$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: dt2/9lNraqBW8gj9ul77oBKbNKYlAZ33QlFsIORESHo= Subject key identifier: B3:20:C7:B4:2A:85:A3:E9:CA:B8:BF:9C:62:BF:79:89:34:2B:27:B2 Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 46CAFC4DECA4B71065EEF9540D8150F9BC86A6ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 046C Signing time: Sun 15 Jun 2025 11:01:08 +0000 Manifest this update: Sun 15 Jun 2025 10:56:08 +0000 Manifest next update: Wed 18 Jun 2025 11:58:08 +0000 Files and hashes: 1: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: pAwAaLum0jYdUTsB6mT2CdQGQv2HQcF0heplULsgo1Y=) 2: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: /afJJDhqLHEyFhgVDaHqEV2OiB3/NZ6i6GNwssoIGhk=) 3: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: /BYvra4DlfHnq4UOMzaF51N5Kus+HjkdFOsGHv9u+80=) 4: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: zvpCdLKtqfqKd8iQ3rkVxxsD2iFw6lusuE9TuUkl9sI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ca:fc:4d:ec:a4:b7:10:65:ee:f9:54:0d:81:50:f9:bc:86:a6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: Jun 15 10:56:08 2025 GMT Not After : Jun 18 11:58:08 2025 GMT Subject: CN=B320C7B42A85A3E9CAB8BF9C62BF7989342B27B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:70:36:61:ba:da:0f:59:0b:a3:ee:76:08: 61:83:08:00:30:e8:55:92:d9:b4:69:6c:07:17:29: aa:f0:9a:4b:a2:9f:15:15:64:f7:8a:f9:d8:c7:f7: e3:83:97:76:c6:08:c4:87:af:27:ae:f5:ee:4d:1e: 36:a8:1c:03:e4:6a:c2:24:cb:06:fd:59:36:e1:45: 64:2e:e3:44:3b:20:bb:0a:59:ed:2a:3f:27:25:1d: 71:76:e3:9b:e4:de:95:e1:0d:f4:5e:15:bb:c6:e8: 06:f8:8d:63:b5:bd:ea:0b:8d:c2:67:4c:f0:c1:ed: f9:a4:7c:d5:cc:f7:73:0c:37:08:70:f8:e8:29:e6: 7d:37:ac:8a:86:c8:e8:cc:d7:3c:f8:d1:7f:45:18: 19:ae:11:57:ed:fd:dc:c2:2a:57:92:6b:f1:58:00: 6d:8f:d4:92:03:37:6d:ad:2f:51:bf:95:41:72:24: 85:60:d9:25:9c:60:50:8d:2c:00:5f:fa:3e:be:32: e0:d6:7a:65:39:a4:33:6a:12:96:26:8b:a3:26:5a: 59:1b:44:e4:0c:3f:2e:25:6a:95:f8:ed:6d:75:c3: 2d:5c:d4:41:6f:f5:43:b4:86:8c:18:b9:99:b2:ed: e1:7b:03:26:f1:4c:bf:7f:dc:45:76:11:97:28:4b: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:20:C7:B4:2A:85:A3:E9:CA:B8:BF:9C:62:BF:79:89:34:2B:27:B2 X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:59:2c:ed:56:28:b1:8e:50:bb:b0:46:a2:91:bf:dc:64:e3: 47:5e:0b:a7:85:45:ac:98:a1:74:66:03:1c:e7:48:46:96:ff: 03:82:8b:ec:a5:3b:ab:95:8a:b8:a2:c3:64:00:c1:f9:ef:95: 55:31:9f:04:85:e4:f3:17:86:11:76:08:fb:33:67:dd:c3:10: 69:b7:0f:f3:a5:fa:09:9f:d6:c3:2d:09:d3:96:29:16:16:cd: 62:20:de:e5:99:f2:80:0e:2c:02:63:f9:01:ef:9d:31:31:fd: d7:59:08:b0:86:22:a2:75:6c:27:66:c9:18:7e:e8:b4:fd:15: d9:9f:0b:98:f7:17:c7:2a:e2:56:e9:be:2b:7a:4b:0b:fd:68: a4:f2:65:24:3d:76:0a:af:66:4f:2d:d8:25:da:54:d3:4e:09: de:14:5c:d5:3e:61:40:a8:06:4f:57:69:ce:20:64:51:68:08: bd:9e:56:d7:fd:20:7c:4b:a3:ce:f9:c4:ae:e5:b3:2c:29:89: 8f:51:36:55:1a:5d:77:17:1c:46:2e:de:bb:16:f8:5a:e2:51: d0:be:af:cf:da:e3:16:97:a7:ba:1e:43:62:88:3a:c6:81:2a: f6:c2:20:bb:a2:6d:ad:b0:fb:f4:5b:40:f6:68:31:ee:2f:07: 20:88:cf:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURsr8TeyktxBl7vlUDYFQ+byGpu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTA2MTUxMDU2MDhaFw0yNTA2MTgxMTU4MDhaMDMxMTAvBgNV BAMTKEIzMjBDN0I0MkE4NUEzRTlDQUI4QkY5QzYyQkY3OTg5MzQyQjI3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXHA2YbraD1kLo+52CGGDCAAw 6FWS2bRpbAcXKarwmkuinxUVZPeK+djH9+ODl3bGCMSHryeu9e5NHjaoHAPkasIk ywb9WTbhRWQu40Q7ILsKWe0qPyclHXF245vk3pXhDfReFbvG6Ab4jWO1veoLjcJn TPDB7fmkfNXM93MMNwhw+Ogp5n03rIqGyOjM1zz40X9FGBmuEVft/dzCKleSa/FY AG2P1JIDN22tL1G/lUFyJIVg2SWcYFCNLABf+j6+MuDWemU5pDNqEpYmi6MmWlkb ROQMPy4lapX47W11wy1c1EFv9UO0howYuZmy7eF7AybxTL9/3EV2EZcoS7RHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsyDHtCqFo+nKuL+cYr95iTQrJ7IwHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhZLO1WKLGOULuwRqKRv9xk40deC6eFRayY oXRmAxznSEaW/wOCi+ylO6uViriiw2QAwfnvlVUxnwSF5PMXhhF2CPszZ93DEGm3 D/Ol+gmf1sMtCdOWKRYWzWIg3uWZ8oAOLAJj+QHvnTEx/ddZCLCGIqJ1bCdmyRh+ 6LT9FdmfC5j3F8cq4lbpvit6Swv9aKTyZSQ9dgqvZk8t2CXaVNNOCd4UXNU+YUCo Bk9Xac4gZFFoCL2eVtf9IHxLo875xK7lsywpiY9RNlUaXXcXHEYu3rsW+FriUdC+ r8/a4xaXp7oeQ2KIOsaBKvbCILuiba2w+/RbQPZoMe4vByCIzyg= -----END CERTIFICATE-----Generated at Mon Jun 16 05:22:15 2025 by rpki-client