$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: QiCMw23ChAMCZ8psZ41DhmQaD6YepM8Rj4OISlovSOM= Subject key identifier: 05:81:71:59:C0:29:EF:70:81:16:7E:A3:3A:BC:64:1E:08:4F:E5:6E Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 418CB86FB84DA573FE63A72B8CE3ECB03B174CE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 04AC Signing time: Mon 03 Nov 2025 03:42:09 +0000 Manifest this update: Mon 03 Nov 2025 03:37:09 +0000 Manifest next update: Thu 06 Nov 2025 06:42:09 +0000 Files and hashes: 1: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: pAwAaLum0jYdUTsB6mT2CdQGQv2HQcF0heplULsgo1Y=) 2: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: LyQVOVVD0SyWAzKbbigEAOPOxnvDfTq86SNZAm/SmRY=) 3: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: /BYvra4DlfHnq4UOMzaF51N5Kus+HjkdFOsGHv9u+80=) 4: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: UpvfuUNOZvLWMGD/iz4FElKHtFHy04m2A4j1GF4qBWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8c:b8:6f:b8:4d:a5:73:fe:63:a7:2b:8c:e3:ec:b0:3b:17:4c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Nov 3 03:37:09 2025 GMT Not After : Nov 6 06:42:09 2025 GMT Subject: CN=05817159C029EF7081167EA33ABC641E084FE56E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:9a:03:e4:71:fb:87:c7:4a:e7:80:d7:1e: 34:e9:ce:cd:a4:ed:c0:6f:8d:b3:4d:45:f4:7b:fb: bb:42:df:b4:cb:a3:e9:66:02:b1:07:6e:3a:59:cd: 72:c0:c6:fa:65:48:b2:f2:43:da:e1:3b:c7:f5:9b: 8a:9d:c0:ac:d1:38:97:19:54:61:f9:02:d2:45:c8: 9d:5a:64:9e:5b:c1:a5:b3:88:2d:13:ce:73:49:77: 8b:a2:df:15:d1:a8:3e:eb:5d:b6:6e:23:19:d5:d8: 42:d7:6b:ba:cc:05:b7:48:00:ec:cf:e6:a5:48:52: 3b:40:e6:c2:c9:52:fd:56:14:a8:03:fa:41:8c:c4: 88:d4:a7:60:b8:41:f7:2d:d5:48:a6:d2:ad:03:b4: 6d:a0:15:c7:75:01:2f:df:2a:5f:51:0b:2f:22:f2: b7:b6:fb:cb:ab:d3:f2:c9:ec:06:ad:47:94:c5:a8: a5:9c:6f:c2:0a:04:97:ca:4f:b1:1c:30:d4:f1:55: 83:2f:68:d8:5a:2d:cb:9e:db:49:d4:a8:de:49:58: 55:95:8f:e9:06:25:4e:17:02:ae:1a:4a:d5:44:be: 3e:01:d8:bb:c2:d7:81:6f:d6:1b:5e:8f:75:cb:77: 98:9f:9e:ce:53:21:ca:09:8d:98:8d:36:66:11:df: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:81:71:59:C0:29:EF:70:81:16:7E:A3:3A:BC:64:1E:08:4F:E5:6E X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0f:68:44:9c:8d:0f:cc:69:a1:02:55:77:33:48:7f:24:e6: 11:bd:a9:71:1f:6b:75:9a:fd:86:4e:ea:d1:c0:60:be:19:9d: 9a:05:6d:bd:18:b7:4a:44:c4:45:7f:e3:e7:30:79:35:b3:19: 5a:fb:26:ba:97:46:97:e2:51:3a:e1:47:de:c2:13:b2:69:f5: 74:d9:2a:d0:de:4e:0e:97:83:50:48:e2:2a:6a:f0:07:1f:2c: cd:34:16:28:a1:1e:26:ce:5b:26:6d:6a:43:13:13:1d:aa:77: a0:50:8f:84:75:e6:f4:c9:98:cc:d9:2b:76:81:6e:ba:40:17: d4:0a:f5:d9:b4:9d:62:30:cb:73:60:c3:cd:a3:f6:c0:36:a0: 2f:d2:75:69:47:a1:11:07:62:07:2c:5a:66:89:2f:e3:96:78: 34:0c:f7:d4:91:ba:43:dc:a1:d1:51:51:c6:06:a1:fc:d9:9c: 6a:f1:4c:48:e5:62:76:79:53:03:4c:b1:4b:6e:d0:83:bc:31: 53:d3:9e:ae:bc:fb:d6:3b:a8:8b:7a:ad:86:30:58:1b:7d:2b: d5:0c:b2:01:ac:87:27:ca:e4:a3:42:57:0a:15:7d:a8:e2:e7: 7c:b8:ec:1d:6f:49:8d:28:ed:c2:54:75:6b:28:72:93:cf:42: 2b:68:6a:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYy4b7hNpXP+Y6crjOPssDsXTOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTExMDMwMzM3MDlaFw0yNTExMDYwNjQyMDlaMDMxMTAvBgNV BAMTKDA1ODE3MTU5QzAyOUVGNzA4MTE2N0VBMzNBQkM2NDFFMDg0RkU1NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqpoD5HH7h8dK54DXHjTpzs2k 7cBvjbNNRfR7+7tC37TLo+lmArEHbjpZzXLAxvplSLLyQ9rhO8f1m4qdwKzROJcZ VGH5AtJFyJ1aZJ5bwaWziC0TznNJd4ui3xXRqD7rXbZuIxnV2ELXa7rMBbdIAOzP 5qVIUjtA5sLJUv1WFKgD+kGMxIjUp2C4Qfct1Uim0q0DtG2gFcd1AS/fKl9RCy8i 8re2+8ur0/LJ7AatR5TFqKWcb8IKBJfKT7EcMNTxVYMvaNhaLcue20nUqN5JWFWV j+kGJU4XAq4aStVEvj4B2LvC14Fv1htej3XLd5ifns5TIcoJjZiNNmYR356LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBYFxWcAp73CBFn6jOrxkHghP5W4wHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0PaEScjQ/MaaECVXczSH8k5hG9qXEfa3Wa /YZO6tHAYL4ZnZoFbb0Yt0pExEV/4+cweTWzGVr7JrqXRpfiUTrhR97CE7Jp9XTZ KtDeTg6Xg1BI4ipq8AcfLM00FiihHibOWyZtakMTEx2qd6BQj4R15vTJmMzZK3aB brpAF9QK9dm0nWIwy3Ngw82j9sA2oC/SdWlHoREHYgcsWmaJL+OWeDQM99SRukPc odFRUcYGofzZnGrxTEjlYnZ5UwNMsUtu0IO8MVPTnq68+9Y7qIt6rYYwWBt9K9UM sgGshyfK5KNCVwoVfaji53y47B1vSY0o7cJUdWsocpPPQitoag0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:02:48 2025 by rpki-client