$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: oJgajPnoq3ZEUg3hxBnK4BD3YS02ZMmXGJLotuo0ktc= Subject key identifier: F4:89:CD:2C:C5:12:5C:8F:FD:A2:26:7E:EA:CD:7A:EC:FB:0A:46:94 Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 7BC6F3FAF2ECE26CD029849B640ACA717754193D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 0505 Signing time: Sun 07 Sep 2025 01:02:20 +0000 Manifest this update: Sun 07 Sep 2025 00:57:20 +0000 Manifest next update: Wed 10 Sep 2025 09:44:20 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: JB2EPY2qk+4UhZY+/9UPWSVTo3qDybERyWWR+UAzy58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 09:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c6:f3:fa:f2:ec:e2:6c:d0:29:84:9b:64:0a:ca:71:77:54:19:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Sep 7 00:57:20 2025 GMT Not After : Sep 10 09:44:20 2025 GMT Subject: CN=F489CD2CC5125C8FFDA2267EEACD7AECFB0A4694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:d9:30:24:bb:87:33:6b:62:72:00:c8:2f: e0:81:34:8f:44:ea:79:53:d5:cc:7b:06:50:13:36: a9:f9:f5:df:88:17:fe:65:17:6d:95:bc:fd:b1:d0: 2a:9b:ee:fc:9c:39:ff:2b:5e:e1:78:e2:74:cb:47: f6:31:76:68:3b:df:42:61:f2:08:00:82:90:5e:3c: 8d:c7:d6:0c:85:ce:18:b0:8e:43:3f:33:fc:7f:14: 6e:48:fe:12:7c:38:bc:4a:87:51:0f:e3:4a:f5:20: a1:b4:72:84:79:5f:04:d0:91:ac:65:d9:4a:64:b0: 09:8b:e7:27:39:5a:1f:33:48:7f:37:30:15:c4:c7: c5:4a:f5:b1:bb:d4:ab:95:31:6f:ef:30:10:20:80: 43:f1:f5:c1:a5:6a:1b:40:07:58:42:5d:56:40:ee: 39:0f:d4:0d:80:fe:57:2c:56:0f:e1:c7:02:b8:3c: 4e:40:29:52:1c:78:62:c9:0e:17:a0:bb:74:03:dd: 14:7c:71:82:12:e1:37:ac:5e:39:ae:b1:11:96:01: 0a:d4:8f:01:70:de:cd:ea:d1:40:28:bf:8d:fd:67: c5:d4:81:d1:63:e3:73:2f:35:aa:c8:46:ff:fa:31: 3f:52:50:fd:e1:8c:54:57:ba:50:35:01:dc:b4:61: a2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:89:CD:2C:C5:12:5C:8F:FD:A2:26:7E:EA:CD:7A:EC:FB:0A:46:94 X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:99:26:5f:1d:47:db:18:54:f1:f5:d4:bb:83:a4:7e:ca:35: 93:60:46:23:95:e7:8d:74:2e:b3:22:12:df:3c:e8:27:f5:8b: 82:f3:e4:73:9d:b4:c0:d6:b8:53:f9:eb:34:42:54:ac:bf:8d: dc:16:f0:f4:51:4f:b7:c0:db:42:3a:43:c7:e7:86:9d:eb:70: 4f:b4:3c:c2:29:af:42:5f:6e:d1:39:1c:a1:02:46:58:85:cc: 07:83:65:c8:e3:3d:af:7c:b3:b1:bc:6b:7c:5b:de:47:a2:11: 0f:e5:80:d2:53:f5:a1:bd:56:34:af:b9:f7:cd:d7:39:99:1f: aa:9f:eb:8a:0a:05:44:81:7b:83:73:67:a5:5e:f1:b2:95:f0: 0b:d8:6d:f0:9d:a6:3e:1a:16:58:cc:ec:37:8e:3f:6f:ba:dc: 1e:10:4f:ba:bd:57:35:84:5a:dd:3b:2a:11:45:f6:87:7c:92: c5:62:dc:fd:45:96:97:b0:09:16:74:a1:da:fc:6b:c7:14:be: d4:b0:34:44:18:20:07:cb:c2:07:a2:14:db:07:15:1e:92:28: a2:65:ef:ca:89:c3:d3:39:6f:7e:4a:51:82:e4:c1:b1:6e:8a: 75:ba:6d:1f:73:f5:9e:91:dd:79:de:ca:6d:e6:f5:6f:70:bf: 9f:23:e6:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8bz+vLs4mzQKYSbZArKcXdUGT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNTA5MDcwMDU3MjBaFw0yNTA5MTAwOTQ0MjBaMDMxMTAvBgNV BAMTKEY0ODlDRDJDQzUxMjVDOEZGREEyMjY3RUVBQ0Q3QUVDRkIwQTQ2OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy59kwJLuHM2ticgDIL+CBNI9E 6nlT1cx7BlATNqn59d+IF/5lF22VvP2x0Cqb7vycOf8rXuF44nTLR/Yxdmg730Jh 8ggAgpBePI3H1gyFzhiwjkM/M/x/FG5I/hJ8OLxKh1EP40r1IKG0coR5XwTQkaxl 2UpksAmL5yc5Wh8zSH83MBXEx8VK9bG71KuVMW/vMBAggEPx9cGlahtAB1hCXVZA 7jkP1A2A/lcsVg/hxwK4PE5AKVIceGLJDhegu3QD3RR8cYIS4TesXjmusRGWAQrU jwFw3s3q0UAov439Z8XUgdFj43MvNarIRv/6MT9SUP3hjFRXulA1Ady0YaLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9InNLMUSXI/9oiZ+6s167PsKRpQwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+ZJl8dR9sYVPH11LuDpH7KNZNgRiOV5410 LrMiEt886Cf1i4Lz5HOdtMDWuFP56zRCVKy/jdwW8PRRT7fA20I6Q8fnhp3rcE+0 PMIpr0JfbtE5HKECRliFzAeDZcjjPa98s7G8a3xb3keiEQ/lgNJT9aG9VjSvuffN 1zmZH6qf64oKBUSBe4NzZ6Ve8bKV8AvYbfCdpj4aFljM7DeOP2+63B4QT7q9VzWE Wt07KhFF9od8ksVi3P1FlpewCRZ0odr8a8cUvtSwNEQYIAfLwgeiFNsHFR6SKKJl 78qJw9M5b35KUYLkwbFuinW6bR9z9Z6R3Xneym3m9W9wv58j5lc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:17:00 2025 by rpki-client