$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: loSNxa2Szm1MYiXAo0z8kTWSOK7e6fkMIOEvEWqjkTE= Subject key identifier: 00:A6:D3:7C:B1:81:84:04:3E:C1:61:69:26:1B:D0:20:FC:03:9C:D5 Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 3A1F9A81F2E071607D31D0996BD2B8436AC2A7AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 0517 Signing time: Sat 18 Oct 2025 00:52:24 +0000 Manifest this update: Sat 18 Oct 2025 00:47:24 +0000 Manifest next update: Tue 21 Oct 2025 11:56:24 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: yLIcmuCq+pcYrN0UqD3I3Gu+8HSsPAKXLKre4mhuY6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1f:9a:81:f2:e0:71:60:7d:31:d0:99:6b:d2:b8:43:6a:c2:a7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Oct 18 00:47:24 2025 GMT Not After : Oct 21 11:56:24 2025 GMT Subject: CN=00A6D37CB18184043EC16169261BD020FC039CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:50:39:6d:c2:ef:04:1f:55:a7:8e:27:0f: 2f:30:57:86:c0:5d:7b:72:54:12:fd:7e:79:e8:3f: ea:d8:2d:19:10:82:c2:9f:4a:29:3b:d1:20:ba:5e: 7b:d1:1a:e6:7b:de:fb:1a:94:8c:9e:b2:a5:46:81: 50:0d:84:5e:f7:d1:c2:8a:f3:29:bc:cd:20:ac:67: 01:1a:04:d9:bb:1f:ad:a9:5a:75:b1:22:87:05:9e: 25:30:ec:b2:33:f0:e2:06:a1:de:02:65:54:03:85: 0f:e8:3c:68:27:82:ba:ba:b0:6e:f1:6a:54:14:ae: 0c:6d:d3:5d:ec:37:b8:52:66:13:bd:b6:ec:f4:82: b3:32:02:8e:f2:2d:23:3e:8b:a6:d8:50:d8:ce:4a: 05:3c:b6:13:7b:43:68:1f:89:c5:00:17:e5:08:28: 20:2a:20:c0:23:2b:89:ea:be:83:73:6f:db:1f:f2: 75:f5:be:bb:01:64:6f:5e:16:35:55:dc:d0:a7:65: fe:41:f6:47:17:c6:07:46:b8:09:91:85:71:c0:fa: 5f:88:35:54:55:43:69:b3:78:a4:d1:74:77:33:5f: 99:f9:0f:e8:85:27:05:47:f8:8a:f1:65:92:8b:62: 84:76:c6:95:27:21:b1:af:64:4b:0e:c1:4d:b3:de: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A6:D3:7C:B1:81:84:04:3E:C1:61:69:26:1B:D0:20:FC:03:9C:D5 X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4b:ed:76:91:61:03:c9:42:8c:48:63:9d:6d:af:07:7f:d2: b5:66:ff:4a:d0:59:0d:ed:b0:be:66:e4:86:a7:c0:fa:14:c2: 06:5b:8c:2c:c7:5e:58:b3:8f:6f:21:0f:2f:25:10:c0:e5:22: 9f:39:88:e6:31:d0:0a:97:26:0b:4b:f7:8e:9b:f8:66:44:1b: c9:3a:29:c7:8a:60:61:c3:42:69:64:4a:37:3d:7d:9b:1d:99: 5a:74:ea:84:38:7c:79:1f:c7:f8:5d:21:a5:84:07:b2:fd:d2: 37:af:d3:74:4d:86:d5:e5:5d:5e:46:22:d1:45:e7:29:1b:6c: 11:1b:72:3e:06:be:d3:b9:87:6f:ac:70:5e:a8:f2:4d:6a:0e: 68:62:50:b0:b1:4e:46:d5:05:b6:6b:02:71:5b:aa:c8:8e:13: ae:c1:d2:ed:3a:3e:33:8a:e0:52:d1:e9:e6:18:8c:fb:e2:0a: a4:1a:a6:8b:1e:6c:53:1a:db:ea:77:c8:50:9b:3f:47:ba:31: 67:2c:46:6f:7d:25:ba:21:6d:f9:f5:2d:a5:04:a8:32:09:b9: 35:33:b9:7c:a3:49:48:eb:df:17:06:ba:40:c2:3c:b0:8e:26: 65:bc:d7:fa:45:c7:dc:5e:6c:8d:16:e7:a9:8c:bd:02:0a:ba: d3:90:d7:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOh+agfLgcWB9MdCZa9K4Q2rCp68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNTEwMTgwMDQ3MjRaFw0yNTEwMjExMTU2MjRaMDMxMTAvBgNV BAMTKDAwQTZEMzdDQjE4MTg0MDQzRUMxNjE2OTI2MUJEMDIwRkMwMzlDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDESFA5bcLvBB9Vp44nDy8wV4bA XXtyVBL9fnnoP+rYLRkQgsKfSik70SC6XnvRGuZ73vsalIyesqVGgVANhF730cKK 8ym8zSCsZwEaBNm7H62pWnWxIocFniUw7LIz8OIGod4CZVQDhQ/oPGgngrq6sG7x alQUrgxt013sN7hSZhO9tuz0grMyAo7yLSM+i6bYUNjOSgU8thN7Q2gficUAF+UI KCAqIMAjK4nqvoNzb9sf8nX1vrsBZG9eFjVV3NCnZf5B9kcXxgdGuAmRhXHA+l+I NVRVQ2mzeKTRdHczX5n5D+iFJwVH+IrxZZKLYoR2xpUnIbGvZEsOwU2z3swHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAKbTfLGBhAQ+wWFpJhvQIPwDnNUwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpL7XaRYQPJQoxIY51trwd/0rVm/0rQWQ3t sL5m5IanwPoUwgZbjCzHXlizj28hDy8lEMDlIp85iOYx0AqXJgtL946b+GZEG8k6 KceKYGHDQmlkSjc9fZsdmVp06oQ4fHkfx/hdIaWEB7L90jev03RNhtXlXV5GItFF 5ykbbBEbcj4GvtO5h2+scF6o8k1qDmhiULCxTkbVBbZrAnFbqsiOE67B0u06PjOK 4FLR6eYYjPviCqQaposebFMa2+p3yFCbP0e6MWcsRm99Jbohbfn1LaUEqDIJuTUz uXyjSUjr3xcGukDCPLCOJmW81/pFx9xebI0W56mMvQIKutOQ1yU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:41 2025 by rpki-client