$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: yXVwgT9QBHGBx0R0r+xivjYSejtdzxunmPgcXJeH7CQ= Subject key identifier: 53:40:D0:58:5B:10:00:86:AC:33:82:34:15:4E:28:4A:85:E5:31:BB Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 1B53F4F0A864DBE544B5BF8E7AD7F04F94C78DDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: B5 Signing time: Mon 16 Jun 2025 08:11:23 +0000 Manifest this update: Mon 16 Jun 2025 08:06:23 +0000 Manifest next update: Thu 19 Jun 2025 17:59:23 +0000 Files and hashes: 1: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: lSaX6qB9ZLjTVzcYNfW4UyE+WnffpmecHKKq7mmgCVI=) 2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:53:f4:f0:a8:64:db:e5:44:b5:bf:8e:7a:d7:f0:4f:94:c7:8d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Jun 16 08:06:23 2025 GMT Not After : Jun 19 17:59:23 2025 GMT Subject: CN=5340D0585B100086AC338234154E284A85E531BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:fa:a6:5e:8e:74:44:3c:28:a0:67:85:47: 0b:9d:5b:c7:20:38:d5:2b:aa:f0:a2:38:80:f7:ac: 8a:a1:4d:f0:54:a8:e6:b6:54:51:e5:28:0b:00:b3: a4:cc:ff:41:fa:3b:4d:aa:64:ab:82:91:4a:3a:b9: e5:64:54:68:38:a9:99:20:84:96:88:85:1f:91:d1: 37:76:84:e0:63:4a:65:23:72:27:6d:93:00:df:65: e0:b1:6d:e4:cf:2e:1d:43:e2:0c:f5:2e:6c:be:86: e3:51:b4:36:5c:5e:e8:e7:cc:76:53:28:cb:6d:da: 48:a6:3a:68:45:7a:12:e4:1e:10:7d:e7:4e:43:9b: 60:f5:82:83:a1:fb:97:ab:36:79:95:3a:9d:b7:2f: 28:52:6e:b8:41:67:2a:1b:48:1e:89:ed:fe:c6:90: a7:e3:7d:44:bb:0f:90:e1:f4:63:e9:76:4f:bf:8c: b2:d5:21:f7:f1:b8:15:7f:e7:7d:fc:5e:a2:fe:c5: 07:4b:43:a1:39:63:20:85:81:a4:b5:e8:f1:13:28: 40:6b:8a:47:49:5b:c2:26:9c:99:66:e5:15:d6:dc: b1:72:08:f0:f9:14:0f:e6:b0:96:07:cb:85:ca:be: 09:3e:6a:bd:bc:98:48:57:d0:a7:e5:22:96:28:cd: c5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:40:D0:58:5B:10:00:86:AC:33:82:34:15:4E:28:4A:85:E5:31:BB X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:08:a1:36:16:73:0d:e9:b9:ea:f3:fb:7f:96:ca:53:58:d0: 5d:7e:26:5e:29:93:65:48:20:e7:ee:cf:29:0b:97:13:9a:c3: ca:88:a5:e8:6d:5c:dc:b9:2c:4c:11:42:1f:f8:d2:f5:f2:9e: d3:57:cd:37:ff:44:0c:6c:e3:4a:48:f0:89:7b:8f:f1:65:f9: a9:b8:ee:6b:27:1c:ca:e3:8d:90:c8:2e:4a:42:b2:aa:f9:81: ba:43:ac:b2:5e:86:05:25:10:5d:05:27:67:d2:19:e6:3f:52: c2:c3:bc:1d:55:7e:f8:a9:2c:9b:2c:a6:40:46:4a:de:69:ea: 06:ab:ec:2d:64:89:a6:76:40:da:0f:76:de:01:7e:a0:e1:1b: bd:be:b7:a5:27:22:41:f8:52:11:20:db:78:87:9f:e8:80:41: ee:c3:86:9e:89:a5:ac:6a:9a:c2:17:38:29:40:bd:ef:24:30: 82:28:94:cb:c6:c6:96:a7:1e:93:6f:63:2d:22:8d:0a:e9:c0: 54:fa:57:92:0d:bc:aa:87:c3:6c:fb:59:b6:28:70:8d:da:b6: c4:a0:85:e5:2a:9e:b4:0f:ce:54:e4:cb:a8:26:75:44:04:05: 04:90:b5:75:ef:5c:26:ef:0e:ca:a4:f5:89:a2:68:ae:8f:29: 52:7d:fc:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1P08Khk2+VEtb+OetfwT5THjd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNTA2MTYwODA2MjNaFw0yNTA2MTkxNzU5MjNaMDMxMTAvBgNV BAMTKDUzNDBEMDU4NUIxMDAwODZBQzMzODIzNDE1NEUyODRBODVFNTMxQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBffqmXo50RDwooGeFRwudW8cg ONUrqvCiOID3rIqhTfBUqOa2VFHlKAsAs6TM/0H6O02qZKuCkUo6ueVkVGg4qZkg hJaIhR+R0Td2hOBjSmUjcidtkwDfZeCxbeTPLh1D4gz1Lmy+huNRtDZcXujnzHZT KMtt2kimOmhFehLkHhB9505Dm2D1goOh+5erNnmVOp23LyhSbrhBZyobSB6J7f7G kKfjfUS7D5Dh9GPpdk+/jLLVIffxuBV/5338XqL+xQdLQ6E5YyCFgaS16PETKEBr ikdJW8ImnJlm5RXW3LFyCPD5FA/msJYHy4XKvgk+ar28mEhX0KflIpYozcXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU0DQWFsQAIasM4I0FU4oSoXlMbswHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM8IoTYWcw3puerz+3+WylNY0F1+Jl4pk2VI IOfuzykLlxOaw8qIpehtXNy5LEwRQh/40vXyntNXzTf/RAxs40pI8Il7j/Fl+am4 7msnHMrjjZDILkpCsqr5gbpDrLJehgUlEF0FJ2fSGeY/UsLDvB1VfvipLJsspkBG St5p6gar7C1kiaZ2QNoPdt4BfqDhG72+t6UnIkH4UhEg23iHn+iAQe7Dhp6Jpaxq msIXOClAve8kMIIolMvGxpanHpNvYy0ijQrpwFT6V5INvKqHw2z7WbYocI3atsSg heUqnrQPzlTky6gmdUQEBQSQtXXvXCbvDsqk9YmiaK6PKVJ9/LQ= -----END CERTIFICATE-----Generated at Wed Jun 18 00:10:20 2025 by rpki-client