$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: zzjSBtiEbdVYvXP3L3Yx8jzUHud0RWtY7zhny4CAb3Q= Subject key identifier: 2D:A1:FF:58:72:D3:3A:29:EF:A9:69:05:BC:59:6B:5B:FF:D8:C1:CF Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 402B049D9B423067F8101294188F5E43347BCCFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 01E9 Signing time: Tue 22 Jul 2025 13:22:10 +0000 Manifest this update: Tue 22 Jul 2025 13:17:10 +0000 Manifest next update: Fri 25 Jul 2025 23:10:10 +0000 Files and hashes: 1: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) 2: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) 3: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: nVCclcbr9xMNm591P4cLHuOcZ5HOBMNo0S1mhimirNs=) 4: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2b:04:9d:9b:42:30:67:f8:10:12:94:18:8f:5e:43:34:7b:cc:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Jul 22 13:17:10 2025 GMT Not After : Jul 25 23:10:10 2025 GMT Subject: CN=2DA1FF5872D33A29EFA96905BC596B5BFFD8C1CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:d2:90:b9:fa:45:fa:a9:ba:dc:70:0c:ef: 80:08:96:ca:76:5a:68:6b:6d:de:20:4c:7f:db:0a: 21:f7:b3:4e:4a:ed:c6:e4:c5:b3:62:0b:82:3c:96: 8a:1e:f0:94:a1:77:25:bd:ee:1c:88:7f:1b:3a:0c: a7:39:e6:b4:35:bb:df:d7:31:1d:d0:e8:ec:4a:fd: a2:ca:f4:02:6d:ff:07:66:92:bc:de:ac:1d:38:39: 86:66:c1:19:93:ad:fa:29:f1:5f:d7:79:f3:c6:0a: 75:b4:36:5f:e5:d4:7c:26:51:a2:50:80:a8:09:46: 6b:ff:81:24:86:be:c8:49:f9:a6:b5:26:91:7a:a2: e9:0b:9b:05:05:c1:5a:ce:86:28:46:4b:5a:70:2a: 69:e2:82:c8:c7:eb:56:6a:ec:56:63:d7:37:c7:16: 19:05:78:40:40:3c:66:2f:dc:76:15:b3:bd:af:a6: 2e:af:32:0f:2a:80:31:de:23:bd:24:7a:9d:97:8c: 64:f0:a2:ad:02:59:74:b6:b3:23:70:17:f2:b6:6e: db:74:f4:74:b9:bd:96:4f:d9:fc:3d:33:0d:7c:0e: 17:4d:2b:d7:5b:71:b4:26:3f:12:de:0d:35:85:1d: 00:b7:99:e1:b6:e1:ab:62:67:9b:66:74:eb:85:26: 20:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A1:FF:58:72:D3:3A:29:EF:A9:69:05:BC:59:6B:5B:FF:D8:C1:CF X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:df:85:05:2f:a1:1a:8e:62:dc:81:4e:f9:13:5d:e6:0c:25: c0:90:b5:fb:02:ed:77:ac:8f:f4:32:a5:f8:53:74:33:7c:03: 68:bb:58:2b:5c:be:b0:3d:93:57:d4:1f:ad:7b:20:d0:37:9d: fa:4b:de:c7:94:90:df:48:1c:1e:8d:00:54:05:9e:88:5a:c0: e1:8b:f4:6b:90:21:6d:7b:15:bd:25:97:f7:8e:c2:c7:97:46: 18:f0:34:93:c2:6e:97:10:c6:70:5f:f0:d9:f5:62:2d:33:cc: 07:9c:f6:85:bc:1d:f6:5c:93:e7:ab:37:5b:ef:1b:23:d5:63: e5:d5:2c:60:54:b9:a6:6a:81:a3:50:cc:f2:30:0f:f9:a0:1b: 2e:13:7a:47:91:cd:54:4f:4d:05:f9:a4:f2:4d:9a:84:25:f2: ff:00:ef:7f:c7:24:50:26:3b:69:dd:3a:cf:90:41:ce:2d:e8: 1f:94:74:f3:37:86:b7:ad:7b:77:6b:ab:81:ff:e6:2a:56:85: 09:f5:75:3a:23:2e:ce:4d:6c:3c:4b:5f:df:aa:b3:95:7a:c0: f1:15:05:fa:8e:84:42:b8:57:19:3c:bd:3a:a7:b7:18:e3:ec: 23:47:61:79:93:55:23:dc:4c:65:83:f4:0a:b1:e2:72:df:3f: bc:92:c3:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCsEnZtCMGf4EBKUGI9eQzR7zP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNTA3MjIxMzE3MTBaFw0yNTA3MjUyMzEwMTBaMDMxMTAvBgNV BAMTKDJEQTFGRjU4NzJEMzNBMjlFRkE5NjkwNUJDNTk2QjVCRkZEOEMxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4SNKQufpF+qm63HAM74AIlsp2 Wmhrbd4gTH/bCiH3s05K7cbkxbNiC4I8looe8JShdyW97hyIfxs6DKc55rQ1u9/X MR3Q6OxK/aLK9AJt/wdmkrzerB04OYZmwRmTrfop8V/XefPGCnW0Nl/l1HwmUaJQ gKgJRmv/gSSGvshJ+aa1JpF6oukLmwUFwVrOhihGS1pwKmnigsjH61Zq7FZj1zfH FhkFeEBAPGYv3HYVs72vpi6vMg8qgDHeI70kep2XjGTwoq0CWXS2syNwF/K2btt0 9HS5vZZP2fw9Mw18DhdNK9dbcbQmPxLeDTWFHQC3meG24atiZ5tmdOuFJiDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULaH/WHLTOinvqWkFvFlrW//Ywc8wHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHfhQUvoRqOYtyBTvkTXeYMJcCQtfsC7Xes j/QypfhTdDN8A2i7WCtcvrA9k1fUH617INA3nfpL3seUkN9IHB6NAFQFnohawOGL 9GuQIW17Fb0ll/eOwseXRhjwNJPCbpcQxnBf8Nn1Yi0zzAec9oW8HfZck+erN1vv GyPVY+XVLGBUuaZqgaNQzPIwD/mgGy4TekeRzVRPTQX5pPJNmoQl8v8A73/HJFAm O2ndOs+QQc4t6B+UdPM3hrete3drq4H/5ipWhQn1dTojLs5NbDxLX9+qs5V6wPEV BfqOhEK4Vxk8vTqntxjj7CNHYXmTVSPcTGWD9Aqx4nLfP7ySw4M= -----END CERTIFICATE-----Generated at Wed Jul 23 02:00:00 2025 by rpki-client