$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: 5U+G048wR9BCw0NWrxhGN3MuQasIeRGg2nDjgfmgC1E= Subject key identifier: 74:39:89:20:01:4B:52:F2:BB:01:A0:54:E5:16:0C:AD:79:70:C9:4D Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 35F359EA2D47BB510E5A7BE2CFE656569038768C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: C4 Signing time: Mon 21 Jul 2025 02:31:23 +0000 Manifest this update: Mon 21 Jul 2025 02:26:23 +0000 Manifest next update: Thu 24 Jul 2025 06:04:23 +0000 Files and hashes: 1: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) 2: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: 6o06lZgIuc2bHQW7arnJVHJk3dx1Vcddqg53obA0XTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f3:59:ea:2d:47:bb:51:0e:5a:7b:e2:cf:e6:56:56:90:38:76:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Jul 21 02:26:23 2025 GMT Not After : Jul 24 06:04:23 2025 GMT Subject: CN=74398920014B52F2BB01A054E5160CAD7970C94D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b4:e2:a2:69:01:ea:fd:67:8a:74:34:78:7b: c9:84:24:bd:39:80:6f:3a:bf:42:6f:b2:9a:df:36: 86:19:e7:45:9b:a8:3d:a9:17:ec:09:7e:ec:cf:97: 57:27:93:48:0d:24:e8:3f:8f:84:39:e2:87:78:a7: c3:ed:8c:25:20:b3:46:9d:9d:5d:54:09:67:b3:fa: ac:79:52:a1:f7:b7:de:35:39:9e:34:1b:bd:63:72: cf:58:5e:38:e2:60:f8:51:48:ac:55:31:2b:41:6f: 71:fd:de:39:f9:67:2f:f9:9e:06:1d:54:d9:19:c3: b2:cb:7b:49:7b:63:5b:45:be:2b:d6:42:88:be:0a: b8:8e:6e:f2:d6:af:84:92:cf:e8:e8:d3:7d:b4:b5: a7:41:7a:44:0c:09:18:91:ef:f9:62:65:a1:f9:2c: 3c:52:82:21:a9:ef:a4:c4:ee:79:13:ea:7d:72:ac: 82:1c:62:84:40:50:84:69:61:5e:6f:88:f7:bb:1b: a7:69:3b:fa:05:00:57:25:fd:fc:92:64:f8:38:fc: e9:d1:5c:a7:f8:79:a6:2e:ce:64:35:e7:c3:db:24: 20:fa:87:25:d9:bf:82:3d:7d:26:4e:b0:84:38:bd: 87:39:eb:94:4f:78:54:26:56:cd:28:45:e3:ce:bb: 62:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:39:89:20:01:4B:52:F2:BB:01:A0:54:E5:16:0C:AD:79:70:C9:4D X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:cd:bf:22:64:ee:e5:f8:3e:ca:bb:c4:b7:49:c3:05:b8:10: 63:ce:b5:97:4a:4a:66:02:98:04:f2:08:af:69:2f:7e:1c:2e: 06:ff:23:56:7a:0b:8e:58:dc:57:b6:aa:5f:96:7a:d6:b3:5f: 6d:b9:a8:11:34:a6:bf:40:be:7a:a3:94:3f:6b:e6:62:e9:78: f1:a5:d7:f2:6f:60:07:ab:56:6e:5b:65:64:5d:ac:49:9c:6f: 38:47:f5:bf:e5:f7:03:9f:69:1d:dd:a1:95:2d:5a:fb:f4:39: ef:5c:ef:3d:2d:7b:3a:33:d0:46:f4:f2:28:74:9d:56:91:75: 30:06:2b:12:ba:cd:85:47:5a:cb:56:33:d5:7e:92:c7:36:2e: 06:a6:14:27:65:a1:3d:1d:1f:4e:c3:58:14:be:9f:7a:b6:e1: 56:f4:2c:42:b1:b2:3d:20:d5:70:14:d2:b6:50:1e:bd:d3:3b: ba:2c:dd:d1:af:f4:81:e4:61:b7:02:86:45:36:62:8b:69:58: 59:af:f3:78:6f:8a:30:92:47:c7:ab:55:d5:07:b6:59:3f:7f: f1:aa:50:e9:0d:f6:25:a1:3d:dc:55:61:ed:1b:9e:37:22:88: 2c:9d:56:8d:9c:67:48:49:f8:13:45:c7:5a:56:4b:17:36:3c: 9d:21:9e:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfNZ6i1Hu1EOWnviz+ZWVpA4dowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNTA3MjEwMjI2MjNaFw0yNTA3MjQwNjA0MjNaMDMxMTAvBgNV BAMTKDc0Mzk4OTIwMDE0QjUyRjJCQjAxQTA1NEU1MTYwQ0FENzk3MEM5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltOKiaQHq/WeKdDR4e8mEJL05 gG86v0JvsprfNoYZ50WbqD2pF+wJfuzPl1cnk0gNJOg/j4Q54od4p8PtjCUgs0ad nV1UCWez+qx5UqH3t941OZ40G71jcs9YXjjiYPhRSKxVMStBb3H93jn5Zy/5ngYd VNkZw7LLe0l7Y1tFvivWQoi+CriObvLWr4SSz+jo0320tadBekQMCRiR7/liZaH5 LDxSgiGp76TE7nkT6n1yrIIcYoRAUIRpYV5viPe7G6dpO/oFAFcl/fySZPg4/OnR XKf4eaYuzmQ158PbJCD6hyXZv4I9fSZOsIQ4vYc565RPeFQmVs0oRePOu2K1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdDmJIAFLUvK7AaBU5RYMrXlwyU0wHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7NvyJk7uX4Psq7xLdJwwW4EGPOtZdKSmYC mATyCK9pL34cLgb/I1Z6C45Y3Fe2ql+WetazX225qBE0pr9AvnqjlD9r5mLpePGl 1/JvYAerVm5bZWRdrEmcbzhH9b/l9wOfaR3doZUtWvv0Oe9c7z0tezoz0Eb08ih0 nVaRdTAGKxK6zYVHWstWM9V+ksc2LgamFCdloT0dH07DWBS+n3q24Vb0LEKxsj0g 1XAU0rZQHr3TO7os3dGv9IHkYbcChkU2YotpWFmv83hvijCSR8erVdUHtlk/f/Gq UOkN9iWhPdxVYe0bnjciiCydVo2cZ0hJ+BNFx1pWSxc2PJ0hnsU= -----END CERTIFICATE-----Generated at Mon Jul 21 10:53:16 2025 by rpki-client