$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft File: DD29F5E4CE561760A0212F0448987AFBE75263D7.mft (raw, json) Hash identifier: 9bqvK1Bee6Vqes0mKBpMZUa/1Ty1vsUwFfknSW1FLqY= Subject key identifier: AE:8C:A0:71:2A:05:00:9E:75:62:AC:21:CD:02:EA:F5:63:DF:1F:99 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 7AFD783797ACD59D54D0C4C8D6DAD7146C24C9DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft Manifest number: 030B Signing time: Sun 20 Jul 2025 22:22:05 +0000 Manifest this update: Sun 20 Jul 2025 22:17:05 +0000 Manifest next update: Thu 24 Jul 2025 05:44:05 +0000 Files and hashes: 1: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: yHFhz7s9vTM+0GwcewjykllWnmywdIchHv+vwnUyUtQ=) 2: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: ORf8MBvb0cc1Hlu83aqDGCB77dQwtn/c/kHba/c2HYo=) 3: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: 0+6+N7y7+z5+GZ0LUn4in9mnEACESucH1zgQmC9xHAA=) 4: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: s32Asfb0Vk2AoqdXXpuFo/1b1Jpm9sVE9gF86xInAZ8=) 5: DD29F5E4CE561760A0212F0448987AFBE75263D7.crl (hash: d2jqTxUmXddNJycPVCmJA/3Tupos6KAQ0Q0pa6vIKGA=) 6: 3130332e34322e3132322e302f32342d3234203d3e203234353334.roa (hash: U0ZYfoLEU7/YUTuj/HEbmKOFNpez0H5ASCN++eNNi6Y=) 7: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: R+HBHXL62WCqMu+S9XZ2lfDd7q3jJVRrizTgz3Qq4sM=) 8: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: of7XjX89CiHFfIQLpt1o6+DFkAA2fUQ2SMQAsL24xtw=) 9: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: x2jz47JNdTLcNfT8vbEKIJnVX3m/vRvrmqpmvqODREA=) 10: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: e59wQms8v5jMBeQnHJR3rPXGniQiJS1tDMckcJ4pEwQ=) 11: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: 8qZ2PfVPSW4Gale+B6XAN2CyhRmIb70LvF4xop7XFFw=) 12: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: w6bNOjpU0I0jjnq/DeAF5pAdWd2fSBGqPyk3RRIO0Ys=) 13: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: hfJYX7IXK2yRsIkXzTXumWYWspYzmgD5u1H3fLVubkc=) 14: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: X9EKF8Z1uFLJC9IzjlT1aPQkzE/clRuy5X9NkdqNVow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 05:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fd:78:37:97:ac:d5:9d:54:d0:c4:c8:d6:da:d7:14:6c:24:c9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Jul 20 22:17:05 2025 GMT Not After : Jul 24 05:44:05 2025 GMT Subject: CN=AE8CA0712A05009E7562AC21CD02EAF563DF1F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ec:67:15:74:8e:8a:16:1a:e7:4d:e2:a3:76: 04:92:70:ae:93:f5:c1:24:93:33:3a:d2:79:f2:be: 90:da:66:99:70:62:61:95:b1:a1:4f:85:ee:75:10: 5b:19:74:6c:5e:9a:3f:40:f9:f0:cf:84:65:48:59: 9c:c2:0d:f9:e7:c1:f4:74:e7:70:b4:3a:46:8a:fe: a9:d1:b3:a1:c5:9b:42:97:9c:06:78:e0:83:54:fc: 57:9d:7f:5d:bf:f9:17:79:4a:e3:14:e0:94:52:93: a2:d1:93:dd:c3:b8:dc:b8:90:d6:a5:8c:c1:74:5c: 1f:e9:5a:a7:09:a4:62:ea:13:4e:9b:7a:3f:43:0c: 5d:6e:5f:e0:ac:4c:3e:4a:25:a1:45:04:48:55:4b: df:e1:58:89:d5:44:36:38:6d:96:67:e4:e5:86:b6: 8e:48:a2:a8:23:a4:14:33:53:5b:7d:7b:c1:c9:a1: 14:ab:31:29:a9:bd:12:22:2f:89:87:ab:7b:16:ba: 83:73:b1:0a:d8:78:40:9a:df:27:e9:51:f0:92:a4: 97:e9:c7:47:92:75:02:e4:38:92:4f:54:43:db:a8: 24:8f:a7:7d:e9:c0:26:bd:ec:8b:13:5f:27:dc:37: d8:ac:f0:db:5b:ed:61:2f:53:4f:4a:40:24:bc:63: 2a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8C:A0:71:2A:05:00:9E:75:62:AC:21:CD:02:EA:F5:63:DF:1F:99 X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:30:6a:c7:3c:f5:96:dc:5f:e6:41:ee:02:3b:69:15:cb:0d: a1:20:2e:fe:15:93:ba:b1:f9:df:de:9e:a8:64:5a:bd:d5:e7: 03:2d:a3:0e:9b:6c:a0:86:ff:32:c2:ed:c9:6c:b2:ab:74:d0: b5:16:c4:71:df:11:ae:e3:62:2f:97:6c:8b:d8:da:5d:ef:0a: 4c:ae:2b:6d:4a:87:15:7c:66:38:93:ad:aa:05:cc:b3:ff:0d: 97:67:83:d6:ab:1b:41:f3:4f:1c:a8:c9:05:8b:a3:cb:2d:c9: 30:60:41:fe:2f:14:a6:bd:92:d2:05:da:f5:53:fd:46:39:6d: cc:0d:4f:de:52:ad:28:af:73:33:06:66:13:ce:2d:a5:d4:c1: 18:90:1b:11:d8:79:66:ae:4f:b1:2e:25:38:5f:5e:c5:87:37: 20:e4:33:8b:41:fb:72:69:63:bc:b0:11:69:a1:02:b1:5c:0e: f5:00:17:1c:dd:7c:8b:30:b2:ff:1a:7e:29:40:72:5d:c7:fc: 1a:42:e1:d6:2a:e7:b5:3d:d9:15:bd:40:92:c1:9a:51:f4:23: d0:25:fb:f7:ac:d3:ce:42:39:fe:39:f1:a7:b7:ac:75:ee:da: c7:8a:c8:ba:f1:f0:4c:74:fe:c4:5d:7e:66:e0:ef:22:44:dd: e8:f2:1e:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUev14N5es1Z1U0MTI1trXFGwkyd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTA3MjAyMjE3MDVaFw0yNTA3MjQwNTQ0MDVaMDMxMTAvBgNV BAMTKEFFOENBMDcxMkEwNTAwOUU3NTYyQUMyMUNEMDJFQUY1NjNERjFGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd7GcVdI6KFhrnTeKjdgSScK6T 9cEkkzM60nnyvpDaZplwYmGVsaFPhe51EFsZdGxemj9A+fDPhGVIWZzCDfnnwfR0 53C0OkaK/qnRs6HFm0KXnAZ44INU/Fedf12/+Rd5SuMU4JRSk6LRk93DuNy4kNal jMF0XB/pWqcJpGLqE06bej9DDF1uX+CsTD5KJaFFBEhVS9/hWInVRDY4bZZn5OWG to5IoqgjpBQzU1t9e8HJoRSrMSmpvRIiL4mHq3sWuoNzsQrYeECa3yfpUfCSpJfp x0eSdQLkOJJPVEPbqCSPp33pwCa97IsTXyfcN9is8Ntb7WEvU09KQCS8Yyo5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUroygcSoFAJ51YqwhzQLq9WPfH5kwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYyNDA1MmUtMjIwNS00OGYzLWEz Y2ItY2U4YjMyNmI4ZjcxLzAvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdB RkJFNzUyNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADswasc89ZbcX+ZB7gI7aRXLDaEgLv4Vk7qx +d/enqhkWr3V5wMtow6bbKCG/zLC7clssqt00LUWxHHfEa7jYi+XbIvY2l3vCkyu K21KhxV8ZjiTraoFzLP/DZdng9arG0HzTxyoyQWLo8styTBgQf4vFKa9ktIF2vVT /UY5bcwNT95SrSivczMGZhPOLaXUwRiQGxHYeWauT7EuJThfXsWHNyDkM4tB+3Jp Y7ywEWmhArFcDvUAFxzdfIswsv8afilAcl3H/BpC4dYq57U92RW9QJLBmlH0I9Al +/es085COf458ae3rHXu2seKyLrx8Ex0/sRdfmbg7yJE3ejyHgY= -----END CERTIFICATE-----Generated at Mon Jul 21 09:03:03 2025 by rpki-client