$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: GQv2ajSNpJ1G3Cr9S97NCrnvq09tMA6koiqdmLD1d84= Subject key identifier: 6A:D0:63:7E:29:F7:14:CF:BA:EB:F7:8A:FC:33:12:D5:89:6F:EE:EC Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 25E2D9F59D9398A7CD8B85E5144D09AEF14635E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 017F Signing time: Sun 07 Sep 2025 10:21:56 +0000 Manifest this update: Sun 07 Sep 2025 10:16:56 +0000 Manifest next update: Wed 10 Sep 2025 16:35:56 +0000 Files and hashes: 1: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) 2: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: CF+AUdwqd2Cdwb3Xys8M46I4ue88nXWldDEJ1zQ6nDM=) 3: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) 4: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) 5: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: 9NdE9Yt64lHcZmHfcp/BPdUY3C5A8B6IZ0IM6khU6pM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e2:d9:f5:9d:93:98:a7:cd:8b:85:e5:14:4d:09:ae:f1:46:35:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Sep 7 10:16:56 2025 GMT Not After : Sep 10 16:35:56 2025 GMT Subject: CN=6AD0637E29F714CFBAEBF78AFC3312D5896FEEEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:c5:0d:fe:d7:19:b0:c6:63:38:8a:62:49: 09:cb:40:90:7f:57:49:61:d1:ed:c4:60:3c:3f:70: 33:ab:46:22:b2:3b:fe:68:03:83:f5:43:39:a5:30: c9:0e:1f:76:4c:f8:69:06:4b:48:09:62:07:15:7a: db:c8:5f:a0:fe:01:f2:93:a7:33:bf:14:61:e7:6e: a6:ca:94:91:ef:90:f1:1f:b4:b0:3e:49:32:e2:91: a7:eb:ac:46:1a:cd:af:14:7c:03:b6:3d:dd:48:d6: 45:80:43:16:a9:16:c6:e5:6d:22:4c:fa:7c:80:0b: f2:55:f2:af:b8:2a:6b:ea:5d:24:78:6c:52:bd:91: 0a:0c:2f:dd:e0:40:18:06:5e:47:1a:f0:6e:a9:8b: b4:de:bf:8f:b6:74:cc:7b:c0:03:83:dc:20:3e:ae: 14:1e:58:7a:d1:fd:5b:82:a3:35:90:25:de:56:0a: ca:08:5f:9c:9f:51:33:2a:dd:ca:e4:1b:0a:c6:e7: 96:36:27:ef:df:af:56:fd:97:1e:cf:bd:da:a8:08: 50:55:fb:e4:77:1d:2f:74:d2:b7:c0:e8:62:2c:d1: a8:ee:7b:0b:2c:e7:88:49:f8:88:79:39:f7:44:91: 20:51:eb:bf:65:e0:30:0f:ea:d8:12:ba:88:08:ce: a5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D0:63:7E:29:F7:14:CF:BA:EB:F7:8A:FC:33:12:D5:89:6F:EE:EC X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:13:2a:4f:08:27:ef:bd:b8:44:56:ee:ae:64:7a:6c:36:b4: 1a:7a:40:ff:d2:a2:1c:0a:01:29:f8:97:b8:4b:74:81:24:d4: 0c:a7:f8:f2:0b:e9:28:4e:be:c8:73:e4:68:43:b0:79:44:2b: 1b:9d:15:12:7a:80:1e:01:6a:6b:a3:da:9e:20:de:c4:ec:c6: a3:3a:c5:c0:9d:21:d2:d1:94:34:c8:de:5a:0c:4b:85:82:46: 18:9a:03:1a:c6:3d:dc:14:f1:74:09:e7:31:36:f7:d0:7c:16: 87:36:2e:c9:eb:a5:b4:f4:f8:33:9f:9a:a3:9b:1d:74:6f:d6: 20:a6:d7:12:89:12:20:29:48:b5:46:b7:29:45:19:19:cf:4d: df:a4:ab:b9:c6:00:f9:7c:39:3f:e5:6f:24:18:66:3f:2a:1e: ee:d4:a8:0e:a1:31:bc:6a:01:f1:12:65:50:15:23:43:dc:a3: c9:7c:06:38:04:93:aa:95:f8:76:92:dd:31:91:f8:ec:2e:8e: e1:4d:28:10:47:47:20:4e:da:30:6f:bd:00:c4:b1:e3:69:5b: 39:3e:52:bc:cf:66:19:cf:f1:38:d2:56:80:10:c8:b0:8a:bd: 6e:76:82:17:6b:c7:01:45:9f:f9:55:27:6e:05:ed:0d:7f:55: a1:3b:e5:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJeLZ9Z2TmKfNi4XlFE0JrvFGNeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTA5MDcxMDE2NTZaFw0yNTA5MTAxNjM1NTZaMDMxMTAvBgNV BAMTKDZBRDA2MzdFMjlGNzE0Q0ZCQUVCRjc4QUZDMzMxMkQ1ODk2RkVFRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXcUN/tcZsMZjOIpiSQnLQJB/ V0lh0e3EYDw/cDOrRiKyO/5oA4P1QzmlMMkOH3ZM+GkGS0gJYgcVetvIX6D+AfKT pzO/FGHnbqbKlJHvkPEftLA+STLikafrrEYaza8UfAO2Pd1I1kWAQxapFsblbSJM +nyAC/JV8q+4KmvqXSR4bFK9kQoML93gQBgGXkca8G6pi7Tev4+2dMx7wAOD3CA+ rhQeWHrR/VuCozWQJd5WCsoIX5yfUTMq3crkGwrG55Y2J+/fr1b9lx7PvdqoCFBV ++R3HS900rfA6GIs0ajuewss54hJ+Ih5OfdEkSBR679l4DAP6tgSuogIzqXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUatBjfin3FM+66/eK/DMS1Ylv7uwwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoTKk8IJ++9uERW7q5kemw2tBp6QP/SohwK ASn4l7hLdIEk1Ayn+PIL6ShOvshz5GhDsHlEKxudFRJ6gB4Bamuj2p4g3sTsxqM6 xcCdIdLRlDTI3loMS4WCRhiaAxrGPdwU8XQJ5zE299B8Foc2LsnrpbT0+DOfmqOb HXRv1iCm1xKJEiApSLVGtylFGRnPTd+kq7nGAPl8OT/lbyQYZj8qHu7UqA6hMbxq AfESZVAVI0Pco8l8BjgEk6qV+HaS3TGR+OwujuFNKBBHRyBO2jBvvQDEseNpWzk+ UrzPZhnP8TjSVoAQyLCKvW52ghdrxwFFn/lVJ24F7Q1/VaE75Ws= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:14 2025 by rpki-client