$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: 2cmAul9BcLme/1PnIIFIMykIaWrJ1qRJ/UgUiNKjwz0= Subject key identifier: C7:86:B4:59:15:34:44:F7:CF:17:70:88:63:20:18:BC:22:A7:2B:C1 Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 3CD9AB1C9322BF5792E02A1CCB9808742012F662 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 04FE Signing time: Sat 23 Aug 2025 01:42:27 +0000 Manifest this update: Sat 23 Aug 2025 01:37:27 +0000 Manifest next update: Tue 26 Aug 2025 05:36:27 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: rcuGshzKLFC3pWYMPfkNAMrCmQyTuHpOlQbvPYH6fIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d9:ab:1c:93:22:bf:57:92:e0:2a:1c:cb:98:08:74:20:12:f6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Aug 23 01:37:27 2025 GMT Not After : Aug 26 05:36:27 2025 GMT Subject: CN=C786B459153444F7CF177088632018BC22A72BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:84:eb:52:9e:78:ad:29:c9:5f:d8:56:09:6a: 24:95:8b:bd:06:9e:00:1a:1b:ca:2b:f2:b1:5e:dc: 5f:c7:36:62:eb:d1:d3:23:10:5c:35:36:80:c3:6e: 2d:b9:20:a3:9a:e3:91:fa:3f:c2:78:ab:59:b8:0d: 82:f5:b8:e5:32:3b:ef:27:e1:d1:5b:5f:f1:55:06: 14:af:2f:0e:c7:d3:50:53:bf:23:bc:cc:89:6f:22: 86:6e:10:ba:94:cb:e8:71:9d:13:75:09:0e:1a:1a: 15:fe:67:86:67:7e:57:46:53:34:7b:76:c8:c7:16: 6f:95:92:a0:71:fb:b1:f0:89:6a:c4:15:4f:b6:72: c2:d8:8c:a9:ed:57:38:0e:7e:1c:7c:64:e5:49:23: 58:16:5c:93:ae:b7:12:32:f4:6e:de:45:7c:16:17: 43:ea:0c:9b:1e:4b:c5:e3:da:23:5a:e3:1b:6f:f6: e1:9d:ac:66:13:a6:53:94:66:fc:16:7c:f5:81:01: 52:85:9b:5b:6e:86:4b:62:84:e1:5b:e5:72:39:fc: 1b:f6:7e:c8:4d:5c:e9:f2:a8:e3:c4:9e:cd:d9:ef: b7:3e:26:48:84:da:92:7d:6a:09:c0:0b:0d:c8:45: 5d:e0:bb:13:f6:d4:ad:31:fc:d2:ba:90:d5:40:a8: b3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:86:B4:59:15:34:44:F7:CF:17:70:88:63:20:18:BC:22:A7:2B:C1 X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ef:ef:3e:4e:f1:a0:e3:5a:40:5d:68:28:44:b0:a7:39:b4: db:62:19:1a:97:6f:81:d2:7b:09:0e:9b:8d:65:02:38:d0:a9: 5b:bc:f3:95:41:8b:12:e6:d6:98:72:39:e9:a3:b3:cc:52:cd: 5a:29:11:f9:d8:6d:88:6d:7a:5f:21:dc:1e:33:68:8a:62:fc: 20:c9:94:51:6d:cf:c5:a0:02:5b:ff:84:a4:29:d7:b7:40:0d: 6e:d1:0f:c6:ae:9a:dd:a5:e8:db:d8:f6:dd:a6:24:d2:4f:0e: 07:59:df:98:36:d9:d4:ea:d1:b8:22:da:02:72:87:18:f3:db: bd:c2:c9:14:f4:73:d6:ec:f2:41:4c:a1:07:91:0d:c9:ea:f7: e7:da:9e:89:69:18:0c:c0:18:46:26:b8:05:69:f2:fa:af:82: 45:58:89:c9:94:78:1d:d2:c2:8f:20:68:64:91:e9:87:97:83: c4:74:96:11:eb:75:6d:ae:1c:20:93:0e:c0:67:73:61:62:c2: 54:f4:a3:4a:ee:f0:1c:a9:ff:16:ab:05:30:89:39:3b:0b:3f: d6:4b:30:7a:0d:f8:b3:f9:c6:69:a9:91:45:d6:6d:39:ad:28: 04:d8:ba:14:5a:a0:a0:b1:93:ff:bb:56:52:b4:e1:89:b9:f9: 7f:29:bf:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNmrHJMiv1eS4Cocy5gIdCAS9mIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNTA4MjMwMTM3MjdaFw0yNTA4MjYwNTM2MjdaMDMxMTAvBgNV BAMTKEM3ODZCNDU5MTUzNDQ0RjdDRjE3NzA4ODYzMjAxOEJDMjJBNzJCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhOtSnnitKclf2FYJaiSVi70G ngAaG8or8rFe3F/HNmLr0dMjEFw1NoDDbi25IKOa45H6P8J4q1m4DYL1uOUyO+8n 4dFbX/FVBhSvLw7H01BTvyO8zIlvIoZuELqUy+hxnRN1CQ4aGhX+Z4ZnfldGUzR7 dsjHFm+VkqBx+7HwiWrEFU+2csLYjKntVzgOfhx8ZOVJI1gWXJOutxIy9G7eRXwW F0PqDJseS8Xj2iNa4xtv9uGdrGYTplOUZvwWfPWBAVKFm1tuhktihOFb5XI5/Bv2 fshNXOnyqOPEns3Z77c+JkiE2pJ9agnACw3IRV3guxP21K0x/NK6kNVAqLMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx4a0WRU0RPfPF3CIYyAYvCKnK8EwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrv7z5O8aDjWkBdaChEsKc5tNtiGRqXb4HS ewkOm41lAjjQqVu885VBixLm1phyOemjs8xSzVopEfnYbYhtel8h3B4zaIpi/CDJ lFFtz8WgAlv/hKQp17dADW7RD8aumt2l6NvY9t2mJNJPDgdZ35g22dTq0bgi2gJy hxjz273CyRT0c9bs8kFMoQeRDcnq9+fanolpGAzAGEYmuAVp8vqvgkVYicmUeB3S wo8gaGSR6YeXg8R0lhHrdW2uHCCTDsBnc2FiwlT0o0ru8Byp/xarBTCJOTsLP9ZL MHoN+LP5xmmpkUXWbTmtKATYuhRaoKCxk/+7VlK04Ym5+X8pv7U= -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:19 2025 by rpki-client