$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: 1EamQ0D7nos8HVHdPaH1MCJpG1/3CqExCrCG78WvEms= Subject key identifier: 66:BD:B7:1D:6F:06:64:86:AE:26:69:C6:BA:07:E2:B6:8F:39:D7:9C Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 465B41BE3376C3EBB67A0E2C51E07EBC35534125 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 0489 Signing time: Tue 06 May 2025 19:00:43 +0000 Manifest this update: Tue 06 May 2025 18:55:43 +0000 Manifest next update: Sat 10 May 2025 05:25:43 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: sgIRIMrEjnVjtrPGzslzAfCGgEs4cHt25ybVVvTDSEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:5b:41:be:33:76:c3:eb:b6:7a:0e:2c:51:e0:7e:bc:35:53:41:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: May 6 18:55:43 2025 GMT Not After : May 10 05:25:43 2025 GMT Subject: CN=66BDB71D6F066486AE2669C6BA07E2B68F39D79C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:aa:ed:fb:92:93:c8:c5:f0:6e:c3:b3:17:c6: f0:05:f8:92:c3:42:d9:ca:38:51:a6:3a:fa:d6:5b: 45:3f:f6:ed:87:f2:7b:c9:1b:03:6e:6a:c0:5f:26: ab:07:b2:ca:ff:41:24:a8:b6:24:40:9e:92:dd:93: e9:c1:2e:87:23:44:a9:63:13:8b:2a:2d:04:51:37: 73:16:d3:09:b9:11:9c:64:e4:da:83:c4:60:15:42: 2e:ee:16:e4:d8:be:71:88:ab:47:6a:a0:b5:56:6c: de:5d:14:2e:23:b2:f1:18:fc:3d:e3:a6:f7:7e:35: be:2a:a5:18:09:9d:e6:60:a8:10:84:f7:ab:24:f9: a4:e7:42:a4:03:2e:72:d0:45:ac:22:36:9b:14:f0: f5:47:68:03:d4:50:37:c6:c8:43:63:8f:93:78:68: a9:75:26:83:83:f7:8f:31:40:22:b5:25:20:46:c3: 08:30:d1:5c:90:de:8c:f1:d7:9d:ce:29:45:c0:3e: 59:88:61:b5:cb:fa:dc:e9:48:f4:3c:5d:22:c9:9a: 5b:e2:10:50:9b:dc:3b:6c:55:46:b4:6b:08:43:f1: db:31:4d:26:dc:84:c2:34:59:9f:d2:fd:15:56:52: 41:4f:1b:5f:bc:9c:da:46:d4:ff:92:b5:ce:94:86: 0b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BD:B7:1D:6F:06:64:86:AE:26:69:C6:BA:07:E2:B6:8F:39:D7:9C X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d1:86:b5:e5:10:38:e0:19:44:d5:d7:b0:34:30:4a:2f:47: 6e:85:23:9a:eb:43:6e:ee:52:e3:95:5d:df:f0:a5:10:96:cb: bf:1b:93:47:ad:39:af:9c:a4:84:2c:02:70:18:75:a5:50:2f: b1:2b:1a:14:9b:bb:05:63:b4:1a:ff:25:23:06:dd:e7:ec:73: bf:67:f5:58:94:b4:a2:80:af:4d:4a:71:b2:99:1c:18:87:a7: 72:d9:e0:ea:fa:e7:ac:d7:4f:24:bc:da:8b:a3:20:f3:b7:56: 0b:9f:2d:b2:7e:d9:f1:97:e8:44:c7:d2:6d:0d:b1:38:af:68: 21:5a:3b:6a:bc:14:db:36:29:a4:c7:51:33:3a:b7:3f:2d:dc: 47:46:09:81:f8:ba:be:ed:e4:a3:df:57:33:49:33:20:8f:06: 7d:5a:24:c8:06:22:ee:87:9a:45:8e:28:fb:d0:ef:0c:55:0a: 7a:bd:80:22:18:25:39:5a:7e:76:d9:9b:29:c0:42:f1:9c:43: 5d:37:98:40:5d:7a:2d:85:c1:6e:d0:72:98:8e:9b:d3:a6:65: d5:9c:9f:c6:20:72:5e:ab:3e:06:25:61:ad:59:2a:52:4d:05: 33:bf:68:ac:6c:d9:04:dc:68:98:c7:49:35:81:b3:80:5c:48: 48:10:90:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURltBvjN2w+u2eg4sUeB+vDVTQSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTA1MDYxODU1NDNaFw0yNTA1MTAwNTI1NDNaMDMxMTAvBgNV BAMTKDY2QkRCNzFENkYwNjY0ODZBRTI2NjlDNkJBMDdFMkI2OEYzOUQ3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaqu37kpPIxfBuw7MXxvAF+JLD QtnKOFGmOvrWW0U/9u2H8nvJGwNuasBfJqsHssr/QSSotiRAnpLdk+nBLocjRKlj E4sqLQRRN3MW0wm5EZxk5NqDxGAVQi7uFuTYvnGIq0dqoLVWbN5dFC4jsvEY/D3j pvd+Nb4qpRgJneZgqBCE96sk+aTnQqQDLnLQRawiNpsU8PVHaAPUUDfGyENjj5N4 aKl1JoOD948xQCK1JSBGwwgw0VyQ3ozx153OKUXAPlmIYbXL+tzpSPQ8XSLJmlvi EFCb3DtsVUa0awhD8dsxTSbchMI0WZ/S/RVWUkFPG1+8nNpG1P+Stc6UhgufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZr23HW8GZIauJmnGugfito8515wwHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDRhrXlEDjgGUTV17A0MEovR26FI5rrQ27u UuOVXd/wpRCWy78bk0etOa+cpIQsAnAYdaVQL7ErGhSbuwVjtBr/JSMG3efsc79n 9ViUtKKAr01KcbKZHBiHp3LZ4Or656zXTyS82oujIPO3VgufLbJ+2fGX6ETH0m0N sTivaCFaO2q8FNs2KaTHUTM6tz8t3EdGCYH4ur7t5KPfVzNJMyCPBn1aJMgGIu6H mkWOKPvQ7wxVCnq9gCIYJTlafnbZmynAQvGcQ103mEBdei2FwW7QcpiOm9OmZdWc n8Ygcl6rPgYlYa1ZKlJNBTO/aKxs2QTcaJjHSTWBs4BcSEgQkOQ= -----END CERTIFICATE-----Generated at Wed May 7 23:19:19 2025 by rpki-client