$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: 5y9YzZv0a7ZI87mYRJ/LXNkr3QMMIs3VTMnm9uY2mc4= Subject key identifier: 1F:D8:F0:2B:A4:C4:C2:A2:16:58:1A:8F:5D:C8:73:55:9E:2D:E0:57 Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 5D7AD2F72711E0F78DD3C6EFFD8732148885E4B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 0201 Signing time: Wed 07 May 2025 08:30:04 +0000 Manifest this update: Wed 07 May 2025 08:25:04 +0000 Manifest next update: Sat 10 May 2025 14:40:04 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: v1SzOZPiXHuisHsgk/gCK/eOsvv7keU6v+Bk/lCHPtc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 14:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7a:d2:f7:27:11:e0:f7:8d:d3:c6:ef:fd:87:32:14:88:85:e4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: May 7 08:25:04 2025 GMT Not After : May 10 14:40:04 2025 GMT Subject: CN=1FD8F02BA4C4C2A216581A8F5DC873559E2DE057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:a4:79:6f:41:e5:35:a6:25:bb:c3:90:d4: ec:74:9b:6e:70:2e:6e:df:9b:86:66:1c:3d:07:ab: a7:35:16:e7:90:dd:3e:d3:df:59:a5:bc:36:69:db: 25:f1:db:d7:7d:3f:bc:1c:86:81:70:48:42:59:e9: f0:65:77:c2:4c:c8:fc:5b:db:b9:51:23:b5:3e:ce: 5e:71:64:9d:ce:05:a6:3f:11:94:84:1b:b9:62:55: bb:bb:da:40:bb:f8:c7:93:13:06:ef:83:4a:a8:07: 12:e8:41:de:35:21:1f:bc:fa:9d:84:2a:ef:99:03: 24:e8:c7:33:f6:a0:e3:d5:b3:9a:2d:e2:74:92:d3: f9:ec:23:35:e4:36:59:f1:36:1c:96:a6:98:d3:7a: 3b:6c:21:45:9d:ab:10:ca:0e:fb:99:83:8c:cc:16: 1e:2b:40:b5:13:61:28:f3:e1:f3:95:a6:2b:db:52: 5b:0a:6a:72:a5:99:dc:b7:14:7a:47:a9:4d:8a:45: cb:39:c3:9b:8e:2e:c6:f9:c8:71:b7:e4:0b:c5:12: 92:c8:d1:e8:d4:f8:78:e6:ae:aa:68:07:9f:94:46: c8:6b:e4:73:3a:ba:cb:f9:14:c5:50:1e:14:45:9f: 1d:f3:66:17:59:b6:80:0b:aa:fb:0f:10:57:52:02: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D8:F0:2B:A4:C4:C2:A2:16:58:1A:8F:5D:C8:73:55:9E:2D:E0:57 X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1f:70:f9:3a:3d:75:f1:73:c4:61:5e:17:0c:cc:f7:cc:52: 57:0c:fd:1e:b0:e1:88:95:bc:53:b9:4e:bd:ee:a4:7f:d1:02: 30:8d:7b:16:3e:23:80:f8:1e:9d:7b:d8:81:3f:c5:4d:4f:23: e9:a3:8e:72:58:d7:b6:cc:c6:ec:8f:fa:ab:48:7c:d6:82:eb: ec:74:2b:19:b0:ce:17:6d:ee:16:a7:d0:8c:f5:0d:e8:1d:82: 69:e1:a7:ad:78:2a:f0:7b:ee:4d:e6:f2:69:75:21:85:e7:c2: e4:73:dd:ae:6c:91:eb:f6:93:60:35:b1:7c:e8:85:f0:75:c7: 67:02:93:6c:49:f3:f2:d1:df:96:d7:d9:5c:eb:6f:ab:b5:25: d5:68:89:e8:81:82:15:bf:13:65:1d:1a:54:10:5a:ef:28:e2: 82:6b:9c:38:72:d8:b3:ab:39:85:aa:ba:b3:34:f1:90:78:ed: 6e:05:1e:0d:a3:e1:d8:17:52:3f:44:fa:8e:39:34:8f:94:55: c1:7c:17:0f:19:e4:c2:9b:dc:80:87:b6:b3:8f:1b:37:26:0d: ab:b0:eb:2f:d5:d9:04:04:9c:bb:03:86:b2:af:60:16:a2:6b: e0:49:ef:3b:a8:30:21:f5:2c:d0:f3:a9:b0:67:d1:fa:ef:de: 09:43:bf:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXXrS9ycR4PeN08bv/YcyFIiF5LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTA1MDcwODI1MDRaFw0yNTA1MTAxNDQwMDRaMDMxMTAvBgNV BAMTKDFGRDhGMDJCQTRDNEMyQTIxNjU4MUE4RjVEQzg3MzU1OUUyREUwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKW6R5b0HlNaYlu8OQ1Ox0m25w Lm7fm4ZmHD0Hq6c1FueQ3T7T31mlvDZp2yXx29d9P7wchoFwSEJZ6fBld8JMyPxb 27lRI7U+zl5xZJ3OBaY/EZSEG7liVbu72kC7+MeTEwbvg0qoBxLoQd41IR+8+p2E Ku+ZAyToxzP2oOPVs5ot4nSS0/nsIzXkNlnxNhyWppjTejtsIUWdqxDKDvuZg4zM Fh4rQLUTYSjz4fOVpivbUlsKanKlmdy3FHpHqU2KRcs5w5uOLsb5yHG35AvFEpLI 0ejU+HjmrqpoB5+URshr5HM6usv5FMVQHhRFnx3zZhdZtoALqvsPEFdSAggRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9jwK6TEwqIWWBqPXchzVZ4t4FcwHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIfcPk6PXXxc8RhXhcMzPfMUlcM/R6w4YiV vFO5Tr3upH/RAjCNexY+I4D4Hp172IE/xU1PI+mjjnJY17bMxuyP+qtIfNaC6+x0 Kxmwzhdt7han0Iz1Degdgmnhp614KvB77k3m8ml1IYXnwuRz3a5skev2k2A1sXzo hfB1x2cCk2xJ8/LR35bX2Vzrb6u1JdVoieiBghW/E2UdGlQQWu8o4oJrnDhy2LOr OYWqurM08ZB47W4FHg2j4dgXUj9E+o45NI+UVcF8Fw8Z5MKb3ICHtrOPGzcmDauw 6y/V2QQEnLsDhrKvYBaia+BJ7zuoMCH1LNDzqbBn0frv3glDv1g= -----END CERTIFICATE-----Generated at Thu May 8 10:41:33 2025 by rpki-client