$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: zUfIy9EHJTK9PyuoXWJz3But8Svf4H0+BsIL3Hav2Ag= Subject key identifier: 48:02:3B:9A:60:E3:EC:FF:4F:FB:7A:7C:C6:8F:8B:4D:09:E7:62:AB Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 375B134B00DD1CA5D30A2D057D8705C11A53164A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 04AD Signing time: Wed 05 Nov 2025 06:51:09 +0000 Manifest this update: Wed 05 Nov 2025 06:46:09 +0000 Manifest next update: Sat 08 Nov 2025 17:07:09 +0000 Files and hashes: 1: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: LyQVOVVD0SyWAzKbbigEAOPOxnvDfTq86SNZAm/SmRY=) 2: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: AEgu6germeJQ14xiw3XINSlD+HOdZJhnvgAAAi6HEyU=) 3: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: /BYvra4DlfHnq4UOMzaF51N5Kus+HjkdFOsGHv9u+80=) 4: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: pAwAaLum0jYdUTsB6mT2CdQGQv2HQcF0heplULsgo1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 17:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:5b:13:4b:00:dd:1c:a5:d3:0a:2d:05:7d:87:05:c1:1a:53:16:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Nov 5 06:46:09 2025 GMT Not After : Nov 8 17:07:09 2025 GMT Subject: CN=48023B9A60E3ECFF4FFB7A7CC68F8B4D09E762AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:e7:21:49:54:a1:ae:a3:e1:b1:d3:52:93: a1:85:82:27:e6:93:e6:e0:a7:b7:28:07:2a:c3:d7: 72:f3:67:a0:87:60:c7:9e:49:15:7e:29:6e:fb:92: ff:b7:dd:eb:e9:e6:de:24:2e:ef:90:b9:fa:cc:a2: 91:96:02:87:03:1b:13:f5:b9:31:67:82:90:f5:08: ac:ec:15:76:cf:0d:c3:51:4e:c0:60:79:2b:48:03: 4f:46:d4:12:e8:43:fd:e7:ec:11:76:d1:3e:ec:e1: b0:58:44:61:06:31:f9:3f:4f:32:db:8e:fe:48:d1: 22:47:96:d1:3e:57:98:99:83:ea:61:9a:4d:35:9f: 6f:1f:d1:49:a5:ff:ad:bb:31:c3:40:e1:01:d4:aa: 5f:7a:e6:69:8c:99:22:df:45:c1:c3:6f:f7:33:80: 84:f5:c8:2e:80:e4:37:8b:4f:df:4b:49:ef:46:77: ba:4d:68:bb:af:96:25:2b:33:67:06:81:f7:80:5b: 4a:9f:ca:c6:9f:2e:d0:10:d6:6d:c9:e6:b2:07:31: 0f:31:da:f8:b9:4f:21:9d:69:9c:c1:da:44:b8:be: 0d:a2:7b:32:06:15:3f:76:e6:36:01:56:05:a2:a6: 81:99:e6:4b:ab:a2:10:32:ed:1e:4b:a1:25:bf:14: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:02:3B:9A:60:E3:EC:FF:4F:FB:7A:7C:C6:8F:8B:4D:09:E7:62:AB X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:90:9b:d9:0b:01:46:ea:f0:42:49:25:6f:bf:51:30:79:94: 75:79:4d:c5:f7:7a:d9:ad:b3:e4:eb:5b:ea:27:33:b9:80:a0: 2e:c5:c7:35:47:b6:56:83:84:c1:f4:aa:a9:0a:26:42:39:ae: 8a:67:b7:b1:88:19:dd:e4:fb:91:3e:31:4f:d3:6f:f7:13:1a: 1d:ad:6d:47:09:33:c5:84:47:16:8d:b0:3d:6f:c6:ea:10:a3: 78:98:b2:7f:01:7c:28:61:3f:e0:86:5c:65:dd:04:c8:f5:8b: 29:c5:13:6c:3d:1e:da:78:db:ce:58:e7:03:56:27:ee:f3:84: f9:22:45:9c:32:fd:fa:94:22:1d:a9:9a:d1:cd:e2:2a:86:bc: a8:8e:28:a2:51:05:7a:03:0d:26:8b:f5:0a:5f:64:47:7d:f2: 4e:63:d3:12:af:07:ed:1a:e7:f5:82:31:e6:cb:7e:b1:bc:17: 1c:4d:91:3f:73:53:12:cc:85:63:44:dc:3a:3c:fd:c8:85:1b: 65:25:67:f4:9f:48:7f:26:d0:55:17:d3:fd:c6:bd:15:c5:01: b6:ad:4a:70:f5:80:51:f6:7c:f4:f2:bc:e2:2b:f8:da:94:b1: 13:bf:c7:70:55:52:48:d0:3f:e6:08:90:0d:5e:5b:3d:ae:67: c4:12:9f:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1sTSwDdHKXTCi0FfYcFwRpTFkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTExMDUwNjQ2MDlaFw0yNTExMDgxNzA3MDlaMDMxMTAvBgNV BAMTKDQ4MDIzQjlBNjBFM0VDRkY0RkZCN0E3Q0M2OEY4QjREMDlFNzYyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaOchSVShrqPhsdNSk6GFgifm k+bgp7coByrD13LzZ6CHYMeeSRV+KW77kv+33evp5t4kLu+QufrMopGWAocDGxP1 uTFngpD1CKzsFXbPDcNRTsBgeStIA09G1BLoQ/3n7BF20T7s4bBYRGEGMfk/TzLb jv5I0SJHltE+V5iZg+phmk01n28f0Uml/627McNA4QHUql965mmMmSLfRcHDb/cz gIT1yC6A5DeLT99LSe9Gd7pNaLuvliUrM2cGgfeAW0qfysafLtAQ1m3J5rIHMQ8x 2vi5TyGdaZzB2kS4vg2iezIGFT925jYBVgWipoGZ5kurohAy7R5LoSW/FEuLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSAI7mmDj7P9P+3p8xo+LTQnnYqswHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESQm9kLAUbq8EJJJW+/UTB5lHV5TcX3etmt s+TrW+onM7mAoC7FxzVHtlaDhMH0qqkKJkI5ropnt7GIGd3k+5E+MU/Tb/cTGh2t bUcJM8WERxaNsD1vxuoQo3iYsn8BfChhP+CGXGXdBMj1iynFE2w9Htp4285Y5wNW J+7zhPkiRZwy/fqUIh2pmtHN4iqGvKiOKKJRBXoDDSaL9QpfZEd98k5j0xKvB+0a 5/WCMebLfrG8FxxNkT9zUxLMhWNE3Do8/ciFG2UlZ/SfSH8m0FUX0/3GvRXFAbat SnD1gFH2fPTyvOIr+NqUsRO/x3BVUkjQP+YIkA1eWz2uZ8QSn54= -----END CERTIFICATE-----Generated at Wed Nov 5 11:22:28 2025 by rpki-client