$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json) Hash identifier: cA5oKuNpviZOe/a0MV8aA5s4aX8Af7mqe9TSpKBd4ho= Subject key identifier: C3:0D:8E:6D:2E:C6:7C:0D:75:2A:D7:D4:C8:A0:7B:8D:79:81:BD:06 Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Certificate serial: 3C6F6D7C1841F2FDD41ECF0954CBEF920C1A7801 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft Manifest number: A2 Signing time: Fri 06 Jun 2025 09:02:51 +0000 Manifest this update: Fri 06 Jun 2025 08:57:51 +0000 Manifest next update: Mon 09 Jun 2025 14:04:51 +0000 Files and hashes: 1: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: KrIXyNykbWLoh8OIIJcp1FgDNTUBQuJsv/iTRekTgJY=) 2: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: yvjq0+mX9UVVGH4hrgAy0kHkjD5STbq2ZndxXPg4Qok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:6f:6d:7c:18:41:f2:fd:d4:1e:cf:09:54:cb:ef:92:0c:1a:78:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Validity Not Before: Jun 6 08:57:51 2025 GMT Not After : Jun 9 14:04:51 2025 GMT Subject: CN=C30D8E6D2EC67C0D752AD7D4C8A07B8D7981BD06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:1d:02:87:72:63:6d:a7:f4:ea:ce:1a:1d: 47:1d:1e:2a:26:08:96:93:9c:af:c0:51:03:8c:21: 4b:6a:79:fb:83:cb:c6:8c:89:c3:d2:20:53:f3:14: bd:38:90:b2:a6:8d:dc:ef:45:de:7a:e0:77:00:ed: 8e:2e:0e:47:c5:36:cc:c5:57:e0:8b:bc:8d:59:5b: 75:94:94:c3:77:5d:92:27:86:c9:cf:e2:02:85:21: b0:a6:e8:2c:8d:b0:4d:e2:79:c5:21:92:4b:c6:72: f6:16:3d:76:38:d2:cb:8a:e7:16:65:8d:d3:bc:36: 0d:c5:bf:e2:a3:4b:8a:07:1e:0d:38:ad:4c:42:b0: a8:ea:72:9a:19:b0:45:d3:fd:53:aa:7a:a4:a2:e6: 14:bf:f1:4d:8a:38:35:08:ae:b4:40:e3:c7:e0:d2: b7:ee:51:95:c5:89:6f:76:5b:e1:9f:b9:60:2c:3c: 68:44:4a:04:b5:d9:c1:8a:c4:f0:1f:fd:14:56:35: d0:6d:e3:8f:67:3e:ad:2b:45:d2:79:7e:5c:17:f1: 3e:54:e0:aa:ff:f0:52:f0:8f:ce:da:7c:d1:55:fd: f3:03:35:01:0a:34:9e:de:18:34:d4:e7:b6:fd:27: c5:bd:97:87:1a:ed:d6:3b:46:8c:31:df:0d:ac:1b: f6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0D:8E:6D:2E:C6:7C:0D:75:2A:D7:D4:C8:A0:7B:8D:79:81:BD:06 X509v3 Authority Key Identifier: keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:26:45:a8:7c:39:f4:e5:60:48:a1:b2:6c:2d:eb:11:66:ac: 6e:f0:1c:10:c5:31:7d:fb:fc:dc:ba:96:19:40:28:ee:5a:54: 58:87:21:d1:99:87:f0:77:72:48:bf:f7:ac:f4:64:9a:f1:88: ad:4f:35:26:31:b8:3b:de:1f:d8:f9:93:10:0a:46:1f:ef:73: d8:27:c8:9a:16:57:e9:34:84:8c:3a:c2:cd:54:6e:98:ee:ae: 12:f9:1b:20:0d:c6:4b:3c:91:fa:62:ea:9b:d5:70:c7:4b:73: 77:95:d0:96:a3:2f:a3:60:1e:37:61:62:d2:6a:ae:8c:4f:2b: fe:4e:be:f7:f6:18:82:91:ea:7d:78:3c:01:03:8e:2c:9e:d9: a9:c7:ae:39:b6:21:e5:76:f3:64:61:30:61:e2:d5:50:21:b0: ce:f8:52:a2:7d:6b:61:92:09:76:f1:a4:99:84:8a:ab:05:86: df:66:cb:ae:39:69:ea:83:81:b7:94:31:58:ea:00:c1:cc:3c: 6b:43:4b:ac:f5:fc:94:3a:09:0e:00:34:ed:7c:d6:ec:28:9e: b1:d5:48:f2:46:fc:e1:81:fa:fb:2b:4b:54:f0:96:10:c6:d4: e9:55:18:ea:8f:a7:84:83:67:6e:2e:93:03:f9:5c:df:90:af: 4e:81:52:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPG9tfBhB8v3UHs8JVMvvkgwaeAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0Ex NUM4NUIxNzAeFw0yNTA2MDYwODU3NTFaFw0yNTA2MDkxNDA0NTFaMDMxMTAvBgNV BAMTKEMzMEQ4RTZEMkVDNjdDMEQ3NTJBRDdENEM4QTA3QjhENzk4MUJEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqB0Ch3Jjbaf06s4aHUcdHiom CJaTnK/AUQOMIUtqefuDy8aMicPSIFPzFL04kLKmjdzvRd564HcA7Y4uDkfFNszF V+CLvI1ZW3WUlMN3XZInhsnP4gKFIbCm6CyNsE3iecUhkkvGcvYWPXY40suK5xZl jdO8Ng3Fv+KjS4oHHg04rUxCsKjqcpoZsEXT/VOqeqSi5hS/8U2KODUIrrRA48fg 0rfuUZXFiW92W+GfuWAsPGhESgS12cGKxPAf/RRWNdBt449nPq0rRdJ5flwX8T5U 4Kr/8FLwj87afNFV/fMDNQEKNJ7eGDTU57b9J8W9l4ca7dY7Rowx3w2sG/bzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUww2ObS7GfA11KtfUyKB7jXmBvQYwHwYDVR0j BBgwFoAU73yoLFtF/UEt6JLLbaeoyhXIWxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMC9FRjdDQTgyQzVC NDVGRDQxMkRFODkyQ0I2REE3QThDQTE1Qzg1QjE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0ExNUM4 NUIxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4 Q0ExNUM4NUIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAomRah8OfTlYEihsmwt6xFmrG7wHBDFMX37 /Ny6lhlAKO5aVFiHIdGZh/B3cki/96z0ZJrxiK1PNSYxuDveH9j5kxAKRh/vc9gn yJoWV+k0hIw6ws1UbpjurhL5GyANxks8kfpi6pvVcMdLc3eV0JajL6NgHjdhYtJq roxPK/5Ovvf2GIKR6n14PAEDjiye2anHrjm2IeV282RhMGHi1VAhsM74UqJ9a2GS CXbxpJmEiqsFht9my645aeqDgbeUMVjqAMHMPGtDS6z1/JQ6CQ4ANO181uwonrHV SPJG/OGB+vsrS1TwlhDG1OlVGOqPp4SDZ24ukwP5XN+Qr06BUuY= -----END CERTIFICATE-----Generated at Sat Jun 7 04:14:16 2025 by rpki-client