$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: kj6cfdOjdjjZ9RS7CrU1Z/ahvPvST/5Venq0KQH7WPY= Subject key identifier: F7:B9:86:76:B2:45:86:06:9C:D8:53:35:96:16:4F:13:98:D6:76:BC Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 57579D41A6A52239C5B333DF1F7CEA294027C035 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 04B8 Signing time: Fri 22 Aug 2025 10:10:43 +0000 Manifest this update: Fri 22 Aug 2025 10:05:43 +0000 Manifest next update: Mon 25 Aug 2025 17:27:43 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: q3xq/8LwkvS2P9sB/C8ArGAOVqe5vdkpOuJFm5C/TaQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:57:9d:41:a6:a5:22:39:c5:b3:33:df:1f:7c:ea:29:40:27:c0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Aug 22 10:05:43 2025 GMT Not After : Aug 25 17:27:43 2025 GMT Subject: CN=F7B98676B24586069CD8533596164F1398D676BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:e6:d2:3c:6f:41:0d:51:b8:f9:1e:fc:df: 25:24:23:57:1b:8b:4c:7d:ff:a8:00:06:ac:22:59: f9:35:d5:93:84:3e:11:9c:55:8f:a4:09:a5:f9:69: b5:3f:f0:6e:13:6b:a7:c5:ea:0c:a5:54:8d:29:be: 90:44:8a:16:7b:28:4e:8b:72:aa:0e:fa:f9:58:f3: 60:3a:93:53:1b:7d:95:49:15:c5:a9:cc:3f:6f:8f: 4e:29:c7:f3:54:61:53:59:08:b6:82:67:eb:fa:3f: 55:4b:46:be:e6:23:d9:b0:19:f8:36:ab:c6:13:23: a9:98:4a:ea:16:92:4c:e4:60:48:04:ff:94:4f:08: 1d:f2:39:6c:2b:83:9f:4b:e3:3d:8d:43:23:9e:92: b3:a3:b0:c5:81:81:f8:a7:bc:d1:d1:a7:67:09:9c: ab:92:6b:cd:1e:64:7c:1c:d3:f8:bf:36:26:c4:a4: 8e:e0:09:75:49:2b:9a:24:c4:6e:12:d9:57:34:c5: 1a:e4:46:97:64:b5:5b:2c:44:57:60:b4:74:b3:b3: c4:d3:dc:d3:2e:c6:8a:8f:c2:c7:3e:e0:e6:fb:9b: 1d:5e:60:1a:74:44:47:3e:e0:f9:08:e6:2b:1e:3b: 80:f7:c4:74:eb:63:39:73:dc:8d:db:54:18:7a:15: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B9:86:76:B2:45:86:06:9C:D8:53:35:96:16:4F:13:98:D6:76:BC X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8b:4b:7b:c5:7f:40:fe:01:58:cc:d0:4d:ab:b3:c6:03:05: b9:bb:cb:94:27:3d:aa:52:0d:ce:79:c9:26:48:29:25:07:08: cc:d6:1c:a5:d4:14:cd:55:3d:bd:d1:f4:c8:86:ea:34:84:ce: 55:ec:d5:da:9a:e7:aa:f1:79:b8:68:e1:f6:ba:55:fe:b7:70: fe:63:36:e2:39:ae:42:66:f5:31:d6:30:2b:6e:12:2a:cd:81: 56:18:25:56:47:8e:0b:3c:02:0a:3f:d7:64:a5:b5:0e:34:8f: bd:12:6a:86:f6:a3:e6:7b:90:ee:7c:c6:16:c1:4f:cc:d4:42: 96:cf:a2:9e:3d:b2:b8:98:ac:d7:4e:18:c1:58:a7:ee:58:99: ad:72:36:76:fb:0c:f6:ba:66:62:71:d9:1b:2d:4a:b7:8b:1f: b6:8f:5a:34:dc:f1:af:fb:e0:7f:7e:ae:48:f7:d2:c6:1f:07: 9c:d4:96:dc:db:0f:b8:ff:bd:37:08:49:c9:35:da:4f:22:68: e9:d3:4c:d4:63:63:77:8c:c7:b3:24:73:00:8f:b9:2e:e8:da: 37:68:b5:55:44:16:96:74:8b:79:c3:a7:94:04:cb:15:3f:8d: 52:57:48:d7:53:a4:60:10:44:72:bb:b5:0f:2c:53:fd:7c:a7: 08:2a:3c:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1edQaalIjnFszPfH3zqKUAnwDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTA4MjIxMDA1NDNaFw0yNTA4MjUxNzI3NDNaMDMxMTAvBgNV BAMTKEY3Qjk4Njc2QjI0NTg2MDY5Q0Q4NTMzNTk2MTY0RjEzOThENjc2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsnubSPG9BDVG4+R783yUkI1cb i0x9/6gABqwiWfk11ZOEPhGcVY+kCaX5abU/8G4Ta6fF6gylVI0pvpBEihZ7KE6L cqoO+vlY82A6k1MbfZVJFcWpzD9vj04px/NUYVNZCLaCZ+v6P1VLRr7mI9mwGfg2 q8YTI6mYSuoWkkzkYEgE/5RPCB3yOWwrg59L4z2NQyOekrOjsMWBgfinvNHRp2cJ nKuSa80eZHwc0/i/NibEpI7gCXVJK5okxG4S2Vc0xRrkRpdktVssRFdgtHSzs8TT 3NMuxoqPwsc+4Ob7mx1eYBp0REc+4PkI5iseO4D3xHTrYzlz3I3bVBh6Ff1lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU97mGdrJFhgac2FM1lhZPE5jWdrwwHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCLS3vFf0D+AVjM0E2rs8YDBbm7y5QnPapS Dc55ySZIKSUHCMzWHKXUFM1VPb3R9MiG6jSEzlXs1dqa56rxebho4fa6Vf63cP5j NuI5rkJm9THWMCtuEirNgVYYJVZHjgs8Ago/12SltQ40j70Saob2o+Z7kO58xhbB T8zUQpbPop49sriYrNdOGMFYp+5Yma1yNnb7DPa6ZmJx2RstSreLH7aPWjTc8a/7 4H9+rkj30sYfB5zUltzbD7j/vTcISck12k8iaOnTTNRjY3eMx7MkcwCPuS7o2jdo tVVEFpZ0i3nDp5QEyxU/jVJXSNdTpGAQRHK7tQ8sU/18pwgqPII= -----END CERTIFICATE-----Generated at Sat Aug 23 13:32:34 2025 by rpki-client