$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: mx5fDxnIybnWhh/N2l2tT6/rMg7U7QthcgLZSYnf7qc= Subject key identifier: D0:0B:7A:47:74:3D:C6:85:C9:A4:4B:E2:04:F5:76:52:8D:3E:D6:15 Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 3683DDB7B729DAAB80FA025071892500033873C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 0222 Signing time: Sun 20 Jul 2025 07:00:04 +0000 Manifest this update: Sun 20 Jul 2025 06:55:04 +0000 Manifest next update: Wed 23 Jul 2025 15:54:04 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: Mfvox+eLcGwVzw+9gRtquZQpnpR/A4PDDh1eRAm4XSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 15:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:83:dd:b7:b7:29:da:ab:80:fa:02:50:71:89:25:00:03:38:73:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Jul 20 06:55:04 2025 GMT Not After : Jul 23 15:54:04 2025 GMT Subject: CN=D00B7A47743DC685C9A44BE204F576528D3ED615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:af:b5:36:a6:b9:f3:89:91:76:a6:6f:2b:c0: 05:ed:53:5d:9f:45:dd:ca:cd:23:ad:88:51:6d:75: 3d:35:2b:cf:cd:eb:98:13:7b:a2:9d:2c:a9:d2:9c: 46:38:1a:3d:58:6b:af:24:58:cd:56:82:fa:3d:5c: 44:96:b1:0a:0d:4a:32:52:88:1d:86:81:a3:9a:b1: 10:1f:f7:5a:16:b3:c0:dc:db:47:ca:1a:9a:4f:f7: 10:c5:ac:33:a2:4c:2c:ea:c8:a3:e3:2d:66:8c:b5: 55:93:2c:21:7c:bc:9e:2f:4c:6e:b2:15:9e:f7:f1: d9:49:f4:cc:1b:31:bf:d8:d5:c8:1c:66:3d:fe:72: de:4c:f7:9f:fa:b0:dd:2b:11:23:db:dd:d2:35:7a: 75:b4:a2:71:f2:e6:ce:08:14:f8:bb:b8:e8:ef:a0: b7:b8:da:63:80:8e:d1:b7:74:59:f2:42:4e:be:bc: e2:e3:30:b0:37:06:5d:0d:ab:6e:26:46:b3:06:ee: 5f:af:e0:7b:7a:b0:cb:d4:6d:34:6e:5f:ae:92:18: 7e:e3:cf:07:ef:51:2f:be:3c:08:18:d1:51:8b:29: 08:0a:a9:1a:39:85:c4:b1:69:9e:8d:81:d7:cd:5c: 24:45:fe:9e:4b:c0:bb:98:5e:9b:5a:f2:b5:34:39: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0B:7A:47:74:3D:C6:85:C9:A4:4B:E2:04:F5:76:52:8D:3E:D6:15 X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:19:31:24:82:84:aa:32:2c:74:fd:eb:cc:2d:1b:8c:dc:21: 60:51:69:59:d8:03:15:af:2e:de:b0:e8:d0:ef:15:2c:67:84: f1:c5:01:e9:bc:16:b5:0b:d6:42:40:09:62:bb:3d:a9:d3:71: 2a:36:2a:6c:f8:79:26:4d:ea:d6:64:48:95:1e:29:7f:4a:f8: e1:a2:13:6b:03:61:89:3e:e3:91:07:59:45:04:b6:53:bc:80: b4:de:59:7d:e8:14:32:02:c9:1c:d7:72:d9:1f:06:6d:73:18: 9e:76:1a:1d:4a:42:80:4e:98:04:76:6d:a2:24:3a:ed:e4:af: 86:49:b1:21:a5:c2:eb:f9:d8:be:61:d3:de:35:42:1f:ab:4d: 5b:87:14:f7:3f:6e:94:f0:6f:05:41:70:77:4d:c1:b9:4a:cc: eb:df:2a:e6:cf:12:04:b4:1d:24:db:f9:e6:c4:ce:e3:d6:8b: 9b:84:cd:10:b3:3f:1a:23:44:43:31:2b:c1:39:a8:19:ba:76: 23:28:b0:4a:d9:24:36:e5:04:ec:56:3b:d1:20:47:26:21:d6: 44:bc:66:11:8c:b5:f1:3d:38:c9:77:e9:68:40:f7:aa:42:3b: c4:e2:35:19:45:c0:7a:67:63:00:86:6a:e2:d6:ff:bb:99:3c: 8e:85:6d:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNoPdt7cp2quA+gJQcYklAAM4c8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTA3MjAwNjU1MDRaFw0yNTA3MjMxNTU0MDRaMDMxMTAvBgNV BAMTKEQwMEI3QTQ3NzQzREM2ODVDOUE0NEJFMjA0RjU3NjUyOEQzRUQ2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEr7U2prnziZF2pm8rwAXtU12f Rd3KzSOtiFFtdT01K8/N65gTe6KdLKnSnEY4Gj1Ya68kWM1Wgvo9XESWsQoNSjJS iB2GgaOasRAf91oWs8Dc20fKGppP9xDFrDOiTCzqyKPjLWaMtVWTLCF8vJ4vTG6y FZ738dlJ9MwbMb/Y1cgcZj3+ct5M95/6sN0rESPb3dI1enW0onHy5s4IFPi7uOjv oLe42mOAjtG3dFnyQk6+vOLjMLA3Bl0Nq24mRrMG7l+v4Ht6sMvUbTRuX66SGH7j zwfvUS++PAgY0VGLKQgKqRo5hcSxaZ6NgdfNXCRF/p5LwLuYXpta8rU0OYIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0At6R3Q9xoXJpEviBPV2Uo0+1hUwHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYZMSSChKoyLHT968wtG4zcIWBRaVnYAxWv Lt6w6NDvFSxnhPHFAem8FrUL1kJACWK7PanTcSo2Kmz4eSZN6tZkSJUeKX9K+OGi E2sDYYk+45EHWUUEtlO8gLTeWX3oFDICyRzXctkfBm1zGJ52Gh1KQoBOmAR2baIk Ou3kr4ZJsSGlwuv52L5h0941Qh+rTVuHFPc/bpTwbwVBcHdNwblKzOvfKubPEgS0 HSTb+ebEzuPWi5uEzRCzPxojREMxK8E5qBm6diMosErZJDblBOxWO9EgRyYh1kS8 ZhGMtfE9OMl36WhA96pCO8TiNRlFwHpnYwCGauLW/7uZPI6Fbfg= -----END CERTIFICATE-----Generated at Mon Jul 21 10:32:36 2025 by rpki-client