$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: dy8KnUJYs5Poe1TzYSs2utHc4hAbSFvaDWF4AoEKIYE= Subject key identifier: CD:B6:1F:C1:A8:50:D9:96:93:39:C4:44:00:67:F8:3C:9D:46:91:87 Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 6313C2BB78C9E5DFF38FACDD4EC472AF4FE72685 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 0457 Signing time: Tue 29 Apr 2025 03:41:06 +0000 Manifest this update: Tue 29 Apr 2025 03:36:06 +0000 Manifest next update: Fri 02 May 2025 07:18:06 +0000 Files and hashes: 1: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: /BYvra4DlfHnq4UOMzaF51N5Kus+HjkdFOsGHv9u+80=) 2: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: pAwAaLum0jYdUTsB6mT2CdQGQv2HQcF0heplULsgo1Y=) 3: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: //GKz0HMTwb3fbdH4nxT1nz0lPS8e/zVFdL6t9zS4+E=) 4: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: /afJJDhqLHEyFhgVDaHqEV2OiB3/NZ6i6GNwssoIGhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:13:c2:bb:78:c9:e5:df:f3:8f:ac:dd:4e:c4:72:af:4f:e7:26:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Apr 29 03:36:06 2025 GMT Not After : May 2 07:18:06 2025 GMT Subject: CN=CDB61FC1A850D9969339C4440067F83C9D469187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ff:dc:22:fe:36:c8:3a:2e:fc:a7:b6:5d:06: a5:c8:a9:e3:e8:27:b1:53:bf:7e:ed:cc:96:39:6e: 21:28:66:e9:af:8c:7c:41:5b:02:dd:9c:51:50:fc: bd:48:4e:00:c4:25:34:7e:21:22:8c:9b:14:71:a3: 2f:fc:e3:47:a0:bf:18:4b:32:90:af:26:40:c7:ad: 51:ff:e8:d2:95:07:4d:4a:fb:84:7f:9c:06:c2:0f: 02:c5:69:3d:14:72:0b:da:b8:66:6d:d5:94:1c:bb: 35:5c:a7:24:f6:47:ae:71:38:68:23:7f:54:7e:0f: 0c:f6:87:4a:73:97:1e:06:ba:7f:d5:5c:d5:54:77: 3c:f7:0e:ae:c8:08:de:4f:8e:28:11:ff:9a:db:22: 17:bf:35:76:75:ea:44:a4:75:b0:df:5a:05:fa:22: 19:a4:7d:78:4a:59:22:e1:ce:6e:fb:47:55:5e:72: 92:e3:dc:ee:36:d1:a1:4e:0e:8e:07:b1:5d:a7:a8: 96:ce:60:d6:24:ce:e7:e1:d5:52:42:4f:10:3c:ad: 45:bc:72:40:2c:39:9c:44:82:02:06:1e:3b:9f:77: 8e:4c:07:34:ff:a8:48:a1:32:a2:bf:59:44:c8:33: f0:46:84:7c:77:ed:80:db:17:ef:d4:b2:a0:5d:de: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B6:1F:C1:A8:50:D9:96:93:39:C4:44:00:67:F8:3C:9D:46:91:87 X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:3f:3d:01:0e:f6:46:3f:d5:f4:32:ae:29:c3:6f:4e:1c:d7: e3:b6:e3:63:d9:fe:40:51:09:e3:a7:a4:f5:d1:d5:c2:52:a9: 75:49:00:2d:71:5a:8f:a1:5b:6c:bd:7a:17:1a:c6:5d:05:76: 4c:93:31:2b:4e:ae:6c:ad:ac:df:89:b8:3d:93:ef:2e:4d:77: ed:98:ad:70:14:b8:18:57:bb:df:ff:b7:0f:ab:d1:de:10:94: d4:0b:d4:71:76:92:3f:c1:d0:0f:a3:d2:e0:ec:c0:30:08:5f: a8:2f:ee:77:e8:b8:33:20:0f:fe:f9:6e:12:eb:df:46:c1:53: 04:6f:b8:8a:85:08:df:41:9e:ef:4a:cd:35:36:cc:d0:75:57: b5:1a:24:db:57:74:0d:c3:ba:9c:06:5b:ac:e5:e3:7f:03:89: bb:61:49:23:69:de:00:06:33:55:c2:3b:c3:d1:2a:69:16:f8: f1:7b:de:32:56:04:86:4f:52:8b:fb:34:18:ca:26:b3:37:48: 7f:e4:32:5c:a5:84:9d:8f:da:4e:ed:22:29:4e:4f:95:8f:f3: 7b:12:bc:a4:72:73:fa:7e:84:ce:eb:2d:ce:88:05:b4:98:db: 68:32:ca:29:7f:e8:78:43:26:fd:2c:d8:13:b6:a3:8d:4f:07: 01:dd:01:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxPCu3jJ5d/zj6zdTsRyr0/nJoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTA0MjkwMzM2MDZaFw0yNTA1MDIwNzE4MDZaMDMxMTAvBgNV BAMTKENEQjYxRkMxQTg1MEQ5OTY5MzM5QzQ0NDAwNjdGODNDOUQ0NjkxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/9wi/jbIOi78p7ZdBqXIqePo J7FTv37tzJY5biEoZumvjHxBWwLdnFFQ/L1ITgDEJTR+ISKMmxRxoy/840egvxhL MpCvJkDHrVH/6NKVB01K+4R/nAbCDwLFaT0UcgvauGZt1ZQcuzVcpyT2R65xOGgj f1R+Dwz2h0pzlx4Gun/VXNVUdzz3Dq7ICN5PjigR/5rbIhe/NXZ16kSkdbDfWgX6 IhmkfXhKWSLhzm77R1VecpLj3O420aFODo4HsV2nqJbOYNYkzufh1VJCTxA8rUW8 ckAsOZxEggIGHjufd45MBzT/qEihMqK/WUTIM/BGhHx37YDbF+/UsqBd3kFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzbYfwahQ2ZaTOcREAGf4PJ1GkYcwHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMw/PQEO9kY/1fQyrinDb04c1+O242PZ/kBR CeOnpPXR1cJSqXVJAC1xWo+hW2y9ehcaxl0FdkyTMStOrmytrN+JuD2T7y5Nd+2Y rXAUuBhXu9//tw+r0d4QlNQL1HF2kj/B0A+j0uDswDAIX6gv7nfouDMgD/75bhLr 30bBUwRvuIqFCN9Bnu9KzTU2zNB1V7UaJNtXdA3DupwGW6zl438DibthSSNp3gAG M1XCO8PRKmkW+PF73jJWBIZPUov7NBjKJrM3SH/kMlylhJ2P2k7tIilOT5WP83sS vKRyc/p+hM7rLc6IBbSY22gyyil/6HhDJv0s2BO2o41PBwHdAec= -----END CERTIFICATE-----Generated at Wed Apr 30 05:45:42 2025 by rpki-client