$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: UVGX9vgF+/pS7+ej+vDl8exFK/W+CXK9pqlWVrM04aA= Subject key identifier: 04:D6:B1:61:E3:C3:F6:75:77:A6:A9:05:0F:A1:0C:C3:B1:91:3A:AF Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 678CCC1C6A9807FDE83A0C62EABF7CF4798A6351 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 0495 Signing time: Tue 03 Jun 2025 17:21:07 +0000 Manifest this update: Tue 03 Jun 2025 17:16:07 +0000 Manifest next update: Sat 07 Jun 2025 02:49:07 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: UbHdCI5gAdFjwJ4nJszESoA0rNlksNsh69rxYuE+V6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8c:cc:1c:6a:98:07:fd:e8:3a:0c:62:ea:bf:7c:f4:79:8a:63:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Jun 3 17:16:07 2025 GMT Not After : Jun 7 02:49:07 2025 GMT Subject: CN=04D6B161E3C3F67577A6A9050FA10CC3B1913AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:ae:11:00:56:08:c0:f7:34:06:3d:75:70: 6b:76:83:e3:44:5f:3d:bb:ac:19:1f:70:fa:78:76: 2d:f0:d9:35:c1:47:f1:2d:76:e2:6f:26:12:12:c8: e1:f4:ba:55:e0:7f:9e:ae:2c:9b:36:e0:83:1a:75: 87:1e:d1:b5:1c:fa:ce:5b:56:48:e5:bd:65:7a:92: 1b:90:99:1c:38:da:ed:1c:36:8b:c3:f2:e3:ff:81: f9:e4:f7:bf:a4:7f:32:8b:25:b8:91:6c:45:a3:de: 65:83:d1:af:fa:3f:1a:ab:44:d2:f1:2e:b5:ce:ad: 04:42:50:c5:3c:e3:7a:0f:58:79:b5:5d:ef:c1:c9: 0d:63:41:11:9e:12:c4:0d:a5:f2:16:a8:ba:25:ea: 16:a3:ea:b9:ad:e9:9d:2a:3e:1c:f5:be:53:f1:12: f8:2c:bc:77:e7:56:e8:e3:d9:22:6c:a6:7b:82:7d: ef:69:03:65:00:6a:d5:9f:f6:27:79:07:a2:09:82: a0:be:79:03:65:2d:20:21:88:54:67:31:84:89:4f: 76:50:06:55:dc:57:96:8d:42:90:73:76:c1:3b:5f: 83:cf:fb:33:1e:1a:3a:2b:4e:1a:23:67:3e:7b:75: d9:24:4e:4f:5b:02:2a:ff:bb:ec:e5:2d:72:65:4c: 97:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D6:B1:61:E3:C3:F6:75:77:A6:A9:05:0F:A1:0C:C3:B1:91:3A:AF X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0b:6d:d2:07:2a:c5:c7:52:da:34:8a:c2:fc:dc:a8:25:f3: 92:93:0b:43:fe:2b:b0:e1:ce:fe:c5:68:2f:be:9e:b9:d2:e4: 68:12:a0:eb:36:4a:bb:b5:14:58:55:b5:ea:ef:4a:c4:53:ac: 6b:3d:b7:56:6e:84:a3:7b:24:ec:37:04:df:a9:8e:79:d2:23: 1f:02:80:1c:a9:d8:8f:70:2f:e1:d5:57:d2:84:2d:c5:01:e9: 34:c8:99:a0:af:c1:ba:fb:8a:5d:d4:6e:16:fb:0c:a3:82:c5: 83:f7:3f:dd:34:62:01:6c:74:80:a1:87:75:6a:a1:03:35:a8: 6e:03:eb:c3:46:62:bc:39:6c:69:83:e6:43:65:f6:6a:0b:35: c2:ee:94:22:21:7b:ad:31:0e:e7:0e:7b:69:74:aa:36:d7:36: 66:64:6c:7c:1f:bc:6f:86:c2:a1:6f:8c:92:f7:d9:7f:89:51: 7e:01:07:e8:5a:8d:f1:01:62:d0:aa:db:4a:d4:11:81:4e:64: e0:b2:80:fe:29:13:7b:65:72:73:28:b6:07:e0:ce:c0:82:c9: 61:f3:72:36:7a:08:20:dd:bd:4b:e5:54:34:fa:f8:e0:41:e7: 07:05:39:14:ee:b2:f8:0b:49:cb:ca:d2:e1:b0:a7:01:e1:14: 30:93:bd:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4zMHGqYB/3oOgxi6r989HmKY1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTA2MDMxNzE2MDdaFw0yNTA2MDcwMjQ5MDdaMDMxMTAvBgNV BAMTKDA0RDZCMTYxRTNDM0Y2NzU3N0E2QTkwNTBGQTEwQ0MzQjE5MTNBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pa4RAFYIwPc0Bj11cGt2g+NE Xz27rBkfcPp4di3w2TXBR/EtduJvJhISyOH0ulXgf56uLJs24IMadYce0bUc+s5b VkjlvWV6khuQmRw42u0cNovD8uP/gfnk97+kfzKLJbiRbEWj3mWD0a/6PxqrRNLx LrXOrQRCUMU843oPWHm1Xe/ByQ1jQRGeEsQNpfIWqLol6haj6rmt6Z0qPhz1vlPx EvgsvHfnVujj2SJspnuCfe9pA2UAatWf9id5B6IJgqC+eQNlLSAhiFRnMYSJT3ZQ BlXcV5aNQpBzdsE7X4PP+zMeGjorThojZz57ddkkTk9bAir/u+zlLXJlTJdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBNaxYePD9nV3pqkFD6EMw7GROq8wHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkLbdIHKsXHUto0isL83Kgl85KTC0P+K7Dh zv7FaC++nrnS5GgSoOs2Sru1FFhVtervSsRTrGs9t1ZuhKN7JOw3BN+pjnnSIx8C gByp2I9wL+HVV9KELcUB6TTImaCvwbr7il3Ubhb7DKOCxYP3P900YgFsdIChh3Vq oQM1qG4D68NGYrw5bGmD5kNl9moLNcLulCIhe60xDucOe2l0qjbXNmZkbHwfvG+G wqFvjJL32X+JUX4BB+hajfEBYtCq20rUEYFOZOCygP4pE3tlcnMotgfgzsCCyWHz cjZ6CCDdvUvlVDT6+OBB5wcFORTusvgLScvK0uGwpwHhFDCTvTQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:18:14 2025 by rpki-client