$ rpki-client -vvf repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft File: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft (raw, json) Hash identifier: 2WMdOkkvxJxUh1WT2Xrn+QjfgvbdaD+e8Iy79tJLqHM= Subject key identifier: 46:AD:0B:33:F4:2F:00:D2:C7:AD:46:59:1F:0C:F5:CF:91:A0:03:A8 Authority key identifier: EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 Certificate issuer: /CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Certificate serial: 3B1A388B3AA326D123E1FAA39D914F357C2E5F94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft Manifest number: 01C7 Signing time: Sun 01 Mar 2026 12:51:18 +0000 Manifest this update: Sun 01 Mar 2026 12:46:18 +0000 Manifest next update: Wed 04 Mar 2026 23:18:18 +0000 Files and hashes: 1: 3130332e3235332e3132372e302f32342d3234203d3e20313530393839.roa (hash: voxN2P7kX4GQUAO4IrbkHnqoXvj00h4ITt9ygTaMeAk=) 2: EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl (hash: dnFtu825XSm8VCXqyNpQqQ/z4ZWVhdTY/Rkc9SqXfP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1a:38:8b:3a:a3:26:d1:23:e1:fa:a3:9d:91:4f:35:7c:2e:5f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFA4BF9A0D2DD57446126C57F39AF10838E0C675 Validity Not Before: Mar 1 12:46:18 2026 GMT Not After : Mar 4 23:18:18 2026 GMT Subject: CN=46AD0B33F42F00D2C7AD46591F0CF5CF91A003A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1c:c3:20:29:e4:e5:12:fc:c2:19:73:21:1e: d4:a9:67:eb:85:80:88:22:2f:db:24:1d:7c:1b:17: 3c:01:4b:68:1f:d8:d2:1b:7a:06:a1:41:e9:02:65: b5:9c:73:0d:71:51:d4:9d:b0:5d:0a:a8:68:8e:99: c5:eb:8a:7f:92:03:db:8d:ab:ad:fa:20:10:ed:db: 19:fd:c0:b4:be:22:33:a4:ce:c3:35:fc:75:33:45: 81:a2:4a:ea:59:b5:e7:aa:c7:92:05:93:c6:7e:81: de:a7:f8:96:93:9d:f0:d3:8f:0b:1d:ff:71:39:f4: 71:35:0d:1a:73:3f:5c:63:67:10:5e:05:f9:c6:7f: 57:ea:fb:23:d5:f6:6b:9c:6a:54:34:ae:1c:22:b8: b2:fb:e8:54:ba:a2:25:d4:33:6a:84:f4:ef:92:1a: 96:86:2a:f0:6a:64:44:75:04:6a:8b:bc:70:82:b6: 4d:5f:87:54:3f:eb:ec:b7:92:fc:08:1f:d3:24:4d: 0c:e1:12:73:f0:6d:e7:88:fe:f8:59:9b:d2:c9:74: aa:27:28:5f:33:f4:f7:af:63:d8:9a:24:54:4b:c6: 83:0f:90:02:a0:5f:2a:8f:66:9f:98:aa:dd:94:1d: 88:31:65:2e:92:93:9c:20:de:2b:05:28:d3:53:e9: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AD:0B:33:F4:2F:00:D2:C7:AD:46:59:1F:0C:F5:CF:91:A0:03:A8 X509v3 Authority Key Identifier: keyid:EF:A4:BF:9A:0D:2D:D5:74:46:12:6C:57:F3:9A:F1:08:38:E0:C6:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3e27da9-e6e6-44a5-98f4-590eb5a1bd65/0/EFA4BF9A0D2DD57446126C57F39AF10838E0C675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b1:45:ba:f0:8e:aa:bb:92:1c:79:01:ba:16:e3:1a:7a:fa: 7b:16:e2:1e:e1:fd:80:64:b0:4c:cf:f0:78:b8:ef:05:30:85: d7:cf:ea:2d:f2:90:60:e9:92:98:32:0b:c8:1d:23:20:5f:bb: 5b:f8:d5:d6:a2:2b:12:9f:7b:ff:aa:a5:1f:62:91:21:e7:1a: aa:19:f4:e1:9a:47:a7:3c:09:52:05:0a:65:14:08:7b:62:8f: ce:4f:62:37:38:f5:74:d1:ba:c7:eb:be:6c:83:04:2f:02:e0: 78:64:e8:d6:3f:a1:59:9f:7f:3d:91:f1:18:2e:c6:90:46:cf: 3f:89:94:06:20:19:6a:1e:da:8e:ee:56:e2:6d:7a:69:0a:96: 85:a0:8d:cc:fa:8b:ed:d7:19:04:b9:67:45:da:b9:8f:22:ba: ab:a6:76:a6:db:c6:28:cd:42:81:82:56:be:69:bf:43:e9:76: d6:40:7e:69:ec:20:2e:a6:02:81:7c:70:5d:8f:d5:fa:d2:09: e6:9c:ad:88:34:65:8c:c6:62:c3:6e:fd:cc:1c:5d:b6:ce:f6: 79:34:b6:7f:ff:68:86:90:0b:65:1b:cc:5d:1d:08:fa:5f:4d: 48:9d:ab:5a:21:47:5b:fe:4b:56:ad:ee:97:b8:b9:0f:8a:8b: 2b:06:3d:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxo4izqjJtEj4fqjnZFPNXwuX5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgz OEUwQzY3NTAeFw0yNjAzMDExMjQ2MThaFw0yNjAzMDQyMzE4MThaMDMxMTAvBgNV BAMTKDQ2QUQwQjMzRjQyRjAwRDJDN0FENDY1OTFGMENGNUNGOTFBMDAzQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcHMMgKeTlEvzCGXMhHtSpZ+uF gIgiL9skHXwbFzwBS2gf2NIbegahQekCZbWccw1xUdSdsF0KqGiOmcXrin+SA9uN q636IBDt2xn9wLS+IjOkzsM1/HUzRYGiSupZteeqx5IFk8Z+gd6n+JaTnfDTjwsd /3E59HE1DRpzP1xjZxBeBfnGf1fq+yPV9mucalQ0rhwiuLL76FS6oiXUM2qE9O+S GpaGKvBqZER1BGqLvHCCtk1fh1Q/6+y3kvwIH9MkTQzhEnPwbeeI/vhZm9LJdKon KF8z9PevY9iaJFRLxoMPkAKgXyqPZp+Yqt2UHYgxZS6Sk5wg3isFKNNT6estAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURq0LM/QvANLHrUZZHwz1z5GgA6gwHwYDVR0j BBgwFoAU76S/mg0t1XRGEmxX85rxCDjgxnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2UyN2RhOS1lNmU2LTQ0YTUtOThmNC01OTBlYjVhMWJkNjUvMC9FRkE0QkY5QTBE MkRENTc0NDYxMjZDNTdGMzlBRjEwODM4RTBDNjc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYxMDgzOEUw QzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlMjdkYTktZTZlNi00NGE1LTk4 ZjQtNTkwZWI1YTFiZDY1LzAvRUZBNEJGOUEwRDJERDU3NDQ2MTI2QzU3RjM5QUYx MDgzOEUwQzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADixRbrwjqq7khx5AboW4xp6+nsW4h7h/YBk sEzP8Hi47wUwhdfP6i3ykGDpkpgyC8gdIyBfu1v41daiKxKfe/+qpR9ikSHnGqoZ 9OGaR6c8CVIFCmUUCHtij85PYjc49XTRusfrvmyDBC8C4Hhk6NY/oVmffz2R8Rgu xpBGzz+JlAYgGWoe2o7uVuJtemkKloWgjcz6i+3XGQS5Z0XauY8iuqumdqbbxijN QoGCVr5pv0PpdtZAfmnsIC6mAoF8cF2P1frSCeacrYg0ZYzGYsNu/cwcXbbO9nk0 tn//aIaQC2UbzF0dCPpfTUidq1ohR1v+S1at7pe4uQ+KiysGPWM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:23 2026 by rpki-client