$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft File: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json) Hash identifier: MIYnS8M2+WP1lvdMdNzxHLm3g3FmLKz/1EglrUWcYRs= Subject key identifier: 08:84:A1:7C:4A:74:C1:17:38:8A:AA:3C:CE:05:2F:07:BF:C6:AD:3A Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 Certificate issuer: /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Certificate serial: 3B163D37A2C75D4D8388FF4FC7AC86B819FD5610 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft Manifest number: 0179 Signing time: Sat 06 Sep 2025 17:41:10 +0000 Manifest this update: Sat 06 Sep 2025 17:36:10 +0000 Manifest next update: Wed 10 Sep 2025 05:15:10 +0000 Files and hashes: 1: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: tiskF97htgFGOxcUjLLoNbBwjgTxxSKvgdsrNkZUkUk=) 2: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: mcWtqqX5I0h3XV6RU21Gj9oRvhUni8V6Ecf7O8b6sAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:16:3d:37:a2:c7:5d:4d:83:88:ff:4f:c7:ac:86:b8:19:fd:56:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Validity Not Before: Sep 6 17:36:10 2025 GMT Not After : Sep 10 05:15:10 2025 GMT Subject: CN=0884A17C4A74C117388AAA3CCE052F07BFC6AD3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:51:b0:41:59:41:db:26:04:f1:ae:e5:95: 49:9e:e1:00:1a:73:36:ea:f1:00:f6:94:2e:61:c9: ff:0d:20:5f:b5:20:2a:66:26:e1:7d:89:42:89:c6: 41:4c:25:06:d8:3b:a0:2f:fb:7e:31:98:ca:b7:43: 31:1e:2d:6e:f2:1a:0a:e9:06:a7:c7:a2:62:51:73: d8:72:14:0a:e8:c6:29:d6:34:a8:e8:ce:e9:26:35: 44:d0:a5:1e:28:cb:56:c1:83:a4:ff:80:29:2e:0e: b2:95:81:3f:4d:3f:40:66:f2:0b:e9:2d:19:87:3b: e1:74:b9:8e:95:40:d5:d2:c1:3f:b9:de:07:66:0b: 14:2a:8d:d1:a9:26:29:d0:5f:ed:6e:02:4b:77:8b: 47:66:8e:c8:b7:54:84:d4:ef:f7:15:bc:c8:77:c6: 61:85:b7:b9:99:9e:63:af:7d:2d:5c:b3:3e:80:64: 8c:12:93:f3:68:3d:c9:0e:4f:14:35:98:bb:16:27: f2:70:dc:0e:2c:01:f0:ff:95:9c:3f:47:88:5c:d3: fd:64:b2:8c:0b:6a:cb:ed:66:74:b8:8a:20:00:66: 56:2a:78:96:7a:51:0a:3a:ce:9c:63:f6:c0:43:b1: 26:84:e9:3d:24:60:cd:b7:da:21:df:e9:9f:1b:51: 41:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:84:A1:7C:4A:74:C1:17:38:8A:AA:3C:CE:05:2F:07:BF:C6:AD:3A X509v3 Authority Key Identifier: keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:21:b4:99:71:8c:14:47:c3:28:ed:2c:46:7b:13:a2:9e:33: fc:a0:b7:63:27:ca:c3:9f:81:10:81:26:0c:52:97:b9:43:62: 36:c3:bf:c0:82:d0:71:4c:5e:0f:92:f0:a6:d8:a9:68:95:c4: 53:02:cb:af:ed:6c:8a:17:4e:9e:56:e2:7e:1a:35:ae:35:84: 72:00:aa:de:eb:e9:25:3a:c5:bf:9f:65:30:d7:4a:30:f5:bf: d2:ee:92:51:90:f9:cb:7b:33:5b:7d:d9:ec:78:0c:c5:44:68: 4f:f7:0a:1b:63:52:77:ea:d8:9e:31:7b:8e:05:e4:27:a1:76: 41:2e:3d:0a:74:c9:74:a5:5e:21:3f:0b:73:5b:ca:15:f8:a7: b3:90:b6:11:0d:fe:3e:0b:5b:10:16:1c:4f:6e:07:3b:75:e3: f4:77:83:6a:72:2c:aa:96:07:1d:9f:eb:69:29:77:ed:c8:1c: 91:6c:14:24:60:d0:1a:a7:8f:bc:76:88:61:82:3e:26:54:dd: ea:c9:4f:7e:a3:70:0d:35:62:6e:53:ef:aa:67:62:cd:be:27: 41:81:57:8a:73:42:45:fa:3f:5d:78:29:20:f4:21:31:b1:17: fa:0a:f8:d1:dd:07:0f:db:77:84:25:c9:09:96:17:d1:44:3b: e5:73:1f:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxY9N6LHXU2DiP9Px6yGuBn9VhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgz OEUwQzY3NTAeFw0yNTA5MDYxNzM2MTBaFw0yNTA5MTAwNTE1MTBaMDMxMTAvBgNV BAMTKDA4ODRBMTdDNEE3NEMxMTczODhBQUEzQ0NFMDUyRjA3QkZDNkFEM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kVGwQVlB2yYE8a7llUme4QAa czbq8QD2lC5hyf8NIF+1ICpmJuF9iUKJxkFMJQbYO6Av+34xmMq3QzEeLW7yGgrp BqfHomJRc9hyFAroxinWNKjozukmNUTQpR4oy1bBg6T/gCkuDrKVgT9NP0Bm8gvp LRmHO+F0uY6VQNXSwT+53gdmCxQqjdGpJinQX+1uAkt3i0dmjsi3VITU7/cVvMh3 xmGFt7mZnmOvfS1csz6AZIwSk/NoPckOTxQ1mLsWJ/Jw3A4sAfD/lZw/R4hc0/1k sowLasvtZnS4iiAAZlYqeJZ6UQo6zpxj9sBDsSaE6T0kYM232iHf6Z8bUUGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCIShfEp0wRc4iqo8zgUvB7/GrTowHwYDVR0j BBgwFoAU76S/mg0t1XRGEmxX85rxCDjgxnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2UyN2RhOS1lNmU2LTQ0YTUtOThmNC01OTBlYjVhMWJkNjUvMC9FRkE0QkY5QTBE MkRENTc0NDYxMjZDNTdGMzlBRjEwODM4RTBDNjc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgzOEUw QzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYx MDgzOEUwQzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQhtJlxjBRHwyjtLEZ7E6KeM/ygt2MnysOf gRCBJgxSl7lDYjbDv8CC0HFMXg+S8KbYqWiVxFMCy6/tbIoXTp5W4n4aNa41hHIA qt7r6SU6xb+fZTDXSjD1v9LuklGQ+ct7M1t92ex4DMVEaE/3ChtjUnfq2J4xe44F 5CehdkEuPQp0yXSlXiE/C3NbyhX4p7OQthEN/j4LWxAWHE9uBzt14/R3g2pyLKqW Bx2f62kpd+3IHJFsFCRg0Bqnj7x2iGGCPiZU3erJT36jcA01Ym5T76pnYs2+J0GB V4pzQkX6P114KSD0ITGxF/oK+NHdBw/bd4QlyQmWF9FEO+VzH4k= -----END CERTIFICATE-----Generated at Tue Sep 9 02:40:25 2025 by rpki-client