$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: LfQdhqB4waJELFTh/wlH261b+pFW9hwbzO/WoH9E58g= Subject key identifier: EA:1B:17:88:B5:9E:60:8A:8F:5D:20:5D:F4:F5:78:4B:7F:71:E2:01 Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 28290B7027B99E38FCE3D85417F1A9A68BCB1A56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: 98 Signing time: Mon 14 Apr 2025 22:41:21 +0000 Manifest this update: Mon 14 Apr 2025 22:36:21 +0000 Manifest next update: Fri 18 Apr 2025 05:51:21 +0000 Files and hashes: 1: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: mYajgYdfqfGIEkevHv+d3gbzHhbdWvFDW2nIXkKiX0E=) 2: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: vDiYERTaHulxRdSaEHU6xACFfhWdDPssxYUe4ak+6PQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 22:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:29:0b:70:27:b9:9e:38:fc:e3:d8:54:17:f1:a9:a6:8b:cb:1a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Apr 14 22:36:21 2025 GMT Not After : Apr 18 05:51:21 2025 GMT Subject: CN=EA1B1788B59E608A8F5D205DF4F5784B7F71E201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:7e:34:cd:ff:da:16:bb:07:ad:bd:4a:ab: 35:7b:a9:b7:ac:08:f2:58:2b:9f:3e:f8:c3:f8:d5: db:c4:57:d0:3d:96:66:9b:59:7b:61:66:67:09:32: bf:64:cf:9e:62:61:7f:8a:d7:96:8d:33:75:26:98: 9c:b2:cc:ea:7a:01:32:e7:9b:b0:03:3f:1a:0d:07: 2e:ad:b0:73:10:a3:61:59:9b:72:1b:e2:55:22:12: 0c:29:1d:43:6e:51:0c:29:1d:16:26:dd:b3:bf:e5: 0a:57:13:9a:05:e2:4f:a1:2d:2c:9d:40:a6:26:9d: f3:3b:cc:b3:49:09:56:27:71:cd:fc:39:e9:d3:cf: 5a:dc:55:37:eb:ce:27:62:4f:a0:0c:67:75:9e:71: 80:f9:a3:bc:84:76:18:e8:a2:e8:ec:18:f9:18:98: eb:d6:bf:fd:0b:7c:e2:06:f1:d5:54:91:13:cf:13: d0:b1:ca:d2:cc:53:f7:9f:00:07:c0:52:64:75:18: 4e:8c:92:6e:78:9f:0f:2b:e5:8f:85:57:1f:37:c6: 1d:db:0c:be:87:74:e8:dc:d0:dc:ea:2c:40:1d:9c: 30:ff:2a:14:27:91:86:e4:85:8a:7c:96:15:57:16: 1d:f2:94:9f:d7:da:ba:e7:f7:4a:63:fa:5a:b0:54: 83:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1B:17:88:B5:9E:60:8A:8F:5D:20:5D:F4:F5:78:4B:7F:71:E2:01 X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cf:fa:f2:a4:9d:58:a3:25:f7:cf:ec:74:40:8d:53:74:84: fb:bb:1e:fc:18:39:aa:92:91:98:e8:b6:cf:4c:52:03:77:ff: da:0b:48:57:fc:06:58:1a:0c:78:8b:c1:f9:f8:77:3d:4b:9b: 5c:af:26:77:55:de:f5:a8:82:00:3d:f0:c7:46:eb:33:2e:81: 83:c6:e1:4d:37:43:aa:4e:55:20:61:bc:10:35:c1:67:7f:a5: 0d:5a:ac:43:ed:49:0c:d2:c2:36:92:01:d5:a6:9f:97:ae:5a: e3:e2:95:64:02:cd:9f:c7:52:7d:b3:95:0f:b3:c5:e4:36:68: a2:a7:f8:66:27:3e:99:ee:52:35:15:1c:51:6d:99:cc:28:57: 0d:b8:19:81:ab:08:03:ca:29:e0:7d:c3:ce:24:a4:61:8b:f0: 69:d4:44:95:66:9e:9d:ee:8c:b3:27:e4:1d:8e:15:13:1f:0b: a9:b5:56:64:e1:2a:48:16:96:83:8f:1d:88:e7:1b:f8:1c:c6: 06:a6:3f:ab:dc:d5:b3:e4:6a:9f:c9:03:25:58:37:50:f7:06: 3d:df:51:f7:70:e6:41:65:bf:5c:bd:7f:0e:01:8c:4e:a5:f9: 9e:5b:a0:1c:55:e9:7a:a3:05:10:5a:d9:67:57:66:7e:00:86: 2b:45:cb:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCkLcCe5njj849hUF/GppovLGlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNTA0MTQyMjM2MjFaFw0yNTA0MTgwNTUxMjFaMDMxMTAvBgNV BAMTKEVBMUIxNzg4QjU5RTYwOEE4RjVEMjA1REY0RjU3ODRCN0Y3MUUyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpX340zf/aFrsHrb1KqzV7qbes CPJYK58++MP41dvEV9A9lmabWXthZmcJMr9kz55iYX+K15aNM3UmmJyyzOp6ATLn m7ADPxoNBy6tsHMQo2FZm3Ib4lUiEgwpHUNuUQwpHRYm3bO/5QpXE5oF4k+hLSyd QKYmnfM7zLNJCVYncc38OenTz1rcVTfrzidiT6AMZ3WecYD5o7yEdhjooujsGPkY mOvWv/0LfOIG8dVUkRPPE9CxytLMU/efAAfAUmR1GE6Mkm54nw8r5Y+FVx83xh3b DL6HdOjc0NzqLEAdnDD/KhQnkYbkhYp8lhVXFh3ylJ/X2rrn90pj+lqwVIO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6hsXiLWeYIqPXSBd9PV4S39x4gEwHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/P+vKknVijJffP7HRAjVN0hPu7HvwYOaqS kZjots9MUgN3/9oLSFf8BlgaDHiLwfn4dz1Lm1yvJndV3vWoggA98MdG6zMugYPG 4U03Q6pOVSBhvBA1wWd/pQ1arEPtSQzSwjaSAdWmn5euWuPilWQCzZ/HUn2zlQ+z xeQ2aKKn+GYnPpnuUjUVHFFtmcwoVw24GYGrCAPKKeB9w84kpGGL8GnURJVmnp3u jLMn5B2OFRMfC6m1VmThKkgWloOPHYjnG/gcxgamP6vc1bPkap/JAyVYN1D3Bj3f Ufdw5kFlv1y9fw4BjE6l+Z5boBxV6XqjBRBa2WdXZn4AhitFy9c= -----END CERTIFICATE-----Generated at Tue Apr 15 07:53:54 2025 by rpki-client