$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: UpXg9PyIZ24ccVuWUfsHG22RMbu3XAqN+JPWbl0jiik= Subject key identifier: C3:03:E8:9D:62:C7:B6:C5:08:8F:81:E0:E7:A6:83:25:7A:66:E5:93 Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 731330673E3240D18EAE9FA191E596479C2796B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 04BE Signing time: Fri 05 Sep 2025 09:30:42 +0000 Manifest this update: Fri 05 Sep 2025 09:25:42 +0000 Manifest next update: Mon 08 Sep 2025 17:59:42 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: b3gQNbaeEKbDvaumDrE2GVSUNJE5LTYhzslEU342/hY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:13:30:67:3e:32:40:d1:8e:ae:9f:a1:91:e5:96:47:9c:27:96:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Sep 5 09:25:42 2025 GMT Not After : Sep 8 17:59:42 2025 GMT Subject: CN=C303E89D62C7B6C5088F81E0E7A683257A66E593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:e1:2c:21:69:83:65:28:3b:cc:e1:14:9f: 5e:8b:ea:bd:22:3f:bf:a0:18:96:d5:75:9e:5a:eb: dc:8a:7b:f5:c4:4f:b3:6b:91:cb:4b:d0:35:c8:37: 2d:20:94:c0:13:b8:2d:5f:9e:a2:57:aa:6a:65:c6: 09:ae:33:2a:b1:74:b4:7b:c9:07:4f:fa:0e:0b:a5: f6:c8:5c:76:68:0a:5a:15:52:e6:20:24:83:11:bb: 51:e0:61:0b:59:bd:43:be:e9:ee:04:ef:fe:d8:8c: a6:1b:f4:75:a1:7a:ef:57:4a:36:15:07:76:47:4b: 4c:a0:f2:7d:03:f3:7c:c6:fa:f5:cf:5d:c5:67:52: c0:fd:52:25:94:62:b2:05:74:6e:31:b1:32:a7:ea: cd:9d:e1:8d:e7:d7:1d:48:b8:ea:15:21:86:c1:26: fe:5a:62:a6:e7:cf:03:8c:43:da:bb:c2:1f:f7:fb: fc:c4:42:25:3f:a4:b0:96:9e:c2:73:f1:2d:3c:05: 8f:04:38:f5:5a:0a:cc:08:82:e1:3c:fc:d4:30:21: 1f:ff:17:ee:a8:64:5f:2a:d4:c0:55:67:0b:89:29: eb:f9:b0:10:bd:5f:cc:d5:19:d3:aa:e8:d1:1a:d0: 22:f0:c3:c8:bf:6e:ad:50:ae:3a:8a:bd:8d:18:a5: 8b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:03:E8:9D:62:C7:B6:C5:08:8F:81:E0:E7:A6:83:25:7A:66:E5:93 X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e7:2c:9b:2f:75:8c:23:8b:cc:4a:a8:e6:4e:3c:bf:88:5c: ce:22:a2:26:01:20:cc:cd:b8:6b:ae:07:30:f0:8d:23:a9:7c: 2d:d3:b2:01:6b:c5:d7:7d:06:6b:cf:71:0d:08:53:90:bc:09: 3d:f3:03:aa:a6:18:1a:45:a3:bd:0a:06:3f:d3:7a:9c:df:a7: 90:cf:fe:c2:cb:22:ba:31:8a:94:66:ff:cc:83:14:6b:e8:d7: 73:55:db:4c:07:43:bb:82:41:2b:b5:91:45:1a:55:48:1c:89: 36:0f:f0:ae:1e:72:68:ed:fb:1a:40:68:7c:96:d2:c7:b3:32: 09:a5:9a:ce:58:d0:0a:bd:91:91:8a:04:d2:5f:8e:15:8d:ad: 9b:b5:6c:31:6d:d2:d3:22:5a:9e:d4:ee:7a:95:74:99:53:05: b5:9b:bb:1e:71:09:77:83:3a:73:21:0f:39:64:74:53:cf:6d: 4f:dd:0f:da:8a:ea:1a:15:67:86:e5:6d:68:56:01:f6:75:95: 2e:91:97:ef:4f:d0:6e:70:7f:ae:89:13:5d:46:bb:64:7f:fd: c5:a9:50:ab:d2:64:aa:19:bb:0e:ba:7a:9f:b5:e7:ee:bc:93: da:ef:05:08:f0:ee:41:2b:d3:23:8f:6f:b3:97:2c:80:d6:a4: 77:0a:c1:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcxMwZz4yQNGOrp+hkeWWR5wnlrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTA5MDUwOTI1NDJaFw0yNTA5MDgxNzU5NDJaMDMxMTAvBgNV BAMTKEMzMDNFODlENjJDN0I2QzUwODhGODFFMEU3QTY4MzI1N0E2NkU1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzeEsIWmDZSg7zOEUn16L6r0i P7+gGJbVdZ5a69yKe/XET7NrkctL0DXINy0glMATuC1fnqJXqmplxgmuMyqxdLR7 yQdP+g4LpfbIXHZoCloVUuYgJIMRu1HgYQtZvUO+6e4E7/7YjKYb9HWheu9XSjYV B3ZHS0yg8n0D83zG+vXPXcVnUsD9UiWUYrIFdG4xsTKn6s2d4Y3n1x1IuOoVIYbB Jv5aYqbnzwOMQ9q7wh/3+/zEQiU/pLCWnsJz8S08BY8EOPVaCswIguE8/NQwIR// F+6oZF8q1MBVZwuJKev5sBC9X8zVGdOq6NEa0CLww8i/bq1QrjqKvY0YpYs5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwwPonWLHtsUIj4Hg56aDJXpm5ZMwHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXnLJsvdYwji8xKqOZOPL+IXM4ioiYBIMzN uGuuBzDwjSOpfC3TsgFrxdd9BmvPcQ0IU5C8CT3zA6qmGBpFo70KBj/Tepzfp5DP /sLLIroxipRm/8yDFGvo13NV20wHQ7uCQSu1kUUaVUgciTYP8K4ecmjt+xpAaHyW 0sezMgmlms5Y0Aq9kZGKBNJfjhWNrZu1bDFt0tMiWp7U7nqVdJlTBbWbux5xCXeD OnMhDzlkdFPPbU/dD9qK6hoVZ4blbWhWAfZ1lS6Rl+9P0G5wf66JE11Gu2R//cWp UKvSZKoZuw66ep+15+68k9rvBQjw7kEr0yOPb7OXLIDWpHcKweM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:16:50 2025 by rpki-client