$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: /3X/PGQ36WTC8q/CG4PgX5vFX5MlKbKAX0pJ93XapO4= Subject key identifier: B0:45:3B:00:26:A8:3A:87:A1:F0:28:F0:A9:E5:C6:97:4C:5A:7E:C1 Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 536F97A87519C09F15697C4FF1B0C3071C187D47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 04EF Signing time: Sat 19 Jul 2025 14:52:23 +0000 Manifest this update: Sat 19 Jul 2025 14:47:23 +0000 Manifest next update: Tue 22 Jul 2025 20:59:23 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: W1BjqUuANPtvm4NB6+hSccq0rQL8OTG7al1dJDMmYro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:6f:97:a8:75:19:c0:9f:15:69:7c:4f:f1:b0:c3:07:1c:18:7d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Jul 19 14:47:23 2025 GMT Not After : Jul 22 20:59:23 2025 GMT Subject: CN=B0453B0026A83A87A1F028F0A9E5C6974C5A7EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:4c:5d:f6:5b:c2:92:f6:bf:67:b0:a8:84: 39:68:9f:11:19:16:d9:a8:f8:62:c6:29:a7:9c:a0: f9:e6:ee:f3:eb:fc:7a:a8:d4:fd:c6:15:ea:19:42: b2:b5:46:05:ab:fb:9e:06:1b:58:a5:cb:2c:3f:24: d4:8b:34:c7:15:4f:8f:57:f9:e6:07:24:b7:1b:87: 9f:91:f1:d6:d0:ce:aa:aa:b8:c1:73:54:8c:39:30: c2:30:ee:ea:cd:15:cf:65:df:6f:c6:2f:bd:7d:c0: 72:d9:c1:4d:f4:12:60:56:d4:b9:cf:79:16:53:f8: 0e:eb:25:4b:98:8c:f4:8f:09:7e:7d:78:f3:0f:1e: c7:a6:8b:f2:8d:48:83:9f:42:48:ad:55:51:da:1b: ba:22:3a:ee:86:bc:e0:1a:b8:8a:61:bc:31:30:6a: 3d:9d:14:59:17:9d:9b:64:7c:b5:01:91:ae:6e:a4: e9:8a:af:b9:20:ff:52:d2:5e:83:5f:53:a0:e4:a8: 3f:ff:c9:4f:36:1d:b6:93:8f:17:dd:d7:ce:c9:d2: a8:a0:b5:3a:14:55:46:6d:88:a4:af:ee:b3:8b:ad: 3c:fc:6a:d2:1d:06:75:af:b1:b8:08:26:cd:8e:e0: ed:9f:90:1f:3e:cf:22:29:9a:39:48:d1:7e:d5:9b: a6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:45:3B:00:26:A8:3A:87:A1:F0:28:F0:A9:E5:C6:97:4C:5A:7E:C1 X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:00:9d:bf:51:ae:0e:9c:0f:46:e4:60:8b:c4:8e:f0:06:a7: 0e:ff:81:f4:2b:50:12:ca:fe:82:5f:1c:a4:3e:ea:e2:35:50: d7:5e:49:24:27:b6:b9:50:4b:25:e3:ac:88:4a:7e:fb:8b:a6: 21:7d:41:6a:8e:9b:ff:b7:cd:f5:59:8d:64:41:fb:ac:d2:56: 08:d5:5a:3e:fc:12:ed:e6:74:6a:80:86:c2:74:3e:13:2a:fa: f0:02:45:4f:9e:96:d4:0b:cb:99:f8:fd:c7:8f:7b:a7:17:0c: c3:e4:1d:96:7f:bc:31:e5:7d:10:a4:8d:45:d6:16:35:de:36: a3:79:3b:a5:bd:9c:aa:a0:81:87:41:11:8d:c7:0c:a5:3f:fe: bc:16:66:d1:0b:0b:3f:d7:65:85:7d:25:ab:3e:f0:ca:c2:74: 1b:b9:06:10:c5:aa:9d:1b:50:ca:c2:3f:c8:92:cb:fc:2d:96: 3b:ec:e7:48:8c:d9:c3:1a:22:da:d3:32:4e:b2:10:68:07:ce: 75:6e:c0:ae:d1:4f:a9:15:d0:61:75:a2:73:1e:e6:fe:9f:3b: 6f:f0:16:6d:a8:aa:57:fe:69:eb:dc:99:93:24:92:60:59:23: 41:f9:b8:1b:6f:cf:ea:f8:2c:5d:72:b4:87:61:0e:0d:22:5a: ea:a7:bd:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU2+XqHUZwJ8VaXxP8bDDBxwYfUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNTA3MTkxNDQ3MjNaFw0yNTA3MjIyMDU5MjNaMDMxMTAvBgNV BAMTKEIwNDUzQjAwMjZBODNBODdBMUYwMjhGMEE5RTVDNjk3NEM1QTdFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ekxd9lvCkva/Z7CohDlonxEZ Ftmo+GLGKaecoPnm7vPr/Hqo1P3GFeoZQrK1RgWr+54GG1ilyyw/JNSLNMcVT49X +eYHJLcbh5+R8dbQzqqquMFzVIw5MMIw7urNFc9l32/GL719wHLZwU30EmBW1LnP eRZT+A7rJUuYjPSPCX59ePMPHsemi/KNSIOfQkitVVHaG7oiOu6GvOAauIphvDEw aj2dFFkXnZtkfLUBka5upOmKr7kg/1LSXoNfU6DkqD//yU82HbaTjxfd187J0qig tToUVUZtiKSv7rOLrTz8atIdBnWvsbgIJs2O4O2fkB8+zyIpmjlI0X7Vm6bVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsEU7ACaoOoeh8CjwqeXGl0xafsEwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwAnb9Rrg6cD0bkYIvEjvAGpw7/gfQrUBLK /oJfHKQ+6uI1UNdeSSQntrlQSyXjrIhKfvuLpiF9QWqOm/+3zfVZjWRB+6zSVgjV Wj78Eu3mdGqAhsJ0PhMq+vACRU+eltQLy5n4/cePe6cXDMPkHZZ/vDHlfRCkjUXW FjXeNqN5O6W9nKqggYdBEY3HDKU//rwWZtELCz/XZYV9Jas+8MrCdBu5BhDFqp0b UMrCP8iSy/wtljvs50iM2cMaItrTMk6yEGgHznVuwK7RT6kV0GF1onMe5v6fO2/w Fm2oqlf+aevcmZMkkmBZI0H5uBtvz+r4LF1ytIdhDg0iWuqnvb8= -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:02 2025 by rpki-client