$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json) Hash identifier: CdNkxBpkYSZmzMbEVp+rjvaCieET6PGcKQHRllxX+qM= Subject key identifier: 29:A2:17:38:5F:5C:14:D4:B4:E3:FD:96:5A:EF:94:FD:10:04:81:30 Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Certificate serial: 2922F6920F194813F85616D1BCB716ADB71B3FE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft Manifest number: 03DE Signing time: Fri 05 Sep 2025 02:41:20 +0000 Manifest this update: Fri 05 Sep 2025 02:36:20 +0000 Manifest next update: Mon 08 Sep 2025 05:38:20 +0000 Files and hashes: 1: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: K3vShF0D9bPRn6sv5SW8yGmWNIRGvlLBsD0vPKS9a4E=) 2: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: W3DMbK3aVK7ms6ZSORpX9gSFt4aHVUy1Xx+e4Oau4Bw=) 3: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: c3TzylCEjs5xy8RF441nXx1uAnBKNVsy3aYQ1eehMFs=) 4: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: Y/t7s83TrJfcnDGlxRGeWKMHBRcUwBBITgOCbUYiXEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:22:f6:92:0f:19:48:13:f8:56:16:d1:bc:b7:16:ad:b7:1b:3f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Validity Not Before: Sep 5 02:36:20 2025 GMT Not After : Sep 8 05:38:20 2025 GMT Subject: CN=29A217385F5C14D4B4E3FD965AEF94FD10048130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:33:69:43:70:7a:97:6f:79:cc:06:8a:f4: 12:26:bb:c5:52:24:da:a3:be:86:b7:ec:6d:d2:65: da:20:4e:bd:3b:b7:cc:4b:97:0c:59:d2:9c:dc:6e: ca:f7:19:b1:9d:70:99:04:33:08:ce:8c:db:c0:67: e2:3d:37:18:2f:b7:e8:2c:66:09:da:9d:40:2b:e9: f9:ff:47:80:8f:92:83:ae:d8:47:cc:78:ad:ec:92: 0e:7b:03:95:42:91:cc:4d:f7:21:f2:da:17:65:76: 7c:a8:eb:03:53:a4:bf:14:81:22:15:3e:9b:6f:de: 74:91:27:5a:e4:a5:5c:9f:3b:42:e4:40:61:51:17: d1:49:4d:8e:4e:0b:4f:25:b4:98:bd:47:aa:e8:8b: 5c:73:04:5a:87:e4:b1:d0:e6:45:8e:3c:d7:9c:e0: 3d:93:4d:dc:61:50:a9:68:6a:01:d7:20:5a:d6:53: 7d:de:7a:78:ef:c4:61:7b:68:95:49:20:55:34:b0: 7d:01:d7:51:f0:b2:f7:60:02:b9:e3:26:8c:91:7b: df:83:4f:0e:8c:bf:c7:09:ac:cc:44:97:6f:2c:49: 8b:db:c9:d9:f1:db:f9:90:c3:37:e2:26:d3:7e:c0: 94:b5:46:ab:03:3c:49:cb:d7:e0:a9:cf:d3:47:ae: 99:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A2:17:38:5F:5C:14:D4:B4:E3:FD:96:5A:EF:94:FD:10:04:81:30 X509v3 Authority Key Identifier: keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3a:b4:29:13:76:c2:c2:3c:0e:e5:31:73:fc:5c:e5:b8:16: 88:9c:25:3a:b8:40:53:af:bf:61:d1:b9:c2:8e:10:fa:4c:21: e4:bb:68:f5:03:23:ad:a3:c1:82:ad:e6:fb:71:26:a5:9d:06: c3:b1:e9:40:20:2d:eb:e0:da:34:34:47:36:78:41:d9:51:33: 3f:6d:75:66:b4:f0:79:a8:4a:5c:e9:52:b5:8d:aa:c8:a2:78: e1:85:a4:4c:c0:f1:96:c1:ca:93:f7:84:84:5d:57:d4:19:1e: 5d:c9:d2:7f:3e:76:b9:ac:be:d3:54:59:16:e8:0f:72:d2:16: 46:b2:2f:e2:e3:8b:07:fd:e2:d1:ad:be:0c:bd:a6:a9:35:b1: 3a:de:0a:7a:96:be:33:76:30:37:98:6d:01:71:be:38:2c:9d: 49:ea:95:7f:8a:98:ea:03:bd:af:95:4a:4d:cc:2c:f9:f5:50: 59:22:73:8d:0f:3e:4d:55:ec:02:5e:28:5d:1d:c0:d1:64:34: e4:5f:f7:68:f0:e0:5b:ff:a3:ce:fb:e7:e1:74:32:ef:fe:d9: 8c:60:b6:08:59:c6:c4:e1:91:df:4c:7e:0d:aa:12:89:60:12: 53:c4:25:bd:1d:93:2c:52:46:71:da:4c:2a:ce:50:e4:f5:21: 51:53:ef:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKSL2kg8ZSBP4VhbRvLcWrbcbP+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5 MTU1MDJGNTAeFw0yNTA5MDUwMjM2MjBaFw0yNTA5MDgwNTM4MjBaMDMxMTAvBgNV BAMTKDI5QTIxNzM4NUY1QzE0RDRCNEUzRkQ5NjVBRUY5NEZEMTAwNDgxMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuzNpQ3B6l295zAaK9BImu8VS JNqjvoa37G3SZdogTr07t8xLlwxZ0pzcbsr3GbGdcJkEMwjOjNvAZ+I9Nxgvt+gs ZgnanUAr6fn/R4CPkoOu2EfMeK3skg57A5VCkcxN9yHy2hdldnyo6wNTpL8UgSIV Pptv3nSRJ1rkpVyfO0LkQGFRF9FJTY5OC08ltJi9R6roi1xzBFqH5LHQ5kWOPNec 4D2TTdxhUKloagHXIFrWU33eenjvxGF7aJVJIFU0sH0B11HwsvdgArnjJoyRe9+D Tw6Mv8cJrMxEl28sSYvbydnx2/mQwzfiJtN+wJS1RqsDPEnL1+Cpz9NHrpm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKaIXOF9cFNS04/2WWu+U/RAEgTAwHwYDVR0j BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5 RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1 MDJGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0 OUQ5MTU1MDJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFo6tCkTdsLCPA7lMXP8XOW4FoicJTq4QFOv v2HRucKOEPpMIeS7aPUDI62jwYKt5vtxJqWdBsOx6UAgLevg2jQ0RzZ4QdlRMz9t dWa08HmoSlzpUrWNqsiieOGFpEzA8ZbBypP3hIRdV9QZHl3J0n8+drmsvtNUWRbo D3LSFkayL+Ljiwf94tGtvgy9pqk1sTreCnqWvjN2MDeYbQFxvjgsnUnqlX+KmOoD va+VSk3MLPn1UFkic40PPk1V7AJeKF0dwNFkNORf92jw4Fv/o8775+F0Mu/+2Yxg tghZxsThkd9Mfg2qEolgElPEJb0dkyxSRnHaTCrOUOT1IVFT7w4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:39 2025 by rpki-client