$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: OlZl2zbCC/HFE/qFfMoSJJAdqWBvhIt1gVQtDmfflk8= Subject key identifier: 7E:CD:29:5A:53:FC:7D:DC:D6:04:C4:9D:29:66:90:55:8D:4A:E1:F2 Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 5B1C3A6011933326D7F61FBD296F7C4B6AC998B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 0468 Signing time: Fri 06 Jun 2025 06:41:08 +0000 Manifest this update: Fri 06 Jun 2025 06:36:08 +0000 Manifest next update: Mon 09 Jun 2025 17:36:08 +0000 Files and hashes: 1: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: /afJJDhqLHEyFhgVDaHqEV2OiB3/NZ6i6GNwssoIGhk=) 2: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: IiP6zuMY5Dh1AaIBf0ZPvjd/IG7UEkkVdTj9yRYGPlA=) 3: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: pAwAaLum0jYdUTsB6mT2CdQGQv2HQcF0heplULsgo1Y=) 4: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: /BYvra4DlfHnq4UOMzaF51N5Kus+HjkdFOsGHv9u+80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1c:3a:60:11:93:33:26:d7:f6:1f:bd:29:6f:7c:4b:6a:c9:98:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Jun 6 06:36:08 2025 GMT Not After : Jun 9 17:36:08 2025 GMT Subject: CN=7ECD295A53FC7DDCD604C49D296690558D4AE1F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:70:11:2d:3d:9d:fb:fa:24:e1:5a:c5:30:26: a7:74:c0:5c:fe:35:b1:9d:ad:1f:ee:eb:c9:1a:c8: 3a:d4:12:80:60:1c:ab:da:4b:05:6a:f3:ef:8e:7f: 88:1c:51:97:bb:db:70:e8:fa:3a:cd:d7:e1:8c:aa: 43:06:eb:eb:d9:13:d6:46:58:09:ce:73:73:66:a4: 27:57:70:af:87:d4:ea:55:ef:f1:4d:15:86:1b:41: 37:a4:3e:b8:d6:9e:63:0b:39:c0:49:86:3c:79:79: 58:cf:35:41:0f:ca:1c:fe:b1:1b:04:87:ac:c4:53: e1:ed:46:e4:a5:ee:e5:91:bb:d0:0b:22:a0:00:94: d5:18:52:39:25:bc:f6:9a:b7:5c:42:32:63:e1:e7: ba:6a:8e:4b:0a:15:e8:5c:39:92:1c:66:71:bc:dc: 78:0b:86:e5:6d:ba:0d:c1:fc:63:6b:a7:cb:de:84: 27:8b:e8:ed:1b:4c:c8:34:46:75:e5:fa:ec:be:61: 8c:20:e8:61:53:ae:d0:d1:7c:df:79:71:f3:4d:62: 66:99:63:81:2c:21:4b:ff:a4:85:ac:9b:54:7e:6b: 46:c9:32:08:0e:81:eb:d7:0f:97:57:26:9f:0c:da: cf:69:95:4f:33:d4:a6:cb:d7:2f:c4:93:cb:b4:46: 89:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CD:29:5A:53:FC:7D:DC:D6:04:C4:9D:29:66:90:55:8D:4A:E1:F2 X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ed:b2:8d:f0:f2:2e:ca:7a:e7:a5:6c:bb:43:4a:94:eb:70: 8f:3f:94:4c:f0:29:0e:d5:01:04:ca:22:99:fe:b6:27:28:31: 92:c7:09:ab:24:55:5a:1b:0e:3a:3a:cd:ce:e2:e8:2d:25:25: 88:96:3e:b5:8a:e6:01:ce:6f:79:fd:2a:8f:b9:0c:88:9c:b6: 80:85:fd:fb:89:ed:a5:c4:50:d0:36:22:d0:57:02:79:6a:6f: 89:ef:81:1d:25:79:d3:59:95:9f:29:50:d5:b6:67:92:9f:11: 0b:4e:bd:ae:ae:7c:12:59:30:17:21:3a:98:e6:af:c6:de:e0: d4:d4:4c:d2:15:67:aa:26:be:21:49:44:1d:21:28:f5:de:3c: 6d:9f:1e:26:71:5c:79:fd:91:9d:c5:34:fe:6c:15:01:49:3d: 1d:bb:0f:4e:62:20:a1:fc:79:0c:1b:f4:09:ba:ad:1e:5d:37: bb:9e:61:e6:41:e2:72:c4:54:03:ba:98:c2:2c:7e:b4:ac:8c: 07:c7:d3:fc:19:49:0c:8b:e5:3b:75:99:db:6a:c7:61:40:f8: 90:56:c7:d5:e6:1a:51:22:5c:fa:15:bf:95:81:74:f5:de:bf: 4d:12:28:1c:12:bb:ba:58:23:de:a7:f7:47:2f:99:ee:d5:17: 4f:4b:c5:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxw6YBGTMybX9h+9KW98S2rJmLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTA2MDYwNjM2MDhaFw0yNTA2MDkxNzM2MDhaMDMxMTAvBgNV BAMTKDdFQ0QyOTVBNTNGQzdERENENjA0QzQ5RDI5NjY5MDU1OEQ0QUUxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTcBEtPZ37+iThWsUwJqd0wFz+ NbGdrR/u68kayDrUEoBgHKvaSwVq8++Of4gcUZe723Do+jrN1+GMqkMG6+vZE9ZG WAnOc3NmpCdXcK+H1OpV7/FNFYYbQTekPrjWnmMLOcBJhjx5eVjPNUEPyhz+sRsE h6zEU+HtRuSl7uWRu9ALIqAAlNUYUjklvPaat1xCMmPh57pqjksKFehcOZIcZnG8 3HgLhuVtug3B/GNrp8vehCeL6O0bTMg0RnXl+uy+YYwg6GFTrtDRfN95cfNNYmaZ Y4EsIUv/pIWsm1R+a0bJMggOgevXD5dXJp8M2s9plU8z1KbL1y/Ek8u0Rom5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfs0pWlP8fdzWBMSdKWaQVY1K4fIwHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHtso3w8i7KeuelbLtDSpTrcI8/lEzwKQ7V AQTKIpn+ticoMZLHCaskVVobDjo6zc7i6C0lJYiWPrWK5gHOb3n9Ko+5DIictoCF /fuJ7aXEUNA2ItBXAnlqb4nvgR0ledNZlZ8pUNW2Z5KfEQtOva6ufBJZMBchOpjm r8be4NTUTNIVZ6omviFJRB0hKPXePG2fHiZxXHn9kZ3FNP5sFQFJPR27D05iIKH8 eQwb9Am6rR5dN7ueYeZB4nLEVAO6mMIsfrSsjAfH0/wZSQyL5Tt1mdtqx2FA+JBW x9XmGlEiXPoVv5WBdPXev00SKBwSu7pYI96n90cvme7VF09LxWs= -----END CERTIFICATE-----Generated at Sun Jun 8 12:44:17 2025 by rpki-client