$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: hulVXsgzw2110KwLaH0DsZpHdjhws18gTnDRwEYWfUk= Subject key identifier: E8:77:71:EE:AC:58:60:67:42:E7:A3:C0:27:A5:3C:C4:9B:11:3E:AF Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 157CD6060A65E7D964466DB70B9B410E1BF21FFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 04B0 Signing time: Mon 04 Aug 2025 08:00:42 +0000 Manifest this update: Mon 04 Aug 2025 07:55:42 +0000 Manifest next update: Thu 07 Aug 2025 13:39:42 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: zKr7Q9ETiXsFUCnUQbfik2UmPOCKpByGAIcInVpxBt4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 13:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7c:d6:06:0a:65:e7:d9:64:46:6d:b7:0b:9b:41:0e:1b:f2:1f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Aug 4 07:55:42 2025 GMT Not After : Aug 7 13:39:42 2025 GMT Subject: CN=E87771EEAC58606742E7A3C027A53CC49B113EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:93:d2:2e:81:e6:9c:af:13:83:e2:83:20:18: d8:a9:75:66:a8:7c:f1:ba:a0:4f:d7:85:87:71:98: ea:ac:54:76:dd:e5:28:0f:8d:25:c2:d4:a4:f6:bf: 56:d9:ec:f5:36:55:9e:56:ab:6d:a7:26:c5:52:ac: 32:f7:3e:a1:1a:52:0d:80:a6:52:e0:2a:1b:27:56: be:57:bc:e9:12:84:c5:f3:96:a3:1e:86:d2:93:91: 01:0e:b6:88:83:82:0e:cc:78:aa:07:ae:2b:34:81: 0e:2a:bf:74:a8:17:63:25:c0:27:c4:51:de:1b:a6: 30:49:61:ef:08:b5:c7:8c:b2:a6:6b:f7:c2:af:a3: 29:2e:fa:bc:fe:ed:68:27:f0:74:1d:7f:15:6e:3e: a3:88:29:ee:a4:78:ca:69:90:da:3b:e1:c4:17:61: 25:ba:d3:cf:22:83:3a:14:25:64:6b:97:3b:bc:db: f7:36:46:29:5d:85:34:11:07:8a:9e:79:69:55:d6: 0c:b4:ad:f0:2a:de:83:32:dc:5c:f7:73:d5:2e:6d: 10:bf:1e:78:ae:50:63:57:63:4e:39:a3:04:07:1d: 66:97:56:25:25:48:c9:d6:32:33:7a:f1:eb:82:ec: 2b:5c:4a:cd:7d:ce:55:1d:65:e6:3a:a0:c3:a7:d8: 03:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:77:71:EE:AC:58:60:67:42:E7:A3:C0:27:A5:3C:C4:9B:11:3E:AF X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d3:52:05:d5:f3:96:34:40:5f:d1:c6:0b:70:5a:6c:8a:b8: 4a:1c:9b:c9:58:91:c3:70:9e:83:a2:7c:cd:fc:86:a3:03:1a: 76:a8:d1:6c:ef:5e:61:6a:e8:53:30:c4:b5:00:75:de:33:b6: 9f:98:6b:3a:6d:88:ef:06:c1:64:af:bf:f8:18:fd:4f:3d:b4: 68:bd:d4:83:f3:4d:bc:a1:36:94:89:60:3e:65:71:45:0c:66: 02:8a:29:3d:1f:83:a8:4f:8c:0f:54:5d:92:a8:53:04:da:1a: 7a:42:88:46:8c:78:06:c2:b5:16:e5:cd:24:e3:8e:59:5e:98: 99:44:a0:b3:24:74:77:f7:7d:4b:a4:93:c1:49:83:ac:5f:97: e8:60:28:aa:70:4f:b1:bf:17:84:b7:e8:a0:47:c6:5b:10:c9: 33:a4:84:31:5b:a4:08:89:35:31:1b:7f:47:9c:0a:93:3d:fe: 20:28:4e:7f:b0:57:a6:84:96:0a:23:d1:6c:bc:d9:bf:61:ef: c5:70:60:32:1a:26:ab:42:b9:0c:ac:99:51:bc:79:ff:72:cd: 7c:c5:67:a3:49:84:2a:3b:bf:c1:f0:cb:99:65:3b:bb:fa:80: 3c:f5:68:b1:11:44:b0:8c:85:d8:9d:64:36:64:e9:7a:77:be: 0a:b6:ae:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXzWBgpl59lkRm23C5tBDhvyH/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTA4MDQwNzU1NDJaFw0yNTA4MDcxMzM5NDJaMDMxMTAvBgNV BAMTKEU4Nzc3MUVFQUM1ODYwNjc0MkU3QTNDMDI3QTUzQ0M0OUIxMTNFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzk9IugeacrxOD4oMgGNipdWao fPG6oE/XhYdxmOqsVHbd5SgPjSXC1KT2v1bZ7PU2VZ5Wq22nJsVSrDL3PqEaUg2A plLgKhsnVr5XvOkShMXzlqMehtKTkQEOtoiDgg7MeKoHris0gQ4qv3SoF2MlwCfE Ud4bpjBJYe8ItceMsqZr98Kvoyku+rz+7Wgn8HQdfxVuPqOIKe6keMppkNo74cQX YSW6088igzoUJWRrlzu82/c2RildhTQRB4qeeWlV1gy0rfAq3oMy3Fz3c9UubRC/ HniuUGNXY045owQHHWaXViUlSMnWMjN68euC7CtcSs19zlUdZeY6oMOn2AMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Hdx7qxYYGdC56PAJ6U8xJsRPq8wHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3TUgXV85Y0QF/RxgtwWmyKuEocm8lYkcNw noOifM38hqMDGnao0WzvXmFq6FMwxLUAdd4ztp+YazptiO8GwWSvv/gY/U89tGi9 1IPzTbyhNpSJYD5lcUUMZgKKKT0fg6hPjA9UXZKoUwTaGnpCiEaMeAbCtRblzSTj jllemJlEoLMkdHf3fUukk8FJg6xfl+hgKKpwT7G/F4S36KBHxlsQyTOkhDFbpAiJ NTEbf0ecCpM9/iAoTn+wV6aElgoj0Wy82b9h78VwYDIaJqtCuQysmVG8ef9yzXzF Z6NJhCo7v8Hwy5llO7v6gDz1aLERRLCMhdidZDZk6Xp3vgq2rss= -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:51 2025 by rpki-client