$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: Ts1AauYK0I6Lvb6uMm3mOtM4oSdqZZ5Jxp3q0efGRIk= Subject key identifier: B6:B7:DB:D9:1D:56:18:18:2C:0A:E8:46:96:E9:AD:55:C1:70:70:B8 Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 670303C9223194D14400C74208CCF9BBA0B1E9B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 0568 Signing time: Sat 18 Apr 2026 19:02:45 +0000 Manifest this update: Sat 18 Apr 2026 18:57:45 +0000 Manifest next update: Tue 21 Apr 2026 21:08:45 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: zJPCJzWVXPTsvJU12+FCJYRza+YMTKavTZv10gnLjyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 21:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:03:03:c9:22:31:94:d1:44:00:c7:42:08:cc:f9:bb:a0:b1:e9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Apr 18 18:57:45 2026 GMT Not After : Apr 21 21:08:45 2026 GMT Subject: CN=B6B7DBD91D5618182C0AE84696E9AD55C17070B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e0:63:d8:2a:cd:22:15:44:61:ef:24:9b:e2: 3a:62:19:ac:61:61:b7:1d:d6:87:76:48:5d:22:52: 9f:1d:67:ba:9d:8a:1b:fe:a8:27:b3:3d:78:da:ea: bd:e9:4a:63:05:63:3e:7f:8e:ad:54:09:09:3d:a8: 95:46:2f:dc:23:1b:47:68:53:9e:9c:e2:fb:77:08: 33:ba:fc:65:66:61:59:d6:26:3e:68:0b:03:a4:99: 92:b6:d0:63:80:aa:3c:bc:57:c5:1e:9f:ea:26:13: 0a:36:1d:ef:8e:95:f6:7b:b9:be:90:f8:23:3a:5c: 32:0c:f1:50:4f:52:99:1d:63:12:ea:9b:23:f2:c7: b3:7c:b9:be:dc:aa:73:f5:8b:83:26:d7:91:c8:54: 21:52:f8:52:93:bc:11:c2:a9:e2:c7:6a:08:33:8c: 5d:eb:54:76:8e:67:09:a6:81:fd:0e:da:93:c2:59: bb:2f:bc:36:50:70:d3:03:e8:2d:9d:91:b2:8a:64: f6:95:2d:7a:85:cf:f3:d5:26:85:ca:a4:4b:18:37: d6:5b:f7:d7:c9:06:99:d2:48:46:63:30:57:66:d8: bf:89:a2:fc:7e:f2:21:db:23:58:de:92:e6:9e:50: 66:88:c4:d5:af:7b:46:8c:2a:83:14:16:e7:6f:d5: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B7:DB:D9:1D:56:18:18:2C:0A:E8:46:96:E9:AD:55:C1:70:70:B8 X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b1:6b:64:70:62:10:d4:e4:52:1f:4f:48:47:0b:76:03:73: 89:33:f4:60:c2:9a:c2:e8:c4:ab:f5:3d:3c:96:6c:b7:ab:37: 85:59:a5:87:1d:80:9b:3d:ad:04:8c:df:1f:c0:84:2c:4b:29: f5:30:4e:23:7a:d4:45:42:ea:c5:aa:58:fc:e0:6f:28:1c:e8: 1f:45:01:11:99:a7:49:a7:eb:bd:25:ea:60:8d:31:eb:63:87: b1:64:88:44:0f:ab:0b:36:01:64:32:f7:6d:5b:84:26:de:93: 9e:c4:f3:39:a7:29:b3:28:2d:e3:62:c3:3f:15:4a:3b:95:84: 6f:8f:38:ca:46:d7:79:d0:b1:31:ab:22:0a:bc:5f:d2:a2:ce: 45:e9:ec:22:55:ac:df:c7:04:ed:f1:7d:71:e0:ac:aa:6e:ee: 2e:e8:1e:7e:9b:61:6c:a5:b3:54:4a:1c:0b:de:6a:5b:0e:ae: b3:63:ce:31:1a:43:18:2f:c8:d8:ae:46:65:e5:23:5c:b3:94: ce:67:4f:a9:1d:35:4c:26:3e:53:73:49:58:5d:b4:a4:44:d7: a7:8d:4e:82:bd:c2:0c:36:94:e8:e8:0b:24:ad:51:75:4b:e0: 95:3f:a4:db:5f:e1:32:1e:ca:93:37:9c:58:d2:83:05:d0:09: f1:9d:2b:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwMDySIxlNFEAMdCCMz5u6Cx6bYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNjA0MTgxODU3NDVaFw0yNjA0MjEyMTA4NDVaMDMxMTAvBgNV BAMTKEI2QjdEQkQ5MUQ1NjE4MTgyQzBBRTg0Njk2RTlBRDU1QzE3MDcwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl4GPYKs0iFURh7ySb4jpiGaxh Ybcd1od2SF0iUp8dZ7qdihv+qCezPXja6r3pSmMFYz5/jq1UCQk9qJVGL9wjG0do U56c4vt3CDO6/GVmYVnWJj5oCwOkmZK20GOAqjy8V8Uen+omEwo2He+OlfZ7ub6Q +CM6XDIM8VBPUpkdYxLqmyPyx7N8ub7cqnP1i4Mm15HIVCFS+FKTvBHCqeLHaggz jF3rVHaOZwmmgf0O2pPCWbsvvDZQcNMD6C2dkbKKZPaVLXqFz/PVJoXKpEsYN9Zb 99fJBpnSSEZjMFdm2L+Jovx+8iHbI1jekuaeUGaIxNWve0aMKoMUFudv1RfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtrfb2R1WGBgsCuhGlumtVcFwcLgwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGxa2RwYhDU5FIfT0hHC3YDc4kz9GDCmsLo xKv1PTyWbLerN4VZpYcdgJs9rQSM3x/AhCxLKfUwTiN61EVC6sWqWPzgbygc6B9F ARGZp0mn670l6mCNMetjh7FkiEQPqws2AWQy921bhCbek57E8zmnKbMoLeNiwz8V SjuVhG+POMpG13nQsTGrIgq8X9KizkXp7CJVrN/HBO3xfXHgrKpu7i7oHn6bYWyl s1RKHAvealsOrrNjzjEaQxgvyNiuRmXlI1yzlM5nT6kdNUwmPlNzSVhdtKRE16eN ToK9wgw2lOjoCyStUXVL4JU/pNtf4TIeypM3nFjSgwXQCfGdKz4= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:07 2026 by rpki-client