$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: R8j70Ii2973PPE+WaonaBfwHpd/v7SLLW3weMC7NOeo= Subject key identifier: F4:F6:10:8C:8B:AC:66:88:A1:33:8D:C2:CD:70:AC:D0:94:36:C8:BF Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 6F6D33B137FBA8EA97259E6CD6F4555248BD45C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 04CD Signing time: Sat 03 May 2025 12:42:17 +0000 Manifest this update: Sat 03 May 2025 12:37:17 +0000 Manifest next update: Tue 06 May 2025 16:20:17 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: 7dZAbEAjwsQEkyW+n4uxRhFWUGogKreZNsEjQklJCtU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 16:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6d:33:b1:37:fb:a8:ea:97:25:9e:6c:d6:f4:55:52:48:bd:45:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: May 3 12:37:17 2025 GMT Not After : May 6 16:20:17 2025 GMT Subject: CN=F4F6108C8BAC6688A1338DC2CD70ACD09436C8BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:31:71:60:99:48:99:e2:1d:1a:5e:3e:24:e8: 12:e7:68:85:8b:c3:f5:af:31:41:2e:a0:5e:4a:5e: a7:b7:2e:f7:7e:f2:49:cc:e5:14:8f:6b:6b:f4:a8: 9b:40:96:de:b9:bc:c8:89:54:b1:e9:df:52:85:fd: 2a:91:1c:67:f1:c3:f0:0d:7b:4c:00:f0:3d:75:61: a8:98:94:71:9f:27:ef:58:00:74:7e:11:bc:4d:bb: 32:d8:14:29:a4:cf:6b:72:3d:dd:f2:21:52:3b:36: 10:28:c2:8a:0e:31:6a:6b:4e:0f:7e:c1:83:31:39: 43:58:50:4d:1a:6c:a9:c9:e6:72:e8:42:83:46:52: c2:15:42:4e:3a:69:86:73:eb:3f:b4:2a:d9:42:45: de:90:c7:e4:4b:51:46:77:87:b2:c4:35:ed:72:b8: 9f:eb:68:06:ae:c7:92:fa:56:a9:a5:9d:74:5a:60: b7:f7:9d:f8:bf:17:82:ec:18:f1:4c:10:43:ff:48: 31:28:04:0f:a3:ed:15:63:ed:42:67:f7:0e:d4:4a: 9e:aa:a3:a9:29:5c:e7:d1:4d:57:ea:27:ed:88:e1: 7d:41:36:4c:29:c5:ab:8c:bb:b3:53:47:27:b5:b2: 75:19:9f:c7:5e:48:24:b1:1c:c8:07:18:dd:ba:10: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F6:10:8C:8B:AC:66:88:A1:33:8D:C2:CD:70:AC:D0:94:36:C8:BF X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ea:5d:c4:b4:37:63:53:90:c7:69:97:f7:a8:5e:aa:1e:a8: d9:e6:6a:c4:a7:cd:f2:ed:5f:62:47:47:af:9e:5c:dc:5e:61: 86:cf:b5:a7:4f:a5:e5:8a:78:9c:46:58:27:98:ca:5f:93:e0: 0f:f9:30:6d:d7:12:bb:d5:d2:75:64:ef:11:9a:03:6b:d0:82: f7:cc:b3:70:d5:de:88:50:e8:c1:7f:eb:31:a5:ea:9c:13:c3: ed:9b:df:86:1d:fd:f6:9b:5d:e8:e3:99:93:2c:b8:a1:74:c8: 71:33:28:0a:d3:5f:a5:ea:57:60:1d:8d:c4:11:48:e4:12:1d: 39:0a:80:54:cf:ac:77:ac:1d:6e:fd:fa:5a:6c:94:55:39:00: 03:58:5a:2c:85:ba:3f:f9:4e:e9:43:c9:5c:c1:d4:94:9a:ec: 9a:b6:a7:c4:d2:6e:fb:7a:57:24:08:35:55:fc:7d:cd:08:07: a2:19:43:4e:f9:27:7f:f3:b8:21:8d:c6:42:31:18:5e:c6:37: ed:4b:64:3d:af:4e:ed:ca:02:f0:72:b7:07:e3:3e:b4:bf:b0: a4:05:37:df:df:5f:3c:51:68:fa:e7:07:d5:8f:7f:b0:41:78: b4:56:2f:91:e3:02:c2:0d:64:f9:22:26:fe:65:53:75:31:8d: 76:55:ae:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb20zsTf7qOqXJZ5s1vRVUki9RcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNTA1MDMxMjM3MTdaFw0yNTA1MDYxNjIwMTdaMDMxMTAvBgNV BAMTKEY0RjYxMDhDOEJBQzY2ODhBMTMzOERDMkNENzBBQ0QwOTQzNkM4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhMXFgmUiZ4h0aXj4k6BLnaIWL w/WvMUEuoF5KXqe3Lvd+8knM5RSPa2v0qJtAlt65vMiJVLHp31KF/SqRHGfxw/AN e0wA8D11YaiYlHGfJ+9YAHR+EbxNuzLYFCmkz2tyPd3yIVI7NhAowooOMWprTg9+ wYMxOUNYUE0abKnJ5nLoQoNGUsIVQk46aYZz6z+0KtlCRd6Qx+RLUUZ3h7LENe1y uJ/raAaux5L6VqmlnXRaYLf3nfi/F4LsGPFMEEP/SDEoBA+j7RVj7UJn9w7USp6q o6kpXOfRTVfqJ+2I4X1BNkwpxauMu7NTRye1snUZn8deSCSxHMgHGN26EIu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9PYQjIusZoihM43CzXCs0JQ2yL8wHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvqXcS0N2NTkMdpl/eoXqoeqNnmasSnzfLt X2JHR6+eXNxeYYbPtadPpeWKeJxGWCeYyl+T4A/5MG3XErvV0nVk7xGaA2vQgvfM s3DV3ohQ6MF/6zGl6pwTw+2b34Yd/fabXejjmZMsuKF0yHEzKArTX6XqV2AdjcQR SOQSHTkKgFTPrHesHW79+lpslFU5AANYWiyFuj/5TulDyVzB1JSa7Jq2p8TSbvt6 VyQINVX8fc0IB6IZQ075J3/zuCGNxkIxGF7GN+1LZD2vTu3KAvBytwfjPrS/sKQF N9/fXzxRaPrnB9WPf7BBeLRWL5HjAsINZPkiJv5lU3UxjXZVrv0= -----END CERTIFICATE-----Generated at Tue May 6 12:36:44 2025 by rpki-client