$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: v7qCQ9weXP/t8s5WitQhyu3pwAtRM5xghU+iLTEZ9IQ= Subject key identifier: E8:31:39:89:D2:C6:7D:C5:3D:CC:A0:71:1D:50:DB:C6:17:7D:D7:C2 Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 53D49CDFE7128C5DA159E1FF47A6B8304FDED94F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: 77 Signing time: Tue 12 Aug 2025 13:41:44 +0000 Manifest this update: Tue 12 Aug 2025 13:36:44 +0000 Manifest next update: Fri 15 Aug 2025 17:49:44 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: SzqAn9P1RkAOd3QcRPp83kWdntkyGQboS8x2ApKCt4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 17:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d4:9c:df:e7:12:8c:5d:a1:59:e1:ff:47:a6:b8:30:4f:de:d9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Aug 12 13:36:44 2025 GMT Not After : Aug 15 17:49:44 2025 GMT Subject: CN=E8313989D2C67DC53DCCA0711D50DBC6177DD7C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:3e:21:be:1a:2b:2a:d4:48:89:a0:ff:0f: 75:f5:75:de:1f:82:55:12:b3:1e:2e:b6:93:61:23: 03:f6:16:3f:d6:6c:77:32:16:76:1c:58:36:17:8d: 44:98:d7:6d:7c:9a:72:40:54:5b:f5:66:d5:4f:46: 4e:e1:37:4c:b0:c0:cf:f2:14:ed:f8:b9:9f:ce:a3: 20:1f:1d:36:b2:e1:c9:45:64:40:59:5d:33:fa:fd: 65:8d:e2:82:4c:81:e0:d1:5c:bd:8c:94:8d:13:9b: d6:08:c7:14:68:9c:3f:3b:ee:e1:7d:de:96:88:d5: 27:3f:78:1d:32:60:25:3f:da:5f:d8:2e:96:a2:f4: 75:6e:43:a2:f5:70:69:3b:4e:99:d8:3b:2f:ca:fd: f0:49:cf:8a:4a:61:96:ea:be:a2:d1:f0:21:a4:90: ab:19:51:d0:06:c0:95:78:ff:d6:cb:39:6a:9c:f0: 85:06:ab:40:c6:83:64:fc:3c:01:da:01:a4:c7:67: 1c:7d:ad:f7:0c:f1:c9:bc:9d:43:c6:ca:60:03:6f: f0:81:4a:6a:c2:aa:98:7a:19:04:b5:30:8f:c9:be: db:91:9b:0c:b3:1e:d1:c9:1c:53:ef:cb:bb:1d:e3: 5c:25:54:60:fd:ac:9d:5d:43:dc:98:7b:78:9c:db: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:31:39:89:D2:C6:7D:C5:3D:CC:A0:71:1D:50:DB:C6:17:7D:D7:C2 X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b0:66:fc:66:62:20:e8:42:ef:15:9c:5a:0b:15:d3:3f:68: aa:05:08:8e:c4:1e:24:04:82:a4:d3:59:10:2d:72:2a:17:c0: 02:a0:9d:00:24:0b:bd:95:ca:a4:6e:e2:14:e5:6b:44:43:db: 58:42:20:d9:61:a8:26:c1:36:8c:da:1b:bf:c0:7b:9d:d8:da: 64:0c:ed:64:f6:73:6a:ce:08:fc:6e:b8:ea:49:68:15:70:a5: 9b:7e:ea:cf:68:79:56:6e:da:fe:f3:24:e9:f2:a9:7e:5e:3f: 85:31:13:1c:f0:83:43:77:61:4d:27:ad:0b:da:38:9f:36:70: 32:d3:62:80:18:ad:2e:64:3f:6b:8d:6e:8c:ca:c3:f1:83:15: 09:d9:f0:87:0c:cf:fe:00:56:9d:af:28:79:89:89:68:70:cf: a6:e9:9c:ee:a9:99:31:d0:1b:93:d1:c9:ee:de:d7:33:4d:51: ac:80:cf:e3:7a:33:c3:c9:d2:34:ec:3c:ad:19:ab:c4:d3:07: 93:9f:cb:11:1c:ba:43:35:ec:2b:2c:69:f0:ea:ba:0b:a0:60: eb:9d:1e:9a:73:b4:af:fa:f3:45:ad:3d:77:bb:75:df:02:eb: c9:24:f6:5e:50:05:85:65:6f:2d:a5:c7:d5:53:f6:24:ae:64: 2f:e6:25:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9Sc3+cSjF2hWeH/R6a4ME/e2U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNTA4MTIxMzM2NDRaFw0yNTA4MTUxNzQ5NDRaMDMxMTAvBgNV BAMTKEU4MzEzOTg5RDJDNjdEQzUzRENDQTA3MTFENTBEQkM2MTc3REQ3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4j4hvhorKtRIiaD/D3X1dd4f glUSsx4utpNhIwP2Fj/WbHcyFnYcWDYXjUSY1218mnJAVFv1ZtVPRk7hN0ywwM/y FO34uZ/OoyAfHTay4clFZEBZXTP6/WWN4oJMgeDRXL2MlI0Tm9YIxxRonD877uF9 3paI1Sc/eB0yYCU/2l/YLpai9HVuQ6L1cGk7TpnYOy/K/fBJz4pKYZbqvqLR8CGk kKsZUdAGwJV4/9bLOWqc8IUGq0DGg2T8PAHaAaTHZxx9rfcM8cm8nUPGymADb/CB SmrCqph6GQS1MI/JvtuRmwyzHtHJHFPvy7sd41wlVGD9rJ1dQ9yYe3ic29RRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6DE5idLGfcU9zKBxHVDbxhd918IwHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOwZvxmYiDoQu8VnFoLFdM/aKoFCI7EHiQE gqTTWRAtcioXwAKgnQAkC72VyqRu4hTla0RD21hCINlhqCbBNozaG7/Ae53Y2mQM 7WT2c2rOCPxuuOpJaBVwpZt+6s9oeVZu2v7zJOnyqX5eP4UxExzwg0N3YU0nrQva OJ82cDLTYoAYrS5kP2uNbozKw/GDFQnZ8IcMz/4AVp2vKHmJiWhwz6bpnO6pmTHQ G5PRye7e1zNNUayAz+N6M8PJ0jTsPK0Zq8TTB5OfyxEcukM17CssafDqugugYOud HppztK/680WtPXe7dd8C68kk9l5QBYVlby2lx9VT9iSuZC/mJXw= -----END CERTIFICATE-----Generated at Tue Aug 12 22:42:17 2025 by rpki-client