$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: 7VcUFvm3qLishS4052g8Dwkl5I0qr6LeR/T4AasiV14= Subject key identifier: 6E:73:4C:B7:0F:1F:4F:8B:D6:AC:A0:10:2D:B9:D9:9E:18:C2:86:BC Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 32A4BD596A639C643509D07C7B21D0C0B5E76E20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: 57 Signing time: Sun 01 Jun 2025 21:31:36 +0000 Manifest this update: Sun 01 Jun 2025 21:26:36 +0000 Manifest next update: Thu 05 Jun 2025 05:04:36 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: lx9kOJNrBJRdCvUOzGUPKsu6MPs4F0SDg2hKFLZ5Hag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 05:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a4:bd:59:6a:63:9c:64:35:09:d0:7c:7b:21:d0:c0:b5:e7:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Jun 1 21:26:36 2025 GMT Not After : Jun 5 05:04:36 2025 GMT Subject: CN=6E734CB70F1F4F8BD6ACA0102DB9D99E18C286BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:e4:d8:2a:fe:bd:82:03:69:e7:a3:83:6e: 0c:ce:ca:f5:26:79:1a:22:c9:c7:95:4b:7d:f6:dc: ff:74:4b:55:33:7b:1d:a6:e7:a1:89:36:8a:72:1d: 63:99:14:0f:64:39:27:d4:69:17:2a:04:cb:17:ab: c7:4c:1e:d8:e5:f7:f2:32:7c:d7:30:4d:a8:85:82: b5:b2:83:e6:8c:a5:33:33:e1:6c:53:2c:ee:57:2f: 88:bd:7b:4c:32:13:b6:1c:09:ce:19:ea:0c:8d:cc: a2:17:f9:a9:35:98:38:98:02:bd:8e:f8:af:cb:63: 15:b1:5b:e1:d0:74:c7:06:11:f7:c8:f8:4b:73:21: 83:f7:5a:30:49:8d:6a:50:91:51:2a:a5:bd:14:8f: 72:f8:b1:3c:f2:71:34:47:da:28:31:9d:e2:92:eb: 55:f8:0d:03:3d:44:07:2e:6b:c1:bc:43:46:3a:aa: 40:91:a5:f0:66:87:42:e8:1b:e1:7c:1b:03:98:1a: 49:00:af:30:8b:02:07:15:75:58:2e:af:c3:84:38: 91:7b:64:28:01:fc:2e:ae:34:fb:e8:36:60:86:f7: 50:d9:4a:2e:f4:a2:1b:01:fd:2b:3c:98:bb:af:8f: 18:54:0d:7f:71:58:b5:d8:9a:e6:d6:a4:b7:76:09: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:73:4C:B7:0F:1F:4F:8B:D6:AC:A0:10:2D:B9:D9:9E:18:C2:86:BC X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bd:99:96:3d:97:7d:dc:a3:87:44:42:11:71:6a:d8:d9:31: 64:f0:ee:79:10:28:fc:29:4b:41:b4:51:65:a3:62:5d:57:97: 14:6f:95:e4:3a:9e:48:08:81:b9:72:c5:c0:77:1c:f7:90:a2: 11:ad:96:a5:4e:a9:ca:34:55:ce:0e:7d:c1:20:3c:0c:7b:d6: 58:9f:ef:9a:22:a7:64:d7:b2:02:0b:76:3b:81:20:5d:27:ba: ef:74:67:c5:df:9b:45:36:4d:13:4e:6b:b0:da:90:90:0c:86: 23:0a:15:81:0e:4b:e3:da:c5:1d:ef:bd:69:1a:2f:76:a3:9c: 3d:c9:d1:e6:15:b9:46:8c:29:e3:3a:48:9b:0b:3b:1d:65:74: 20:f4:4e:b9:26:43:9e:ca:27:e2:45:18:94:30:88:27:56:9a: 9c:48:fc:b4:6f:27:2b:06:52:98:92:e4:95:4f:59:df:30:4a: 32:ae:73:8a:5b:1d:12:19:16:61:3f:0b:ee:29:08:71:de:b6: 57:07:59:5b:1b:f3:fb:39:dd:41:86:a4:ce:5e:91:f0:ef:e2: e6:25:2a:e2:96:39:c2:5b:dd:71:40:7e:da:45:b5:72:d5:2c: 71:ea:4b:97:f8:d9:cc:34:b2:40:db:c7:ff:f3:ed:79:cb:31: 8a:8c:f5:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMqS9WWpjnGQ1CdB8eyHQwLXnbiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNTA2MDEyMTI2MzZaFw0yNTA2MDUwNTA0MzZaMDMxMTAvBgNV BAMTKDZFNzM0Q0I3MEYxRjRGOEJENkFDQTAxMDJEQjlEOTlFMThDMjg2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JeTYKv69ggNp56ODbgzOyvUm eRoiyceVS3323P90S1Uzex2m56GJNopyHWOZFA9kOSfUaRcqBMsXq8dMHtjl9/Iy fNcwTaiFgrWyg+aMpTMz4WxTLO5XL4i9e0wyE7YcCc4Z6gyNzKIX+ak1mDiYAr2O +K/LYxWxW+HQdMcGEffI+EtzIYP3WjBJjWpQkVEqpb0Uj3L4sTzycTRH2igxneKS 61X4DQM9RAcua8G8Q0Y6qkCRpfBmh0LoG+F8GwOYGkkArzCLAgcVdVgur8OEOJF7 ZCgB/C6uNPvoNmCG91DZSi70ohsB/Ss8mLuvjxhUDX9xWLXYmubWpLd2CbIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbnNMtw8fT4vWrKAQLbnZnhjChrwwHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu9mZY9l33co4dEQhFxatjZMWTw7nkQKPwp S0G0UWWjYl1XlxRvleQ6nkgIgblyxcB3HPeQohGtlqVOqco0Vc4OfcEgPAx71lif 75oip2TXsgILdjuBIF0nuu90Z8Xfm0U2TRNOa7DakJAMhiMKFYEOS+PaxR3vvWka L3ajnD3J0eYVuUaMKeM6SJsLOx1ldCD0TrkmQ57KJ+JFGJQwiCdWmpxI/LRvJysG UpiS5JVPWd8wSjKuc4pbHRIZFmE/C+4pCHHetlcHWVsb8/s53UGGpM5ekfDv4uYl KuKWOcJb3XFAftpFtXLVLHHqS5f42cw0skDbx//z7XnLMYqM9as= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:45 2025 by rpki-client