$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: DY61PWUm2f3HOgfGx9+R/eOudyqI2Xiv8avOiXjMhLw= Subject key identifier: 65:CB:81:19:00:8A:77:B2:B7:8C:33:CE:1C:13:4E:13:1A:A7:B4:1A Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 7890D8A05FC066E9D7C93A2C253918179EEA3AA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 01E1 Signing time: Sun 02 Nov 2025 22:01:18 +0000 Manifest this update: Sun 02 Nov 2025 21:56:18 +0000 Manifest next update: Thu 06 Nov 2025 01:44:18 +0000 Files and hashes: 1: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: QcgE52+IYWBQBN6vM5TLfybnRUTXJYqTDcO7w9U0hvg=) 2: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) 3: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: bSd7lFuLXvK7t89PrxW8ofWlYEOIMss9c7qTJsvJO80=) 4: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: a5r+evyHi4RcP5APmnZM1VFgptF4O6HvhFasr9olIfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:90:d8:a0:5f:c0:66:e9:d7:c9:3a:2c:25:39:18:17:9e:ea:3a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Nov 2 21:56:18 2025 GMT Not After : Nov 6 01:44:18 2025 GMT Subject: CN=65CB8119008A77B2B78C33CE1C134E131AA7B41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:33:6e:31:58:52:3c:be:7c:39:6a:9a:2a:15: ac:7c:7d:bb:5b:ba:ca:a1:1e:e3:4d:a1:d6:2c:6d: 65:e9:9a:a8:e9:1c:f2:65:07:2f:06:7c:3a:37:76: b7:b3:35:83:39:70:14:65:c3:4d:74:aa:93:7f:28: 1d:42:dc:60:d4:1a:85:65:66:4c:36:a9:fc:3e:87: 05:c1:47:c9:96:2f:c3:98:7f:62:45:50:84:ce:d5: 36:01:c4:7e:45:ca:cf:70:e2:09:a9:05:fa:3a:c8: ae:c9:53:a9:18:5a:e7:77:5a:94:98:06:d4:ea:88: 11:e8:ce:1a:a2:ed:11:81:da:24:f0:82:0e:c8:a8: 34:cd:be:80:61:70:19:41:4a:4d:fc:19:75:4f:f9: 10:81:5e:12:9a:d4:3d:a5:35:89:83:08:90:c9:98: 0a:75:81:55:cb:2a:b9:18:8b:e5:d6:be:06:6c:8b: a0:02:ce:13:3f:5e:3e:1f:fc:e0:06:f9:5f:68:ea: f1:6e:2f:02:17:bf:0f:bc:f8:3b:05:95:06:be:c7: 55:fa:d8:7a:f9:71:e8:26:8c:29:a3:25:d0:30:6e: 1a:c9:42:bc:d8:07:61:e0:d8:3e:3e:df:76:b3:84: 84:c2:2c:63:b2:b6:48:89:d7:3e:1b:15:b6:e8:72: 5a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CB:81:19:00:8A:77:B2:B7:8C:33:CE:1C:13:4E:13:1A:A7:B4:1A X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:9f:1c:c0:e2:2d:ca:23:4d:eb:1e:61:19:c7:15:f1:f3:45: 8d:fb:2e:62:7b:c1:8c:c8:5f:20:7b:0b:82:40:20:66:07:39: 22:3d:a0:d5:86:c9:0f:fc:0c:03:07:40:c6:e5:d6:a3:29:c7: 6e:ef:f2:54:c2:c3:91:20:84:0c:c8:6d:c3:d9:bd:b3:42:1c: c0:46:be:99:65:d8:6b:ee:78:84:e9:b3:74:ce:32:93:7e:51: 66:2d:3c:68:5e:fd:c6:1a:fd:33:37:ab:c7:a2:a8:86:5a:cb: 98:67:e6:14:1f:c7:26:2c:d0:7e:a2:fc:b4:86:d8:44:10:86: 72:3b:a7:47:01:89:16:1d:a6:63:61:bc:0f:9d:41:73:8a:91: 93:00:cb:25:48:d0:d8:d0:a0:01:0d:e3:e0:78:74:4e:78:8e: 8b:a8:d7:82:e5:56:a8:a7:68:44:9c:0e:d0:dc:97:1c:17:99: 91:0e:2b:fd:19:87:be:7b:f5:a7:07:7b:6a:00:9c:b1:b9:f0: 8d:33:a5:1f:0b:a4:b5:0e:8c:9b:46:66:37:f0:69:c0:e4:b6: 6d:0c:2b:06:6d:71:e7:73:9f:64:10:88:39:f2:d0:88:95:b0: 07:c3:f0:3e:d0:af:9f:1a:8d:09:07:57:42:fa:e4:84:b9:56: 9e:e0:5d:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJDYoF/AZunXyTosJTkYF57qOqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNTExMDIyMTU2MThaFw0yNTExMDYwMTQ0MThaMDMxMTAvBgNV BAMTKDY1Q0I4MTE5MDA4QTc3QjJCNzhDMzNDRTFDMTM0RTEzMUFBN0I0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuM24xWFI8vnw5apoqFax8fbtb usqhHuNNodYsbWXpmqjpHPJlBy8GfDo3drezNYM5cBRlw010qpN/KB1C3GDUGoVl Zkw2qfw+hwXBR8mWL8OYf2JFUITO1TYBxH5Fys9w4gmpBfo6yK7JU6kYWud3WpSY BtTqiBHozhqi7RGB2iTwgg7IqDTNvoBhcBlBSk38GXVP+RCBXhKa1D2lNYmDCJDJ mAp1gVXLKrkYi+XWvgZsi6ACzhM/Xj4f/OAG+V9o6vFuLwIXvw+8+DsFlQa+x1X6 2Hr5cegmjCmjJdAwbhrJQrzYB2Hg2D4+33azhITCLGOytkiJ1z4bFbboclrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZcuBGQCKd7K3jDPOHBNOExqntBowHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEifHMDiLcojTeseYRnHFfHzRY37LmJ7wYzI XyB7C4JAIGYHOSI9oNWGyQ/8DAMHQMbl1qMpx27v8lTCw5EghAzIbcPZvbNCHMBG vpll2GvueITps3TOMpN+UWYtPGhe/cYa/TM3q8eiqIZay5hn5hQfxyYs0H6i/LSG 2EQQhnI7p0cBiRYdpmNhvA+dQXOKkZMAyyVI0NjQoAEN4+B4dE54jouo14LlVqin aEScDtDclxwXmZEOK/0Zh7579acHe2oAnLG58I0zpR8LpLUOjJtGZjfwacDktm0M KwZtcedzn2QQiDny0IiVsAfD8D7Qr58ajQkHV0L65IS5Vp7gXQo= -----END CERTIFICATE-----Generated at Tue Nov 4 08:21:19 2025 by rpki-client