$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: 9EK2lbJMfL1tqo/fZanHT7Ym88/GbZL5K5QZsUhIRhU= Subject key identifier: C8:AC:CA:42:3E:B0:C3:09:1D:04:DC:A2:48:80:7F:BC:55:5F:E7:C2 Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 09B9D463D4C8B85B6A51C7584E32356264BDE71F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 04DB Signing time: Wed 04 Jun 2025 07:42:24 +0000 Manifest this update: Wed 04 Jun 2025 07:37:24 +0000 Manifest next update: Sat 07 Jun 2025 18:36:24 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: WfKk9fXblGwy5SkYYAyK7cjEYvyWwBEsP7cawMuCndw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b9:d4:63:d4:c8:b8:5b:6a:51:c7:58:4e:32:35:62:64:bd:e7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Jun 4 07:37:24 2025 GMT Not After : Jun 7 18:36:24 2025 GMT Subject: CN=C8ACCA423EB0C3091D04DCA248807FBC555FE7C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:7b:d9:af:26:ed:ec:94:c9:f9:8a:55:ab: 63:94:97:a8:e7:52:27:d6:c3:5e:53:c6:98:0e:d1: 73:43:35:ca:0b:b8:98:aa:3b:00:29:81:e6:49:69: f4:d4:17:5a:8e:d5:f1:4e:66:52:53:2e:43:c2:4e: 06:b6:8b:a4:fe:ad:5f:cc:14:7e:f6:22:bc:b3:0a: 76:7d:6d:cd:46:f1:28:39:ef:a8:95:51:fa:60:4b: 50:26:bc:38:c0:ff:dd:77:97:2a:73:7a:5c:bb:a8: a2:29:44:3e:a0:f2:16:ac:dd:b5:60:15:55:1c:d9: 1f:92:b8:e1:17:f9:3e:31:7d:33:de:61:8b:b8:b6: 5b:ee:20:c2:5b:11:70:4e:f0:50:f5:7c:b7:10:3d: a3:e7:53:77:2e:9b:79:69:06:10:bb:45:8f:b2:ae: e8:13:93:fc:41:c0:a0:4a:42:4c:e9:00:07:ac:cf: 27:2d:34:ee:ea:19:43:b9:21:11:c4:9a:01:18:90: fb:38:68:af:2d:b0:e7:cf:da:39:c2:c9:4f:3f:7b: a4:84:13:77:25:cf:7a:6c:d5:f9:c7:e9:86:8c:63: dc:d1:ae:04:2a:a6:3a:62:53:21:c4:5d:f0:e8:96: 4e:a4:3f:df:09:fc:d8:29:92:ee:29:74:c7:04:0e: 1d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AC:CA:42:3E:B0:C3:09:1D:04:DC:A2:48:80:7F:BC:55:5F:E7:C2 X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e7:2d:26:8e:7f:68:88:ba:d7:c8:63:28:41:f7:9a:c7:d7: 52:99:58:93:a2:9d:b4:64:1a:95:a0:ee:bc:06:99:ec:3f:f0: 7d:51:7e:24:60:7b:7b:60:ab:fa:b6:43:9a:ae:c2:90:25:70: ba:e4:b1:fe:8f:f0:78:37:7d:2f:a0:22:4c:ad:2b:76:ff:8f: 38:4b:40:9f:fe:41:ac:f2:ba:37:cd:62:89:43:d1:37:1f:27: fc:ab:b0:a9:6a:36:6d:83:e9:8c:a0:9a:fe:b6:89:70:7f:cf: 62:d4:50:a7:a3:dd:f9:c9:86:9b:1e:1e:63:58:c8:24:08:c0: 2d:90:95:c7:5e:e5:a7:ba:3d:b4:e3:b8:b3:fc:72:e8:8e:a8: 74:a2:af:75:a8:49:92:93:99:e8:73:5d:47:c2:0f:6c:3b:10: 0f:2e:25:44:6c:e8:d2:23:da:4e:7d:3b:aa:af:9c:c6:87:c1: 9e:1e:7b:f7:58:92:20:77:95:ce:57:b6:4d:6f:e5:cb:7c:04: 00:99:9a:d5:be:d7:64:01:c5:64:40:55:4a:c2:ac:ff:bc:cc: f7:ce:ab:b2:3b:eb:cd:b8:03:e4:68:b4:c2:f2:09:18:c2:b0: ca:04:60:e6:a8:52:7a:18:08:b4:49:c0:a0:4b:58:f8:ea:7c: d8:3a:03:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbnUY9TIuFtqUcdYTjI1YmS95x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNTA2MDQwNzM3MjRaFw0yNTA2MDcxODM2MjRaMDMxMTAvBgNV BAMTKEM4QUNDQTQyM0VCMEMzMDkxRDA0RENBMjQ4ODA3RkJDNTU1RkU3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd9HvZrybt7JTJ+YpVq2OUl6jn UifWw15TxpgO0XNDNcoLuJiqOwApgeZJafTUF1qO1fFOZlJTLkPCTga2i6T+rV/M FH72IryzCnZ9bc1G8Sg576iVUfpgS1AmvDjA/913lypzely7qKIpRD6g8has3bVg FVUc2R+SuOEX+T4xfTPeYYu4tlvuIMJbEXBO8FD1fLcQPaPnU3cum3lpBhC7RY+y rugTk/xBwKBKQkzpAAeszyctNO7qGUO5IRHEmgEYkPs4aK8tsOfP2jnCyU8/e6SE E3clz3ps1fnH6YaMY9zRrgQqpjpiUyHEXfDolk6kP98J/Ngpku4pdMcEDh2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyKzKQj6wwwkdBNyiSIB/vFVf58IwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/nLSaOf2iIutfIYyhB95rH11KZWJOinbRk GpWg7rwGmew/8H1RfiRge3tgq/q2Q5quwpAlcLrksf6P8Hg3fS+gIkytK3b/jzhL QJ/+QazyujfNYolD0TcfJ/yrsKlqNm2D6Yygmv62iXB/z2LUUKej3fnJhpseHmNY yCQIwC2Qlcde5ae6PbTjuLP8cuiOqHSir3WoSZKTmehzXUfCD2w7EA8uJURs6NIj 2k59O6qvnMaHwZ4ee/dYkiB3lc5Xtk1v5ct8BACZmtW+12QBxWRAVUrCrP+8zPfO q7I76824A+RotMLyCRjCsMoEYOaoUnoYCLRJwKBLWPjqfNg6A1U= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:32 2025 by rpki-client