$ rpki-client -vvf repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft File: DD8ADB0CD599281204D387EB652787650920B6C5.mft (raw, json) Hash identifier: XExw3DSwwqEjleqIEL4hyi8W35zuXY+aYeA1aC7oRN4= Subject key identifier: 7F:14:92:D2:A9:A8:F4:78:31:EC:53:D6:48:25:F9:FD:02:D1:2E:7E Authority key identifier: DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 Certificate issuer: /CN=DD8ADB0CD599281204D387EB652787650920B6C5 Certificate serial: 13538EF43089027064DEFAD9F10A28779C893404 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft Manifest number: 0122 Signing time: Sat 06 Sep 2025 18:20:38 +0000 Manifest this update: Sat 06 Sep 2025 18:15:38 +0000 Manifest next update: Tue 09 Sep 2025 23:34:38 +0000 Files and hashes: 1: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: 5FFzhuEH4sCF54XVtFSTU94fa/L5mjleJyrEVu3hEAE=) 2: DD8ADB0CD599281204D387EB652787650920B6C5.crl (hash: iAhy34W25uU4Kv6o21mOJWSNSrS9Jhom5xsGEYwnVhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:53:8e:f4:30:89:02:70:64:de:fa:d9:f1:0a:28:77:9c:89:34:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8ADB0CD599281204D387EB652787650920B6C5 Validity Not Before: Sep 6 18:15:38 2025 GMT Not After : Sep 9 23:34:38 2025 GMT Subject: CN=7F1492D2A9A8F47831EC53D64825F9FD02D12E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c4:d0:b7:9b:82:39:c9:09:1a:a7:2d:ff:95: cd:5d:2c:98:96:98:07:7b:92:86:75:02:19:e4:58: d0:f4:f1:a3:df:1b:75:04:3c:0f:2c:80:8c:97:d6: 01:5c:a7:12:5c:57:ec:4b:30:cf:8d:11:d9:e9:3a: 85:96:fa:88:66:27:a8:cb:53:23:bf:f6:88:0d:63: 79:f0:35:13:d8:8d:f4:37:f2:c9:dc:37:f4:10:87: bd:18:ed:fd:87:70:84:0b:34:60:08:2b:b5:9c:fd: 7a:54:25:7c:78:ab:38:fe:41:19:40:9d:1d:c2:5f: 7a:93:39:d3:f7:c6:70:3f:76:dd:73:af:b6:f4:8c: 4b:60:27:18:05:0c:f7:d9:4b:45:c3:30:00:7d:41: 6a:a5:e2:3d:8e:1d:97:e4:73:c5:e7:69:77:a7:b3: c9:a0:d2:6c:ff:2f:64:cf:c3:6b:a2:6e:0e:35:68: 43:c7:08:1b:a6:7e:85:c8:3c:88:33:c0:74:4a:8f: 43:3b:ee:99:8d:ed:78:12:18:1f:02:a2:b9:e4:d1: 13:74:17:72:6c:85:4b:3c:06:02:cb:61:97:02:6c: 39:5f:81:c1:36:68:91:ef:af:c3:4c:6e:24:99:0d: 60:9d:80:5c:59:ab:2b:08:f9:2e:1e:d7:1b:6e:4b: 4c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:14:92:D2:A9:A8:F4:78:31:EC:53:D6:48:25:F9:FD:02:D1:2E:7E X509v3 Authority Key Identifier: keyid:DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:52:97:67:2b:49:bc:1a:e5:11:97:d0:46:43:81:a0:dc:57: d5:39:22:33:03:cc:a5:07:9b:60:93:4d:7b:fa:08:0f:9b:36: 63:47:f8:9d:47:48:dd:00:17:20:aa:3c:93:d2:bb:d7:f1:95: 70:6e:c7:9b:7a:a0:ab:d5:0a:51:7a:8d:58:c3:65:b7:c1:8f: d9:10:2c:0d:64:d3:56:70:0a:01:29:2d:94:d0:60:82:e3:72: a0:ed:93:53:4c:82:1b:bf:50:24:d5:16:ed:be:ab:b9:4b:23: bd:17:68:a9:4f:b7:f7:11:c7:94:75:65:0b:c8:74:b1:bd:5f: c1:82:37:a3:b6:61:f3:a7:a5:ef:d9:cc:52:e7:4a:d1:8b:ef: 77:52:5e:16:c9:04:89:a7:06:a7:63:dd:c4:7c:ca:80:2e:44: 35:41:05:5c:59:3b:c0:db:cc:a9:1b:02:c3:89:fb:07:10:b5: 5c:84:0a:92:21:fd:ca:a8:e3:0f:b5:d3:8b:09:c2:11:1d:3c: 35:d5:21:62:02:19:70:72:a9:1a:d0:05:d7:4f:55:94:14:83: 88:83:6f:ad:eb:19:46:c1:0b:9a:b7:14:19:97:5d:5c:7a:e5: bf:f7:17:88:15:7b:6e:e9:66:ff:9f:21:c9:b9:56:df:84:6d: 72:f2:55:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE1OO9DCJAnBk3vrZ8Qood5yJNAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUw OTIwQjZDNTAeFw0yNTA5MDYxODE1MzhaFw0yNTA5MDkyMzM0MzhaMDMxMTAvBgNV BAMTKDdGMTQ5MkQyQTlBOEY0NzgzMUVDNTNENjQ4MjVGOUZEMDJEMTJFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZxNC3m4I5yQkapy3/lc1dLJiW mAd7koZ1AhnkWND08aPfG3UEPA8sgIyX1gFcpxJcV+xLMM+NEdnpOoWW+ohmJ6jL UyO/9ogNY3nwNRPYjfQ38sncN/QQh70Y7f2HcIQLNGAIK7Wc/XpUJXx4qzj+QRlA nR3CX3qTOdP3xnA/dt1zr7b0jEtgJxgFDPfZS0XDMAB9QWql4j2OHZfkc8XnaXen s8mg0mz/L2TPw2uibg41aEPHCBumfoXIPIgzwHRKj0M77pmN7XgSGB8Cornk0RN0 F3JshUs8BgLLYZcCbDlfgcE2aJHvr8NMbiSZDWCdgFxZqysI+S4e1xtuS0yhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfxSS0qmo9Hgx7FPWSCX5/QLRLn4wHwYDVR0j BBgwFoAU3YrbDNWZKBIE04frZSeHZQkgtsUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmU2NGIwZC02NDZjLTRjZWMtOTQxZi03NDNiMmQxYmNlNGUvMC9ERDhBREIwQ0Q1 OTkyODEyMDREMzg3RUI2NTI3ODc2NTA5MjBCNkM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUwOTIw QjZDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3 NjUwOTIwQjZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJSl2crSbwa5RGX0EZDgaDcV9U5IjMDzKUH m2CTTXv6CA+bNmNH+J1HSN0AFyCqPJPSu9fxlXBux5t6oKvVClF6jVjDZbfBj9kQ LA1k01ZwCgEpLZTQYILjcqDtk1NMghu/UCTVFu2+q7lLI70XaKlPt/cRx5R1ZQvI dLG9X8GCN6O2YfOnpe/ZzFLnStGL73dSXhbJBImnBqdj3cR8yoAuRDVBBVxZO8Db zKkbAsOJ+wcQtVyECpIh/cqo4w+104sJwhEdPDXVIWICGXByqRrQBddPVZQUg4iD b63rGUbBC5q3FBmXXVx65b/3F4gVe27pZv+fIcm5Vt+EbXLyVaU= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:40 2025 by rpki-client