$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: INeq8zNseuwUq8KnOMJph2ckCK7wfOmLIuo0I+Jv4cA= Subject key identifier: DC:D3:FA:F6:17:8B:ED:CD:02:01:BA:08:45:54:2B:7E:04:5C:9F:BC Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 716FF3FCB02BAF566CB0EFA05A0494BBE8F1E09E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: 65 Signing time: Thu 03 Jul 2025 05:21:37 +0000 Manifest this update: Thu 03 Jul 2025 05:16:37 +0000 Manifest next update: Sun 06 Jul 2025 08:29:37 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: 88HRTOSmuzX8otPVbif35xRIwlxGpXXuOfJ7lnHJucc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 08:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6f:f3:fc:b0:2b:af:56:6c:b0:ef:a0:5a:04:94:bb:e8:f1:e0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Jul 3 05:16:37 2025 GMT Not After : Jul 6 08:29:37 2025 GMT Subject: CN=DCD3FAF6178BEDCD0201BA0845542B7E045C9FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:85:ac:00:43:c2:69:e7:05:20:11:be:d6:ec: f4:d7:b0:7f:c5:d5:99:84:c2:bb:ff:21:ba:4e:82: 03:c7:ae:ce:fe:59:be:d6:42:41:1a:0e:66:8c:65: d3:b5:c0:0f:dc:20:88:e4:57:ca:bb:d6:98:ca:3c: dd:f7:f8:3e:7e:d2:db:c5:98:81:f5:c1:9b:89:fc: 1b:06:53:39:9e:c5:8a:45:ed:2e:33:b2:dd:ae:38: 97:07:2c:5c:f4:94:ec:6d:83:5e:84:21:e5:23:2d: 97:0c:fa:d9:67:2b:b9:fa:69:d4:0c:36:6a:a7:8d: 5c:30:29:4d:d5:b8:6c:fe:99:27:d4:4e:fa:ba:18: 62:67:5e:04:e1:2f:7c:1e:e0:c4:89:c7:65:1b:c2: a8:65:6e:8f:8a:e3:86:37:64:b0:6c:13:be:44:42: dd:84:ac:ab:44:05:b6:2a:53:8d:af:39:0d:7b:6c: 72:d8:56:9f:52:9c:70:66:78:20:74:57:35:8c:9c: 76:0a:1f:f9:65:75:b5:df:51:27:88:1a:5b:a6:24: 8d:7d:14:f6:c9:27:f4:c6:e4:b1:e7:a8:53:3f:7b: 1e:32:de:ad:ae:d0:60:fd:63:66:16:ae:fc:2c:13: 3e:23:e5:5a:96:d3:38:c5:59:94:6f:e1:d2:80:52: ed:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D3:FA:F6:17:8B:ED:CD:02:01:BA:08:45:54:2B:7E:04:5C:9F:BC X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a9:79:48:a9:c5:b0:df:04:a9:a6:e5:b2:df:4c:ef:d5:b1: b9:0c:e1:9d:aa:af:aa:c1:da:a9:de:c7:37:f8:6d:05:9f:14: 78:c3:74:92:5f:d8:fa:0d:4c:87:b9:04:35:25:8a:e9:a1:5d: c1:6c:5e:98:62:62:db:bc:f8:60:b2:4f:fc:1f:70:7e:5e:a2: 95:d4:f5:50:27:7b:8a:1e:28:4c:5d:ac:80:ab:7e:eb:62:bd: bb:05:01:21:e6:98:60:0f:17:31:ce:65:da:f9:ed:a0:e5:ff: e3:6f:39:65:f8:cd:a6:d6:4b:ce:98:86:5a:a7:bf:b3:6a:7f: 8a:1f:9e:8e:0a:ea:0e:c8:98:16:83:9a:ae:65:58:30:8e:cd: f3:93:f3:79:63:44:8e:2d:ad:ae:7f:30:f7:14:a7:46:64:21: cd:4c:46:92:f1:ff:ac:7d:62:24:d7:92:72:70:cc:a9:24:01: ec:1d:68:a1:5b:d5:0a:0a:eb:0c:56:91:63:30:eb:9d:99:8d: da:9c:f3:3f:22:84:3f:37:28:4a:4d:8b:41:45:8e:bc:e2:d1: b8:24:9e:e2:88:fc:c1:a1:ed:0a:1c:0f:ec:6a:e3:b1:7c:84: 0d:ce:11:36:78:81:34:3c:52:ea:ff:17:5e:ed:c2:3c:82:7c: 34:e1:23:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcW/z/LArr1ZssO+gWgSUu+jx4J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNTA3MDMwNTE2MzdaFw0yNTA3MDYwODI5MzdaMDMxMTAvBgNV BAMTKERDRDNGQUY2MTc4QkVEQ0QwMjAxQkEwODQ1NTQyQjdFMDQ1QzlGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCehawAQ8Jp5wUgEb7W7PTXsH/F 1ZmEwrv/IbpOggPHrs7+Wb7WQkEaDmaMZdO1wA/cIIjkV8q71pjKPN33+D5+0tvF mIH1wZuJ/BsGUzmexYpF7S4zst2uOJcHLFz0lOxtg16EIeUjLZcM+tlnK7n6adQM NmqnjVwwKU3VuGz+mSfUTvq6GGJnXgThL3we4MSJx2Ubwqhlbo+K44Y3ZLBsE75E Qt2ErKtEBbYqU42vOQ17bHLYVp9SnHBmeCB0VzWMnHYKH/lldbXfUSeIGlumJI19 FPbJJ/TG5LHnqFM/ex4y3q2u0GD9Y2YWrvwsEz4j5VqW0zjFWZRv4dKAUu05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3NP69heL7c0CAboIRVQrfgRcn7wwHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWpeUipxbDfBKmm5bLfTO/VsbkM4Z2qr6rB 2qnexzf4bQWfFHjDdJJf2PoNTIe5BDUliumhXcFsXphiYtu8+GCyT/wfcH5eopXU 9VAne4oeKExdrICrfutivbsFASHmmGAPFzHOZdr57aDl/+NvOWX4zabWS86Yhlqn v7Nqf4ofno4K6g7ImBaDmq5lWDCOzfOT83ljRI4tra5/MPcUp0ZkIc1MRpLx/6x9 YiTXknJwzKkkAewdaKFb1QoK6wxWkWMw652Zjdqc8z8ihD83KEpNi0FFjrzi0bgk nuKI/MGh7QocD+xq47F8hA3OETZ4gTQ8Uur/F17twjyCfDThI4U= -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:30 2025 by rpki-client