$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: NLZqb0I0XdhWUx2NJQrjbiYNIKv64Ye8QMN97xR0itQ= Subject key identifier: 30:B0:3C:D9:BB:AB:44:F5:7A:4C:52:47:B6:24:08:51:A1:B9:E5:4C Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 5C5F68488D26E1644A76A846CD235A582113B31E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 01F4 Signing time: Mon 07 Apr 2025 14:30:04 +0000 Manifest this update: Mon 07 Apr 2025 14:25:04 +0000 Manifest next update: Thu 10 Apr 2025 20:29:04 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: SrP8QpyUdvMaFaq4ofEsxd4rbMpvfLEy+CFAQmvON9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 20:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5f:68:48:8d:26:e1:64:4a:76:a8:46:cd:23:5a:58:21:13:b3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Apr 7 14:25:04 2025 GMT Not After : Apr 10 20:29:04 2025 GMT Subject: CN=30B03CD9BBAB44F57A4C5247B6240851A1B9E54C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:4e:47:e9:c5:0a:fe:b9:97:3e:9e:75:52: 12:15:81:bb:93:68:b8:39:77:d1:94:39:2e:97:cf: f8:f1:5e:d6:d8:6f:a0:14:cd:38:40:da:b2:0c:28: 40:c6:c6:d4:9d:30:cc:b3:c9:e3:1b:96:06:99:cb: e0:da:d0:76:c5:02:6f:8b:dd:57:c3:ce:3e:0f:88: 5a:94:a3:0d:e6:d6:e8:de:12:df:e3:05:60:ea:89: c8:82:d2:2c:53:20:c4:a8:9e:94:c0:cd:59:3c:c1: e7:22:78:9e:a7:e1:f8:0e:5b:72:0b:90:b8:24:79: 74:4d:58:20:a6:4d:47:54:74:fc:93:66:2e:67:8b: f2:e0:f0:ba:db:e3:ed:2a:7e:55:f2:60:e5:51:4d: 73:5b:fe:9d:ce:bd:ff:9e:69:a1:5b:b2:75:36:5d: 22:a9:e6:77:be:2f:f6:1c:64:dd:0c:79:8d:b5:f9: ee:11:27:9f:87:40:38:36:6a:07:53:8a:75:b7:be: 71:21:78:b9:2f:21:e6:b8:89:7e:36:2a:17:8e:c2: 5f:66:30:4b:bc:bf:ef:5a:98:9f:0d:cd:b3:0e:28: 98:51:8e:4d:fe:ec:81:f3:e9:7b:ca:b7:de:ec:32: 01:7f:20:0d:0c:43:99:e8:68:3d:1a:fa:cd:87:ae: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B0:3C:D9:BB:AB:44:F5:7A:4C:52:47:B6:24:08:51:A1:B9:E5:4C X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:5b:01:f5:c2:e2:49:b3:33:72:48:2d:49:dc:a8:a8:77:a4: 2d:75:2e:85:9a:cc:5b:bb:de:75:eb:64:bd:1d:3b:20:5f:93: b7:55:45:1b:26:12:56:66:dd:db:a8:14:2d:5d:94:2f:1a:08: d8:6d:e3:e1:e0:0f:63:f9:1f:52:c0:3f:e1:02:fc:32:51:46: aa:7b:d0:a4:33:5f:64:14:78:1c:6d:c2:65:bd:ed:51:f1:da: 6e:06:05:ca:6b:30:51:07:e0:b5:fc:bb:a2:c9:34:be:7b:c9: 6b:88:60:f8:8a:da:52:24:bd:62:35:0f:52:6c:ed:ba:5c:ca: e4:9c:fe:e8:b1:52:6e:9f:36:54:9a:42:88:43:59:a3:a4:ff: c0:84:a1:63:31:ed:3b:a2:d8:21:a5:85:a7:bb:bf:f0:a9:bb: 74:4e:b1:d6:d4:1d:f5:bc:b2:2b:5f:4e:36:8a:43:15:34:52: b3:e1:04:c3:fe:21:18:fc:44:34:1e:f0:66:2d:f3:bc:3f:34: 43:a7:b6:af:4b:c1:38:1b:30:3f:6f:4e:bd:27:94:ce:81:20: f0:32:89:0d:8e:71:1c:4a:35:8f:49:7f:68:a8:d5:54:e3:76: 4d:60:c7:fe:56:5c:71:8e:d9:68:5e:6d:13:a4:6e:d4:1f:d1: 06:9a:d2:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXF9oSI0m4WRKdqhGzSNaWCETsx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTA0MDcxNDI1MDRaFw0yNTA0MTAyMDI5MDRaMDMxMTAvBgNV BAMTKDMwQjAzQ0Q5QkJBQjQ0RjU3QTRDNTI0N0I2MjQwODUxQTFCOUU1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjFE5H6cUK/rmXPp51UhIVgbuT aLg5d9GUOS6Xz/jxXtbYb6AUzThA2rIMKEDGxtSdMMyzyeMblgaZy+Da0HbFAm+L 3VfDzj4PiFqUow3m1ujeEt/jBWDqiciC0ixTIMSonpTAzVk8wecieJ6n4fgOW3IL kLgkeXRNWCCmTUdUdPyTZi5ni/Lg8Lrb4+0qflXyYOVRTXNb/p3Ovf+eaaFbsnU2 XSKp5ne+L/YcZN0MeY21+e4RJ5+HQDg2agdTinW3vnEheLkvIea4iX42KheOwl9m MEu8v+9amJ8NzbMOKJhRjk3+7IHz6XvKt97sMgF/IA0MQ5noaD0a+s2HrpxZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMLA82burRPV6TFJHtiQIUaG55UwwHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFbAfXC4kmzM3JILUncqKh3pC11LoWazFu7 3nXrZL0dOyBfk7dVRRsmElZm3duoFC1dlC8aCNht4+HgD2P5H1LAP+EC/DJRRqp7 0KQzX2QUeBxtwmW97VHx2m4GBcprMFEH4LX8u6LJNL57yWuIYPiK2lIkvWI1D1Js 7bpcyuSc/uixUm6fNlSaQohDWaOk/8CEoWMx7Tui2CGlhae7v/Cpu3ROsdbUHfW8 sitfTjaKQxU0UrPhBMP+IRj8RDQe8GYt87w/NEOntq9LwTgbMD9vTr0nlM6BIPAy iQ2OcRxKNY9Jf2io1VTjdk1gx/5WXHGO2WhebROkbtQf0Qaa0jM= -----END CERTIFICATE-----Generated at Tue Apr 8 13:06:55 2025 by rpki-client