$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: cXX1bNgA+motScx7YuaY6PpNnA55OslyhAOuCsPN8GE= Subject key identifier: 3B:1A:D5:81:8B:5B:DB:31:DD:81:3A:DD:DF:D5:92:D4:CD:F4:AC:1A Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 2B08C9CD86522C184C4621A45E447B3261A5FD7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 0498 Signing time: Fri 19 Sep 2025 00:41:07 +0000 Manifest this update: Fri 19 Sep 2025 00:36:07 +0000 Manifest next update: Mon 22 Sep 2025 12:27:07 +0000 Files and hashes: 1: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: LyQVOVVD0SyWAzKbbigEAOPOxnvDfTq86SNZAm/SmRY=) 2: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: /BYvra4DlfHnq4UOMzaF51N5Kus+HjkdFOsGHv9u+80=) 3: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: ZcMQg/gdky+6hMygW2Erz34HjUU7+XOhFa00HUqtz7I=) 4: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: pAwAaLum0jYdUTsB6mT2CdQGQv2HQcF0heplULsgo1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 11:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:08:c9:cd:86:52:2c:18:4c:46:21:a4:5e:44:7b:32:61:a5:fd:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Sep 19 00:36:07 2025 GMT Not After : Sep 22 12:27:07 2025 GMT Subject: CN=3B1AD5818B5BDB31DD813ADDDFD592D4CDF4AC1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:81:b8:ee:f2:f0:1b:de:69:8f:9f:61:f8: a3:03:21:db:29:c6:85:a2:21:cc:0d:6e:96:cb:7c: 2d:c3:46:22:e3:bc:8a:c4:e5:27:d8:34:fe:2f:4b: bb:7c:29:50:17:f0:4a:97:ae:f5:73:6a:84:1a:35: 56:f6:7b:e3:61:a3:99:38:67:23:8f:e7:44:2c:b8: db:c4:5b:d7:28:2a:4b:f1:3c:ab:56:d3:44:a7:c8: b6:6c:1f:cf:13:12:31:51:d7:b2:78:dd:32:67:9d: 10:d2:02:18:d6:98:60:3d:87:39:ce:e7:f9:f8:e6: f1:31:bd:d0:9f:b6:cd:f6:78:1c:4d:18:4c:23:08: d1:ac:fb:40:5e:e8:f8:64:c4:2e:da:42:a8:c1:a8: f5:ba:22:f8:d2:85:7d:db:6b:6f:1a:29:59:f0:a5: db:b1:8b:e7:f6:3a:fb:d4:64:da:e4:44:3e:86:d3: f0:c8:21:06:8a:a4:c1:23:45:a2:98:10:be:54:98: ab:4c:42:e9:d9:3e:35:e3:5a:50:28:5c:a5:0d:0a: b2:a2:27:d0:47:54:3c:c4:0a:a4:c9:a2:28:c0:76: b1:6a:a9:f8:b8:f8:50:bf:c0:56:23:0f:bd:14:77: 39:b1:fb:5a:f2:5b:36:93:b5:f9:ab:fc:80:99:79: b6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1A:D5:81:8B:5B:DB:31:DD:81:3A:DD:DF:D5:92:D4:CD:F4:AC:1A X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:8e:c0:b6:d3:5f:22:21:57:c7:83:7f:26:04:0d:4e:17:9b: 90:5b:7a:64:a9:71:22:0a:ee:d6:d2:a2:85:fa:2d:fb:bf:c4: 83:2c:de:e6:75:ec:c9:8c:2f:68:a8:ea:c5:36:91:81:9a:7e: 60:59:55:41:a1:ee:ed:6b:da:e5:2f:a9:d7:bc:c3:21:18:e0: 99:84:37:f2:25:dc:20:1e:73:08:e9:52:ee:8e:47:5e:9a:83: 3c:c3:b7:7c:b9:dc:6e:35:3c:33:97:89:63:72:71:69:53:3c: 73:3c:22:48:e8:88:23:60:68:54:97:9a:44:80:eb:31:a6:17: c9:2c:35:52:55:25:1a:5a:52:d8:e1:de:1e:97:68:b6:f4:a3: ee:0f:8d:3b:7e:4b:52:e1:9f:2d:41:e4:91:fb:6d:b0:28:c6: a0:38:55:da:5b:c9:3b:f4:ca:5a:d6:9a:ec:30:d4:8a:bd:ca: 21:3e:d1:15:a9:3b:b0:a7:ed:b9:95:ef:d4:66:2f:d7:86:e7: 1f:79:b9:c1:68:54:a5:34:5e:20:d2:04:55:20:31:65:b9:fb: d6:d5:65:fe:77:78:76:89:66:25:ea:3a:d6:dd:ba:56:7d:25: 22:26:8b:e6:5c:93:c6:25:5e:c8:ee:ad:39:45:c3:ce:93:53: 0e:d3:95:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwjJzYZSLBhMRiGkXkR7MmGl/X0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTA5MTkwMDM2MDdaFw0yNTA5MjIxMjI3MDdaMDMxMTAvBgNV BAMTKDNCMUFENTgxOEI1QkRCMzFERDgxM0FERERGRDU5MkQ0Q0RGNEFDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//oG47vLwG95pj59h+KMDIdsp xoWiIcwNbpbLfC3DRiLjvIrE5SfYNP4vS7t8KVAX8EqXrvVzaoQaNVb2e+Nho5k4 ZyOP50QsuNvEW9coKkvxPKtW00SnyLZsH88TEjFR17J43TJnnRDSAhjWmGA9hznO 5/n45vExvdCfts32eBxNGEwjCNGs+0Be6PhkxC7aQqjBqPW6IvjShX3ba28aKVnw pduxi+f2OvvUZNrkRD6G0/DIIQaKpMEjRaKYEL5UmKtMQunZPjXjWlAoXKUNCrKi J9BHVDzECqTJoijAdrFqqfi4+FC/wFYjD70Udzmx+1ryWzaTtfmr/ICZebaTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOxrVgYtb2zHdgTrd39WS1M30rBowHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaOwLbTXyIhV8eDfyYEDU4Xm5BbemSpcSIK 7tbSooX6Lfu/xIMs3uZ17MmML2io6sU2kYGafmBZVUGh7u1r2uUvqde8wyEY4JmE N/Il3CAecwjpUu6OR16agzzDt3y53G41PDOXiWNycWlTPHM8IkjoiCNgaFSXmkSA 6zGmF8ksNVJVJRpaUtjh3h6XaLb0o+4PjTt+S1Lhny1B5JH7bbAoxqA4VdpbyTv0 ylrWmuww1Iq9yiE+0RWpO7Cn7bmV79RmL9eG5x95ucFoVKU0XiDSBFUgMWW5+9bV Zf53eHaJZiXqOtbdulZ9JSImi+Zck8YlXsjurTlFw86TUw7TlW8= -----END CERTIFICATE-----Generated at Fri Sep 19 13:04:29 2025 by rpki-client