$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: ANc6cAdpeDpBZB2pU89auT421HGo0fmpFPtLWRKJ/08= Subject key identifier: F6:09:D5:77:BE:7D:71:1B:EE:9E:04:FF:88:51:08:B4:90:0F:0C:11 Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 6CD5A0F8DCED81E088AD4429F233C405505F8E37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 0218 Signing time: Fri 27 Jun 2025 19:40:05 +0000 Manifest this update: Fri 27 Jun 2025 19:35:05 +0000 Manifest next update: Tue 01 Jul 2025 05:35:05 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: 7yQ0BkcWTUkSSihyfzk8nkh06lbEGwbSQ5v9MwoKczs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d5:a0:f8:dc:ed:81:e0:88:ad:44:29:f2:33:c4:05:50:5f:8e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Jun 27 19:35:05 2025 GMT Not After : Jul 1 05:35:05 2025 GMT Subject: CN=F609D577BE7D711BEE9E04FF885108B4900F0C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:cf:d2:54:4a:a6:b8:05:35:98:3c:fc:e5: 28:ab:1d:4e:42:ef:56:ef:d6:5a:4e:83:a0:df:5b: c0:88:25:af:cc:0f:c8:c3:50:11:68:99:73:14:c3: 4f:dc:b5:e3:c5:5c:7e:39:5c:37:d0:9a:1f:83:e3: 90:83:7a:fe:e9:05:f2:e8:63:b4:7d:99:9c:9d:da: 7a:5d:04:2d:be:76:a1:a1:80:f5:6d:09:8c:f5:26: 5e:09:f0:17:7b:20:2c:cc:e3:70:c6:1a:e2:74:b9: 9f:2d:c1:83:2f:93:29:40:1b:92:a7:06:7d:6c:55: 4d:b2:39:e6:b5:e2:d0:e3:9b:bc:56:6a:b1:dd:b5: c1:60:53:2a:14:15:50:33:1d:69:94:e1:9a:13:09: 12:9b:e4:1c:37:e2:fe:45:e8:18:57:37:57:b1:e4: ff:c6:74:e9:98:e8:d6:f2:bc:ce:66:e0:67:db:bf: 55:6a:8d:3a:56:ef:85:d2:c9:fb:09:55:56:b2:f6: 84:88:a7:ab:96:a5:6b:3b:aa:fd:6a:85:38:54:d1: 9a:a2:0e:0b:de:30:db:e5:bf:49:21:e1:3a:65:68: e8:1b:55:cb:f2:c2:88:3e:37:d3:48:03:8a:16:d6: 79:cd:2b:18:c2:6c:d1:a2:bc:5e:69:49:6c:17:79: 56:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:09:D5:77:BE:7D:71:1B:EE:9E:04:FF:88:51:08:B4:90:0F:0C:11 X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:1e:21:e0:31:45:30:aa:43:b1:22:95:7d:72:0f:4f:a4:55: 8c:4f:f8:c0:52:81:f6:41:38:a7:c2:ff:d5:9e:24:f9:10:06: f1:2b:40:28:9b:94:b8:02:dd:78:a3:21:03:bb:63:df:24:af: 2f:9e:29:b6:8b:c7:77:f0:77:41:a7:d9:f5:4a:32:f7:88:a1: 90:cb:85:ce:76:3b:24:3b:c8:c1:b5:bf:f6:d0:0d:a4:ec:83: 06:5b:97:57:ee:18:4d:ad:02:a0:8f:81:3b:bb:f3:9f:38:8a: 78:f2:80:87:bd:5c:25:98:7b:7f:6c:ab:3b:d0:f1:62:40:da: 1e:36:66:a2:5b:79:a8:8d:0e:03:f3:68:42:23:7c:c8:01:f0: c6:38:d8:e7:c9:77:43:6f:a7:e8:36:d0:29:60:af:2a:f2:30: a4:f1:6f:41:bd:8d:04:fe:01:f7:a1:cb:7c:16:97:68:38:a2: 37:67:bc:6b:79:15:55:d7:5b:4f:24:25:26:fa:d3:52:84:b7: 90:a8:bc:9f:f3:db:22:ac:61:11:3d:b1:d2:3d:4a:c1:9b:3a: e1:ab:a5:f9:7e:52:b5:b5:01:ad:26:21:06:fd:c1:00:0f:76: 50:94:dc:e4:3b:89:a7:73:fd:c8:c0:57:9d:e6:c4:bd:af:47: d9:a5:55:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNWg+NztgeCIrUQp8jPEBVBfjjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTA2MjcxOTM1MDVaFw0yNTA3MDEwNTM1MDVaMDMxMTAvBgNV BAMTKEY2MDlENTc3QkU3RDcxMUJFRTlFMDRGRjg4NTEwOEI0OTAwRjBDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOrs/SVEqmuAU1mDz85SirHU5C 71bv1lpOg6DfW8CIJa/MD8jDUBFomXMUw0/ctePFXH45XDfQmh+D45CDev7pBfLo Y7R9mZyd2npdBC2+dqGhgPVtCYz1Jl4J8Bd7ICzM43DGGuJ0uZ8twYMvkylAG5Kn Bn1sVU2yOea14tDjm7xWarHdtcFgUyoUFVAzHWmU4ZoTCRKb5Bw34v5F6BhXN1ex 5P/GdOmY6NbyvM5m4Gfbv1VqjTpW74XSyfsJVVay9oSIp6uWpWs7qv1qhThU0Zqi DgveMNvlv0kh4TplaOgbVcvywog+N9NIA4oW1nnNKxjCbNGivF5pSWwXeVYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9gnVd759cRvungT/iFEItJAPDBEwHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIeIeAxRTCqQ7EilX1yD0+kVYxP+MBSgfZB OKfC/9WeJPkQBvErQCiblLgC3XijIQO7Y98kry+eKbaLx3fwd0Gn2fVKMveIoZDL hc52OyQ7yMG1v/bQDaTsgwZbl1fuGE2tAqCPgTu78584injygIe9XCWYe39sqzvQ 8WJA2h42ZqJbeaiNDgPzaEIjfMgB8MY42OfJd0Nvp+g20ClgryryMKTxb0G9jQT+ Afehy3wWl2g4ojdnvGt5FVXXW08kJSb601KEt5CovJ/z2yKsYRE9sdI9SsGbOuGr pfl+UrW1Aa0mIQb9wQAPdlCU3OQ7iadz/cjAV53mxL2vR9mlVX4= -----END CERTIFICATE-----Generated at Sun Jun 29 18:18:52 2025 by rpki-client