$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: uXcmSND6I0HsgvyhVxJ7Wxpx7886y1kpLEoIuJoZZIU= Subject key identifier: D0:84:79:8F:71:BA:CE:CC:89:3E:04:16:72:B5:2D:8E:50:57:EB:E6 Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 525BDF75A1E3F574BAD413BD5A9167CD55B29FA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: DA Signing time: Sun 07 Sep 2025 23:21:23 +0000 Manifest this update: Sun 07 Sep 2025 23:16:23 +0000 Manifest next update: Thu 11 Sep 2025 09:09:23 +0000 Files and hashes: 1: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) 2: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: RhEwoZuzhMzY8lUQz26KGowmt/O6WeqRpqa24P/zB9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 07:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5b:df:75:a1:e3:f5:74:ba:d4:13:bd:5a:91:67:cd:55:b2:9f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Sep 7 23:16:23 2025 GMT Not After : Sep 11 09:09:23 2025 GMT Subject: CN=D084798F71BACECC893E041672B52D8E5057EBE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:5a:5c:99:3d:87:24:51:7b:03:1d:c0:34: 32:b6:13:b6:6a:4a:71:dc:59:64:48:eb:7c:c2:2a: d5:eb:7c:22:7f:df:9a:fe:92:bc:0a:df:68:6f:e9: 29:99:6f:97:98:8b:e9:71:50:0e:6a:bc:6a:43:3f: 6d:13:ee:bf:9b:a7:74:2b:9c:62:11:23:27:f2:b2: 71:2a:03:da:d9:0d:b5:2d:2b:35:ec:ba:e0:c9:88: 1f:ae:b0:0f:b8:0c:e3:bf:f3:12:3f:68:d8:6d:54: 24:1e:da:c6:44:e7:da:c1:04:e6:18:dc:c2:e3:7e: ae:23:19:d8:ad:c6:67:84:52:ff:2e:cb:67:a6:0f: 36:40:bb:ba:2b:11:9f:ff:e8:56:c8:a9:bf:e9:87: 96:26:5d:ae:d1:9f:7e:5d:cb:34:b6:18:5d:60:6f: 2b:a2:d8:57:fc:2d:85:12:44:28:84:e3:4d:ab:f3: 8f:55:11:cc:79:6a:1e:51:f5:71:c8:4f:b2:5a:06: 17:51:db:00:4e:78:2e:08:93:5d:c0:3a:0d:e6:41: cb:91:7f:f2:73:dc:32:05:c8:86:83:2f:fc:9f:11: b3:40:cd:44:7e:73:0a:80:d9:b6:ca:a9:27:2a:7b: 8d:c6:b8:98:08:f5:6b:40:e7:8b:6b:de:e8:28:0a: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:84:79:8F:71:BA:CE:CC:89:3E:04:16:72:B5:2D:8E:50:57:EB:E6 X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:68:f6:47:98:2b:39:0c:dd:10:53:8d:d3:e7:f3:78:83:8e: e8:5f:dd:8c:88:ca:55:8f:8a:11:c8:d9:78:66:41:de:69:6f: 9c:53:06:86:d3:6b:65:78:61:2f:13:9f:e2:f6:3b:35:22:6d: 78:31:81:0c:29:14:66:18:a1:48:9e:e5:a6:7a:1f:9a:98:51: c3:00:9f:25:c4:bc:25:70:6e:31:49:66:b5:ef:7b:74:a2:5b: f7:c0:33:29:b8:a3:92:44:68:d0:33:c5:da:01:0f:2a:36:3d: b8:1d:30:d3:6f:1e:90:c2:69:26:30:d6:18:a4:d9:bd:a0:6f: 89:ad:13:1a:07:7e:e8:dd:2b:fb:12:7b:16:d2:77:d8:96:33: 78:16:79:7e:ed:72:5d:6b:c8:c2:fc:fc:07:61:87:28:cf:27: 7c:e2:f6:59:d5:9c:8d:ea:b5:43:61:ac:f8:69:22:00:05:6d: fe:fd:ac:9c:28:c0:3a:09:de:42:16:f4:6c:37:4c:24:83:41: 18:0e:68:d3:07:b8:af:79:af:99:e5:85:13:af:c8:e1:ff:18: d3:67:82:0d:84:73:45:d9:25:97:e7:8b:11:4a:ca:7d:f9:0c: fc:1b:13:c4:21:67:32:2e:aa:f2:d8:b2:1b:53:dd:1e:aa:1b: 2a:32:1b:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUlvfdaHj9XS61BO9WpFnzVWyn6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNTA5MDcyMzE2MjNaFw0yNTA5MTEwOTA5MjNaMDMxMTAvBgNV BAMTKEQwODQ3OThGNzFCQUNFQ0M4OTNFMDQxNjcyQjUyRDhFNTA1N0VCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKu1pcmT2HJFF7Ax3ANDK2E7Zq SnHcWWRI63zCKtXrfCJ/35r+krwK32hv6SmZb5eYi+lxUA5qvGpDP20T7r+bp3Qr nGIRIyfysnEqA9rZDbUtKzXsuuDJiB+usA+4DOO/8xI/aNhtVCQe2sZE59rBBOYY 3MLjfq4jGditxmeEUv8uy2emDzZAu7orEZ//6FbIqb/ph5YmXa7Rn35dyzS2GF1g byui2Ff8LYUSRCiE402r849VEcx5ah5R9XHIT7JaBhdR2wBOeC4Ik13AOg3mQcuR f/Jz3DIFyIaDL/yfEbNAzUR+cwqA2bbKqScqe43GuJgI9WtA54tr3ugoCnw9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0IR5j3G6zsyJPgQWcrUtjlBX6+YwHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVo9keYKzkM3RBTjdPn83iDjuhf3YyIylWP ihHI2XhmQd5pb5xTBobTa2V4YS8Tn+L2OzUibXgxgQwpFGYYoUie5aZ6H5qYUcMA nyXEvCVwbjFJZrXve3SiW/fAMym4o5JEaNAzxdoBDyo2PbgdMNNvHpDCaSYw1hik 2b2gb4mtExoHfujdK/sSexbSd9iWM3gWeX7tcl1ryML8/AdhhyjPJ3zi9lnVnI3q tUNhrPhpIgAFbf79rJwowDoJ3kIW9Gw3TCSDQRgOaNMHuK95r5nlhROvyOH/GNNn gg2Ec0XZJZfnixFKyn35DPwbE8QhZzIuqvLYshtT3R6qGyoyGx0= -----END CERTIFICATE-----Generated at Mon Sep 8 05:08:55 2025 by rpki-client