$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: QNYRP2Emx1l3RNT90hVNJZXieds6SE3UDO5HAD2xy0k= Subject key identifier: 7F:9B:06:3E:A8:3F:D2:E8:E8:16:5D:75:8A:F8:A7:25:A3:1A:A9:9E Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 5BB3F2F464BBA9927FBA1874A634181B4D42C931 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 01A4 Signing time: Tue 17 Jun 2025 14:21:17 +0000 Manifest this update: Tue 17 Jun 2025 14:16:17 +0000 Manifest next update: Fri 20 Jun 2025 21:17:17 +0000 Files and hashes: 1: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) 2: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: FJDsTUoQ5hxohv3Tum1c0CVcjyhBeoP0KADOT44y16M=) 3: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: zhfT9dzqYt1bB25St2DI6pASSgOwxgdrMpQzPwr4zdA=) 4: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: RJCqubu8qbtGpPN7MXXSa7nQdF5Bw0374TSVNQhH0cg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 21:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b3:f2:f4:64:bb:a9:92:7f:ba:18:74:a6:34:18:1b:4d:42:c9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: Jun 17 14:16:17 2025 GMT Not After : Jun 20 21:17:17 2025 GMT Subject: CN=7F9B063EA83FD2E8E8165D758AF8A725A31AA99E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:2e:5d:14:75:1e:38:4c:c7:74:db:21:54: aa:66:f1:d2:0c:ca:7d:23:93:3b:60:72:23:ad:a3: ac:cc:f9:42:9f:e4:5d:1a:2e:f6:ee:92:a2:85:59: 31:4b:b6:5a:ca:e2:2d:ef:4f:e1:3f:30:8a:5b:22: 68:78:4f:ef:11:7c:70:b9:99:7d:6e:49:60:d1:4e: c2:94:a7:1f:ce:61:63:b4:28:7e:03:50:f4:08:67: 59:5b:6d:9b:ed:ab:3a:34:8d:73:ef:51:e4:36:bd: be:bf:d3:98:98:6a:ec:48:34:41:85:4b:aa:81:1e: 45:83:b2:73:45:5c:d4:a3:8f:62:ad:f3:15:01:81: 4b:b7:f1:f0:54:9a:87:72:5e:a8:36:7f:d9:a4:1d: 4c:90:e6:bf:e7:47:3a:dd:7d:47:08:3c:98:d5:06: 17:85:5c:75:bb:98:19:29:34:a5:fe:f5:d1:60:f9: b5:b2:ea:a5:f4:e6:53:65:1a:49:5e:33:8b:ad:d7: bd:45:f4:c5:16:1f:19:47:b7:87:c7:90:eb:e7:21: 9f:db:17:fe:18:54:34:a0:5d:47:e9:66:1e:e7:b6: 45:ad:23:91:45:81:3f:99:d0:7b:7e:d4:ad:f9:47: 05:45:ef:56:dd:6b:d5:65:f4:a2:f1:cf:92:16:53: b9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9B:06:3E:A8:3F:D2:E8:E8:16:5D:75:8A:F8:A7:25:A3:1A:A9:9E X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:eb:20:cd:56:83:93:b8:c6:62:5f:33:56:18:1e:b7:2c:a1: 74:c6:37:76:2c:a3:8f:49:84:f1:26:8b:5c:83:6c:b0:91:c4: 5e:bf:00:cb:57:74:61:eb:57:0a:c7:9c:b4:73:d3:2e:68:28: 16:5a:dd:1e:00:0f:04:e1:eb:28:11:c0:a8:2d:b3:da:cf:98: b7:87:fa:f4:09:f7:ac:05:e1:20:82:d5:aa:1d:2a:8b:9f:83: a4:98:19:b8:9d:6f:4a:8e:db:c4:f9:c6:fd:b6:f9:9e:32:54: 8c:2c:46:dd:d3:c8:09:cc:45:89:40:cc:fd:64:0e:7d:51:75: f4:f7:f3:a4:eb:5f:71:f4:e5:5f:65:c3:84:a5:c4:ce:da:3a: 7c:19:1f:2f:10:b4:f6:fc:36:40:de:31:7e:f5:26:23:9b:7e: e1:0f:bd:e7:bc:5d:32:e1:de:ee:94:49:22:66:e7:c6:86:16: 70:b2:fa:73:a2:51:b7:34:dd:7e:d8:f4:4a:fc:89:19:20:2b: cf:2f:47:8c:60:85:0c:53:cc:bf:f4:16:47:06:2c:e6:a0:36: 85:70:9f:b4:12:81:a0:3e:a7:ed:08:d8:81:23:1c:c2:30:db: 8c:9b:22:96:4b:73:90:74:0e:1f:f2:d1:a9:d6:f0:fc:ac:57: 3e:c1:a8:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7Py9GS7qZJ/uhh0pjQYG01CyTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNTA2MTcxNDE2MTdaFw0yNTA2MjAyMTE3MTdaMDMxMTAvBgNV BAMTKDdGOUIwNjNFQTgzRkQyRThFODE2NUQ3NThBRjhBNzI1QTMxQUE5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ay5dFHUeOEzHdNshVKpm8dIM yn0jkztgciOto6zM+UKf5F0aLvbukqKFWTFLtlrK4i3vT+E/MIpbImh4T+8RfHC5 mX1uSWDRTsKUpx/OYWO0KH4DUPQIZ1lbbZvtqzo0jXPvUeQ2vb6/05iYauxINEGF S6qBHkWDsnNFXNSjj2Kt8xUBgUu38fBUmodyXqg2f9mkHUyQ5r/nRzrdfUcIPJjV BheFXHW7mBkpNKX+9dFg+bWy6qX05lNlGkleM4ut171F9MUWHxlHt4fHkOvnIZ/b F/4YVDSgXUfpZh7ntkWtI5FFgT+Z0Ht+1K35RwVF71bda9Vl9KLxz5IWU7nbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf5sGPqg/0ujoFl11ivinJaMaqZ4wHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjrIM1Wg5O4xmJfM1YYHrcsoXTGN3Yso49J hPEmi1yDbLCRxF6/AMtXdGHrVwrHnLRz0y5oKBZa3R4ADwTh6ygRwKgts9rPmLeH +vQJ96wF4SCC1aodKoufg6SYGbidb0qO28T5xv22+Z4yVIwsRt3TyAnMRYlAzP1k Dn1RdfT386TrX3H05V9lw4SlxM7aOnwZHy8QtPb8NkDeMX71JiObfuEPvee8XTLh 3u6USSJm58aGFnCy+nOiUbc03X7Y9Er8iRkgK88vR4xghQxTzL/0FkcGLOagNoVw n7QSgaA+p+0I2IEjHMIw24ybIpZLc5B0Dh/y0anW8PysVz7BqCs= -----END CERTIFICATE-----Generated at Thu Jun 19 10:58:25 2025 by rpki-client