$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: ombZ7a009aiNx+VRntPNxtS5krZLEB0UoFRPbtCJFTw= Subject key identifier: 1C:16:54:46:0E:26:43:06:3B:B6:79:35:02:0B:4D:E8:AC:82:CD:5B Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 09A259D5045FBA42015DFA3DD16D4BC9A7F486D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: 6D Signing time: Mon 21 Jul 2025 04:31:36 +0000 Manifest this update: Mon 21 Jul 2025 04:26:36 +0000 Manifest next update: Thu 24 Jul 2025 06:26:36 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: 31Bjf2rekI0OXcgwWJajOk0574ubj5OipIE69ys47y0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a2:59:d5:04:5f:ba:42:01:5d:fa:3d:d1:6d:4b:c9:a7:f4:86:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Jul 21 04:26:36 2025 GMT Not After : Jul 24 06:26:36 2025 GMT Subject: CN=1C1654460E2643063BB67935020B4DE8AC82CD5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:93:f1:3b:58:72:b4:48:0f:ed:07:b4:4a: e4:86:3d:5f:63:bc:9d:a7:51:b8:d4:b9:03:a1:5d: 64:58:04:f5:fa:fd:31:3f:cd:bb:98:22:5f:f1:c3: d9:39:b8:0f:21:d0:15:73:3a:64:2b:91:20:2b:ba: 0c:d5:9a:26:b3:81:a1:b2:41:cf:ed:6c:6e:d8:be: 51:4c:ba:00:19:de:d7:7c:97:c8:84:30:1b:0c:b2: 08:6e:c7:24:8e:84:81:5f:2e:ea:76:5e:5e:33:1f: 09:8b:5e:84:7c:85:71:1f:78:d7:17:8a:be:e3:66: a1:ac:05:0b:bb:3d:67:02:ee:0a:3c:ea:80:bd:5c: 5a:8e:05:97:6b:02:92:43:bf:a8:69:47:b4:dc:6b: 5c:1a:f4:90:77:78:d5:72:af:be:85:69:80:37:57: f5:e2:b7:53:01:78:f6:33:6e:52:c5:ad:4d:21:36: 39:e0:dd:ad:3c:46:67:42:06:6f:92:64:91:8e:32: fb:68:36:2b:79:6d:4b:4b:5d:ca:a5:fe:43:f5:81: d0:02:4a:bc:6e:81:b0:b3:cd:06:e7:52:fc:a4:38: d3:f4:d1:94:70:d0:fb:64:a8:05:7a:e0:d7:e4:6c: 01:95:48:e9:82:13:e3:c7:54:68:1f:88:41:ba:32: 25:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:16:54:46:0E:26:43:06:3B:B6:79:35:02:0B:4D:E8:AC:82:CD:5B X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:83:8b:16:da:ce:af:fc:1c:dc:66:a6:c6:d4:92:67:e8:49: 0c:fb:0c:47:c8:8c:fa:bd:61:35:c0:dc:af:9d:af:4f:6e:c2: 7c:4a:02:c0:85:f9:b3:5b:e6:61:a1:63:4a:d7:d3:26:2b:c9: 03:12:03:7c:1d:e9:a4:3d:26:c6:59:5f:af:a2:b0:5f:20:71: e1:cb:b9:3d:27:94:ce:a8:10:b5:c2:e2:5c:d1:06:72:96:64: ca:0e:9c:e8:83:73:eb:63:a2:d8:75:bb:0a:12:a2:8d:f9:a3: 7d:3f:c2:7a:32:b2:23:d8:7f:48:78:8f:3e:de:af:b7:21:f6: 54:5b:57:f4:cb:3c:e4:8d:ed:f3:d7:e0:06:84:48:cf:b0:d7: 27:f7:77:d6:5e:86:b8:89:58:a8:33:6d:5f:ec:6e:fb:6a:6b: 6b:d0:98:7a:79:80:57:2b:f5:a6:2d:ef:bd:91:14:54:c9:79: ba:b1:dd:c3:a8:c0:c4:c4:32:d2:15:03:9e:e4:51:0b:a7:62: 5f:df:00:0e:85:c3:3e:6b:60:37:78:7c:ca:f7:52:90:11:b9: bf:d8:00:5b:4a:20:05:e0:bd:7c:7c:ba:7e:e3:a5:54:0b:d2: 68:b0:81:9c:90:3e:75:74:70:2b:be:e2:1b:96:34:95:09:26: 8a:b7:69:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCaJZ1QRfukIBXfo90W1Lyaf0htMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNTA3MjEwNDI2MzZaFw0yNTA3MjQwNjI2MzZaMDMxMTAvBgNV BAMTKDFDMTY1NDQ2MEUyNjQzMDYzQkI2NzkzNTAyMEI0REU4QUM4MkNENUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpzpPxO1hytEgP7Qe0SuSGPV9j vJ2nUbjUuQOhXWRYBPX6/TE/zbuYIl/xw9k5uA8h0BVzOmQrkSArugzVmiazgaGy Qc/tbG7YvlFMugAZ3td8l8iEMBsMsghuxySOhIFfLup2Xl4zHwmLXoR8hXEfeNcX ir7jZqGsBQu7PWcC7go86oC9XFqOBZdrApJDv6hpR7Tca1wa9JB3eNVyr76FaYA3 V/Xit1MBePYzblLFrU0hNjng3a08RmdCBm+SZJGOMvtoNit5bUtLXcql/kP1gdAC SrxugbCzzQbnUvykONP00ZRw0PtkqAV64NfkbAGVSOmCE+PHVGgfiEG6MiULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHBZURg4mQwY7tnk1AgtN6KyCzVswHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCDixbazq/8HNxmpsbUkmfoSQz7DEfIjPq9 YTXA3K+dr09uwnxKAsCF+bNb5mGhY0rX0yYryQMSA3wd6aQ9JsZZX6+isF8gceHL uT0nlM6oELXC4lzRBnKWZMoOnOiDc+tjoth1uwoSoo35o30/wnoysiPYf0h4jz7e r7ch9lRbV/TLPOSN7fPX4AaESM+w1yf3d9ZehriJWKgzbV/sbvtqa2vQmHp5gFcr 9aYt772RFFTJebqx3cOowMTEMtIVA57kUQunYl/fAA6Fwz5rYDd4fMr3UpARub/Y AFtKIAXgvXx8un7jpVQL0miwgZyQPnV0cCu+4huWNJUJJoq3aY0= -----END CERTIFICATE-----Generated at Mon Jul 21 08:37:15 2025 by rpki-client