$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: whSj0DhW2FP8dEFMJobNEfv4DJyAZ/QJPdXA3gZLPGM= Subject key identifier: 66:FE:FD:55:E8:45:B9:BB:90:70:D4:7C:74:FC:17:44:BA:60:97:0E Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 08C5FD5B6B2F94DE1AFF19337D78FFC371A2BC23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 049A Signing time: Sun 15 Jun 2025 07:40:41 +0000 Manifest this update: Sun 15 Jun 2025 07:35:41 +0000 Manifest next update: Wed 18 Jun 2025 16:09:41 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: 9wL+87ef8OcI16K66CeDaz5Kqy9TynWSusz+vQzOtvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c5:fd:5b:6b:2f:94:de:1a:ff:19:33:7d:78:ff:c3:71:a2:bc:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Jun 15 07:35:41 2025 GMT Not After : Jun 18 16:09:41 2025 GMT Subject: CN=66FEFD55E845B9BB9070D47C74FC1744BA60970E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:62:d7:18:93:99:20:15:fd:09:ab:6d:c1: 27:32:b9:b1:21:e0:34:16:3e:dd:18:c9:7f:cf:fd: 62:9a:1b:30:4f:06:c1:eb:e0:c1:85:8f:c7:0b:be: 71:21:8d:bf:83:5f:33:33:09:b6:f9:d0:56:72:43: dc:bb:5e:ea:94:e8:a5:bc:5e:bd:56:f7:c4:00:ae: be:3b:22:ae:8d:c8:4e:fb:52:bf:72:68:5f:fa:10: c8:d4:c9:d5:8d:68:bb:9e:42:88:b2:a2:86:c5:cd: ab:31:8a:15:80:f7:58:e0:c3:74:da:b4:e8:6c:1b: 2d:53:41:f2:25:76:e9:99:95:87:47:a2:a4:e6:86: 1a:22:a8:3f:4f:13:15:88:eb:0d:68:0e:43:d8:9d: 41:ef:47:d1:4a:7e:31:b2:b5:2e:da:e9:7a:cb:6a: 3d:b0:f2:e7:d9:59:be:a1:8a:75:b7:dc:27:ea:2b: b4:70:fc:31:86:59:39:47:98:d3:81:71:15:73:51: e6:a3:d1:c4:3e:2a:c3:a3:87:61:9b:b4:a4:01:a4: d4:8d:0c:1f:a0:58:d7:81:16:c0:03:f5:43:d2:8c: d1:6e:cb:9c:a7:a5:85:d9:2b:bf:07:4a:6d:be:91: e2:8c:ba:d7:44:88:57:f5:a2:fc:61:1e:31:51:0a: 15:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FE:FD:55:E8:45:B9:BB:90:70:D4:7C:74:FC:17:44:BA:60:97:0E X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:95:b6:db:38:43:c3:eb:00:24:a8:79:dc:68:13:14:29:a5: c8:3d:f5:3b:d8:3f:d6:76:1f:17:36:d2:64:72:cf:8b:47:23: 00:d8:36:0a:8b:f3:4b:7f:c2:e8:16:a6:3d:a9:c2:04:6c:39: 09:07:e5:6d:bf:67:9d:24:44:ca:42:dd:70:37:14:bc:ca:5e: 66:91:e4:11:88:22:8e:14:0e:c6:52:5c:11:d1:d4:a2:d0:4c: 0a:54:00:8d:db:ed:88:bc:f8:08:d7:3e:bf:75:48:ca:99:07: d0:e8:67:1d:0c:05:97:ff:4e:cf:9c:8e:d6:a3:35:a3:14:02: ab:a8:b7:b8:ab:ca:e6:15:cb:6f:66:80:9a:9d:86:0b:7c:66: 9e:0e:9a:1e:a3:75:91:4a:13:ad:6b:24:7e:65:b1:de:92:42: aa:65:cb:a5:bd:54:bd:54:0a:d2:52:9f:3a:2c:48:41:e5:59: 0c:1f:77:81:fa:b4:33:b0:32:f5:d9:05:b0:aa:28:b4:5e:23: 60:4a:6d:be:1d:fe:28:cd:f6:00:0d:f5:d9:2f:f1:57:0f:37: ea:b5:78:ba:13:f8:a0:eb:d4:b9:47:8f:2a:21:d7:f0:c6:77: f7:2b:59:79:55:b4:53:0d:d9:7c:52:c7:f3:c5:0f:e3:ab:d7: e0:4d:bc:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMX9W2svlN4a/xkzfXj/w3GivCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTA2MTUwNzM1NDFaFw0yNTA2MTgxNjA5NDFaMDMxMTAvBgNV BAMTKDY2RkVGRDU1RTg0NUI5QkI5MDcwRDQ3Qzc0RkMxNzQ0QkE2MDk3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQmLXGJOZIBX9CattwScyubEh 4DQWPt0YyX/P/WKaGzBPBsHr4MGFj8cLvnEhjb+DXzMzCbb50FZyQ9y7XuqU6KW8 Xr1W98QArr47Iq6NyE77Ur9yaF/6EMjUydWNaLueQoiyoobFzasxihWA91jgw3Ta tOhsGy1TQfIldumZlYdHoqTmhhoiqD9PExWI6w1oDkPYnUHvR9FKfjGytS7a6XrL aj2w8ufZWb6hinW33CfqK7Rw/DGGWTlHmNOBcRVzUeaj0cQ+KsOjh2GbtKQBpNSN DB+gWNeBFsAD9UPSjNFuy5ynpYXZK78HSm2+keKMutdEiFf1ovxhHjFRChWbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZv79VehFubuQcNR8dPwXRLpglw4wHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2Vtts4Q8PrACSoedxoExQppcg99TvYP9Z2 Hxc20mRyz4tHIwDYNgqL80t/wugWpj2pwgRsOQkH5W2/Z50kRMpC3XA3FLzKXmaR 5BGIIo4UDsZSXBHR1KLQTApUAI3b7Yi8+AjXPr91SMqZB9DoZx0MBZf/Ts+cjtaj NaMUAquot7iryuYVy29mgJqdhgt8Zp4Omh6jdZFKE61rJH5lsd6SQqply6W9VL1U CtJSnzosSEHlWQwfd4H6tDOwMvXZBbCqKLReI2BKbb4d/ijN9gAN9dkv8VcPN+q1 eLoT+KDr1LlHjyoh1/DGd/crWXlVtFMN2XxSx/PFD+Or1+BNvFM= -----END CERTIFICATE-----Generated at Mon Jun 16 20:46:03 2025 by rpki-client