$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: VQuDSURrt+hKGI+W6LSc1EM+C/M86BYUcnoH7SagfKM= Subject key identifier: 5A:C0:69:25:62:A7:D8:B9:25:AC:76:7A:BD:62:D9:CB:72:67:32:AA Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 0E1BC0A1420C3415062A69921BF095B7ABF2E64F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 020E Signing time: Thu 05 Jun 2025 08:10:04 +0000 Manifest this update: Thu 05 Jun 2025 08:05:04 +0000 Manifest next update: Sun 08 Jun 2025 16:18:04 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: PM2sB5juqK79RUNBkoiHmZWjiz8hNsvfL2U70QubnAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 16:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1b:c0:a1:42:0c:34:15:06:2a:69:92:1b:f0:95:b7:ab:f2:e6:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Jun 5 08:05:04 2025 GMT Not After : Jun 8 16:18:04 2025 GMT Subject: CN=5AC0692562A7D8B925AC767ABD62D9CB726732AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:50:f7:ca:05:f8:06:18:39:b4:73:99:1c: 84:4d:c9:12:b0:5a:6b:8d:f3:ab:e7:a2:32:01:c6: cc:b9:72:16:c8:71:6b:ed:b7:29:90:3e:85:50:8a: fd:7d:13:bb:0e:f7:49:77:33:20:82:2a:b1:ad:c2: 49:1e:da:fb:5d:0a:04:39:04:26:77:7e:7c:c8:d3: 5b:51:61:b7:86:df:1f:a5:0c:a0:c4:5f:8a:ea:99: 25:d9:d6:c2:ef:fa:c9:ce:30:16:3c:10:5b:3a:8b: 72:01:63:76:ed:d4:7f:bc:f7:c9:28:34:a6:b5:2e: 1f:cb:b7:c1:57:c9:b8:45:9c:98:8a:dc:82:51:29: 6f:3d:c9:65:96:60:59:50:99:43:2d:0a:3b:a0:03: 29:a3:40:76:9e:29:a1:23:fe:e4:14:83:ca:c6:4e: ad:ec:ca:aa:6a:0b:1d:f6:48:1f:ca:bd:22:e5:56: 50:fd:b8:72:dc:2d:eb:95:e9:85:13:55:16:3d:5b: c7:bf:6c:c6:14:31:86:75:9f:84:9d:13:be:f9:3b: 84:78:c3:1c:52:3e:5d:af:91:4e:d6:7b:fa:06:eb: 83:ae:c6:f7:ef:99:36:3c:eb:ea:1a:b3:5c:3c:ed: dc:ef:5a:53:de:1b:cb:b0:48:8c:f5:42:53:be:9c: 74:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C0:69:25:62:A7:D8:B9:25:AC:76:7A:BD:62:D9:CB:72:67:32:AA X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:35:db:c8:d7:71:c6:af:49:74:a1:da:1a:5e:3b:a3:36:f5: 0d:f8:06:95:76:6a:dd:dd:6f:49:4b:76:81:82:af:3f:d6:c7: 0d:d7:34:a5:73:9f:6d:0d:6d:c7:35:ec:a4:29:fe:b2:c0:4d: de:78:75:60:cf:be:1d:03:c7:2d:13:18:37:86:c5:2e:15:c7: 0c:b9:c1:eb:90:bf:1c:d1:c2:55:ff:08:2b:d1:64:89:29:46: 3c:51:ac:35:37:47:b1:06:f3:54:0c:a0:29:65:d2:71:df:49: e8:9c:2f:5a:71:36:55:2c:af:ef:53:5e:73:a3:1c:ac:de:f8: 41:e8:6c:d9:98:c4:a6:f0:a8:9c:48:91:ef:9e:fe:ea:3d:bc: 91:71:ba:ac:16:c9:03:66:bf:e6:ef:79:8b:78:5f:fa:61:b6: 97:00:68:1d:c3:37:e0:d2:2d:e8:bb:ff:64:6c:98:e3:32:17: ed:8d:d6:a7:96:6b:8a:22:ee:7e:5f:77:f4:e8:f6:b7:df:17: 51:91:ad:49:c2:94:c1:ab:db:5b:f8:8c:ee:cf:4d:d0:1e:d4: 7e:38:1c:61:15:cf:4a:eb:2c:1d:a8:16:08:36:dd:43:82:0d: 25:66:31:5f:75:24:4c:19:66:53:09:2b:44:47:e6:b6:9f:61: 74:e4:de:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhvAoUIMNBUGKmmSG/CVt6vy5k8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTA2MDUwODA1MDRaFw0yNTA2MDgxNjE4MDRaMDMxMTAvBgNV BAMTKDVBQzA2OTI1NjJBN0Q4QjkyNUFDNzY3QUJENjJEOUNCNzI2NzMyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6lD3ygX4Bhg5tHOZHIRNyRKw WmuN86vnojIBxsy5chbIcWvttymQPoVQiv19E7sO90l3MyCCKrGtwkke2vtdCgQ5 BCZ3fnzI01tRYbeG3x+lDKDEX4rqmSXZ1sLv+snOMBY8EFs6i3IBY3bt1H+898ko NKa1Lh/Lt8FXybhFnJiK3IJRKW89yWWWYFlQmUMtCjugAymjQHaeKaEj/uQUg8rG Tq3syqpqCx32SB/KvSLlVlD9uHLcLeuV6YUTVRY9W8e/bMYUMYZ1n4SdE775O4R4 wxxSPl2vkU7We/oG64OuxvfvmTY86+oas1w87dzvWlPeG8uwSIz1QlO+nHTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWsBpJWKn2LklrHZ6vWLZy3JnMqowHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ128jXccavSXSh2hpeO6M29Q34BpV2at3d b0lLdoGCrz/Wxw3XNKVzn20Nbcc17KQp/rLATd54dWDPvh0Dxy0TGDeGxS4Vxwy5 weuQvxzRwlX/CCvRZIkpRjxRrDU3R7EG81QMoCll0nHfSeicL1pxNlUsr+9TXnOj HKze+EHobNmYxKbwqJxIke+e/uo9vJFxuqwWyQNmv+bveYt4X/phtpcAaB3DN+DS Lei7/2RsmOMyF+2N1qeWa4oi7n5fd/To9rffF1GRrUnClMGr21v4jO7PTdAe1H44 HGEVz0rrLB2oFgg23UOCDSVmMV91JEwZZlMJK0RH5rafYXTk3lA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:49 2025 by rpki-client