$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: UE7RJ5iCyBNl7mV2GxC4xkJ0B7UAaxfVs+eKP6i3j8Y= Subject key identifier: 63:C9:F3:07:77:EF:0A:02:41:31:99:D4:38:7F:89:A7:B0:19:CF:8A Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 4300C60711A08F47A0A7943275185BC8110F0A38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 0154 Signing time: Thu 05 Jun 2025 02:41:55 +0000 Manifest this update: Thu 05 Jun 2025 02:36:55 +0000 Manifest next update: Sun 08 Jun 2025 14:37:55 +0000 Files and hashes: 1: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) 2: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) 3: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) 4: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: 9NdE9Yt64lHcZmHfcp/BPdUY3C5A8B6IZ0IM6khU6pM=) 5: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: lXaenEd/WSCb3hJnlqmeix3DXUzVVf7d+Mb3W5B63oc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 14:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:00:c6:07:11:a0:8f:47:a0:a7:94:32:75:18:5b:c8:11:0f:0a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Jun 5 02:36:55 2025 GMT Not After : Jun 8 14:37:55 2025 GMT Subject: CN=63C9F30777EF0A02413199D4387F89A7B019CF8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:22:f4:a2:4c:5f:2d:55:e8:93:33:f7:12: 47:f4:a1:c3:4e:8f:a9:d7:4b:81:98:55:7f:38:63: 5f:fa:65:73:72:7b:38:ef:e6:bd:ff:4c:ce:69:93: 13:fe:7c:7c:53:c8:7b:16:41:79:d0:a5:18:1d:66: 50:bd:28:44:e1:82:e3:e0:41:8c:37:49:ba:69:10: 65:36:bd:51:e4:34:65:97:8c:c0:d3:3e:86:18:57: 75:bb:1e:c3:ee:20:de:79:8f:60:48:ac:31:ab:3a: 1d:e3:3e:c9:33:ba:a7:6c:af:4c:ef:95:3d:f2:8d: 93:67:23:ef:0c:e2:04:e7:9c:3e:49:d0:c2:5c:a5: 42:0f:cc:5c:57:d8:0c:a2:b8:f3:0a:a7:d7:72:48: aa:ba:e9:dc:5c:4a:d4:9e:cf:47:47:14:39:af:2d: 84:fd:8a:02:ae:22:da:8c:b8:0a:7e:64:0d:53:7b: c1:dc:bf:5e:37:63:29:9d:8d:58:48:27:16:22:8d: c0:6e:ab:45:e7:86:6f:c1:e0:96:87:21:69:55:81: f4:d6:ab:50:7c:2e:2d:1b:0e:dd:0f:1f:e6:9c:4b: e0:e7:e6:78:e4:97:dc:81:cd:8f:bb:fa:7e:75:e7: 38:8c:dd:7d:06:c3:92:cc:be:93:b3:a8:63:dc:8c: 0b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C9:F3:07:77:EF:0A:02:41:31:99:D4:38:7F:89:A7:B0:19:CF:8A X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ed:62:51:cc:1e:ac:25:9d:7d:df:69:8e:bd:e9:d8:08:00: d2:d8:fc:39:ab:08:28:4d:64:73:cf:d2:63:6c:d2:c9:a2:68: e6:0a:f6:f1:19:42:45:f0:0d:78:67:fb:c5:6a:5b:1b:a0:51: 3f:4c:0d:d7:67:72:0e:8e:53:37:8f:83:c3:d3:09:57:44:0b: cc:17:25:d8:9c:3c:e5:81:fc:f6:7e:0e:60:d4:17:47:70:3b: 8f:48:39:1b:d8:20:1d:0b:f4:f0:dc:de:1a:3c:fd:2f:75:a3: b7:b7:95:65:a8:03:ee:28:97:4b:f2:5e:2e:83:1e:db:7b:95: 93:cc:dc:7e:18:11:a5:c4:5f:87:49:d1:da:18:c4:61:92:2c: 05:ea:ec:98:3c:1b:ca:23:3b:4b:d0:a2:8f:c4:b0:2c:e9:d6: 19:c3:25:af:95:97:3c:0f:b0:2d:d3:20:c1:61:cb:63:c2:24: d0:0d:7c:f3:70:53:f2:1d:da:aa:fd:72:31:e7:ab:ae:13:d3: 30:7a:db:12:74:d5:7c:4e:c4:06:e4:d4:1d:70:ac:73:c8:aa: 10:0d:c7:e2:91:db:cd:2c:fb:a9:3c:09:22:6c:35:b8:d3:16: a8:d8:a0:fa:c9:64:27:72:a0:4a:8a:32:42:ce:fe:0e:9f:97: 52:e3:62:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQwDGBxGgj0egp5QydRhbyBEPCjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTA2MDUwMjM2NTVaFw0yNTA2MDgxNDM3NTVaMDMxMTAvBgNV BAMTKDYzQzlGMzA3NzdFRjBBMDI0MTMxOTlENDM4N0Y4OUE3QjAxOUNGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJACL0okxfLVXokzP3Ekf0ocNO j6nXS4GYVX84Y1/6ZXNyezjv5r3/TM5pkxP+fHxTyHsWQXnQpRgdZlC9KEThguPg QYw3SbppEGU2vVHkNGWXjMDTPoYYV3W7HsPuIN55j2BIrDGrOh3jPskzuqdsr0zv lT3yjZNnI+8M4gTnnD5J0MJcpUIPzFxX2AyiuPMKp9dySKq66dxcStSez0dHFDmv LYT9igKuItqMuAp+ZA1Te8Hcv143YymdjVhIJxYijcBuq0Xnhm/B4JaHIWlVgfTW q1B8Li0bDt0PH+acS+Dn5njkl9yBzY+7+n515ziM3X0Gw5LMvpOzqGPcjAtJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8nzB3fvCgJBMZnUOH+Jp7AZz4owHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADtYlHMHqwlnX3faY696dgIANLY/DmrCChN ZHPP0mNs0smiaOYK9vEZQkXwDXhn+8VqWxugUT9MDddncg6OUzePg8PTCVdEC8wX JdicPOWB/PZ+DmDUF0dwO49IORvYIB0L9PDc3ho8/S91o7e3lWWoA+4ol0vyXi6D Htt7lZPM3H4YEaXEX4dJ0doYxGGSLAXq7Jg8G8ojO0vQoo/EsCzp1hnDJa+VlzwP sC3TIMFhy2PCJNANfPNwU/Id2qr9cjHnq64T0zB62xJ01XxOxAbk1B1wrHPIqhAN x+KR280s+6k8CSJsNbjTFqjYoPrJZCdyoEqKMkLO/g6fl1LjYrM= -----END CERTIFICATE-----Generated at Fri Jun 6 16:45:21 2025 by rpki-client