$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: b4iziyF7cOOINHs7PAlfzdX4rgp4vuWK9hGbXsRdUBo= Subject key identifier: 7D:46:87:3F:E6:9C:F5:C6:55:26:4F:45:ED:52:B5:DC:32:12:5A:AF Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 2F0A570E85C406E22A05431BD92AEA866BDBB270 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: F4 Signing time: Mon 03 Nov 2025 17:21:25 +0000 Manifest this update: Mon 03 Nov 2025 17:16:25 +0000 Manifest next update: Fri 07 Nov 2025 03:54:25 +0000 Files and hashes: 1: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: oWZpXU+0S7iuvBqXaE9R4nQ30KyhmXE4qKJ/jN4B69M=) 2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0a:57:0e:85:c4:06:e2:2a:05:43:1b:d9:2a:ea:86:6b:db:b2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Nov 3 17:16:25 2025 GMT Not After : Nov 7 03:54:25 2025 GMT Subject: CN=7D46873FE69CF5C655264F45ED52B5DC32125AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:95:5c:87:cd:af:05:f9:d3:12:e9:a9:0f: 24:77:13:60:ea:1b:fa:87:9d:66:e7:ec:69:2a:0f: b3:c2:99:44:5b:e6:c3:95:af:3e:b5:da:b6:cb:ca: 57:97:a3:dd:82:e1:c6:3e:ba:ec:ec:5e:16:b1:dc: d1:27:9e:1e:b3:83:63:39:cb:18:02:65:a9:9d:54: 00:aa:0f:c3:85:86:19:5f:79:4d:fe:f9:9f:76:3b: 84:53:43:38:8f:40:87:06:a9:2a:51:70:77:48:9a: 24:d5:15:b1:73:19:8d:2e:f8:d8:0c:63:fb:59:9e: e8:8c:b8:d6:0a:8f:8d:13:ba:6f:0f:53:fe:ac:7c: 5c:3b:e5:7e:39:06:6b:ce:04:aa:3f:53:af:98:42: 23:8a:06:20:4a:8a:9f:4f:25:ea:8a:e0:22:1a:65: 75:59:73:01:a5:80:84:64:bf:3c:84:81:e1:85:c2: 20:26:18:72:41:3c:24:d6:d8:5d:74:de:bb:67:08: b4:20:e0:5e:0b:cb:c7:29:25:60:58:d4:df:d5:d7: f9:60:d1:ae:93:27:04:2d:d1:5b:eb:68:15:ae:6d: ff:2e:28:67:a4:3e:c5:bf:ea:c7:2a:1f:92:a1:bf: 07:3e:b2:4f:83:d3:ec:a3:fe:da:19:cd:7d:00:53: 91:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:46:87:3F:E6:9C:F5:C6:55:26:4F:45:ED:52:B5:DC:32:12:5A:AF X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ae:a0:8c:f0:fe:0d:1d:d5:be:ec:e0:2c:c6:a4:c5:7e:da: cb:b8:28:64:23:ec:48:80:77:d2:00:7f:54:ae:f3:b4:82:09: 7c:e5:bf:ad:b5:eb:eb:58:07:97:50:29:e4:ff:b4:de:dd:01: 0b:11:9e:d7:ea:76:4c:e6:fc:09:d3:ec:8d:43:79:da:a9:a0: 6b:eb:df:dd:ea:fc:29:5e:24:df:79:3c:ff:33:fe:65:33:90: 66:a5:3c:6a:e9:b8:44:a6:45:1b:cf:16:3c:1c:fe:7c:96:9c: 1e:9e:a3:26:f7:0e:08:37:a5:80:83:83:72:55:ab:cb:c5:6a: 23:6b:0c:d7:37:69:90:f4:b9:ea:53:54:13:ff:e3:02:03:c1: cb:67:23:da:93:a0:18:e3:8a:bb:5b:6e:67:7d:8b:39:d6:99: 7c:37:62:8b:96:9a:4d:43:89:8f:fb:f0:93:bc:54:bc:b4:ff: 35:36:35:e3:18:f5:61:2b:11:da:bb:48:4e:94:48:2d:95:ae: 54:6d:85:c2:6b:6a:ba:e3:8b:87:04:57:83:ec:1b:b8:a3:db: 33:88:f6:f0:3e:98:59:11:6e:20:31:40:34:e2:26:d7:d4:0b: 11:31:ed:61:3c:18:60:6e:88:eb:87:aa:d3:a9:26:42:ab:f9: cd:d5:f0:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwpXDoXEBuIqBUMb2SrqhmvbsnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNTExMDMxNzE2MjVaFw0yNTExMDcwMzU0MjVaMDMxMTAvBgNV BAMTKDdENDY4NzNGRTY5Q0Y1QzY1NTI2NEY0NUVENTJCNURDMzIxMjVBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2ZVch82vBfnTEumpDyR3E2Dq G/qHnWbn7GkqD7PCmURb5sOVrz612rbLyleXo92C4cY+uuzsXhax3NEnnh6zg2M5 yxgCZamdVACqD8OFhhlfeU3++Z92O4RTQziPQIcGqSpRcHdImiTVFbFzGY0u+NgM Y/tZnuiMuNYKj40Tum8PU/6sfFw75X45BmvOBKo/U6+YQiOKBiBKip9PJeqK4CIa ZXVZcwGlgIRkvzyEgeGFwiAmGHJBPCTW2F103rtnCLQg4F4Ly8cpJWBY1N/V1/lg 0a6TJwQt0VvraBWubf8uKGekPsW/6scqH5Khvwc+sk+D0+yj/toZzX0AU5FlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfUaHP+ac9cZVJk9F7VK13DISWq8wHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+uoIzw/g0d1b7s4CzGpMV+2su4KGQj7EiA d9IAf1Su87SCCXzlv6216+tYB5dQKeT/tN7dAQsRntfqdkzm/AnT7I1DedqpoGvr 393q/CleJN95PP8z/mUzkGalPGrpuESmRRvPFjwc/nyWnB6eoyb3Dgg3pYCDg3JV q8vFaiNrDNc3aZD0uepTVBP/4wIDwctnI9qToBjjirtbbmd9iznWmXw3YouWmk1D iY/78JO8VLy0/zU2NeMY9WErEdq7SE6USC2VrlRthcJrarrji4cEV4PsG7ij2zOI 9vA+mFkRbiAxQDTiJtfUCxEx7WE8GGBuiOuHqtOpJkKr+c3V8HE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:38:25 2025 by rpki-client