$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: bu74ZNA8WZHqOhpDNeEqQMjpJ/5fFHd8iL8GaNv8Ix0= Subject key identifier: 74:66:7F:DD:E9:D3:4C:E4:5C:3C:84:BE:F3:94:55:69:7F:38:62:85 Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 7154D28B60579804905122ED81EB6FC01FE93358 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 04E0 Signing time: Mon 16 Jun 2025 03:02:18 +0000 Manifest this update: Mon 16 Jun 2025 02:57:18 +0000 Manifest next update: Thu 19 Jun 2025 03:33:18 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: jStSY483sz8k+M/ysoZhRAHVFUVN2dAXoJW+LRq5j8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:54:d2:8b:60:57:98:04:90:51:22:ed:81:eb:6f:c0:1f:e9:33:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: Jun 16 02:57:18 2025 GMT Not After : Jun 19 03:33:18 2025 GMT Subject: CN=74667FDDE9D34CE45C3C84BEF39455697F386285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9b:1e:af:c8:0e:89:5e:a7:3b:cf:ec:53:ad: 99:f7:e9:1c:48:d8:fa:b5:bd:70:fa:52:62:6b:ef: c6:46:28:13:dd:a0:2a:a9:92:87:68:7f:7b:a8:3f: 53:ae:13:a1:96:87:3c:b9:7b:ed:95:3c:32:25:49: b1:9e:47:5e:d2:4d:0e:1d:0d:ec:6a:e4:ed:18:4f: ee:94:d2:a0:47:39:43:4e:ba:2b:d6:1f:cf:4e:f6: a7:68:26:5f:dc:93:1f:16:9d:db:e5:a7:2c:d6:a3: 47:28:55:ae:9c:1c:3b:98:d2:37:5b:d6:fc:9f:94: 99:3a:4c:fd:8c:39:74:51:bc:2b:76:bf:4d:ee:62: cb:a1:db:07:47:a6:d3:88:40:46:2d:5a:3d:25:7a: 1a:50:5a:0c:ad:79:2c:cf:22:1e:b6:d9:4e:fc:ff: a2:2f:f6:35:89:28:0c:35:10:42:b9:72:6c:9c:3e: e3:db:58:0f:e9:65:06:94:44:be:aa:02:5f:7c:e5: d1:ba:ae:ae:58:50:1c:13:72:05:79:f5:97:96:73: d5:95:ba:2b:a7:a5:52:dc:51:ab:68:27:ee:b3:dd: 21:5d:fd:bc:aa:d2:79:e9:a9:32:2f:90:14:f8:c4: 78:73:2d:aa:12:42:1b:72:1a:85:a5:00:dc:47:ba: 2c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:66:7F:DD:E9:D3:4C:E4:5C:3C:84:BE:F3:94:55:69:7F:38:62:85 X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:03:9c:a8:2a:67:d1:5c:b8:6a:5f:d8:4d:f7:42:73:d8:50: e9:0d:5f:d0:a3:46:92:85:77:e0:b9:ce:42:26:2c:a7:94:08: f7:c6:0b:bc:95:b5:a0:53:d7:a0:d6:84:6d:d1:6e:5c:98:b0: 8e:8b:c1:60:3b:a0:72:74:12:29:f9:d0:b5:88:09:9a:72:33: 71:2e:e0:c8:c5:9c:bc:62:62:26:c0:0a:1e:2b:6f:fd:84:24: 81:d6:94:b7:db:9b:2e:4b:c3:cf:d7:1f:e6:a1:3f:a1:a8:aa: 29:20:44:1c:e0:67:d7:d5:96:b0:6f:24:3b:a3:a6:c3:5b:d6: 3d:8d:f3:68:f1:a2:e7:aa:a1:2b:7e:4b:d3:4d:f2:09:89:04: 99:eb:9b:06:d9:1a:ea:77:72:81:5c:58:c3:01:59:d8:06:65: 11:37:8e:62:b9:11:08:6a:9c:81:53:50:f7:e3:b9:10:88:db: 19:3d:c6:b3:d5:7b:55:c9:24:24:0d:88:fe:5c:52:a0:2e:d2: 20:4c:24:b7:33:d0:cb:0d:c9:d1:d9:ac:9a:b9:4f:14:a8:81: e0:d5:fd:45:0c:63:c7:a2:b2:02:6b:d5:da:81:46:3f:bb:f9: bd:b7:93:b0:6a:6e:ad:b5:8f:b6:94:94:8e:94:b9:5d:26:21: 4f:68:b2:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcVTSi2BXmASQUSLtgetvwB/pM1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNTA2MTYwMjU3MThaFw0yNTA2MTkwMzMzMThaMDMxMTAvBgNV BAMTKDc0NjY3RkRERTlEMzRDRTQ1QzNDODRCRUYzOTQ1NTY5N0YzODYyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZmx6vyA6JXqc7z+xTrZn36RxI 2Pq1vXD6UmJr78ZGKBPdoCqpkodof3uoP1OuE6GWhzy5e+2VPDIlSbGeR17STQ4d Dexq5O0YT+6U0qBHOUNOuivWH89O9qdoJl/ckx8WndvlpyzWo0coVa6cHDuY0jdb 1vyflJk6TP2MOXRRvCt2v03uYsuh2wdHptOIQEYtWj0lehpQWgyteSzPIh622U78 /6Iv9jWJKAw1EEK5cmycPuPbWA/pZQaURL6qAl985dG6rq5YUBwTcgV59ZeWc9WV uiunpVLcUatoJ+6z3SFd/byq0nnpqTIvkBT4xHhzLaoSQhtyGoWlANxHuizlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdGZ/3enTTORcPIS+85RVaX84YoUwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4DnKgqZ9FcuGpf2E33QnPYUOkNX9CjRpKF d+C5zkImLKeUCPfGC7yVtaBT16DWhG3RblyYsI6LwWA7oHJ0Ein50LWICZpyM3Eu 4MjFnLxiYibACh4rb/2EJIHWlLfbmy5Lw8/XH+ahP6GoqikgRBzgZ9fVlrBvJDuj psNb1j2N82jxoueqoSt+S9NN8gmJBJnrmwbZGup3coFcWMMBWdgGZRE3jmK5EQhq nIFTUPfjuRCI2xk9xrPVe1XJJCQNiP5cUqAu0iBMJLcz0MsNydHZrJq5TxSogeDV /UUMY8eisgJr1dqBRj+7+b23k7Bqbq21j7aUlI6UuV0mIU9osvo= -----END CERTIFICATE-----Generated at Mon Jun 16 12:20:31 2025 by rpki-client