$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: OFVAJEAvnJuxOXUwfE3tpejUUQUK4Nu/KYb0GSyr3Gs= Subject key identifier: 14:76:51:E1:0B:A4:9F:29:65:82:05:51:FD:26:B8:95:D4:5D:98:78 Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 0C04352AB659D1DFB7FA4A694EA6FB5B79514E25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 04E6 Signing time: Sun 29 Jun 2025 12:32:18 +0000 Manifest this update: Sun 29 Jun 2025 12:27:18 +0000 Manifest next update: Wed 02 Jul 2025 16:42:18 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: zb1s1iAUe0WzrArfZfFRL4GuXkqrDoXL7ab6aqYk3C8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:04:35:2a:b6:59:d1:df:b7:fa:4a:69:4e:a6:fb:5b:79:51:4e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Jun 29 12:27:18 2025 GMT Not After : Jul 2 16:42:18 2025 GMT Subject: CN=147651E10BA49F2965820551FD26B895D45D9878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:38:d0:9f:bd:64:48:87:d0:0b:29:40:ef: b7:b2:4d:bc:75:83:8c:9f:21:ca:08:a1:bd:44:cd: bb:10:e6:b9:5c:ce:d3:9e:51:7b:49:8f:20:6d:b7: e6:93:89:d2:c8:12:8a:7b:50:e8:c3:f0:86:fe:ae: 44:3d:50:59:23:2e:c0:a1:2f:60:14:fc:1b:a7:ce: 28:8f:ba:12:83:bc:08:cb:d5:8a:cc:5b:8f:01:6b: 6c:f6:45:e9:6b:d8:30:e3:c9:0f:e1:f3:16:b6:5e: 29:90:c6:ba:27:65:09:fe:81:5e:1a:29:84:96:37: 0c:84:5a:d3:ad:e2:02:d6:9a:c3:ae:89:37:d5:f7: 7f:9a:f8:1b:0b:0e:ea:a3:0c:04:fb:1e:4e:c5:98: 9b:f3:55:15:f0:09:0a:fd:68:10:98:c9:ee:5e:87: 52:87:8b:35:a2:95:75:a0:c4:ca:0f:86:1e:14:e5: 20:ea:f1:1d:74:99:58:c1:b7:d2:ad:c4:ef:50:97: e3:d2:a8:cd:05:bb:dc:3a:93:1b:8f:db:12:cb:59: 36:a0:05:7a:08:e9:83:5b:e8:27:71:65:a1:72:76: 5e:45:cf:19:79:d9:99:ad:ad:96:70:fa:04:15:d8: 33:0e:40:aa:23:2a:46:34:b2:9e:5c:5a:c0:7d:8d: 0c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:76:51:E1:0B:A4:9F:29:65:82:05:51:FD:26:B8:95:D4:5D:98:78 X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:32:ec:07:fa:76:d2:a7:23:43:fc:fe:af:c5:9c:f4:ee:fa: ce:1c:ce:9a:63:81:70:3f:89:12:9a:31:15:b8:66:9f:ae:89: 34:db:c6:17:cf:d3:79:bc:55:01:4d:74:c4:61:da:29:17:4d: ad:0a:6a:11:f1:4f:64:51:bc:7c:c8:4a:4f:80:2c:00:e7:c7: 34:bd:1b:7e:8d:72:c3:42:86:78:88:bf:f7:de:0a:98:31:72: 1d:6e:8d:a1:27:fc:ea:bc:18:6b:2f:cf:2e:47:4f:f8:0a:11: a6:c9:cb:79:d1:e0:8f:f1:1f:97:9c:1a:25:f2:d2:20:ec:fa: 40:e4:2a:d3:01:06:01:f2:aa:04:91:6f:b5:75:cb:c7:66:e5: ff:5f:90:49:ea:6a:5f:af:6e:51:c6:ab:24:e9:24:f7:30:16: ad:9a:dc:32:77:6b:0d:95:7e:c9:63:59:01:76:32:4a:64:b1: f0:12:65:b7:b8:93:cf:cc:0c:42:39:5e:64:e6:e4:0a:f3:87: 11:54:c0:4c:8a:34:1b:05:a1:23:0d:9b:f6:16:ae:51:bb:54: 04:57:f6:03:d3:3d:1f:92:57:7c:4a:01:86:d1:35:5f:2b:53: a3:b3:ce:15:bd:17:5f:e0:e4:5e:a9:e1:21:b9:01:47:38:67: 59:98:c4:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDAQ1KrZZ0d+3+kppTqb7W3lRTiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNTA2MjkxMjI3MThaFw0yNTA3MDIxNjQyMThaMDMxMTAvBgNV BAMTKDE0NzY1MUUxMEJBNDlGMjk2NTgyMDU1MUZEMjZCODk1RDQ1RDk4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaDjQn71kSIfQCylA77eyTbx1 g4yfIcoIob1EzbsQ5rlcztOeUXtJjyBtt+aTidLIEop7UOjD8Ib+rkQ9UFkjLsCh L2AU/BunziiPuhKDvAjL1YrMW48Ba2z2Relr2DDjyQ/h8xa2XimQxronZQn+gV4a KYSWNwyEWtOt4gLWmsOuiTfV93+a+BsLDuqjDAT7Hk7FmJvzVRXwCQr9aBCYye5e h1KHizWilXWgxMoPhh4U5SDq8R10mVjBt9KtxO9Ql+PSqM0Fu9w6kxuP2xLLWTag BXoI6YNb6CdxZaFydl5Fzxl52ZmtrZZw+gQV2DMOQKojKkY0sp5cWsB9jQw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFHZR4QuknyllggVR/Sa4ldRdmHgwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcy7Af6dtKnI0P8/q/FnPTu+s4czppjgXA/ iRKaMRW4Zp+uiTTbxhfP03m8VQFNdMRh2ikXTa0KahHxT2RRvHzISk+ALADnxzS9 G36NcsNChniIv/feCpgxch1ujaEn/Oq8GGsvzy5HT/gKEabJy3nR4I/xH5ecGiXy 0iDs+kDkKtMBBgHyqgSRb7V1y8dm5f9fkEnqal+vblHGqyTpJPcwFq2a3DJ3aw2V fsljWQF2MkpksfASZbe4k8/MDEI5XmTm5ArzhxFUwEyKNBsFoSMNm/YWrlG7VARX 9gPTPR+SV3xKAYbRNV8rU6OzzhW9F1/g5F6p4SG5AUc4Z1mYxOo= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:52 2025 by rpki-client