$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: /9632j7h6JXXmMVMuXV0xnNf0k+5mAQTjKP1fAjdtgg= Subject key identifier: 83:F3:C2:DB:F2:28:78:9B:B4:09:D1:EE:0C:86:5E:39:42:D1:8D:F4 Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 0DDDED840CCF1CBB307FD164158868729AEFAC67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 0486 Signing time: Tue 29 Apr 2025 18:00:41 +0000 Manifest this update: Tue 29 Apr 2025 17:55:41 +0000 Manifest next update: Sat 03 May 2025 05:37:41 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: lBWVJenQmSaMmNfjofCyGAwNr7a5FasaDZdFtBBzB2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:dd:ed:84:0c:cf:1c:bb:30:7f:d1:64:15:88:68:72:9a:ef:ac:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Apr 29 17:55:41 2025 GMT Not After : May 3 05:37:41 2025 GMT Subject: CN=83F3C2DBF228789BB409D1EE0C865E3942D18DF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:16:91:84:e7:eb:0c:7e:8d:1d:05:a3:5d: 59:23:09:2a:f5:e4:62:55:6b:28:e9:f3:62:09:4a: 32:2b:4a:d2:54:dd:0d:b5:33:89:05:e2:06:e3:4c: a5:e5:f3:4a:53:ae:23:6c:fd:f8:a8:25:1e:78:91: 55:16:51:ec:88:05:51:c8:32:e1:54:ef:ac:05:13: 05:b2:b1:11:7d:7d:82:dd:fe:d4:09:95:13:27:10: fa:35:3d:8b:5d:00:76:b6:8a:28:c5:0f:47:27:fa: 38:94:fd:9e:0c:74:5d:1b:38:bc:49:b7:0f:c4:35: 83:47:20:5c:6e:5b:55:19:4f:7d:b9:d6:24:04:02: 19:73:b3:0c:74:c5:46:f0:8a:69:4d:60:a5:db:46: b0:8a:72:f6:59:53:42:b7:20:8e:2f:97:58:80:26: b1:30:99:64:92:8f:b7:a0:7f:78:c6:18:1b:ee:a1: 86:dc:26:ef:e5:54:61:19:d2:70:27:37:19:93:4e: bb:b9:8f:a2:f7:06:99:f6:e5:74:25:10:14:a5:49: 4e:84:30:26:f3:a0:05:fb:72:5f:64:0f:75:a3:37: c9:31:95:03:43:42:76:ab:59:ac:50:3d:75:63:a0: a5:9f:e0:23:f4:6c:35:9f:ca:cd:bb:ea:e4:87:69: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F3:C2:DB:F2:28:78:9B:B4:09:D1:EE:0C:86:5E:39:42:D1:8D:F4 X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d8:44:68:58:0d:df:27:e8:02:dc:b8:fc:78:08:01:bc:5a: 38:d7:f7:0a:87:72:4b:87:00:31:3a:14:aa:8f:f5:af:2e:b9: 7f:3e:c9:4d:f9:69:fb:1c:82:4a:3e:1d:4c:d1:d1:71:8f:ab: 67:d4:31:78:3d:c3:c3:40:25:43:28:a3:e3:d9:d6:3a:b4:11: a5:89:af:af:cb:da:33:ca:ae:08:b5:af:f9:b6:b3:c5:84:e1: f0:10:9e:40:29:90:9c:ed:86:c1:a6:a2:f1:f4:75:2b:0d:86: 4a:3d:75:35:2a:97:1d:74:9d:3d:d7:83:af:92:13:5a:36:fe: 38:1d:9a:72:81:1e:f4:4c:b9:ee:55:67:4f:a6:28:da:5d:fb: 3f:09:24:1f:94:28:02:86:55:ab:5e:8a:92:fd:d1:10:b5:3e: 2b:9b:ca:98:28:5a:ed:11:44:46:ec:ef:9f:39:2b:01:4b:52: e7:d8:72:53:2f:23:75:dd:94:57:c6:d0:76:79:f8:45:26:d3: 22:b9:01:7b:d5:c1:1a:8e:96:7d:17:8b:74:49:78:2d:7f:4b: b4:99:23:97:d9:ea:7b:ab:8c:41:83:62:94:f8:7b:ab:31:76: f1:14:af:7b:ab:36:33:25:04:49:9b:54:bf:46:40:e8:af:b9: fe:84:e0:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDd3thAzPHLswf9FkFYhocprvrGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTA0MjkxNzU1NDFaFw0yNTA1MDMwNTM3NDFaMDMxMTAvBgNV BAMTKDgzRjNDMkRCRjIyODc4OUJCNDA5RDFFRTBDODY1RTM5NDJEMThERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ORaRhOfrDH6NHQWjXVkjCSr1 5GJVayjp82IJSjIrStJU3Q21M4kF4gbjTKXl80pTriNs/fioJR54kVUWUeyIBVHI MuFU76wFEwWysRF9fYLd/tQJlRMnEPo1PYtdAHa2iijFD0cn+jiU/Z4MdF0bOLxJ tw/ENYNHIFxuW1UZT3251iQEAhlzswx0xUbwimlNYKXbRrCKcvZZU0K3II4vl1iA JrEwmWSSj7egf3jGGBvuoYbcJu/lVGEZ0nAnNxmTTru5j6L3Bpn25XQlEBSlSU6E MCbzoAX7cl9kD3WjN8kxlQNDQnarWaxQPXVjoKWf4CP0bDWfys276uSHaUiLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg/PC2/IoeJu0CdHuDIZeOULRjfQwHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvYRGhYDd8n6ALcuPx4CAG8WjjX9wqHckuH ADE6FKqP9a8uuX8+yU35afscgko+HUzR0XGPq2fUMXg9w8NAJUMoo+PZ1jq0EaWJ r6/L2jPKrgi1r/m2s8WE4fAQnkApkJzthsGmovH0dSsNhko9dTUqlx10nT3Xg6+S E1o2/jgdmnKBHvRMue5VZ0+mKNpd+z8JJB+UKAKGVateipL90RC1PiubypgoWu0R REbs7585KwFLUufYclMvI3XdlFfG0HZ5+EUm0yK5AXvVwRqOln0Xi3RJeC1/S7SZ I5fZ6nurjEGDYpT4e6sxdvEUr3urNjMlBEmbVL9GQOivuf6E4JE= -----END CERTIFICATE-----Generated at Tue Apr 29 23:23:53 2025 by rpki-client