$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: df0Wnc9KKEeLFfIQXPAo/8gav6mudWiPi+gaaJKYlCA= Subject key identifier: 3C:97:F8:E0:2F:9C:3A:6F:DE:F5:5A:89:88:FC:FE:6D:22:7E:2E:A0 Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 6023D2065F91FA83450BAFED4D03FFEAF32F37CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 0237 Signing time: Fri 05 Sep 2025 16:50:04 +0000 Manifest this update: Fri 05 Sep 2025 16:45:04 +0000 Manifest next update: Mon 08 Sep 2025 23:36:04 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: Tt57iEWWVD3Ax2U39G8LeczUzZq99o5OP4TqNROWM+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 23:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:23:d2:06:5f:91:fa:83:45:0b:af:ed:4d:03:ff:ea:f3:2f:37:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Sep 5 16:45:04 2025 GMT Not After : Sep 8 23:36:04 2025 GMT Subject: CN=3C97F8E02F9C3A6FDEF55A8988FCFE6D227E2EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ce:8b:83:f9:fe:d3:0e:b2:e3:4d:5a:83:74: e4:43:60:e6:f6:21:35:b2:54:18:d0:dd:94:74:10: ab:bd:9e:bd:48:40:20:82:95:0b:5c:d9:8c:cd:a3: 8d:6e:c6:2a:28:bc:53:b0:76:77:e1:c7:ec:b0:50: 2e:d4:5f:4f:5a:8d:6f:71:3d:75:23:8a:b4:ca:91: 4c:28:57:8b:13:e6:13:20:71:75:29:75:9c:76:ba: e7:a1:03:e5:e3:5c:da:bb:da:1b:d8:c5:41:8c:ca: af:68:90:7c:ff:ec:82:6d:ee:1b:a8:ec:7e:32:92: a1:47:ee:37:2f:8f:97:ca:e6:0f:9d:ee:c2:04:33: bb:78:1d:60:d3:01:96:48:47:f0:08:36:5b:89:02: 40:3c:81:e2:f4:81:45:6f:ff:7c:e6:fc:8f:a3:a0: 48:19:a6:fd:b7:dc:be:a7:59:29:c4:02:7f:59:06: 97:8c:80:ac:78:0e:8a:7c:a8:9b:00:7b:13:a5:22: f0:6f:05:ca:14:b4:05:3f:c1:48:9a:84:b1:e2:7f: e1:e1:28:9f:8f:56:41:41:1d:27:46:5e:73:e5:90: b0:ae:79:5f:b8:ee:3b:bb:f2:4a:50:84:50:a8:27: 17:05:09:0a:31:1d:1a:d9:19:ce:11:4a:99:35:4e: 27:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:97:F8:E0:2F:9C:3A:6F:DE:F5:5A:89:88:FC:FE:6D:22:7E:2E:A0 X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:38:26:90:9f:3e:e2:09:53:98:2a:6d:0f:13:98:c0:86:2c: 31:d2:84:cf:6c:91:d6:07:e6:70:da:dd:a9:eb:14:e5:8b:fc: c6:bc:21:21:39:5a:f8:72:60:97:b1:19:99:d1:79:e9:78:49: ce:1b:4c:81:34:55:2d:a0:70:71:73:80:39:80:24:7e:1a:a0: 2c:a1:bb:a3:a2:02:35:e1:a7:1c:51:ec:d3:05:6f:bb:6f:2c: 44:89:73:68:3d:88:38:fa:d4:82:a5:f0:36:7e:68:7b:07:2e: fe:5c:f9:78:20:cb:24:50:f0:e2:b5:eb:02:5e:e7:cc:ca:a5: fd:1a:86:3d:d9:49:f3:fc:47:17:22:4a:1b:d5:19:5c:50:22: 5c:dd:5b:a9:42:05:69:90:c9:98:82:03:ba:be:c1:58:66:e0: 64:cd:8e:07:5e:ce:22:0c:bf:10:d8:23:0b:eb:28:6d:20:45: 44:82:e2:32:17:28:c8:b3:b2:5a:92:35:26:07:b4:74:f5:80: 5b:86:19:bb:ec:0f:92:58:67:8e:4e:6c:18:80:85:ac:52:77: 2e:d1:60:9c:7d:4a:f6:7e:93:2b:be:24:c1:4c:f3:ce:be:59: f4:97:04:40:5e:11:04:e0:77:40:a1:77:19:e3:9d:a3:c6:b5: 6a:a2:53:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCPSBl+R+oNFC6/tTQP/6vMvN8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTA5MDUxNjQ1MDRaFw0yNTA5MDgyMzM2MDRaMDMxMTAvBgNV BAMTKDNDOTdGOEUwMkY5QzNBNkZERUY1NUE4OTg4RkNGRTZEMjI3RTJFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgzouD+f7TDrLjTVqDdORDYOb2 ITWyVBjQ3ZR0EKu9nr1IQCCClQtc2YzNo41uxioovFOwdnfhx+ywUC7UX09ajW9x PXUjirTKkUwoV4sT5hMgcXUpdZx2uuehA+XjXNq72hvYxUGMyq9okHz/7IJt7huo 7H4ykqFH7jcvj5fK5g+d7sIEM7t4HWDTAZZIR/AINluJAkA8geL0gUVv/3zm/I+j oEgZpv233L6nWSnEAn9ZBpeMgKx4Dop8qJsAexOlIvBvBcoUtAU/wUiahLHif+Hh KJ+PVkFBHSdGXnPlkLCueV+47ju78kpQhFCoJxcFCQoxHRrZGc4RSpk1TierAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPJf44C+cOm/e9VqJiPz+bSJ+LqAwHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADs4JpCfPuIJU5gqbQ8TmMCGLDHShM9skdYH 5nDa3anrFOWL/Ma8ISE5WvhyYJexGZnReel4Sc4bTIE0VS2gcHFzgDmAJH4aoCyh u6OiAjXhpxxR7NMFb7tvLESJc2g9iDj61IKl8DZ+aHsHLv5c+XggyyRQ8OK16wJe 58zKpf0ahj3ZSfP8RxciShvVGVxQIlzdW6lCBWmQyZiCA7q+wVhm4GTNjgdeziIM vxDYIwvrKG0gRUSC4jIXKMizslqSNSYHtHT1gFuGGbvsD5JYZ45ObBiAhaxSdy7R YJx9SvZ+kyu+JMFM886+WfSXBEBeEQTgd0ChdxnjnaPGtWqiUwE= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:28 2025 by rpki-client