$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: ToBOZi91S2L2+jGg4FtL3WNVp3dRl4DSK7iOBWV8Dyo= Subject key identifier: 7D:29:98:D9:71:F6:B8:16:3C:7B:7E:1C:C6:36:46:B6:4D:AA:34:78 Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 34C9F6C2FE2990EA24239BCF63246316FECF6D8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: CB Signing time: Tue 05 Aug 2025 18:11:23 +0000 Manifest this update: Tue 05 Aug 2025 18:06:23 +0000 Manifest next update: Sat 09 Aug 2025 03:16:23 +0000 Files and hashes: 1: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) 2: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: ymK4D1NR2l7DAfOrvdyn5JKT7VvGglr1jkLwOYxefho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c9:f6:c2:fe:29:90:ea:24:23:9b:cf:63:24:63:16:fe:cf:6d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Aug 5 18:06:23 2025 GMT Not After : Aug 9 03:16:23 2025 GMT Subject: CN=7D2998D971F6B8163C7B7E1CC63646B64DAA3478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:86:d1:9f:77:13:dc:bc:76:dd:18:83:43:32: 14:78:b1:fc:ef:0d:2c:44:fd:4e:4f:a0:0d:2f:e4: 49:75:08:d0:97:c1:f9:ae:6a:db:94:f4:16:67:86: ab:4b:23:55:13:d7:5f:ff:aa:76:65:da:f2:e6:ab: 06:3a:74:bc:94:e6:fb:b0:a2:ec:ae:ab:48:33:05: 27:ff:72:d9:ec:51:41:7c:48:1c:8b:c3:e5:8e:58: bf:91:62:9d:0d:d8:23:de:33:71:46:d4:87:89:11: 68:c0:fe:88:91:74:44:3b:85:1c:06:6a:e0:16:7e: d7:a9:89:cb:07:d2:a5:55:bb:b6:93:93:e5:d8:24: a7:95:b9:76:10:77:26:34:2b:32:24:4f:fc:e5:61: 03:cb:76:3b:0c:54:5c:53:93:02:05:4c:4d:ff:00: 82:98:f9:92:d5:cd:06:89:cd:f6:28:4c:d9:92:33: 34:06:8e:21:d2:0f:c0:7d:be:2b:86:db:8b:08:83: 82:79:fa:56:f9:fc:bf:e7:73:4e:cc:d4:a8:d7:64: 8d:90:93:aa:b9:ed:87:f0:45:b7:40:9f:52:a4:a2: 05:af:1e:52:3e:eb:64:10:52:2e:21:3b:b2:03:b1: 87:bd:32:e6:a4:d9:42:6d:3c:cd:3a:ba:0a:3e:34: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:29:98:D9:71:F6:B8:16:3C:7B:7E:1C:C6:36:46:B6:4D:AA:34:78 X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:04:e6:71:5d:87:52:d7:46:b6:97:b3:ad:75:77:39:a8:2e: 5e:34:c5:9c:68:e6:ec:67:88:2e:0e:2e:02:3d:ae:79:f8:3e: 4b:c2:5e:ac:24:c4:01:db:2c:b5:e0:ff:f9:54:20:75:4a:0d: 76:2b:e0:6f:69:57:d0:ca:99:4d:8b:93:aa:20:cc:6e:2f:80: 60:b7:fe:d0:76:4e:83:ce:8f:c3:28:71:6b:c7:ec:dc:0c:b0: 8b:9e:a9:b0:c4:02:04:4c:8e:b5:27:7b:9b:f6:8d:3f:1c:67: f0:ef:ff:d3:89:99:74:04:06:b3:0c:b1:5a:f4:92:92:34:c7: 19:d7:18:29:21:0d:de:89:00:98:51:c5:30:37:87:a8:85:d1: 45:63:e8:bd:87:ec:c9:fb:75:9b:a6:1f:95:15:ba:3b:64:5a: 71:5b:fe:11:fe:f6:3e:5f:f9:ef:f4:36:a3:b6:9b:bd:c6:d3: 80:90:c7:8f:ac:2b:ca:f4:6a:d7:bc:08:cc:3a:e1:5f:1a:11: 2c:08:aa:c1:81:7f:cd:5d:98:aa:68:1e:46:3b:e4:e4:8d:5e: 0b:0b:9f:66:69:df:b0:a1:ce:3b:05:3d:98:3f:49:d1:cb:b4: 36:e5:d4:28:e9:37:8c:44:a7:2c:4d:36:f0:f4:30:b9:09:87: 03:56:0b:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMn2wv4pkOokI5vPYyRjFv7PbY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNTA4MDUxODA2MjNaFw0yNTA4MDkwMzE2MjNaMDMxMTAvBgNV BAMTKDdEMjk5OEQ5NzFGNkI4MTYzQzdCN0UxQ0M2MzY0NkI2NERBQTM0NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDghtGfdxPcvHbdGINDMhR4sfzv DSxE/U5PoA0v5El1CNCXwfmuatuU9BZnhqtLI1UT11//qnZl2vLmqwY6dLyU5vuw ouyuq0gzBSf/ctnsUUF8SByLw+WOWL+RYp0N2CPeM3FG1IeJEWjA/oiRdEQ7hRwG auAWftepicsH0qVVu7aTk+XYJKeVuXYQdyY0KzIkT/zlYQPLdjsMVFxTkwIFTE3/ AIKY+ZLVzQaJzfYoTNmSMzQGjiHSD8B9viuG24sIg4J5+lb5/L/nc07M1KjXZI2Q k6q57YfwRbdAn1KkogWvHlI+62QQUi4hO7IDsYe9Muak2UJtPM06ugo+NNRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfSmY2XH2uBY8e34cxjZGtk2qNHgwHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsE5nFdh1LXRraXs611dzmoLl40xZxo5uxn iC4OLgI9rnn4PkvCXqwkxAHbLLXg//lUIHVKDXYr4G9pV9DKmU2Lk6ogzG4vgGC3 /tB2ToPOj8MocWvH7NwMsIueqbDEAgRMjrUne5v2jT8cZ/Dv/9OJmXQEBrMMsVr0 kpI0xxnXGCkhDd6JAJhRxTA3h6iF0UVj6L2H7Mn7dZumH5UVujtkWnFb/hH+9j5f +e/0NqO2m73G04CQx4+sK8r0ate8CMw64V8aESwIqsGBf81dmKpoHkY75OSNXgsL n2Zp37ChzjsFPZg/SdHLtDbl1CjpN4xEpyxNNvD0MLkJhwNWCxE= -----END CERTIFICATE-----Generated at Thu Aug 7 07:16:55 2025 by rpki-client