$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: b9yodJl9/IAzNoK4nL0T2bTjaibsdAcNy+CLjt1AszQ= Subject key identifier: 05:2E:65:7D:B0:20:6B:97:C8:64:C6:39:FE:8B:01:46:3E:F0:38:C0 Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 19E051AA2EBCA3CBAEE7EF30A0DFEF2B778BFFA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 01FD Signing time: Mon 28 Apr 2025 12:50:04 +0000 Manifest this update: Mon 28 Apr 2025 12:45:04 +0000 Manifest next update: Thu 01 May 2025 19:54:04 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: OlqubZyR/hikZHblBiWo+nw7XPx9bFD0tNw9W5QonQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e0:51:aa:2e:bc:a3:cb:ae:e7:ef:30:a0:df:ef:2b:77:8b:ff:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Apr 28 12:45:04 2025 GMT Not After : May 1 19:54:04 2025 GMT Subject: CN=052E657DB0206B97C864C639FE8B01463EF038C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:00:79:67:6c:f3:aa:2e:a6:37:69:86:ff: 2a:9c:03:c3:b4:f7:1d:f6:6c:df:d2:1d:fe:42:d4: 52:4a:e2:5a:53:aa:54:40:50:10:ee:f4:16:63:76: b6:1e:c6:46:3f:72:04:75:1d:dc:5b:f2:9f:46:43: 19:ab:a4:30:5d:20:ff:c2:14:a1:d6:e5:93:87:ae: 29:16:fe:72:4b:36:57:4d:b9:7e:cf:a0:3e:86:0e: 50:d0:d4:b9:84:40:c7:04:d3:a2:45:8b:1d:f7:6f: e1:60:bf:e7:df:5d:44:4a:cd:86:ea:18:7b:4a:3b: 9e:0e:60:ed:bf:5d:41:6d:89:d5:d9:fa:72:48:fc: 90:ae:40:88:31:67:85:b0:86:d3:da:44:9d:27:2c: 9c:4d:d2:bd:5f:c1:6b:dd:00:03:c8:2f:81:d5:cf: 0a:c3:83:51:66:26:ec:4d:de:49:36:f7:37:4c:dd: 38:4b:2f:fc:d5:ce:75:b2:c9:76:72:e9:77:fa:61: 5a:22:91:27:3b:26:b5:6e:21:e0:03:44:ae:0f:77: 00:6e:18:80:d7:c6:ac:4a:76:a5:4f:fb:0f:fe:7a: 9c:47:bb:fb:c5:62:bd:1a:78:c5:fc:c5:92:71:27: c9:48:39:9d:ba:c5:9e:17:cb:b4:07:11:fd:ca:ab: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2E:65:7D:B0:20:6B:97:C8:64:C6:39:FE:8B:01:46:3E:F0:38:C0 X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:dd:dc:0b:78:68:44:46:c3:30:94:5f:4a:41:f4:51:a4:0d: 74:92:8b:17:d9:bf:33:1b:97:c9:b8:90:a0:99:fb:10:20:45: d5:9c:bd:52:35:20:b0:36:d6:86:bc:03:ff:97:7a:ac:52:6d: bd:3a:cb:34:de:4e:ad:b2:17:00:d8:c1:cc:a9:e3:f7:98:bd: 43:e0:7a:aa:79:44:48:6c:0a:6b:ca:7d:d7:05:ce:ea:30:b2: 37:e7:6f:92:64:f5:c9:8a:c6:c0:31:1c:92:10:21:08:5b:60: 02:c9:f6:e5:47:5d:e2:57:da:9e:0a:2b:b9:31:e9:b0:c1:57: 1a:d5:1b:41:9b:e0:39:64:4b:b4:08:c8:79:54:5d:0d:c1:9f: 1e:63:f0:88:64:96:9d:70:0c:92:54:2f:8a:43:c3:9e:a8:7f: 06:85:6e:cb:3d:87:81:cb:fc:af:0d:bc:84:e7:db:b9:73:0c: 5c:c9:f9:b2:cf:3d:eb:56:d9:f9:3a:5c:09:2c:83:6f:7c:cd: 78:06:83:c3:fa:93:72:ee:49:d7:c3:39:d0:56:6a:15:fa:4c: 8a:a7:cc:78:63:b5:7c:f8:ad:08:68:21:92:c9:ee:87:8e:66: 1a:34:a0:cc:8d:7e:78:30:eb:e7:4d:66:87:ab:33:81:d4:40: 53:c8:49:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGeBRqi68o8uu5+8woN/vK3eL/6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTA0MjgxMjQ1MDRaFw0yNTA1MDExOTU0MDRaMDMxMTAvBgNV BAMTKDA1MkU2NTdEQjAyMDZCOTdDODY0QzYzOUZFOEIwMTQ2M0VGMDM4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsAB5Z2zzqi6mN2mG/yqcA8O0 9x32bN/SHf5C1FJK4lpTqlRAUBDu9BZjdrYexkY/cgR1Hdxb8p9GQxmrpDBdIP/C FKHW5ZOHrikW/nJLNldNuX7PoD6GDlDQ1LmEQMcE06JFix33b+Fgv+ffXURKzYbq GHtKO54OYO2/XUFtidXZ+nJI/JCuQIgxZ4WwhtPaRJ0nLJxN0r1fwWvdAAPIL4HV zwrDg1FmJuxN3kk29zdM3ThLL/zVznWyyXZy6Xf6YVoikSc7JrVuIeADRK4PdwBu GIDXxqxKdqVP+w/+epxHu/vFYr0aeMX8xZJxJ8lIOZ26xZ4Xy7QHEf3Kq2oVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBS5lfbAga5fIZMY5/osBRj7wOMAwHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbd3At4aERGwzCUX0pB9FGkDXSSixfZvzMb l8m4kKCZ+xAgRdWcvVI1ILA21oa8A/+XeqxSbb06yzTeTq2yFwDYwcyp4/eYvUPg eqp5REhsCmvKfdcFzuowsjfnb5Jk9cmKxsAxHJIQIQhbYALJ9uVHXeJX2p4KK7kx 6bDBVxrVG0Gb4DlkS7QIyHlUXQ3Bnx5j8Ihklp1wDJJUL4pDw56ofwaFbss9h4HL /K8NvITn27lzDFzJ+bLPPetW2fk6XAksg298zXgGg8P6k3LuSdfDOdBWahX6TIqn zHhjtXz4rQhoIZLJ7oeOZho0oMyNfngw6+dNZoerM4HUQFPISSE= -----END CERTIFICATE-----Generated at Wed Apr 30 21:16:43 2025 by rpki-client