$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: V3lu/gUdGhTLRfPe5jw9zffAVoavCnMqRqQSiF3yGxQ= Subject key identifier: 81:00:22:18:05:94:D0:32:18:57:40:D0:9F:13:29:47:79:0D:3F:01 Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 5C55EFEA28F3A33DCE7C7A533DE848636A6E71E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 04A9 Signing time: Sat 19 Jul 2025 01:00:42 +0000 Manifest this update: Sat 19 Jul 2025 00:55:42 +0000 Manifest next update: Tue 22 Jul 2025 09:14:42 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: +xzMEDu3zDQKxRWpeFUgdjq0UblmasjLKy/c2Ob7+98=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 09:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:55:ef:ea:28:f3:a3:3d:ce:7c:7a:53:3d:e8:48:63:6a:6e:71:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Jul 19 00:55:42 2025 GMT Not After : Jul 22 09:14:42 2025 GMT Subject: CN=810022180594D032185740D09F132947790D3F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6b:00:f5:4e:41:da:ac:68:ae:4b:7d:c4:d7: 79:01:8c:1b:f7:6a:9b:fc:53:28:54:03:af:8f:98: 8d:e9:e4:9e:9c:18:f4:10:e6:9d:7f:c0:e5:c4:17: 85:de:ce:4c:46:0b:2a:9c:03:d5:fb:17:4f:c3:38: 2f:a3:52:7a:83:26:70:f2:ec:92:71:0f:91:ea:e2: 35:bb:82:bb:dc:f6:43:bb:3a:af:f8:b4:62:d4:21: 8e:78:d0:7c:8f:f4:ee:cb:ab:29:fd:a7:ed:bb:4f: ba:1a:89:05:23:0c:52:6e:87:a8:da:20:42:50:71: e0:53:02:60:3a:98:97:38:b9:9d:98:c6:21:b0:df: 21:34:92:7f:1d:50:17:73:ad:f7:64:40:ad:28:ae: e9:65:82:63:87:51:4c:e6:ec:40:9b:6a:70:76:c6: c0:b4:ec:ad:e9:1f:dc:c8:e3:de:1d:37:7b:cd:63: fd:4b:50:7c:c6:09:8b:9c:06:42:3c:cf:85:ed:6b: 0f:5d:53:18:7d:d2:fb:19:a5:a9:7a:b7:4f:13:98: 3a:03:a1:ad:e9:08:40:13:ee:71:cb:93:85:ec:41: 7b:b1:13:a7:0d:c6:3d:35:0a:ea:28:94:ae:4a:73: 06:a6:e4:6b:56:8c:22:7a:49:bd:ac:cd:7e:bc:d2: 0b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:00:22:18:05:94:D0:32:18:57:40:D0:9F:13:29:47:79:0D:3F:01 X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d5:b0:6b:3a:af:11:c4:5a:9d:39:ae:ed:5e:36:7f:3f:ca: b1:5b:9f:eb:d1:87:9b:44:3d:45:da:a1:03:b1:57:23:29:80: 31:c4:3b:5a:71:86:cb:2a:90:6b:70:25:fe:b1:57:2c:38:6f: 60:b2:d1:09:c1:22:fc:0f:04:1e:6a:bc:2b:97:01:50:4e:20: ba:bc:c2:b5:ff:15:6a:29:2e:cd:9d:ed:1b:07:22:37:ce:fa: 61:46:4c:a8:6b:c5:ea:61:4d:f2:18:17:17:ce:72:c3:0b:10: 18:75:9a:9f:5e:5b:02:9d:a0:6d:64:67:58:b7:71:6e:38:ed: e9:60:c3:d3:1d:47:5b:96:ec:af:2b:23:9b:96:04:11:9b:f9: b2:2d:88:21:cf:47:2a:22:59:ec:88:cc:e7:fb:82:cf:c0:b4: dd:b8:5b:85:41:50:e8:38:48:1f:31:c7:50:7e:95:c2:7a:94: 8e:4e:65:a2:85:0c:40:0d:23:d9:c4:fc:6f:b1:ca:c3:41:72: ac:84:db:6b:e9:5b:4a:1a:21:61:ab:1a:a5:13:5b:72:70:9f: 26:bb:ba:cc:79:3a:ab:d7:54:ea:89:9d:85:5e:b4:2e:24:49: 00:b2:f6:82:d5:9a:95:56:c1:20:3c:7a:3a:65:b3:2a:2d:87: b4:a0:00:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFXv6ijzoz3OfHpTPehIY2pucekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTA3MTkwMDU1NDJaFw0yNTA3MjIwOTE0NDJaMDMxMTAvBgNV BAMTKDgxMDAyMjE4MDU5NEQwMzIxODU3NDBEMDlGMTMyOTQ3NzkwRDNGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWawD1TkHarGiuS33E13kBjBv3 apv8UyhUA6+PmI3p5J6cGPQQ5p1/wOXEF4XezkxGCyqcA9X7F0/DOC+jUnqDJnDy 7JJxD5Hq4jW7grvc9kO7Oq/4tGLUIY540HyP9O7Lqyn9p+27T7oaiQUjDFJuh6ja IEJQceBTAmA6mJc4uZ2YxiGw3yE0kn8dUBdzrfdkQK0orullgmOHUUzm7ECbanB2 xsC07K3pH9zI494dN3vNY/1LUHzGCYucBkI8z4Xtaw9dUxh90vsZpal6t08TmDoD oa3pCEAT7nHLk4XsQXuxE6cNxj01CuoolK5Kcwam5GtWjCJ6Sb2szX680gvzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgQAiGAWU0DIYV0DQnxMpR3kNPwEwHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzVsGs6rxHEWp05ru1eNn8/yrFbn+vRh5tE PUXaoQOxVyMpgDHEO1pxhssqkGtwJf6xVyw4b2Cy0QnBIvwPBB5qvCuXAVBOILq8 wrX/FWopLs2d7RsHIjfO+mFGTKhrxephTfIYFxfOcsMLEBh1mp9eWwKdoG1kZ1i3 cW447elgw9MdR1uW7K8rI5uWBBGb+bItiCHPRyoiWeyIzOf7gs/AtN24W4VBUOg4 SB8xx1B+lcJ6lI5OZaKFDEANI9nE/G+xysNBcqyE22vpW0oaIWGrGqUTW3Jwnya7 usx5OqvXVOqJnYVetC4kSQCy9oLVmpVWwSA8ejplsyoth7SgABo= -----END CERTIFICATE-----Generated at Mon Jul 21 01:34:09 2025 by rpki-client