$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: XFmWEV0LUWHWjDKo5u0slJMPrT79LjktmNALCCcv78c= Subject key identifier: 3E:23:0D:60:39:2D:FE:34:60:56:ED:AD:A9:BC:C3:18:D1:CF:68:6D Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 6B1108B1319E53DA6360EFD3076268225B54352A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 0480 Signing time: Wed 16 Apr 2025 18:40:41 +0000 Manifest this update: Wed 16 Apr 2025 18:35:41 +0000 Manifest next update: Sat 19 Apr 2025 18:58:41 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: F68bObGFnD+AMssLCGIz189Io8QJOv7I6Q+Ti/SdewM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 18:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:11:08:b1:31:9e:53:da:63:60:ef:d3:07:62:68:22:5b:54:35:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Apr 16 18:35:41 2025 GMT Not After : Apr 19 18:58:41 2025 GMT Subject: CN=3E230D60392DFE346056EDADA9BCC318D1CF686D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:de:f1:80:6a:e8:ea:ce:98:c9:56:f1:de: 47:d5:32:13:d8:05:07:69:6c:84:fb:31:3b:b7:26: 89:40:7e:61:94:bb:3e:69:da:3e:b6:55:d3:01:7f: 82:f7:1f:9f:7a:60:ad:c2:6b:fe:2a:1b:54:19:bc: 64:c4:cc:bb:e8:48:dc:4e:63:d4:39:85:6e:d1:09: a8:da:18:23:54:66:eb:21:52:10:7c:34:f3:f0:b4: 35:05:a5:3f:25:0e:8c:f9:9f:a5:c6:16:b7:d0:43: cb:f8:36:f2:5a:3e:f6:9c:6e:23:66:69:67:7d:d7: 5a:69:d7:90:9d:66:ab:cf:89:90:aa:d6:46:ca:cb: a9:36:6d:02:1a:b2:5e:13:4f:a2:23:48:56:96:fa: e2:95:a4:0b:0c:bd:1f:2a:9e:c9:bc:23:84:59:00: 5b:d8:88:d2:3f:4e:be:00:f5:0a:0e:74:7c:b3:50: 88:9a:1a:38:8a:d3:99:a1:59:fd:c6:a1:38:6e:f4: 56:f1:11:a9:83:9f:31:74:80:38:43:6c:77:84:d6: 37:64:09:ed:90:98:7d:c9:8c:18:fd:11:6e:0f:3f: 7c:ee:8d:d8:85:56:e7:7b:ce:aa:db:3d:05:d7:0b: b3:65:d1:4c:c4:a7:41:58:37:c0:99:34:18:aa:0c: e9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:23:0D:60:39:2D:FE:34:60:56:ED:AD:A9:BC:C3:18:D1:CF:68:6D X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:51:87:5b:85:15:8d:cb:b5:59:d8:19:2a:10:3a:1c:e3:e5: bd:16:e3:b0:d5:e9:62:d5:e1:25:e1:c6:29:4b:e0:dc:f8:df: 43:2b:ce:ac:33:38:13:98:89:1a:e5:54:c4:48:73:89:5e:52: 55:d5:d1:d4:41:43:0e:a3:89:8f:e7:73:38:95:0c:74:4f:e8: 6c:9f:13:ac:66:51:dd:bd:69:04:67:37:7e:ab:c2:57:bf:aa: dd:a1:b8:e9:c7:01:0d:98:a5:8e:fd:55:3a:85:ef:57:08:e4: b9:fc:9a:b4:93:93:42:f4:9f:b2:7c:c7:42:c3:ba:5e:c9:f5: b8:c3:58:74:65:ed:3c:88:1a:eb:67:0e:c2:6d:cb:3c:0a:da: f9:51:e9:59:e6:af:df:9b:9a:2b:f1:d6:b4:4c:91:34:cf:87: 2f:e7:a2:bc:90:83:ad:3d:a7:ad:87:c2:b7:ca:af:4e:17:1a: 26:59:4e:3f:9e:39:90:68:df:5f:d1:74:37:5e:85:63:2f:d5: 7f:35:bd:ee:f3:a2:a9:70:5b:d3:ca:f1:cd:fb:3d:8e:b6:87: 66:af:37:1e:51:47:22:cf:64:2c:18:3f:5a:fd:26:bb:de:35: 57:c5:4a:c6:5f:59:8f:f1:3d:3e:be:b8:38:25:be:87:85:91: 54:64:30:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxEIsTGeU9pjYO/TB2JoIltUNSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTA0MTYxODM1NDFaFw0yNTA0MTkxODU4NDFaMDMxMTAvBgNV BAMTKDNFMjMwRDYwMzkyREZFMzQ2MDU2RURBREE5QkNDMzE4RDFDRjY4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fN7xgGro6s6YyVbx3kfVMhPY BQdpbIT7MTu3JolAfmGUuz5p2j62VdMBf4L3H596YK3Ca/4qG1QZvGTEzLvoSNxO Y9Q5hW7RCajaGCNUZushUhB8NPPwtDUFpT8lDoz5n6XGFrfQQ8v4NvJaPvacbiNm aWd911pp15CdZqvPiZCq1kbKy6k2bQIasl4TT6IjSFaW+uKVpAsMvR8qnsm8I4RZ AFvYiNI/Tr4A9QoOdHyzUIiaGjiK05mhWf3GoThu9FbxEamDnzF0gDhDbHeE1jdk Ce2QmH3JjBj9EW4PP3zujdiFVud7zqrbPQXXC7Nl0UzEp0FYN8CZNBiqDOlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPiMNYDkt/jRgVu2tqbzDGNHPaG0wHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANRh1uFFY3LtVnYGSoQOhzj5b0W47DV6WLV 4SXhxilL4Nz430MrzqwzOBOYiRrlVMRIc4leUlXV0dRBQw6jiY/ncziVDHRP6Gyf E6xmUd29aQRnN36rwle/qt2huOnHAQ2YpY79VTqF71cI5Ln8mrSTk0L0n7J8x0LD ul7J9bjDWHRl7TyIGutnDsJtyzwK2vlR6Vnmr9+bmivx1rRMkTTPhy/noryQg609 p62HwrfKr04XGiZZTj+eOZBo31/RdDdehWMv1X81ve7zoqlwW9PK8c37PY62h2av Nx5RRyLPZCwYP1r9JrveNVfFSsZfWY/xPT6+uDglvoeFkVRkMCo= -----END CERTIFICATE-----Generated at Thu Apr 17 12:25:23 2025 by rpki-client