$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: fm4VkJ1AV49D2J7Eo/HGMP8Ib+S09z9pw4k4btCK8+4= Subject key identifier: 18:23:27:A4:99:2D:58:76:3F:B6:F4:63:DF:2D:E4:42:8E:DC:B8:3D Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 70AC97C47A12DE8BAD50EDC6C97E7B5201FDB8B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 051E Signing time: Sun 02 Nov 2025 23:22:22 +0000 Manifest this update: Sun 02 Nov 2025 23:17:22 +0000 Manifest next update: Wed 05 Nov 2025 23:47:22 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: e54H2A6ysluwR0+g9o5PlhsRZu5MW3hVxGYHPLTgkVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ac:97:c4:7a:12:de:8b:ad:50:ed:c6:c9:7e:7b:52:01:fd:b8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Nov 2 23:17:22 2025 GMT Not After : Nov 5 23:47:22 2025 GMT Subject: CN=182327A4992D58763FB6F463DF2DE4428EDCB83D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:c1:fd:d8:91:75:e8:d6:d4:ea:94:73:b5: 8a:09:c1:39:fe:f6:de:ed:fe:d6:1f:b2:de:f5:aa: 10:11:32:6f:46:99:1f:72:a1:22:4a:f8:73:1d:7c: af:41:d2:5a:0c:8b:da:fc:f0:3d:1e:51:d7:2b:a1: b9:c2:dd:a1:c3:29:dc:9f:0d:9f:37:76:bf:75:f1: ae:f1:63:d2:28:fa:00:7c:dc:f1:a3:48:6e:b7:99: 4a:68:e0:59:83:87:fd:92:56:37:b2:0e:e5:31:0c: 93:40:c9:f8:45:f7:cb:f6:8e:6c:b3:ba:ab:95:87: 40:35:30:20:e1:ab:39:4c:8f:d7:e7:e0:ce:9b:f2: 32:c1:66:71:ab:73:62:34:95:63:a8:18:c0:0f:87: 47:fe:af:d8:88:81:89:0b:3a:de:11:70:8b:da:25: 66:e6:1b:30:59:e6:53:bc:08:ed:a0:37:a9:5e:82: ab:cb:05:7b:25:ff:7f:d5:51:ca:fb:0d:45:9c:49: 62:bb:dd:9e:13:6e:9f:d7:b7:00:57:0f:9a:7d:cc: 66:65:fc:90:09:67:0e:af:d0:cb:a9:30:65:ee:77: 86:60:23:70:a8:b8:28:82:7b:61:b0:14:5f:b3:7a: 0e:35:c5:2e:9a:d0:48:8b:04:e8:41:38:8e:24:9f: 21:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:23:27:A4:99:2D:58:76:3F:B6:F4:63:DF:2D:E4:42:8E:DC:B8:3D X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a9:d4:f2:2c:1e:36:1c:94:e9:f4:2a:8f:1d:97:fb:46:44: 46:04:57:2c:91:e9:9c:d9:dd:9c:b5:33:c0:5a:f7:81:98:9d: 31:27:ec:1e:7f:a3:88:e5:b3:5f:25:c0:dd:48:20:b8:49:f1: 2a:e7:53:e6:fa:7f:f9:14:56:c7:f3:13:c5:04:1f:d9:50:c8: 39:2d:67:51:0c:32:66:ef:ac:93:bb:86:0c:e7:b3:95:29:6d: a4:14:27:47:85:92:8a:04:14:fb:c5:81:12:ae:78:44:6a:60: 2b:28:33:d6:47:9c:58:ff:88:e6:12:38:42:57:0e:65:35:29: 24:72:3e:d4:0a:9c:3c:0f:cd:4f:16:0a:1a:a8:68:5e:5f:92: e8:e3:ba:55:ed:2f:5c:98:c4:d0:a5:5d:27:7b:2c:f2:b9:c8: 83:b3:13:08:9f:a7:1d:f3:09:55:07:69:c2:3c:8f:51:d7:51: e4:00:f2:a9:b1:79:aa:12:97:0b:0c:ef:c0:27:34:b2:97:fd: f0:7c:81:85:c0:f3:e9:d4:26:1d:49:29:5b:eb:46:17:83:a2: 5b:b5:18:cd:27:c6:b9:85:04:53:6d:76:ba:c0:0c:7a:61:1f: ba:22:55:58:bd:6e:3f:81:7a:a6:46:f8:92:0c:9a:5e:05:8c: 48:63:bd:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKyXxHoS3outUO3GyX57UgH9uLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNTExMDIyMzE3MjJaFw0yNTExMDUyMzQ3MjJaMDMxMTAvBgNV BAMTKDE4MjMyN0E0OTkyRDU4NzYzRkI2RjQ2M0RGMkRFNDQyOEVEQ0I4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/cH92JF16NbU6pRztYoJwTn+ 9t7t/tYfst71qhARMm9GmR9yoSJK+HMdfK9B0loMi9r88D0eUdcrobnC3aHDKdyf DZ83dr918a7xY9Io+gB83PGjSG63mUpo4FmDh/2SVjeyDuUxDJNAyfhF98v2jmyz uquVh0A1MCDhqzlMj9fn4M6b8jLBZnGrc2I0lWOoGMAPh0f+r9iIgYkLOt4RcIva JWbmGzBZ5lO8CO2gN6legqvLBXsl/3/VUcr7DUWcSWK73Z4Tbp/XtwBXD5p9zGZl /JAJZw6v0MupMGXud4ZgI3CouCiCe2GwFF+zeg41xS6a0EiLBOhBOI4knyE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGCMnpJktWHY/tvRj3y3kQo7cuD0wHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2p1PIsHjYclOn0Ko8dl/tGREYEVyyR6ZzZ 3Zy1M8Ba94GYnTEn7B5/o4jls18lwN1IILhJ8SrnU+b6f/kUVsfzE8UEH9lQyDkt Z1EMMmbvrJO7hgzns5UpbaQUJ0eFkooEFPvFgRKueERqYCsoM9ZHnFj/iOYSOEJX DmU1KSRyPtQKnDwPzU8WChqoaF5fkujjulXtL1yYxNClXSd7LPK5yIOzEwifpx3z CVUHacI8j1HXUeQA8qmxeaoSlwsM78AnNLKX/fB8gYXA8+nUJh1JKVvrRheDolu1 GM0nxrmFBFNtdrrADHphH7oiVVi9bj+BeqZG+JIMml4FjEhjvXU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:42:50 2025 by rpki-client