$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: NjtVwZpC0wXwQAWgDhhr9AT2m45VMba0Rchn9GODxYk= Subject key identifier: 29:A5:D0:86:68:B3:B4:FC:12:F3:96:51:36:AF:0F:67:3E:42:AC:82 Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 0DB8F5E8EBEC61C1852C0BB54330824FF05E784F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 055D Signing time: Tue 24 Mar 2026 14:52:44 +0000 Manifest this update: Tue 24 Mar 2026 14:47:44 +0000 Manifest next update: Sat 28 Mar 2026 01:26:44 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: zAscTc7uihOHJVP0pihYhH3eftc71FcKv+pNnflxz0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b8:f5:e8:eb:ec:61:c1:85:2c:0b:b5:43:30:82:4f:f0:5e:78:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Mar 24 14:47:44 2026 GMT Not After : Mar 28 01:26:44 2026 GMT Subject: CN=29A5D08668B3B4FC12F3965136AF0F673E42AC82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:cc:04:03:c7:cb:13:34:ee:2a:ee:c1:be: 02:b5:11:69:21:02:6b:3e:32:b7:76:72:f1:b4:4d: 90:35:8e:4e:3a:b3:c6:a8:7a:00:88:80:96:13:0e: 80:ce:ee:15:b3:99:1a:d3:f2:06:db:6e:dd:21:d2: 6c:d4:12:e2:41:ee:45:e9:c7:51:1c:12:9e:26:4c: 27:80:57:4e:65:d1:cf:a6:d7:cf:80:b6:9c:3d:e7: 52:28:99:d6:5d:60:da:8e:04:d9:5e:43:31:b4:f0: 64:33:d5:31:8e:d9:59:65:6b:2a:42:0f:46:a3:cd: d5:87:08:84:a0:93:49:44:b0:af:d3:46:9b:21:c1: cb:1c:dc:fc:23:71:4d:ae:33:f4:ab:64:6c:c7:6c: 83:3f:b5:01:04:82:f1:d0:4b:ec:18:2b:51:a0:c9: 58:f4:7f:97:80:2b:d6:d0:f0:28:03:e6:79:c3:be: 8d:eb:79:e6:c0:25:a9:eb:3a:bd:87:78:67:d4:2f: 0e:3f:c0:43:7f:7e:99:eb:96:e7:e9:7d:93:c0:0f: da:39:30:7a:a4:fb:ab:db:d0:97:77:d3:3c:e6:06: 51:fe:e8:2a:e1:69:06:88:49:c7:cf:73:35:eb:13: c1:c3:d7:c1:60:b3:b6:f5:d9:33:ba:7e:e8:e8:76: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A5:D0:86:68:B3:B4:FC:12:F3:96:51:36:AF:0F:67:3E:42:AC:82 X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ee:43:58:9b:7e:2e:38:c6:b7:f7:78:f0:c1:05:04:b9:b8: 24:fe:b4:de:d7:07:c8:86:ca:eb:a7:2a:67:49:23:7a:d3:55: 84:24:ba:3d:5e:b4:4f:4b:11:ca:2f:3a:da:5c:2f:3f:84:f6: 6f:40:c4:ff:81:60:3e:86:a5:68:6e:89:12:fb:f8:9f:99:fc: be:15:9d:9c:15:51:27:96:0d:48:ad:01:70:61:ff:9e:ff:15: 4b:09:db:f0:83:f5:50:aa:6c:f9:a0:8f:f7:e9:58:a0:2e:1d: c8:8b:c0:da:35:d5:c4:64:3f:7e:75:55:0c:74:78:0c:65:b2: cf:1d:0a:1a:0d:9b:94:29:5e:53:24:50:8a:1f:0d:c3:8a:ed: a5:bc:d0:43:a9:84:6a:71:15:5f:b5:ff:09:1a:c1:af:45:27: 86:19:82:ee:c6:b0:a7:7e:d0:3a:5b:13:7a:ef:2f:52:b4:11: ac:69:2f:9c:ef:a1:bd:42:ef:bc:16:0b:fd:d0:70:31:d0:54: fa:6b:f6:8a:81:5f:01:93:a3:23:97:79:1f:49:41:87:47:54: 24:49:5a:0f:e8:f3:70:eb:ce:33:55:dc:e2:2c:62:3f:61:ba: 6e:93:e8:3c:42:d8:26:87:2c:99:4c:59:6a:90:6a:6e:90:08: 96:4d:a9:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbj16OvsYcGFLAu1QzCCT/BeeE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNjAzMjQxNDQ3NDRaFw0yNjAzMjgwMTI2NDRaMDMxMTAvBgNV BAMTKDI5QTVEMDg2NjhCM0I0RkMxMkYzOTY1MTM2QUYwRjY3M0U0MkFDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFcwEA8fLEzTuKu7BvgK1EWkh Ams+Mrd2cvG0TZA1jk46s8aoegCIgJYTDoDO7hWzmRrT8gbbbt0h0mzUEuJB7kXp x1EcEp4mTCeAV05l0c+m18+Atpw951IomdZdYNqOBNleQzG08GQz1TGO2VllaypC D0ajzdWHCISgk0lEsK/TRpshwcsc3PwjcU2uM/SrZGzHbIM/tQEEgvHQS+wYK1Gg yVj0f5eAK9bQ8CgD5nnDvo3reebAJanrOr2HeGfULw4/wEN/fpnrlufpfZPAD9o5 MHqk+6vb0Jd30zzmBlH+6CrhaQaIScfPczXrE8HD18Fgs7b12TO6fujodgDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKaXQhmiztPwS85ZRNq8PZz5CrIIwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfuQ1ibfi44xrf3ePDBBQS5uCT+tN7XB8iG yuunKmdJI3rTVYQkuj1etE9LEcovOtpcLz+E9m9AxP+BYD6GpWhuiRL7+J+Z/L4V nZwVUSeWDUitAXBh/57/FUsJ2/CD9VCqbPmgj/fpWKAuHciLwNo11cRkP351VQx0 eAxlss8dChoNm5QpXlMkUIofDcOK7aW80EOphGpxFV+1/wkawa9FJ4YZgu7GsKd+ 0DpbE3rvL1K0EaxpL5zvob1C77wWC/3QcDHQVPpr9oqBXwGToyOXeR9JQYdHVCRJ Wg/o83DrzjNV3OIsYj9hum6T6DxC2CaHLJlMWWqQam6QCJZNqdc= -----END CERTIFICATE-----Generated at Thu Mar 26 05:42:18 2026 by rpki-client