$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: 6SVngUdW//0ytqAPuyOHpujqGRRfQ0D6/fJx5dwlYGE= Subject key identifier: 0A:CA:13:06:F4:FC:C9:3B:71:03:D5:EE:77:38:F3:1C:37:32:79:0D Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 36E431FC90CD16717A0877AA313B001D5999C27D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 0229 Signing time: Tue 05 Aug 2025 00:50:04 +0000 Manifest this update: Tue 05 Aug 2025 00:45:04 +0000 Manifest next update: Fri 08 Aug 2025 03:44:04 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: Sbw2I8FBNV7wKpjxtooSWB4YfddeKsufZ93VFBDOybc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e4:31:fc:90:cd:16:71:7a:08:77:aa:31:3b:00:1d:59:99:c2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Aug 5 00:45:04 2025 GMT Not After : Aug 8 03:44:04 2025 GMT Subject: CN=0ACA1306F4FCC93B7103D5EE7738F31C3732790D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:83:ed:e4:fc:0c:94:44:1e:ea:27:69:8e:f3: c8:29:fe:77:be:9e:71:03:e7:05:88:24:0a:16:0a: d2:4a:c1:81:34:c6:0c:00:6a:21:2f:91:fd:d2:3a: f6:f7:2d:12:e4:85:e0:f9:c8:f1:1b:ea:eb:18:35: cd:52:ea:37:d6:5d:0e:fd:b6:02:fd:d5:10:52:08: 68:9a:27:d8:cd:87:70:be:4a:43:8a:a7:95:15:1d: d9:50:8c:2f:53:b7:90:cb:b3:4f:26:0c:2f:96:19: 3d:22:5c:71:49:6d:d3:50:ef:3d:fc:b0:80:3e:9e: 0d:ad:f7:7f:71:d6:a6:a0:17:9e:9c:fe:5a:9f:c8: 08:ba:37:67:0f:bd:4c:80:f5:a5:16:9a:ad:f2:23: f6:2c:05:e7:b1:25:c4:1e:d5:4f:5f:a0:9a:7f:f6: 59:fa:f5:5d:0e:74:44:05:32:c8:e2:ec:22:46:4e: 3f:38:dc:c9:19:8d:7a:9a:88:5e:21:79:6c:97:9f: 19:8e:41:50:86:c4:ca:59:1e:0e:97:e3:ed:06:90: 25:05:73:49:a1:4b:73:a3:ba:d0:02:26:55:8b:17: 39:5d:e4:72:a5:a5:7f:40:13:ea:f5:4f:8f:9c:ed: 56:a8:de:e2:ae:b6:4e:df:f3:2b:52:37:34:f9:d8: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CA:13:06:F4:FC:C9:3B:71:03:D5:EE:77:38:F3:1C:37:32:79:0D X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3d:ff:67:7d:e3:a4:53:22:d9:09:28:28:4a:b3:a1:cb:ad: 0e:54:69:4b:13:7d:80:66:4f:d2:76:26:47:01:54:a5:7f:b5: 6b:ae:ed:99:1f:b1:f4:e6:15:4c:b3:e5:fd:9a:31:b4:6a:86: 2b:d7:be:2b:83:56:5c:b5:f0:55:20:5f:20:d1:fc:23:1d:cb: 6c:2a:d6:da:26:9f:1e:94:fd:c1:c1:df:24:f4:97:44:bf:58: c8:87:46:0b:9d:e2:cc:d6:5a:29:f7:cb:50:b9:ff:b3:05:97: 64:28:55:11:dd:41:d7:e3:bc:7a:53:4e:90:91:83:72:9a:69: 94:d0:21:4a:c4:2f:93:f9:e2:76:41:42:3d:4b:f8:a0:f4:08: 5d:e8:df:14:f8:94:7e:01:67:16:5f:dd:65:69:3e:f0:90:e9: 1a:c3:f6:c6:34:28:6d:00:f5:39:68:cd:d7:2e:c4:93:c5:39: 7c:6d:46:10:fb:4f:dd:5d:df:07:9b:38:8c:95:41:a1:09:aa: 19:49:84:37:87:19:48:17:60:53:b7:b9:2f:e5:30:e5:67:47: 3d:b8:70:77:e2:25:4c:1f:9b:c1:79:7f:a9:13:46:4c:91:28: 68:59:9a:90:7c:14:76:ce:64:f7:77:17:ed:44:d8:e1:60:ec: 74:69:b4:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNuQx/JDNFnF6CHeqMTsAHVmZwn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTA4MDUwMDQ1MDRaFw0yNTA4MDgwMzQ0MDRaMDMxMTAvBgNV BAMTKDBBQ0ExMzA2RjRGQ0M5M0I3MTAzRDVFRTc3MzhGMzFDMzczMjc5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUg+3k/AyURB7qJ2mO88gp/ne+ nnED5wWIJAoWCtJKwYE0xgwAaiEvkf3SOvb3LRLkheD5yPEb6usYNc1S6jfWXQ79 tgL91RBSCGiaJ9jNh3C+SkOKp5UVHdlQjC9Tt5DLs08mDC+WGT0iXHFJbdNQ7z38 sIA+ng2t939x1qagF56c/lqfyAi6N2cPvUyA9aUWmq3yI/YsBeexJcQe1U9foJp/ 9ln69V0OdEQFMsji7CJGTj843MkZjXqaiF4heWyXnxmOQVCGxMpZHg6X4+0GkCUF c0mhS3OjutACJlWLFzld5HKlpX9AE+r1T4+c7Vao3uKutk7f8ytSNzT52EArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCsoTBvT8yTtxA9XudzjzHDcyeQ0wHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD49/2d946RTItkJKChKs6HLrQ5UaUsTfYBm T9J2JkcBVKV/tWuu7ZkfsfTmFUyz5f2aMbRqhivXviuDVly18FUgXyDR/CMdy2wq 1tomnx6U/cHB3yT0l0S/WMiHRgud4szWWin3y1C5/7MFl2QoVRHdQdfjvHpTTpCR g3KaaZTQIUrEL5P54nZBQj1L+KD0CF3o3xT4lH4BZxZf3WVpPvCQ6RrD9sY0KG0A 9TlozdcuxJPFOXxtRhD7T91d3webOIyVQaEJqhlJhDeHGUgXYFO3uS/lMOVnRz24 cHfiJUwfm8F5f6kTRkyRKGhZmpB8FHbOZPd3F+1E2OFg7HRptIM= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:40 2025 by rpki-client