$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft File: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json) Hash identifier: 5fAzE1TF6YyHy6tYiKpOUn2PUlP64f2uSTsL5IpVa9k= Subject key identifier: EF:10:75:8E:E0:2F:2E:CD:95:59:FD:DC:86:44:20:0E:09:8D:95:28 Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 Certificate issuer: /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Certificate serial: 05F01C4183A3F8E4AE9C397A4D1D5DA944CFBAFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft Manifest number: 0154 Signing time: Tue 17 Jun 2025 17:01:11 +0000 Manifest this update: Tue 17 Jun 2025 16:56:11 +0000 Manifest next update: Sat 21 Jun 2025 00:12:11 +0000 Files and hashes: 1: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: tiskF97htgFGOxcUjLLoNbBwjgTxxSKvgdsrNkZUkUk=) 2: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: Xb2+Hoyo93Qa/cnV+A6fMdAPwIhN2dUkVz74Pd139GA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 00:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f0:1c:41:83:a3:f8:e4:ae:9c:39:7a:4d:1d:5d:a9:44:cf:ba:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Validity Not Before: Jun 17 16:56:11 2025 GMT Not After : Jun 21 00:12:11 2025 GMT Subject: CN=EF10758EE02F2ECD9559FDDC8644200E098D9528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:a3:15:6a:76:3e:85:ab:f4:e2:6e:b6:62: 1c:1b:cc:bf:4c:c5:71:c3:03:37:a5:c2:83:b0:71: da:8e:e5:90:5b:39:f4:9a:ab:49:ae:2f:01:d0:01: 1b:11:8f:d5:03:62:50:35:ce:54:9a:26:45:4f:fd: a3:2d:42:b9:07:6b:a2:67:06:19:5d:30:73:6e:1e: 0f:64:48:78:ef:3a:f6:9a:20:0e:e3:ba:21:4b:79: 71:5c:80:65:dc:5e:48:6d:f1:a8:8e:52:77:2f:07: b3:42:5e:b1:a9:91:2f:2f:77:f9:28:79:69:a2:e7: 7a:83:06:26:2a:29:01:57:47:82:5b:04:47:a9:66: 6b:d5:c7:d2:a1:11:86:41:33:1e:62:78:21:02:00: 28:3b:b3:f8:9a:b7:ac:54:06:e2:fd:24:99:f5:47: 1d:c8:73:21:13:fc:78:50:6e:af:fa:64:d6:97:8b: 21:c1:38:10:bb:eb:fb:81:44:40:81:bb:96:16:50: 99:f6:c2:cd:e6:b1:ce:07:f5:7e:0e:fd:eb:c8:df: a0:f5:a1:e3:ce:83:96:de:49:00:59:51:2e:86:78: f3:6a:f0:86:61:c6:ee:c9:89:fb:6e:24:60:33:14: 2b:39:77:e8:c1:59:cc:c3:b9:2e:35:24:50:f3:1b: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:10:75:8E:E0:2F:2E:CD:95:59:FD:DC:86:44:20:0E:09:8D:95:28 X509v3 Authority Key Identifier: keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:06:d4:d6:fa:57:89:22:2c:51:4b:b8:f6:e5:08:62:ad:a9: 84:0d:56:56:9d:5c:4a:e7:4c:7b:51:00:ed:02:98:7a:b4:2b: 5b:74:22:27:de:68:90:ea:e2:cc:73:bb:14:40:f2:15:bc:be: ba:2d:c1:c3:cf:34:2d:d4:d8:e0:f6:b9:53:07:78:1d:26:73: b8:e6:8e:5f:a5:a7:a0:9c:ce:13:5d:62:40:10:db:8a:dd:8b: 95:10:e9:81:00:f0:66:96:70:43:06:80:ed:61:05:68:f1:e2: c5:9b:70:c4:78:d4:bf:13:b2:fc:31:0d:d4:34:a5:ba:ce:eb: 3f:ef:3a:76:95:cf:01:17:01:d7:fc:a0:55:49:24:f9:30:16: 3e:d5:6c:2b:ea:1a:64:be:f5:9e:d9:ac:57:4f:1b:55:39:d2: bc:43:0c:d6:87:86:0c:7b:4a:b8:53:09:08:df:e3:6e:c7:b6: 58:fd:dd:f4:72:ca:51:52:af:ce:6b:80:c7:bd:c7:96:84:13: 65:4f:03:b7:b6:48:1f:eb:5d:df:08:7a:ec:3b:9a:d5:ee:2f: 99:76:d5:ab:f3:20:89:cd:dd:c2:aa:14:38:31:13:ec:ad:dd: 46:87:ff:a1:59:e2:db:e8:e8:ad:12:fb:e0:02:d4:32:4e:c4: 60:11:7e:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfAcQYOj+OSunDl6TR1dqUTPuvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgz OEUwQzY3NTAeFw0yNTA2MTcxNjU2MTFaFw0yNTA2MjEwMDEyMTFaMDMxMTAvBgNV BAMTKEVGMTA3NThFRTAyRjJFQ0Q5NTU5RkREQzg2NDQyMDBFMDk4RDk1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3b6MVanY+hav04m62YhwbzL9M xXHDAzelwoOwcdqO5ZBbOfSaq0muLwHQARsRj9UDYlA1zlSaJkVP/aMtQrkHa6Jn BhldMHNuHg9kSHjvOvaaIA7juiFLeXFcgGXcXkht8aiOUncvB7NCXrGpkS8vd/ko eWmi53qDBiYqKQFXR4JbBEepZmvVx9KhEYZBMx5ieCECACg7s/iat6xUBuL9JJn1 Rx3IcyET/HhQbq/6ZNaXiyHBOBC76/uBRECBu5YWUJn2ws3msc4H9X4O/evI36D1 oePOg5beSQBZUS6GePNq8IZhxu7JiftuJGAzFCs5d+jBWczDuS41JFDzG01TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7xB1juAvLs2VWf3chkQgDgmNlSgwHwYDVR0j BBgwFoAU76S/mg0t1XRGEmxX85rxCDjgxnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2UyN2RhOS1lNmU2LTQ0YTUtOThmNC01OTBlYjVhMWJkNjUvMC9FRkE0QkY5QTBE MkRENTc0NDYxMjZDNTdGMzlBRjEwODM4RTBDNjc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgzOEUw QzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYx MDgzOEUwQzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcG1Nb6V4kiLFFLuPblCGKtqYQNVladXErn THtRAO0CmHq0K1t0IifeaJDq4sxzuxRA8hW8vrotwcPPNC3U2OD2uVMHeB0mc7jm jl+lp6CczhNdYkAQ24rdi5UQ6YEA8GaWcEMGgO1hBWjx4sWbcMR41L8TsvwxDdQ0 pbrO6z/vOnaVzwEXAdf8oFVJJPkwFj7VbCvqGmS+9Z7ZrFdPG1U50rxDDNaHhgx7 SrhTCQjf427Htlj93fRyylFSr85rgMe9x5aEE2VPA7e2SB/rXd8Ieuw7mtXuL5l2 1avzIInN3cKqFDgxE+yt3UaH/6FZ4tvo6K0S++AC1DJOxGARfic= -----END CERTIFICATE-----Generated at Wed Jun 18 09:14:07 2025 by rpki-client