$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: HngYG4IZT9WbI/MEHZ+vXUNimalR4/ojWhpEpw1YSuI= Subject key identifier: F4:ED:F1:82:E2:56:A2:88:AB:F1:8A:F7:F1:07:C5:BF:39:4D:72:AD Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 2A13560A55F632F3BDCF5BEFA6E4CCFCC4183B68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: 81 Signing time: Thu 04 Sep 2025 08:21:37 +0000 Manifest this update: Thu 04 Sep 2025 08:16:37 +0000 Manifest next update: Sun 07 Sep 2025 09:36:37 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: SnPy6c+ZAvcnBbqNFja37FU8OJXX72K9Z/7RJ24kFeQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 09:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:13:56:0a:55:f6:32:f3:bd:cf:5b:ef:a6:e4:cc:fc:c4:18:3b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Sep 4 08:16:37 2025 GMT Not After : Sep 7 09:36:37 2025 GMT Subject: CN=F4EDF182E256A288ABF18AF7F107C5BF394D72AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fe:3d:12:22:29:98:67:d1:fd:15:bc:da:10: ec:06:f0:dc:b6:72:24:8f:99:e1:68:bd:6c:84:be: 57:f3:87:4b:bf:d5:6a:c1:47:41:de:89:90:0d:d4: 37:8c:fe:18:e1:08:91:76:17:5e:48:03:b4:36:5f: 5e:9e:14:19:d1:26:da:39:c2:00:7d:d8:be:8e:cb: 74:5b:85:59:60:97:6a:3f:52:73:6a:b1:bc:e2:19: d6:3e:fb:81:8c:5b:f7:c3:fb:3c:92:1e:12:e1:16: b0:6b:8d:f1:c8:19:4c:9b:89:97:38:c8:bf:3e:b8: 18:28:79:20:ca:19:3f:a8:cf:46:e6:c4:b5:37:41: d0:f7:ca:11:04:12:92:18:6a:b3:c7:d1:0c:47:28: 2b:e5:ed:d4:91:90:63:0e:90:86:4d:85:49:97:40: 2f:9d:40:e4:48:b0:39:85:ac:d3:05:e5:c1:10:fd: fa:8c:a8:ed:04:5b:0f:be:c0:42:8f:fb:b3:e3:ea: a9:f2:8c:e9:c1:eb:cc:cd:f7:39:b4:54:55:b4:a8: 49:96:ed:82:d0:c6:a5:27:58:c8:d2:d9:1c:11:a9: e3:ad:58:8e:bd:d1:19:e5:8b:ee:d1:b7:d5:43:f9: cb:2f:7e:e9:8e:88:49:14:91:ac:1f:60:c0:a2:87: 33:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:ED:F1:82:E2:56:A2:88:AB:F1:8A:F7:F1:07:C5:BF:39:4D:72:AD X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:db:b1:1c:72:21:04:ad:2d:d5:b4:3d:26:6f:02:d0:7a:55: c4:6d:ef:0c:d3:0f:7e:a2:11:df:14:bc:e3:f1:b0:e0:d1:4b: 88:55:1a:82:8a:82:30:2c:fc:d6:05:6f:42:a6:98:89:21:82: cc:76:f7:7c:dd:b8:3d:4a:ee:d7:3c:b1:8f:a6:23:8c:09:ce: 8c:76:8f:e3:4f:49:f4:e1:62:c5:65:7a:64:df:95:cd:60:73: 14:19:9a:c6:a7:29:1d:21:b8:dd:c5:3b:3e:f6:d4:65:33:c5: 4a:a0:89:3a:92:51:9b:06:47:5e:08:9e:91:5b:9b:d4:3e:1c: f2:1f:a6:3a:bb:85:e1:d1:dd:f2:09:1d:4f:24:60:d6:2a:06: ce:e3:59:81:50:85:5f:2f:46:db:38:37:29:54:d6:5d:33:1d: e2:8a:33:cf:b0:fd:2d:b7:ed:47:5c:79:16:20:ba:e0:1e:c5: ca:7f:4c:9d:1b:53:fa:62:09:57:ba:41:39:54:99:63:5f:b6: 57:eb:4d:9e:e8:6b:78:c3:61:dc:55:2d:52:7f:a8:60:8a:bc: b4:b5:dd:9e:47:de:a5:87:f9:1a:2f:95:75:73:c5:1b:c9:c5: cb:46:77:ce:be:7e:c2:f3:e9:f6:54:42:c1:5b:48:d9:34:d7: 28:5a:25:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhNWClX2MvO9z1vvpuTM/MQYO2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNTA5MDQwODE2MzdaFw0yNTA5MDcwOTM2MzdaMDMxMTAvBgNV BAMTKEY0RURGMTgyRTI1NkEyODhBQkYxOEFGN0YxMDdDNUJGMzk0RDcyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/j0SIimYZ9H9FbzaEOwG8Ny2 ciSPmeFovWyEvlfzh0u/1WrBR0HeiZAN1DeM/hjhCJF2F15IA7Q2X16eFBnRJto5 wgB92L6Oy3RbhVlgl2o/UnNqsbziGdY++4GMW/fD+zySHhLhFrBrjfHIGUybiZc4 yL8+uBgoeSDKGT+oz0bmxLU3QdD3yhEEEpIYarPH0QxHKCvl7dSRkGMOkIZNhUmX QC+dQORIsDmFrNMF5cEQ/fqMqO0EWw++wEKP+7Pj6qnyjOnB68zN9zm0VFW0qEmW 7YLQxqUnWMjS2RwRqeOtWI690Rnli+7Rt9VD+csvfumOiEkUkawfYMCihzM/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9O3xguJWooir8Yr38QfFvzlNcq0wHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHbsRxyIQStLdW0PSZvAtB6VcRt7wzTD36i Ed8UvOPxsODRS4hVGoKKgjAs/NYFb0KmmIkhgsx293zduD1K7tc8sY+mI4wJzox2 j+NPSfThYsVlemTflc1gcxQZmsanKR0huN3FOz721GUzxUqgiTqSUZsGR14InpFb m9Q+HPIfpjq7heHR3fIJHU8kYNYqBs7jWYFQhV8vRts4NylU1l0zHeKKM8+w/S23 7UdceRYguuAexcp/TJ0bU/piCVe6QTlUmWNftlfrTZ7oa3jDYdxVLVJ/qGCKvLS1 3Z5H3qWH+RovlXVzxRvJxctGd86+fsLz6fZUQsFbSNk01yhaJew= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:33 2025 by rpki-client