$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: IEUqNSumcG4VYRZ64d49xp/1A/KL2SUw6zAbfygj8JM= Subject key identifier: 00:E3:EB:76:8D:1C:1B:3C:A0:DE:F6:1D:BA:65:F9:01:3C:27:7D:DB Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 2B45219B3810F7CC5B4DE817EFF981D5660B10FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 01FE Signing time: Mon 08 Sep 2025 14:02:11 +0000 Manifest this update: Mon 08 Sep 2025 13:57:11 +0000 Manifest next update: Thu 11 Sep 2025 21:06:11 +0000 Files and hashes: 1: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) 2: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) 3: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: 08dEYhbntmaC3Qmx9zso8ea5Gnc7dcu3EjWkI5Cmuq4=) 4: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:45:21:9b:38:10:f7:cc:5b:4d:e8:17:ef:f9:81:d5:66:0b:10:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Sep 8 13:57:11 2025 GMT Not After : Sep 11 21:06:11 2025 GMT Subject: CN=00E3EB768D1C1B3CA0DEF61DBA65F9013C277DDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:70:3c:ba:83:ae:fa:b4:c1:31:37:82:93: 6d:c3:77:03:9c:6c:4e:e6:52:e3:79:55:8d:cd:88: 46:49:6f:3d:14:36:40:13:d3:51:d3:eb:68:fc:a2: e9:18:0a:64:d3:42:97:a9:b6:27:31:ef:d5:6b:16: 28:ea:54:b8:9f:c3:53:b3:9d:72:23:7c:5c:d2:21: 33:07:ea:9f:6e:3e:38:34:c9:57:f6:90:ab:a7:97: c5:19:67:39:54:4a:5c:b1:84:30:ca:af:90:88:56: 78:a5:42:03:85:8f:c4:78:85:b2:fd:22:d7:b4:5f: 65:12:c2:2b:77:c4:2e:3e:85:f4:3b:ad:3f:51:48: 54:0f:3c:c4:19:fb:f0:d7:8a:85:74:9d:59:ad:39: 32:fa:c7:82:d6:a3:3c:80:3d:20:a2:24:5d:ae:4d: f3:60:7e:81:ce:e2:5b:83:99:8c:ff:e6:82:2b:f7: d6:e2:61:44:c6:15:08:9a:16:07:37:d9:82:ce:d0: a2:38:73:6e:4e:87:a7:13:ef:7a:88:57:27:7b:2d: 4a:eb:78:a2:65:7e:ba:06:54:4a:0c:7e:80:49:2c: 6f:fe:80:9d:58:a4:86:60:4a:87:0e:74:e0:b8:c8: ee:20:ba:68:ae:f5:55:01:08:1e:66:8b:29:8c:12: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E3:EB:76:8D:1C:1B:3C:A0:DE:F6:1D:BA:65:F9:01:3C:27:7D:DB X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:37:d9:6c:8e:93:30:c3:45:1e:f8:30:47:29:7c:5b:f1:36: 4b:9f:12:e6:7c:5a:ca:d9:f8:57:38:d0:36:ce:4e:ad:61:61: 67:d1:4c:82:50:f2:13:fd:0c:a6:1a:33:ea:bc:98:83:0b:9f: c0:e7:e2:75:5f:dc:4e:ad:fa:04:3c:18:26:b2:d8:7e:db:b6: ec:62:1b:86:c4:1a:08:3c:b7:c1:fc:54:8c:72:52:98:36:c7: 20:0f:b5:5a:69:08:74:5f:f7:a1:d4:36:ca:a6:45:ca:05:af: c1:62:c8:43:6f:b9:05:7f:f9:1e:0d:63:57:47:d9:92:d6:d1: 74:9a:93:50:0f:ae:c4:ec:ff:03:6c:ac:4c:f7:43:4c:5f:e5: 67:68:fc:7a:0e:1c:f2:b1:64:fa:a7:d5:a9:9f:c4:3d:8b:df: 90:06:8a:7a:d7:ea:c0:6a:8b:cf:2e:f0:19:ea:d9:2a:c9:0c: 84:73:4a:2a:d7:c5:4b:c7:50:4f:07:66:ab:cd:36:e7:e2:aa: fd:ab:06:a6:36:b3:ce:06:8e:b7:4a:a8:cd:40:c0:d2:68:7e: c9:94:92:8c:b6:a8:b4:10:b0:8a:b6:15:7e:68:d7:40:66:7b: e2:6f:24:b5:b8:94:2e:4c:1e:06:77:1f:f5:ad:91:d1:cf:36: 41:c4:ff:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0UhmzgQ98xbTegX7/mB1WYLEPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNTA5MDgxMzU3MTFaFw0yNTA5MTEyMTA2MTFaMDMxMTAvBgNV BAMTKDAwRTNFQjc2OEQxQzFCM0NBMERFRjYxREJBNjVGOTAxM0MyNzdEREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDnA8uoOu+rTBMTeCk23DdwOc bE7mUuN5VY3NiEZJbz0UNkAT01HT62j8oukYCmTTQpepticx79VrFijqVLifw1Oz nXIjfFzSITMH6p9uPjg0yVf2kKunl8UZZzlUSlyxhDDKr5CIVnilQgOFj8R4hbL9 Ite0X2USwit3xC4+hfQ7rT9RSFQPPMQZ+/DXioV0nVmtOTL6x4LWozyAPSCiJF2u TfNgfoHO4luDmYz/5oIr99biYUTGFQiaFgc32YLO0KI4c25Oh6cT73qIVyd7LUrr eKJlfroGVEoMfoBJLG/+gJ1YpIZgSocOdOC4yO4gumiu9VUBCB5miymMEs0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAOPrdo0cGzyg3vYdumX5ATwnfdswHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEw32WyOkzDDRR74MEcpfFvxNkufEuZ8WsrZ +Fc40DbOTq1hYWfRTIJQ8hP9DKYaM+q8mIMLn8Dn4nVf3E6t+gQ8GCay2H7btuxi G4bEGgg8t8H8VIxyUpg2xyAPtVppCHRf96HUNsqmRcoFr8FiyENvuQV/+R4NY1dH 2ZLW0XSak1APrsTs/wNsrEz3Q0xf5Wdo/HoOHPKxZPqn1amfxD2L35AGinrX6sBq i88u8Bnq2SrJDIRzSirXxUvHUE8HZqvNNufiqv2rBqY2s84GjrdKqM1AwNJofsmU koy2qLQQsIq2FX5o10Bme+JvJLW4lC5MHgZ3H/WtkdHPNkHE/wQ= -----END CERTIFICATE-----Generated at Tue Sep 9 01:19:27 2025 by rpki-client