$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: 6FxdZVs91N9FFc6ZJpmfK7Cko6cqc7Zk2NHoDk4zEg0= Subject key identifier: C8:EE:DB:0E:C5:D8:0F:A8:63:5F:CE:46:48:7D:67:56:E6:6A:17:BD Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 70BB0D74D831F4DE4D8966B592BB620AC6CDCFD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 0231 Signing time: Sat 23 Aug 2025 08:10:04 +0000 Manifest this update: Sat 23 Aug 2025 08:05:04 +0000 Manifest next update: Tue 26 Aug 2025 09:02:04 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: TyyK8LeFSZ77z8X66bvd0jLP0h4ivjBLxLJR6KGCa3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:bb:0d:74:d8:31:f4:de:4d:89:66:b5:92:bb:62:0a:c6:cd:cf:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Aug 23 08:05:04 2025 GMT Not After : Aug 26 09:02:04 2025 GMT Subject: CN=C8EEDB0EC5D80FA8635FCE46487D6756E66A17BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:08:9b:09:8d:74:d8:3b:68:73:7c:eb:94: a5:5f:6f:8d:20:6a:bd:42:16:f4:d7:af:29:9c:ed: a0:00:4c:9f:6d:8a:62:6c:91:a8:51:d6:38:d5:46: 03:05:7c:95:4e:4c:cd:c6:a2:84:c9:f6:e8:11:a5: 0b:0f:0c:a4:12:58:50:a6:4f:a8:be:69:00:91:26: f6:ab:cf:b5:f1:3e:42:d2:9c:ca:4a:72:c2:5d:93: 35:f7:6d:13:46:c9:da:67:0b:19:04:bb:51:0f:30: 57:f2:06:68:43:ba:68:fc:02:88:09:af:1d:f2:24: b7:f3:2f:f4:c3:72:ea:ac:99:75:42:dc:ee:b4:4d: 6d:79:da:a1:9f:e6:2e:63:55:b8:fd:10:83:3f:96: 3a:a5:2c:37:c2:ac:5a:b1:94:72:63:6b:12:ae:81: f7:74:c6:5a:90:a8:83:64:a9:7d:d3:46:e2:7a:0d: fa:57:b9:0a:ce:f1:e6:ef:2e:10:76:d3:f3:9b:10: de:51:0b:84:c3:c1:88:6c:b8:ad:22:4b:8e:49:77: 3f:0c:40:63:c9:9c:3c:4d:7e:c6:4e:c0:ba:48:8c: a2:1d:de:b0:fb:cc:66:9e:62:81:5b:41:c6:4a:6b: b6:d1:55:ea:95:3a:1c:60:12:e3:2c:86:07:68:9e: b1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EE:DB:0E:C5:D8:0F:A8:63:5F:CE:46:48:7D:67:56:E6:6A:17:BD X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:2a:93:06:7a:71:1d:0f:66:b7:ae:ba:ad:e0:40:e4:06:c7: 96:40:68:8d:ce:c6:f2:fc:27:35:96:31:ea:96:4f:f2:0b:22: ff:e8:00:48:62:88:c7:be:2c:bd:e3:64:c6:a0:4b:e0:79:4b: 99:e9:5f:3c:e3:ed:38:f9:69:88:81:35:cb:13:38:3d:0d:21: b8:5a:6b:a9:90:9c:c8:0a:14:90:0b:9b:b5:52:29:05:45:ab: 16:cc:73:0c:f4:d1:0f:5d:5c:77:99:23:29:84:de:62:ef:f9: 18:c8:61:de:8f:d1:61:59:da:e4:5a:6b:01:8d:93:c1:75:d9: e5:fc:80:43:1b:47:ec:02:75:42:61:72:8f:fe:c5:a9:45:46: ef:e3:f3:d7:b7:9e:75:8f:a4:38:20:0d:3c:f8:ad:f7:4a:4d: 14:31:53:6c:c5:42:c9:f9:ac:43:87:aa:06:f1:89:28:78:7a: 58:9b:35:d9:4e:69:39:fd:2c:15:f1:49:c5:1b:1e:a7:28:c3: ac:f6:03:06:71:a9:b3:05:78:90:7e:4b:06:1c:4c:b2:f3:7e: 75:a8:71:ba:a0:c6:bf:5f:65:80:a0:d3:52:b6:27:60:60:c5: 73:da:40:12:a7:a1:11:72:00:9a:4f:e9:24:7a:cd:f9:f4:5c: ed:2e:1c:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLsNdNgx9N5NiWa1krtiCsbNz9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTA4MjMwODA1MDRaFw0yNTA4MjYwOTAyMDRaMDMxMTAvBgNV BAMTKEM4RUVEQjBFQzVEODBGQTg2MzVGQ0U0NjQ4N0Q2NzU2RTY2QTE3QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItAibCY102Dtoc3zrlKVfb40g ar1CFvTXrymc7aAATJ9timJskahR1jjVRgMFfJVOTM3GooTJ9ugRpQsPDKQSWFCm T6i+aQCRJvarz7XxPkLSnMpKcsJdkzX3bRNGydpnCxkEu1EPMFfyBmhDumj8AogJ rx3yJLfzL/TDcuqsmXVC3O60TW152qGf5i5jVbj9EIM/ljqlLDfCrFqxlHJjaxKu gfd0xlqQqINkqX3TRuJ6DfpXuQrO8ebvLhB20/ObEN5RC4TDwYhsuK0iS45Jdz8M QGPJnDxNfsZOwLpIjKId3rD7zGaeYoFbQcZKa7bRVeqVOhxgEuMshgdonrEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyO7bDsXYD6hjX85GSH1nVuZqF70wHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgqkwZ6cR0PZreuuq3gQOQGx5ZAaI3OxvL8 JzWWMeqWT/ILIv/oAEhiiMe+LL3jZMagS+B5S5npXzzj7Tj5aYiBNcsTOD0NIbha a6mQnMgKFJALm7VSKQVFqxbMcwz00Q9dXHeZIymE3mLv+RjIYd6P0WFZ2uRaawGN k8F12eX8gEMbR+wCdUJhco/+xalFRu/j89e3nnWPpDggDTz4rfdKTRQxU2zFQsn5 rEOHqgbxiSh4elibNdlOaTn9LBXxScUbHqcow6z2AwZxqbMFeJB+SwYcTLLzfnWo cbqgxr9fZYCg01K2J2BgxXPaQBKnoRFyAJpP6SR6zfn0XO0uHMQ= -----END CERTIFICATE-----Generated at Sat Aug 23 17:40:17 2025 by rpki-client