$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: c8yVftD0gED2an2RhTiYMctpWiB+QkJrcDfG58Bn0n8= Subject key identifier: 40:BB:B7:17:83:D1:5F:71:D9:3F:CC:69:B2:13:C3:51:C3:33:0B:56 Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 04D8C95B54016D764FE9E4EE3DFF7CCCBA320B38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: 7B Signing time: Thu 21 Aug 2025 15:21:38 +0000 Manifest this update: Thu 21 Aug 2025 15:16:38 +0000 Manifest next update: Mon 25 Aug 2025 01:50:38 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: LxwKrpM74lrcDS9R9l6xyBa0IV5ZvZeJ8hYg5pMCr40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d8:c9:5b:54:01:6d:76:4f:e9:e4:ee:3d:ff:7c:cc:ba:32:0b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Aug 21 15:16:38 2025 GMT Not After : Aug 25 01:50:38 2025 GMT Subject: CN=40BBB71783D15F71D93FCC69B213C351C3330B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:96:68:e4:b8:48:42:42:3b:14:da:0f:62: 2c:9c:b3:e1:ab:c8:7c:86:f8:1f:e5:0c:e7:2f:23: c2:0f:70:cc:63:d8:c9:b7:99:f8:e8:45:46:19:0c: f1:6c:70:80:47:82:31:06:96:da:4f:67:f3:b6:6f: 24:cc:03:02:51:95:84:c8:ac:d5:bd:0a:92:78:b7: e0:20:18:86:55:3f:5b:3b:5d:bc:5a:6b:1b:76:6f: 00:89:e0:d7:8b:34:fa:39:da:64:ec:9f:a4:7d:79: e8:22:db:1a:8c:5d:73:82:8a:ca:f7:e1:4d:9b:71: 70:38:79:eb:2e:01:1b:60:ff:ed:51:dc:98:33:64: 1e:b2:fd:51:74:01:36:5e:c3:18:da:b6:c8:05:a6: b7:9a:15:bb:0f:e9:40:f8:26:35:3a:ff:10:cb:ca: 9a:02:bc:91:f7:83:b2:e0:46:eb:af:13:d9:bf:37: 6f:58:69:c3:3f:5e:84:44:e8:90:c7:71:cf:17:74: b0:1b:df:f7:0b:26:aa:d0:24:2b:db:a9:5c:85:fe: 01:78:35:5e:12:43:2f:ff:da:ec:53:b8:39:63:b4: 55:b5:dd:e4:55:50:0e:01:7f:69:07:55:29:e0:f3: 12:58:0d:02:52:56:a9:73:b8:08:d5:e0:f7:23:69: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BB:B7:17:83:D1:5F:71:D9:3F:CC:69:B2:13:C3:51:C3:33:0B:56 X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ff:72:fc:4a:d4:40:2a:fe:c4:02:30:f2:b8:ea:8c:3b:1c: 63:62:2c:49:47:81:b3:a4:d2:cd:28:2a:59:7e:3b:64:99:7b: 02:09:9e:97:49:5a:41:55:c0:4b:cc:d0:9a:aa:6c:fc:3d:20: 2c:1e:2c:69:e0:74:75:e4:5d:9d:aa:3a:c2:b4:ed:10:2b:14: f7:ec:2f:96:0a:83:33:9c:f9:aa:e7:af:e3:55:5b:14:2a:54: 1c:b3:23:67:56:a3:bd:dc:d6:8f:fe:9e:41:fd:c4:41:0f:82: b7:fd:77:bf:6f:1d:c7:a7:c4:1c:99:0e:39:bb:ab:14:06:dc: 7c:e5:39:99:8c:b0:92:3b:e2:13:51:33:e2:97:f4:52:7e:14: bf:05:55:25:eb:92:cd:c3:04:1a:46:9c:05:9f:13:3d:23:4a: 80:44:c4:82:54:67:24:24:46:01:82:30:17:48:f6:b8:41:18: be:22:08:b6:1b:77:a9:85:d5:85:83:05:0f:b3:a3:f6:79:82: e7:15:7f:09:53:16:25:f8:29:6e:c3:b3:83:74:8d:16:b9:f3: 5a:bf:3c:ed:87:76:38:74:3c:e0:d5:9d:39:20:a7:88:b0:e3: 16:bb:7b:c3:2a:21:a1:ef:71:4a:e9:fc:bf:fb:5b:a1:73:8a: e4:08:35:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBNjJW1QBbXZP6eTuPf98zLoyCzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNTA4MjExNTE2MzhaFw0yNTA4MjUwMTUwMzhaMDMxMTAvBgNV BAMTKDQwQkJCNzE3ODNEMTVGNzFEOTNGQ0M2OUIyMTNDMzUxQzMzMzBCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQ5Zo5LhIQkI7FNoPYiycs+Gr yHyG+B/lDOcvI8IPcMxj2Mm3mfjoRUYZDPFscIBHgjEGltpPZ/O2byTMAwJRlYTI rNW9CpJ4t+AgGIZVP1s7Xbxaaxt2bwCJ4NeLNPo52mTsn6R9eegi2xqMXXOCisr3 4U2bcXA4eesuARtg/+1R3JgzZB6y/VF0ATZewxjatsgFpreaFbsP6UD4JjU6/xDL ypoCvJH3g7LgRuuvE9m/N29YacM/XoRE6JDHcc8XdLAb3/cLJqrQJCvbqVyF/gF4 NV4SQy//2uxTuDljtFW13eRVUA4Bf2kHVSng8xJYDQJSVqlzuAjV4Pcjaf5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQLu3F4PRX3HZP8xpshPDUcMzC1YwHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACj/cvxK1EAq/sQCMPK46ow7HGNiLElHgbOk 0s0oKll+O2SZewIJnpdJWkFVwEvM0JqqbPw9ICweLGngdHXkXZ2qOsK07RArFPfs L5YKgzOc+arnr+NVWxQqVByzI2dWo73c1o/+nkH9xEEPgrf9d79vHcenxByZDjm7 qxQG3HzlOZmMsJI74hNRM+KX9FJ+FL8FVSXrks3DBBpGnAWfEz0jSoBExIJUZyQk RgGCMBdI9rhBGL4iCLYbd6mF1YWDBQ+zo/Z5gucVfwlTFiX4KW7Ds4N0jRa581q/ PO2Hdjh0PODVnTkgp4iw4xa7e8MqIaHvcUrp/L/7W6FziuQINfo= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:47 2025 by rpki-client