$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: 2lHJ6c8UYnP5lbqkYKf5/PMyUP8eLUDii9y0c/DJf/o= Subject key identifier: A9:98:8E:3B:1C:A9:A7:F7:18:BC:03:44:A9:94:79:F8:7F:97:A1:97 Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 025484DC243CA51180979A13DB0D34811E99F694 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 0213 Signing time: Tue 17 Jun 2025 04:20:04 +0000 Manifest this update: Tue 17 Jun 2025 04:15:04 +0000 Manifest next update: Fri 20 Jun 2025 05:17:04 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: MyEB6M4IZoKFnNuhk+3yv/7PlNZX4j56rysNs0mls7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:54:84:dc:24:3c:a5:11:80:97:9a:13:db:0d:34:81:1e:99:f6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Jun 17 04:15:04 2025 GMT Not After : Jun 20 05:17:04 2025 GMT Subject: CN=A9988E3B1CA9A7F718BC0344A99479F87F97A197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d9:29:9a:7e:a0:2c:46:d8:8b:87:6f:c3:b6: 18:c8:a6:d1:b5:d9:b6:02:0b:eb:fb:9d:16:59:ee: ad:d0:26:4a:12:c6:44:b7:54:c7:4d:ea:81:48:b3: 12:1e:ef:64:e6:c6:df:bd:91:93:7d:cb:62:f4:ca: 2a:c4:d4:28:42:f5:47:36:0c:85:59:d2:11:01:a0: bf:bc:bc:95:83:19:3b:02:49:a4:a4:4b:e9:37:8a: 0a:61:5c:ff:93:92:77:64:ce:96:ce:ba:28:e0:00: f8:ab:33:f7:53:76:fa:9e:1b:df:33:15:60:d9:e8: fe:c1:cc:a9:17:9b:6c:a8:c0:2a:a5:d8:22:8f:21: a2:50:45:aa:5f:42:38:83:5e:9e:66:15:1a:9e:7e: 3b:86:92:5e:54:fd:fd:33:88:21:8c:c9:c7:3c:ce: d1:14:80:53:9c:6b:9c:fd:de:3d:6a:f8:ff:fa:c7: da:9d:f3:9a:82:28:a3:c8:2a:f4:54:b6:dd:a3:63: 2e:e3:f3:ab:66:17:2d:2e:08:15:05:9a:cd:ac:e8: d5:c5:82:65:38:03:8b:00:b7:2c:90:d9:90:7b:6f: 49:9d:0a:ae:8a:4b:76:9d:34:2b:e5:1e:44:a1:b0: 9d:cf:47:85:3c:e0:2d:3b:4b:ef:50:b6:8c:cd:af: b7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:98:8E:3B:1C:A9:A7:F7:18:BC:03:44:A9:94:79:F8:7F:97:A1:97 X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:3f:2b:99:bb:2f:4e:4f:15:23:77:c9:d9:08:73:13:68:23: 64:41:04:0c:4d:c1:04:a5:55:af:65:b5:26:c2:a1:4f:5e:30: 15:f5:08:01:7f:00:d4:ac:cb:a4:4d:72:0f:42:55:97:bc:4b: 88:f5:dd:24:86:88:c7:98:46:16:1d:1f:69:15:84:f6:54:be: e2:03:b3:de:5f:4c:08:47:57:8b:07:2e:56:a1:3c:e1:a2:a1: 1a:db:51:cf:ef:6a:90:03:6f:e1:a7:84:d2:a6:31:94:70:d3: 50:56:31:1e:f8:4b:11:e8:55:02:6b:3b:40:0f:41:50:7c:7f: 4e:ad:86:de:8b:16:46:c8:32:55:d5:28:2f:27:a2:29:98:12: 11:7c:8b:94:af:10:84:71:79:ca:eb:88:50:1e:82:3d:b8:42: 7f:71:90:df:74:c6:8a:c0:c9:90:aa:c7:15:4c:0e:04:ea:ac: 1e:49:28:43:a4:ce:cf:c3:47:36:24:73:31:ec:04:b1:fc:02: b3:56:ae:73:d4:6a:2e:f5:a4:95:5c:79:36:e8:93:a6:e6:7a: e6:dc:a4:1a:28:43:2e:f9:8e:bb:ef:5e:bd:73:e3:87:69:18: d5:89:6e:1f:67:91:e1:9e:6e:07:c0:da:0b:17:26:97:cb:e4: 5a:66:e9:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAlSE3CQ8pRGAl5oT2w00gR6Z9pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTA2MTcwNDE1MDRaFw0yNTA2MjAwNTE3MDRaMDMxMTAvBgNV BAMTKEE5OTg4RTNCMUNBOUE3RjcxOEJDMDM0NEE5OTQ3OUY4N0Y5N0ExOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc2SmafqAsRtiLh2/DthjIptG1 2bYCC+v7nRZZ7q3QJkoSxkS3VMdN6oFIsxIe72Tmxt+9kZN9y2L0yirE1ChC9Uc2 DIVZ0hEBoL+8vJWDGTsCSaSkS+k3igphXP+TkndkzpbOuijgAPirM/dTdvqeG98z FWDZ6P7BzKkXm2yowCql2CKPIaJQRapfQjiDXp5mFRqefjuGkl5U/f0ziCGMycc8 ztEUgFOca5z93j1q+P/6x9qd85qCKKPIKvRUtt2jYy7j86tmFy0uCBUFms2s6NXF gmU4A4sAtyyQ2ZB7b0mdCq6KS3adNCvlHkShsJ3PR4U84C07S+9QtozNr7fXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqZiOOxypp/cYvANEqZR5+H+XoZcwHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADk/K5m7L05PFSN3ydkIcxNoI2RBBAxNwQSl Va9ltSbCoU9eMBX1CAF/ANSsy6RNcg9CVZe8S4j13SSGiMeYRhYdH2kVhPZUvuID s95fTAhHV4sHLlahPOGioRrbUc/vapADb+GnhNKmMZRw01BWMR74SxHoVQJrO0AP QVB8f06tht6LFkbIMlXVKC8noimYEhF8i5SvEIRxecrriFAegj24Qn9xkN90xorA yZCqxxVMDgTqrB5JKEOkzs/DRzYkczHsBLH8ArNWrnPUai71pJVceTbok6bmeubc pBooQy75jrvvXr1z44dpGNWJbh9nkeGebgfA2gsXJpfL5Fpm6QQ= -----END CERTIFICATE-----Generated at Tue Jun 17 15:37:40 2025 by rpki-client