$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: LMa6thOM7VOPKQ4s0BUgcb7IA6A8o2ptNgxtmHxDjFg= Subject key identifier: 57:0E:C8:29:0F:03:F0:B3:54:98:6F:D9:98:43:85:88:64:EE:9C:93 Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 41E12E19DE5ED48E1A2F47DF1F02C9FCECA6B8CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 04C0 Signing time: Fri 04 Apr 2025 02:12:17 +0000 Manifest this update: Fri 04 Apr 2025 02:07:17 +0000 Manifest next update: Mon 07 Apr 2025 11:43:17 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: JXqiK2fLXoqIdhuIyRx5FJTQwbgv2KCGz6bGuFJ0ysA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e1:2e:19:de:5e:d4:8e:1a:2f:47:df:1f:02:c9:fc:ec:a6:b8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Apr 4 02:07:17 2025 GMT Not After : Apr 7 11:43:17 2025 GMT Subject: CN=570EC8290F03F0B354986FD99843858864EE9C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:87:5a:8e:47:70:95:6b:2d:28:9a:6f:67:82: cd:8b:21:e7:f0:87:e6:ad:c9:49:7a:ce:3a:80:7d: 5e:a9:98:6b:1d:af:e3:bf:8f:6d:12:23:68:ab:55: 14:88:55:a8:5f:fe:8b:ef:d6:d8:b7:67:bd:d1:bd: 12:0f:eb:b0:4e:cb:9a:fc:66:1f:bf:f2:be:04:30: fe:06:19:1f:a3:a3:4d:ad:a2:02:fd:27:aa:8c:2d: 2a:23:7f:a8:45:24:46:76:fc:9b:3b:15:1d:51:3e: 8b:dc:b6:33:9d:57:9d:66:76:bf:98:f9:2b:ff:7f: 54:18:74:5a:79:96:44:69:13:78:23:64:83:77:d6: 91:6a:1b:a4:2e:90:7a:48:11:4a:b4:5d:12:56:f1: 84:1b:1a:cc:b7:94:97:67:0d:f5:2d:47:ab:45:0a: 5e:d6:47:01:0f:fa:4f:70:3c:8a:51:21:a5:75:b0: a8:cd:d3:60:8a:74:fc:13:05:79:f2:3e:16:53:76: e9:ab:59:0a:0a:54:96:b7:80:18:7e:53:15:a1:f6: eb:f5:bb:0b:f3:1c:d2:16:60:af:6c:cd:36:c7:2c: 45:12:6a:52:85:c8:1b:72:6e:db:a6:97:0f:34:09: 6d:6a:4d:f2:98:a2:3e:78:69:72:42:31:dd:9d:7c: a5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0E:C8:29:0F:03:F0:B3:54:98:6F:D9:98:43:85:88:64:EE:9C:93 X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:28:1a:41:05:b3:d8:ec:54:bc:3e:27:a6:e7:5c:80:ca:17: d0:13:1a:4a:cf:30:72:79:0e:cb:ad:b4:6a:5d:29:52:99:bf: 6b:6d:e4:f1:4c:d0:eb:4e:54:e3:fb:2f:0c:14:29:82:15:4b: cd:b5:4d:96:e4:02:fd:cc:c0:2b:8d:c4:db:6b:79:80:71:81: ac:ab:31:32:00:a1:b6:64:1a:d7:3c:3e:d7:46:bc:05:bf:14: 7a:e8:9f:e8:e9:65:57:d6:86:76:e9:3c:ab:01:bb:b5:9a:54: e3:2d:0a:6f:d6:a2:2f:e9:b0:5c:f8:0e:94:6a:72:cf:cc:83: 5d:dc:17:3c:10:e1:e9:2c:d3:1a:93:eb:4e:05:08:0f:a3:ea: 77:c2:fd:9b:e8:e0:f6:77:5e:8f:e9:48:2d:a4:40:41:1e:cc: 49:13:48:87:63:e8:6c:7e:f1:b8:e9:3c:6b:7d:70:c0:66:07: ae:38:2f:21:8a:c9:c5:3d:b1:7e:ff:40:1f:3b:c6:e7:5a:30: b6:29:f5:f8:65:45:e2:57:fe:ec:66:46:09:dc:49:50:14:28: 38:f7:93:b9:ba:1e:ee:70:38:fa:99:81:e1:03:cf:1c:cc:de: c9:cb:fd:ca:b8:0c:51:00:cc:c8:7b:ed:06:7c:9f:72:ec:aa: b6:3d:ab:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQeEuGd5e1I4aL0ffHwLJ/OymuMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNTA0MDQwMjA3MTdaFw0yNTA0MDcxMTQzMTdaMDMxMTAvBgNV BAMTKDU3MEVDODI5MEYwM0YwQjM1NDk4NkZEOTk4NDM4NTg4NjRFRTlDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCh1qOR3CVay0omm9ngs2LIefw h+atyUl6zjqAfV6pmGsdr+O/j20SI2irVRSIVahf/ovv1ti3Z73RvRIP67BOy5r8 Zh+/8r4EMP4GGR+jo02togL9J6qMLSojf6hFJEZ2/Js7FR1RPovctjOdV51mdr+Y +Sv/f1QYdFp5lkRpE3gjZIN31pFqG6QukHpIEUq0XRJW8YQbGsy3lJdnDfUtR6tF Cl7WRwEP+k9wPIpRIaV1sKjN02CKdPwTBXnyPhZTdumrWQoKVJa3gBh+UxWh9uv1 uwvzHNIWYK9szTbHLEUSalKFyBtybtumlw80CW1qTfKYoj54aXJCMd2dfKWLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVw7IKQ8D8LNUmG/ZmEOFiGTunJMwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwoGkEFs9jsVLw+J6bnXIDKF9ATGkrPMHJ5 DsuttGpdKVKZv2tt5PFM0OtOVOP7LwwUKYIVS821TZbkAv3MwCuNxNtreYBxgayr MTIAobZkGtc8PtdGvAW/FHron+jpZVfWhnbpPKsBu7WaVOMtCm/Woi/psFz4DpRq cs/Mg13cFzwQ4eks0xqT604FCA+j6nfC/Zvo4PZ3Xo/pSC2kQEEezEkTSIdj6Gx+ 8bjpPGt9cMBmB644LyGKycU9sX7/QB87xudaMLYp9fhlReJX/uxmRgncSVAUKDj3 k7m6Hu5wOPqZgeEDzxzM3snL/cq4DFEAzMh77QZ8n3LsqrY9q48= -----END CERTIFICATE-----Generated at Sat Apr 5 16:37:57 2025 by rpki-client