$ rpki-client -vvf repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft File: EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft (raw, json) Hash identifier: pU59OVVr5cx5EC3hIQ87LoD8m0lIcaF5W+DMM8cnWmg= Subject key identifier: F7:E8:7F:FD:0C:0C:80:17:19:08:14:DD:42:D8:42:49:F8:EC:55:86 Authority key identifier: EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF Certificate issuer: /CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF Certificate serial: 0FE2F1A359A8B012C12BB286013C3CD88EB4ED21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft Manifest number: 012B Signing time: Sat 06 Sep 2025 13:01:59 +0000 Manifest this update: Sat 06 Sep 2025 12:56:59 +0000 Manifest next update: Tue 09 Sep 2025 23:33:59 +0000 Files and hashes: 1: 3130332e3136362e3132322e302f32332d3233203d3e20313431393435.roa (hash: Vy7RmXv6YbxOhDGsW/Z69ao7mBnWT2K/NkTuN4Glb7A=) 2: EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl (hash: 4JsFCmaMT/N6oYGqExNpeMCsD1nqMG+Y2DYjh5iII3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e2:f1:a3:59:a8:b0:12:c1:2b:b2:86:01:3c:3c:d8:8e:b4:ed:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFBA99D11F5C07B48EC639EB1119AB525D8050AF Validity Not Before: Sep 6 12:56:59 2025 GMT Not After : Sep 9 23:33:59 2025 GMT Subject: CN=F7E87FFD0C0C8017190814DD42D84249F8EC5586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c8:01:df:3d:57:c1:e9:21:66:c3:64:c7:42: a2:2e:e5:72:d4:b0:c7:13:4c:d5:8c:b8:2a:78:5b: 76:85:15:d9:4f:0f:09:96:3a:6f:f4:4a:2d:c3:dd: a8:46:06:48:9a:9c:b9:8e:1d:fe:c8:d1:08:29:8c: bb:f6:6d:65:42:28:9d:57:51:4c:f2:9d:9d:b8:60: cc:db:71:d9:55:12:30:35:ca:f0:d6:31:bb:c6:f3: b7:e4:ca:1c:98:d1:66:6c:a1:8f:a4:68:be:c3:82: 03:c9:31:3e:ad:1c:96:18:d5:59:bb:e8:56:a6:26: 34:be:1f:fc:b1:3a:39:1c:29:1d:37:db:d1:17:a5: 7b:6a:b4:97:22:e1:04:00:b5:2d:0c:aa:25:14:a1: 39:82:76:cc:1f:03:67:f9:98:b2:0d:d5:7f:62:97: 48:42:68:88:c8:92:60:50:83:45:b7:de:fc:7a:aa: 38:0c:a8:8c:43:42:8d:d8:ab:86:41:29:77:b9:6c: 56:e4:e6:9d:29:21:28:c7:70:6c:74:5a:5c:a9:64: c2:0e:ca:83:d7:33:64:fe:d1:bb:ef:7f:2b:66:d8: 8f:e3:73:6c:e7:7b:05:d5:8f:67:6e:0a:c6:09:ad: 07:ca:8a:19:0c:58:5c:af:f4:83:02:4a:e5:07:b9: b5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E8:7F:FD:0C:0C:80:17:19:08:14:DD:42:D8:42:49:F8:EC:55:86 X509v3 Authority Key Identifier: keyid:EF:BA:99:D1:1F:5C:07:B4:8E:C6:39:EB:11:19:AB:52:5D:80:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/543cc6a8-e7aa-4f37-bd08-f2eb57e88736/0/EFBA99D11F5C07B48EC639EB1119AB525D8050AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f1:7f:da:9c:83:33:f4:cf:87:89:d5:45:48:a4:9e:16:1b: a6:40:f4:5f:b0:ea:9d:e4:e0:a1:24:33:b7:0a:8a:e0:fc:91: 36:d3:d3:69:d7:bd:9e:a5:39:52:c0:01:db:92:12:67:7f:87: ed:59:ae:5d:8f:b0:d7:f4:8a:39:83:2e:0a:76:60:c7:ff:de: 2e:04:3e:cb:e2:79:10:7c:1a:b1:39:07:83:eb:a7:ed:b5:07: 92:1f:aa:f8:5d:bd:85:a5:ac:19:f0:98:e8:4f:dc:c6:da:90: 94:d9:32:d2:76:01:e6:fe:46:bf:6e:05:b3:de:3c:62:76:2e: 23:61:6a:92:e0:4c:f6:c9:8d:32:ba:87:1e:6e:5d:15:3c:6d: 00:f8:b4:be:d1:af:25:45:eb:9c:43:4f:2b:ca:8a:17:cd:f9: 91:9f:d9:83:80:9c:5b:71:e5:46:36:db:e6:8f:bc:9c:ce:fc: 39:ba:07:f1:01:16:e6:ac:41:a0:4f:f6:87:02:48:ef:6c:dc: ee:99:ca:f4:a6:dd:d0:b7:dc:97:31:1c:f8:c6:ca:6d:d7:22: 24:15:85:e7:4f:f0:40:ff:f2:b6:b9:fc:32:f7:f8:69:76:8b: 76:55:55:3d:1b:5c:7f:93:4d:cd:57:1c:fe:a7:bb:a4:89:7e: b1:f4:b4:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+Lxo1mosBLBK7KGATw82I607SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFCNTI1 RDgwNTBBRjAeFw0yNTA5MDYxMjU2NTlaFw0yNTA5MDkyMzMzNTlaMDMxMTAvBgNV BAMTKEY3RTg3RkZEMEMwQzgwMTcxOTA4MTRERDQyRDg0MjQ5RjhFQzU1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcyAHfPVfB6SFmw2THQqIu5XLU sMcTTNWMuCp4W3aFFdlPDwmWOm/0Si3D3ahGBkianLmOHf7I0QgpjLv2bWVCKJ1X UUzynZ24YMzbcdlVEjA1yvDWMbvG87fkyhyY0WZsoY+kaL7DggPJMT6tHJYY1Vm7 6FamJjS+H/yxOjkcKR0329EXpXtqtJci4QQAtS0MqiUUoTmCdswfA2f5mLIN1X9i l0hCaIjIkmBQg0W33vx6qjgMqIxDQo3Yq4ZBKXe5bFbk5p0pISjHcGx0WlypZMIO yoPXM2T+0bvvfytm2I/jc2znewXVj2duCsYJrQfKihkMWFyv9IMCSuUHubVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9+h//QwMgBcZCBTdQthCSfjsVYYwHwYDVR0j BBgwFoAU77qZ0R9cB7SOxjnrERmrUl2AUK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDNjYzZhOC1lN2FhLTRmMzctYmQwOC1mMmViNTdlODg3MzYvMC9FRkJBOTlEMTFG NUMwN0I0OEVDNjM5RUIxMTE5QUI1MjVEODA1MEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFCNTI1RDgw NTBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQzY2M2YTgtZTdhYS00ZjM3LWJk MDgtZjJlYjU3ZTg4NzM2LzAvRUZCQTk5RDExRjVDMDdCNDhFQzYzOUVCMTExOUFC NTI1RDgwNTBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXxf9qcgzP0z4eJ1UVIpJ4WG6ZA9F+w6p3k 4KEkM7cKiuD8kTbT02nXvZ6lOVLAAduSEmd/h+1Zrl2PsNf0ijmDLgp2YMf/3i4E PsvieRB8GrE5B4Prp+21B5IfqvhdvYWlrBnwmOhP3MbakJTZMtJ2Aeb+Rr9uBbPe PGJ2LiNhapLgTPbJjTK6hx5uXRU8bQD4tL7RryVF65xDTyvKihfN+ZGf2YOAnFtx 5UY22+aPvJzO/Dm6B/EBFuasQaBP9ocCSO9s3O6ZyvSm3dC33JcxHPjGym3XIiQV hedP8ED/8ra5/DL3+Gl2i3ZVVT0bXH+TTc1XHP6nu6SJfrH0tNQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:46 2025 by rpki-client