$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: qU+rXC+87GmaTxrfMZQTQ8J3IfatlqMUH1257MlFZZc= Subject key identifier: 8F:2C:C4:97:16:4E:24:8B:14:6F:12:46:CE:EB:C5:C5:E9:1E:5A:0D Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 0B38E7C3643D4E1D8583327AA48153CD3F1ADA86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: B0 Signing time: Thu 05 Jun 2025 12:41:23 +0000 Manifest this update: Thu 05 Jun 2025 12:36:23 +0000 Manifest next update: Sun 08 Jun 2025 18:04:23 +0000 Files and hashes: 1: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: ZXqzXFqk8HIn1VSJH5nBDWIePhlDBU7fTtiqRdoMkZw=) 2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 18:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:38:e7:c3:64:3d:4e:1d:85:83:32:7a:a4:81:53:cd:3f:1a:da:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Jun 5 12:36:23 2025 GMT Not After : Jun 8 18:04:23 2025 GMT Subject: CN=8F2CC497164E248B146F1246CEEBC5C5E91E5A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:c1:37:a4:e3:71:e8:9a:69:6b:31:b9:d5: 94:1f:55:d9:74:36:97:59:28:8f:00:ed:66:da:96: 69:31:90:43:bf:6c:aa:ff:61:ed:3d:87:0b:d1:fc: eb:b7:17:2b:d5:a6:f8:94:c9:20:55:7d:2b:6b:62: 76:77:f6:50:84:83:03:67:e5:73:1b:23:20:87:7b: 08:6a:fd:c3:bd:0a:b8:3d:4b:22:ac:23:4b:01:90: f0:bf:aa:ea:95:51:5d:d5:64:fb:d5:62:a9:7e:7d: 67:36:53:7d:ba:83:48:df:32:50:35:07:f0:42:77: 25:c9:c6:a5:6d:ff:88:d3:98:8e:32:98:54:ab:19: 9f:e0:0a:6d:8f:c1:9c:03:44:ca:b3:4e:88:dc:45: c6:87:bc:ea:11:3e:cc:54:31:0b:f7:29:1d:8b:72: 46:f6:de:d8:19:41:c5:4e:c3:22:b9:7f:1c:c7:9f: 24:3c:35:41:f1:8b:4c:03:b8:74:92:3c:18:18:7d: f5:af:b5:b1:dd:5e:37:5c:99:4c:ac:44:27:5e:af: 31:17:bc:e1:99:17:a2:89:ba:65:7f:6b:9a:1a:26: e7:e3:17:0c:f3:01:4d:d2:2f:41:cd:35:5a:c7:f2: b8:29:b6:b4:7d:09:44:e6:ab:d8:a3:70:96:79:5e: 7d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2C:C4:97:16:4E:24:8B:14:6F:12:46:CE:EB:C5:C5:E9:1E:5A:0D X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2e:42:5e:74:cd:69:f0:fe:08:29:cc:7b:c9:2f:41:73:d9: 49:44:c9:bb:92:92:94:7c:b8:d3:dd:89:05:b4:4f:bb:f1:7f: ab:73:b8:3e:89:97:59:79:0f:ce:2c:51:12:29:1d:ea:ee:35: bd:f9:b4:02:d1:c9:81:21:86:d2:59:22:54:02:48:d6:d0:36: 4e:49:bf:f7:96:50:28:fe:70:e2:5e:1d:59:83:7a:21:39:c9: 56:1e:01:8e:c3:42:e0:31:21:fa:9e:73:b9:6f:fc:c9:37:ed: 4c:fa:81:48:cc:67:96:9a:40:6b:66:59:b8:31:83:55:f9:31: 9f:8e:67:e8:23:02:7b:92:84:41:31:3a:48:79:c6:53:7a:68: b2:8c:40:35:d0:b8:2f:27:8c:40:0f:7c:ca:53:f4:57:c0:c1: 35:2d:28:61:2a:c3:d9:99:1c:23:96:32:63:42:53:80:9a:82: f9:c4:ef:f2:f1:c7:6c:93:c1:8a:cc:b3:63:a3:c8:78:a1:ad: 93:9f:45:f0:5e:1b:ae:54:df:fc:0a:97:97:3f:29:c3:31:db: 61:7a:16:4d:58:08:a6:97:6e:1b:8c:b2:58:d6:cb:17:f7:46: f9:37:05:ec:cf:2e:c9:6c:54:71:29:82:ef:cb:cd:07:27:28: a3:eb:3c:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCzjnw2Q9Th2FgzJ6pIFTzT8a2oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNTA2MDUxMjM2MjNaFw0yNTA2MDgxODA0MjNaMDMxMTAvBgNV BAMTKDhGMkNDNDk3MTY0RTI0OEIxNDZGMTI0NkNFRUJDNUM1RTkxRTVBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CsE3pONx6JppazG51ZQfVdl0 NpdZKI8A7WbalmkxkEO/bKr/Ye09hwvR/Ou3FyvVpviUySBVfStrYnZ39lCEgwNn 5XMbIyCHewhq/cO9Crg9SyKsI0sBkPC/quqVUV3VZPvVYql+fWc2U326g0jfMlA1 B/BCdyXJxqVt/4jTmI4ymFSrGZ/gCm2PwZwDRMqzTojcRcaHvOoRPsxUMQv3KR2L ckb23tgZQcVOwyK5fxzHnyQ8NUHxi0wDuHSSPBgYffWvtbHdXjdcmUysRCderzEX vOGZF6KJumV/a5oaJufjFwzzAU3SL0HNNVrH8rgptrR9CUTmq9ijcJZ5Xn37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjyzElxZOJIsUbxJGzuvFxekeWg0wHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkuQl50zWnw/ggpzHvJL0Fz2UlEybuSkpR8 uNPdiQW0T7vxf6tzuD6Jl1l5D84sURIpHeruNb35tALRyYEhhtJZIlQCSNbQNk5J v/eWUCj+cOJeHVmDeiE5yVYeAY7DQuAxIfqec7lv/Mk37Uz6gUjMZ5aaQGtmWbgx g1X5MZ+OZ+gjAnuShEExOkh5xlN6aLKMQDXQuC8njEAPfMpT9FfAwTUtKGEqw9mZ HCOWMmNCU4CagvnE7/Lxx2yTwYrMs2OjyHihrZOfRfBeG65U3/wKl5c/KcMx22F6 Fk1YCKaXbhuMsljWyxf3Rvk3BezPLslsVHEpgu/LzQcnKKPrPLE= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:33 2025 by rpki-client