:fe:75:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIaS5NrF+z7rUJC/VVOmBq2kvvWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNTA3MjEwMTE2MTdaFw0yNTA3MjQwMTQ3MTdaMDMxMTAvBgNV BAMTKDFGN0Q2REM2RUZFNTkxMzVBRTI5QTVBMDNBOUVCNjcxMUI4MzRCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyxMp2XLweNx1JlV7MkuUuopry GRyvQxqH+mSlKTrImVF/hNretrTSXyPUMcvaSpZ32WKfCaA+gw5bqmBY0EhhR5MB 3xDeEW/3yAFqmmOwq1XxWBgb5iH6N7yTNbko/ZVvmr7mKou+7j9pbCtf6u6j6jKW XTqdmjUap7LqU1qN7zPiJS4bXqWDM/TUYvA1TbW9/bM75eedULqGmIBThOdYPgve HKIA9LgbEIbz4dSB8tARVb5MKs+WH33MeswBaHbTP6jN7meRQbS9T/0PgpP4iqD6 g62Shdie6HbOSnF3MxX4UcnZj9K8tCq2cCijb7SAOs8oFRlVWomp9GSSwk/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH31txu/lkTWuKaWgOp62cRuDSzgwHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsBDv3VNxWRFvCHcaj40+xS3TwcxedQF0t/ hBO0dQTtJPcYpZsJHB8psk935I/EvNEoKIfX+EWTqD2BUYMlURI1vUk0q1F+c4pd ECvcbk+KROplPs/mWS+FGMRkMPIK/TDB8AVE21ysttN2DF68QLZS6m4TmqPyCfTV Kij/QPq0S+hIf1CS1BshOhX6YibtGDYsJ8JhJs1NUeqhI2x9ep3YFizvR3HjvDvp 0+jRgxUZpisFVYyE8ZXTL9pU48XuhPa8CMVLTdpd1oRL++MtTsz8ptDeQPyXnwSI kV9PbEeF2HzaP+pf+7oQohxVnCKvLNt57yC5Sia3oLB1Trf+df4= -----END CERTIFICATE-----Generated at Mon Jul 21 12:37:34 2025 by rpki-client