$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: zL+OPYzbT8kvCwNxWAmF9iPxnkZeMrfWHeDBb/dKLR8= Subject key identifier: 55:FB:04:74:FA:47:3E:74:43:E9:01:9A:60:30:97:97:86:56:90:38 Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 6D8663EF45A2BFB120AB5C50D4A6AA293A5EA70D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 04D9 Signing time: Tue 04 Nov 2025 06:00:43 +0000 Manifest this update: Tue 04 Nov 2025 05:55:43 +0000 Manifest next update: Fri 07 Nov 2025 12:36:43 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: MIPTIj485qMycKoN8Ijy6GB7hfxMFG0643sW1GaNnYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:86:63:ef:45:a2:bf:b1:20:ab:5c:50:d4:a6:aa:29:3a:5e:a7:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Nov 4 05:55:43 2025 GMT Not After : Nov 7 12:36:43 2025 GMT Subject: CN=55FB0474FA473E7443E9019A6030979786569038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:16:54:98:88:ed:51:19:78:25:65:a5:69:62: 6c:95:29:70:6d:d2:c7:05:96:d5:cd:6f:e6:71:2d: ec:19:39:12:7d:48:f7:68:bb:de:f2:fa:cc:5d:37: 79:4b:cd:4e:56:66:34:1c:03:5e:60:14:a1:6f:17: 8e:25:06:5e:7a:4c:63:db:24:63:c9:87:76:01:63: 88:07:9c:cf:21:a9:f4:7d:a8:4a:74:7b:cd:79:14: a9:0e:0e:d8:42:e1:d9:ec:5b:9e:a1:e4:49:5c:6f: 4a:f5:b9:2c:42:a0:c9:43:16:58:e8:3e:07:45:04: c5:7a:51:cd:11:32:2f:28:58:de:7d:f9:7b:f0:3b: cc:27:49:a2:d6:41:06:53:0d:b3:e8:2f:41:f0:95: 80:27:1d:65:76:de:8a:c8:2d:3e:09:41:bf:8b:d6: 1c:f0:3a:10:e8:75:e0:6a:ef:a1:95:97:83:d3:b0: 96:97:5e:b7:39:0d:92:34:c9:0d:bd:e4:ba:80:a1: 68:54:68:28:82:17:43:87:e2:de:60:ec:0b:b9:63: d1:7a:4d:64:c0:55:66:13:cf:5b:37:a7:1d:a2:8f: d8:ab:7b:7a:ee:f4:6a:90:6d:c7:0f:0d:78:d0:01: 24:a7:29:9f:46:a3:bb:ca:2f:34:03:92:d2:b2:b3: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FB:04:74:FA:47:3E:74:43:E9:01:9A:60:30:97:97:86:56:90:38 X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e7:89:87:c2:09:3b:f6:c0:eb:2d:1f:1e:e5:90:12:58:ad: 24:b1:51:51:08:e9:0b:f7:58:1f:d1:b1:e1:22:8a:6d:90:02: e4:5d:3a:ff:c5:6f:56:af:02:fd:8d:72:e3:e1:5c:bb:52:06: 0e:7a:62:dc:47:64:7d:53:73:5c:90:95:ff:a5:e5:ec:3c:2e: da:dc:6d:ea:41:e4:3c:47:c6:3c:e9:d4:52:be:57:34:6e:7d: c0:9a:6d:dc:4a:be:e7:07:6e:af:3d:cc:be:48:b4:2d:fe:9f: a4:fa:b4:31:1b:f8:b9:6b:df:95:d7:d3:1c:c6:19:89:90:77: 70:21:2b:9d:5f:bf:46:d9:b0:ff:a4:6b:07:2d:bc:33:59:23: 28:cb:39:1f:cd:d9:0e:57:03:ba:54:67:10:e4:b7:c3:b5:02: 09:80:fd:cc:b4:ed:b3:ea:de:33:62:35:e6:03:8e:c4:b3:7d: cd:d9:0f:8d:b2:f8:a6:dc:7b:19:99:4e:88:d2:11:b4:66:bb: e6:cf:9d:7d:dd:81:b9:ac:46:ac:b4:ab:a9:df:cd:d5:41:62: f4:1c:c1:52:9d:bb:26:e8:63:bf:6b:b4:6e:8b:07:cb:93:cf: bb:ae:6f:79:77:e6:ac:a0:00:07:3a:47:49:75:e4:7b:71:82: 47:14:72:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYZj70Wiv7Egq1xQ1KaqKTpepw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTExMDQwNTU1NDNaFw0yNTExMDcxMjM2NDNaMDMxMTAvBgNV BAMTKDU1RkIwNDc0RkE0NzNFNzQ0M0U5MDE5QTYwMzA5Nzk3ODY1NjkwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFlSYiO1RGXglZaVpYmyVKXBt 0scFltXNb+ZxLewZORJ9SPdou97y+sxdN3lLzU5WZjQcA15gFKFvF44lBl56TGPb JGPJh3YBY4gHnM8hqfR9qEp0e815FKkODthC4dnsW56h5Elcb0r1uSxCoMlDFljo PgdFBMV6Uc0RMi8oWN59+XvwO8wnSaLWQQZTDbPoL0HwlYAnHWV23orILT4JQb+L 1hzwOhDodeBq76GVl4PTsJaXXrc5DZI0yQ295LqAoWhUaCiCF0OH4t5g7Au5Y9F6 TWTAVWYTz1s3px2ij9ire3ru9GqQbccPDXjQASSnKZ9Go7vKLzQDktKys5UvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVfsEdPpHPnRD6QGaYDCXl4ZWkDgwHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrniYfCCTv2wOstHx7lkBJYrSSxUVEI6Qv3 WB/RseEiim2QAuRdOv/Fb1avAv2NcuPhXLtSBg56YtxHZH1Tc1yQlf+l5ew8Ltrc bepB5DxHxjzp1FK+VzRufcCabdxKvucHbq89zL5ItC3+n6T6tDEb+Llr35XX0xzG GYmQd3AhK51fv0bZsP+kawctvDNZIyjLOR/N2Q5XA7pUZxDkt8O1AgmA/cy07bPq 3jNiNeYDjsSzfc3ZD42y+KbcexmZTojSEbRmu+bPnX3dgbmsRqy0q6nfzdVBYvQc wVKduyboY79rtG6LB8uTz7uub3l35qygAAc6R0l15HtxgkcUct0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:04:01 2025 by rpki-client