$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: 3l85zvSPEuAdaL51FrdvMvBy2UZy9khjoNQ1qqaHoBo= Subject key identifier: E3:E2:7C:40:31:61:DF:71:A8:10:B8:E5:7B:05:E3:81:F6:64:4A:F0 Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 5E2019FB9B3B26D6F16ADF56FB0285650927EF91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 04E2 Signing time: Tue 03 Mar 2026 00:21:19 +0000 Manifest this update: Tue 03 Mar 2026 00:16:19 +0000 Manifest next update: Fri 06 Mar 2026 07:51:19 +0000 Files and hashes: 1: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: T6Hicz2H8CuNDpKjhaA17WaIW/oy1qNlEePPsSxqMqI=) 2: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: LyQVOVVD0SyWAzKbbigEAOPOxnvDfTq86SNZAm/SmRY=) 3: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: CUuYJ9F98eZOzW3PNluk8uqSG/5H8cZ3wBpQvF7lx7o=) 4: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: KdIUSWjYk6G6khIi44dRxNIcc82FtwrOj3DoMvqmaNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 07:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:20:19:fb:9b:3b:26:d6:f1:6a:df:56:fb:02:85:65:09:27:ef:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Mar 3 00:16:19 2026 GMT Not After : Mar 6 07:51:19 2026 GMT Subject: CN=E3E27C403161DF71A810B8E57B05E381F6644AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:96:9b:0c:9d:e9:29:29:47:05:53:fe:b5:14: ec:5d:90:da:f3:33:02:40:d8:13:47:64:29:be:e4: 22:6e:55:84:a1:5b:57:de:ce:42:1c:2b:a8:b2:41: d9:72:34:57:44:e3:98:e2:66:dc:09:cb:07:6a:73: ee:96:59:bd:38:a7:6b:2f:3b:9c:40:5a:58:80:a2: c6:7f:55:0c:e3:ff:a7:8a:e2:2d:d9:3c:2a:03:34: eb:e9:29:82:e5:61:12:84:96:85:60:55:f4:45:bf: cb:58:d7:33:c3:f9:f1:03:87:5b:9f:92:81:f4:da: ca:4d:85:75:38:3e:b3:35:bf:cf:be:ee:9d:9b:a3: 96:b6:82:fa:56:bf:0a:25:c2:17:82:d9:64:1d:da: b1:4c:c8:66:09:3b:9e:4d:12:d3:cf:d7:da:c0:de: 71:48:b2:c8:4f:41:6f:ef:f5:be:14:02:9e:c6:03: 7a:f1:54:17:47:7b:30:95:ca:c5:7f:44:f0:9b:85: 95:66:46:f2:0f:8b:3e:87:58:41:b4:41:18:b0:7e: 0f:7c:c4:86:bf:97:52:2c:22:1d:62:80:ff:bb:e0: b1:6d:6b:ac:7c:05:75:d5:3e:55:6c:4a:09:28:dc: 7c:47:00:8e:fa:d2:3c:65:2c:69:d6:88:ef:dd:e3: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E2:7C:40:31:61:DF:71:A8:10:B8:E5:7B:05:E3:81:F6:64:4A:F0 X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7f:5d:1f:22:00:78:08:ae:83:12:49:2d:d6:15:29:28:4c: 6b:e6:a2:a5:07:bf:30:43:71:56:ff:d7:b0:7d:c0:1b:c2:21: 4b:05:4b:10:3d:6a:9e:65:50:89:bd:23:af:20:2f:6c:96:9a: fc:1a:f8:d6:47:8c:95:d8:e9:37:0c:3a:cf:54:b6:8f:9b:dc: ce:4a:05:47:b0:fc:a4:97:08:66:16:c4:0e:0a:8d:2e:f5:05: 79:81:87:9c:f0:ef:ea:47:3f:c7:93:23:9d:b4:dd:3b:e6:de: e3:04:f3:d5:a6:cc:ff:0e:d3:87:81:70:4b:94:55:ba:ce:99: 18:c4:fd:d4:cd:4f:23:b2:9c:cc:49:92:4d:dc:41:02:4f:92: ec:d6:15:bb:df:3b:4a:89:68:ed:d0:9f:79:1d:68:fb:2c:70: 1b:e1:47:fa:13:92:28:e9:b1:8e:51:39:3b:de:f9:81:55:07: c4:e9:91:35:28:28:4b:f9:fc:ad:a2:28:60:4d:10:df:0b:0d: 57:2b:48:f7:e4:6f:56:7a:a1:3d:b1:84:dc:e7:c1:80:a3:85: 77:fc:2e:6c:51:d6:e0:a9:19:10:2a:da:7b:a7:e0:8b:43:5f: f0:6e:fa:6b:d4:05:f3:8c:1f:50:ee:bb:ea:51:19:78:b9:7e: b2:4c:7d:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXiAZ+5s7Jtbxat9W+wKFZQkn75EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNjAzMDMwMDE2MTlaFw0yNjAzMDYwNzUxMTlaMDMxMTAvBgNV BAMTKEUzRTI3QzQwMzE2MURGNzFBODEwQjhFNTdCMDVFMzgxRjY2NDRBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflpsMnekpKUcFU/61FOxdkNrz MwJA2BNHZCm+5CJuVYShW1fezkIcK6iyQdlyNFdE45jiZtwJywdqc+6WWb04p2sv O5xAWliAosZ/VQzj/6eK4i3ZPCoDNOvpKYLlYRKEloVgVfRFv8tY1zPD+fEDh1uf koH02spNhXU4PrM1v8++7p2bo5a2gvpWvwolwheC2WQd2rFMyGYJO55NEtPP19rA 3nFIsshPQW/v9b4UAp7GA3rxVBdHezCVysV/RPCbhZVmRvIPiz6HWEG0QRiwfg98 xIa/l1IsIh1igP+74LFta6x8BXXVPlVsSgko3HxHAI760jxlLGnWiO/d40E7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4+J8QDFh33GoELjlewXjgfZkSvAwHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJ/XR8iAHgIroMSSS3WFSkoTGvmoqUHvzBD cVb/17B9wBvCIUsFSxA9ap5lUIm9I68gL2yWmvwa+NZHjJXY6TcMOs9Uto+b3M5K BUew/KSXCGYWxA4KjS71BXmBh5zw7+pHP8eTI5203Tvm3uME89WmzP8O04eBcEuU VbrOmRjE/dTNTyOynMxJkk3cQQJPkuzWFbvfO0qJaO3Qn3kdaPsscBvhR/oTkijp sY5ROTve+YFVB8TpkTUoKEv5/K2iKGBNEN8LDVcrSPfkb1Z6oT2xhNznwYCjhXf8 LmxR1uCpGRAq2nun4ItDX/Bu+mvUBfOMH1Duu+pRGXi5frJMfUw= -----END CERTIFICATE-----Generated at Wed Mar 4 15:41:09 2026 by rpki-client