$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: 41QWxqj396eZkoug1llcDfBSh502yRin4zD49/xfpng= Subject key identifier: 24:06:7F:EB:B9:2E:32:86:D9:2D:4E:71:1D:77:0D:C5:FE:97:24:DA Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 565A3CEC7A895063ED5D90178E4783E441E8BD94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 0552 Signing time: Fri 27 Feb 2026 18:52:35 +0000 Manifest this update: Fri 27 Feb 2026 18:47:35 +0000 Manifest next update: Tue 03 Mar 2026 03:30:35 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: Kt0dBBnbpwrq+apUjU3gtfpgB7WXsBGm5dqNqGfZ33Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 03:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5a:3c:ec:7a:89:50:63:ed:5d:90:17:8e:47:83:e4:41:e8:bd:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Feb 27 18:47:35 2026 GMT Not After : Mar 3 03:30:35 2026 GMT Subject: CN=24067FEBB92E3286D92D4E711D770DC5FE9724DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:aa:dc:eb:56:da:02:fa:91:b9:fc:20:08: 93:d7:f4:e7:21:75:9e:69:47:91:a0:59:ee:63:fc: 3d:0d:0c:c1:66:35:34:df:2d:fa:ed:0b:5b:b5:ac: 51:e1:c5:54:75:8e:c7:41:f5:21:a8:79:99:39:3e: c3:aa:cb:a6:fd:c1:70:59:9b:90:62:55:cc:c4:0f: fb:15:69:ef:19:4f:87:bf:d7:a8:8f:05:f5:10:65: e9:36:97:d3:e8:d3:89:4f:12:86:07:4a:6f:18:54: f8:38:67:b9:d9:b5:24:e1:dd:31:cb:76:12:99:7a: 52:f3:8b:f5:43:39:a5:94:7a:04:e2:db:2a:38:ad: 30:bb:b4:f0:a6:73:89:df:0c:de:4a:a4:75:3c:54: 7a:d0:46:c6:42:b5:0a:99:e0:6c:b9:33:09:33:c9: 29:13:04:6a:14:67:37:01:5f:3a:9f:64:27:1a:c2: 8f:8a:cc:bf:1e:5f:de:fb:c9:9d:0e:2b:85:7e:3c: b2:ac:9a:4a:ec:6c:eb:40:66:95:ca:b9:60:fa:11: 64:ed:ab:fc:fd:68:2c:0b:0d:3a:18:f2:52:26:5e: 3c:af:a3:07:bd:ae:ca:a3:aa:3b:c1:33:c3:17:4c: b0:d3:d8:0a:bd:5a:d5:f7:40:0c:80:2c:9a:98:b9: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:06:7F:EB:B9:2E:32:86:D9:2D:4E:71:1D:77:0D:C5:FE:97:24:DA X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:93:b8:d2:1c:f5:2c:81:77:16:c1:05:ac:c6:4b:39:82:2e: fd:3e:7c:0d:cc:df:cb:3a:2d:e1:e1:e4:1d:98:a0:27:77:1e: dc:af:8f:75:3e:ba:d0:f6:e8:cd:3e:7f:29:fa:13:7e:45:34: 54:e1:0f:69:78:39:ef:9b:f9:7f:f5:06:c9:85:41:ff:b9:42: 88:80:d5:27:31:5d:fd:21:4c:49:d1:88:c4:44:ff:42:cc:00: 78:7d:0d:c6:d4:fe:8e:3f:d8:f6:72:27:1e:64:2d:be:94:10: 03:69:43:0b:41:fa:fb:86:3e:04:d6:87:1b:60:3d:43:f4:13: 43:58:d7:5e:24:fc:c8:03:03:9d:2e:54:e7:2b:19:9b:1c:ef: f8:80:67:a8:ef:5f:99:37:f7:ca:2a:da:84:87:db:4e:74:ab: 40:a8:aa:e0:fc:e7:35:c0:24:c1:0d:bb:d0:fc:56:da:df:26: 5d:4f:a2:d3:55:fc:2a:7f:88:ce:73:b2:a2:07:4f:d9:d6:a1: 17:2f:8d:13:c3:cb:d1:22:b1:bc:c3:cd:99:31:1e:4e:3d:d3: 5e:39:fc:aa:ca:f3:da:28:df:02:85:cd:c0:3d:34:da:6f:b1: 40:16:3f:b2:74:3d:60:b2:ef:35:ef:d2:0d:74:89:39:8b:b8: e3:bb:61:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlo87HqJUGPtXZAXjkeD5EHovZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNjAyMjcxODQ3MzVaFw0yNjAzMDMwMzMwMzVaMDMxMTAvBgNV BAMTKDI0MDY3RkVCQjkyRTMyODZEOTJENEU3MTFENzcwREM1RkU5NzI0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgarc61baAvqRufwgCJPX9Och dZ5pR5GgWe5j/D0NDMFmNTTfLfrtC1u1rFHhxVR1jsdB9SGoeZk5PsOqy6b9wXBZ m5BiVczED/sVae8ZT4e/16iPBfUQZek2l9Po04lPEoYHSm8YVPg4Z7nZtSTh3THL dhKZelLzi/VDOaWUegTi2yo4rTC7tPCmc4nfDN5KpHU8VHrQRsZCtQqZ4Gy5Mwkz ySkTBGoUZzcBXzqfZCcawo+KzL8eX977yZ0OK4V+PLKsmkrsbOtAZpXKuWD6EWTt q/z9aCwLDToY8lImXjyvowe9rsqjqjvBM8MXTLDT2Aq9WtX3QAyALJqYudS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJAZ/67kuMobZLU5xHXcNxf6XJNowHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuTuNIc9SyBdxbBBazGSzmCLv0+fA3M38s6 LeHh5B2YoCd3Htyvj3U+utD26M0+fyn6E35FNFThD2l4Oe+b+X/1BsmFQf+5QoiA 1ScxXf0hTEnRiMRE/0LMAHh9DcbU/o4/2PZyJx5kLb6UEANpQwtB+vuGPgTWhxtg PUP0E0NY114k/MgDA50uVOcrGZsc7/iAZ6jvX5k398oq2oSH2050q0CoquD85zXA JMENu9D8VtrfJl1PotNV/Cp/iM5zsqIHT9nWoRcvjRPDy9EisbzDzZkxHk490145 /KrK89oo3wKFzcA9NNpvsUAWP7J0PWCy7zXv0g10iTmLuOO7Ybg= -----END CERTIFICATE-----Generated at Mon Mar 2 00:34:58 2026 by rpki-client