$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft File: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json) Hash identifier: e9tFJEvWhPNxHDczYexBrBTjVXwIgVPoS8vGA+QRznM= Subject key identifier: 69:6B:17:E3:73:1C:D5:0A:1A:4E:65:03:A3:E4:68:A9:6C:21:85:8C Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 Certificate issuer: /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Certificate serial: 3831E81C9B846F2F048316ED9884D1D9AC1D6BB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft Manifest number: 01DB Signing time: Wed 15 Apr 2026 22:01:21 +0000 Manifest this update: Wed 15 Apr 2026 21:56:21 +0000 Manifest next update: Sun 19 Apr 2026 01:43:21 +0000 Files and hashes: 1: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: XFJ4mXrxm5b8De0c5m7AQ0upPEoU6HPP5MK0trt0Gr4=) 2: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: voxN2P7kX4GQUAO4IrbkHnqoXvj00h4ITt9ygTaMeAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:31:e8:1c:9b:84:6f:2f:04:83:16:ed:98:84:d1:d9:ac:1d:6b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Validity Not Before: Apr 15 21:56:21 2026 GMT Not After : Apr 19 01:43:21 2026 GMT Subject: CN=696B17E3731CD50A1A4E6503A3E468A96C21858C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:72:53:85:21:1c:cc:0d:dc:0b:2c:71:c5:51: f6:9b:35:71:8a:8d:5c:55:e8:62:00:a1:f2:98:5e: 2d:97:3a:c5:17:e8:33:5e:2e:ea:cd:87:54:e7:6e: ef:a7:00:c1:6b:b6:3c:9f:eb:84:32:18:4f:bd:c8: 4c:40:db:76:d6:64:b8:79:2e:6a:14:0c:1b:9c:5e: 3c:20:f9:42:78:c3:5a:13:5c:ec:94:e8:bc:33:f7: ad:1a:05:15:8f:3b:f9:2f:b0:75:15:c0:d9:3b:be: eb:33:e6:dc:4e:88:3d:f9:52:9f:af:9b:7c:38:a4: 3a:9a:50:10:a6:a3:59:aa:d8:f0:ba:a1:cb:8f:43: 45:90:34:1f:b1:db:b0:99:b5:97:d6:1d:84:b7:fa: ae:aa:cd:bc:8b:a7:32:da:7b:e0:c5:75:77:80:2c: 27:30:38:90:54:32:fd:b9:23:cd:ca:97:79:cf:91: c1:6d:37:e8:5f:bb:da:4d:27:5c:a6:33:84:22:01: b2:06:98:f1:a6:ca:81:bf:55:db:4c:db:87:b9:1a: 00:90:d7:27:02:99:f1:c9:46:a7:90:e9:d7:08:b9: 8a:88:d5:c6:63:7c:c1:dc:f9:51:34:c9:b8:86:d7: f0:ad:3d:5f:87:b9:6b:bc:1d:fd:ca:ae:e5:d1:c7: 7d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6B:17:E3:73:1C:D5:0A:1A:4E:65:03:A3:E4:68:A9:6C:21:85:8C X509v3 Authority Key Identifier: keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:11:d3:ac:37:e7:5f:3d:a1:54:20:f6:5e:73:eb:09:fe:ab: e8:d3:e9:f7:6f:cc:06:44:75:18:6a:39:61:f9:a4:4b:49:9a: 5d:55:0a:84:2b:8e:9d:12:7c:36:22:70:6c:a8:62:11:0d:8c: f1:67:7c:99:f3:6f:9c:c2:7f:b4:f8:d2:4f:ce:8b:70:61:9d: 19:42:38:cf:c1:3e:e6:2b:fc:b8:70:36:a6:cc:7d:19:61:cc: c8:86:fb:75:23:f8:d9:d4:fb:ba:46:5e:18:a5:1e:8c:40:ce: f7:c8:a5:d1:40:00:46:6f:ad:6a:f3:86:1d:20:31:42:46:2c: 45:04:ff:c6:9b:8a:92:01:a9:bf:39:19:3f:36:fe:db:05:46: 8d:95:ea:23:b9:81:6a:9c:b2:b8:a1:8f:aa:21:84:91:13:0e: ac:92:0b:bf:2a:f1:3e:dc:ad:c0:81:5b:b1:e7:ef:79:b6:be: 56:ec:3e:e9:fb:d4:59:6f:5d:33:85:ae:21:2e:89:af:61:dd: a9:5f:9b:9f:94:a8:b4:84:41:1a:82:9c:5c:be:b6:f3:35:e8: c5:de:cc:94:22:e7:e8:51:07:92:9f:a7:29:87:33:95:85:fa: 84:fe:6d:19:96:e5:43:19:e9:e8:19:5d:37:87:53:70:fb:56: 1f:ba:fd:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODHoHJuEby8EgxbtmITR2awda7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgz OEUwQzY3NTAeFw0yNjA0MTUyMTU2MjFaFw0yNjA0MTkwMTQzMjFaMDMxMTAvBgNV BAMTKDY5NkIxN0UzNzMxQ0Q1MEExQTRFNjUwM0EzRTQ2OEE5NkMyMTg1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgclOFIRzMDdwLLHHFUfabNXGK jVxV6GIAofKYXi2XOsUX6DNeLurNh1Tnbu+nAMFrtjyf64QyGE+9yExA23bWZLh5 LmoUDBucXjwg+UJ4w1oTXOyU6Lwz960aBRWPO/kvsHUVwNk7vusz5txOiD35Up+v m3w4pDqaUBCmo1mq2PC6ocuPQ0WQNB+x27CZtZfWHYS3+q6qzbyLpzLae+DFdXeA LCcwOJBUMv25I83Kl3nPkcFtN+hfu9pNJ1ymM4QiAbIGmPGmyoG/VdtM24e5GgCQ 1ycCmfHJRqeQ6dcIuYqI1cZjfMHc+VE0ybiG1/CtPV+HuWu8Hf3KruXRx31ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaWsX43Mc1QoaTmUDo+RoqWwhhYwwHwYDVR0j BBgwFoAU76S/mg0t1XRGEmxX85rxCDjgxnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2UyN2RhOS1lNmU2LTQ0YTUtOThmNC01OTBlYjVhMWJkNjUvMC9FRkE0QkY5QTBE MkRENTc0NDYxMjZDNTdGMzlBRjEwODM4RTBDNjc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgzOEUw QzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYx MDgzOEUwQzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIR06w35189oVQg9l5z6wn+q+jT6fdvzAZE dRhqOWH5pEtJml1VCoQrjp0SfDYicGyoYhENjPFnfJnzb5zCf7T40k/Oi3BhnRlC OM/BPuYr/LhwNqbMfRlhzMiG+3Uj+NnU+7pGXhilHoxAzvfIpdFAAEZvrWrzhh0g MUJGLEUE/8abipIBqb85GT82/tsFRo2V6iO5gWqcsrihj6ohhJETDqySC78q8T7c rcCBW7Hn73m2vlbsPun71FlvXTOFriEuia9h3alfm5+UqLSEQRqCnFy+tvM16MXe zJQi5+hRB5KfpymHM5WF+oT+bRmW5UMZ6egZXTeHU3D7Vh+6/YQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:59:20 2026 by rpki-client