$ rpki-client -vvf repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft File: DD68C98D519CC8D624F664B026AEB9B289EE819C.mft (raw, json) Hash identifier: teS0PlPvVcr1lsdQTfyor3VhOTKsSwNCr5WhKjcLYrE= Subject key identifier: E3:73:61:9C:02:E4:F6:D4:B5:A7:09:4D:09:9E:CA:FA:65:5B:F9:C3 Authority key identifier: DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C Certificate issuer: /CN=DD68C98D519CC8D624F664B026AEB9B289EE819C Certificate serial: 3A27E0C217BF0BF16A5CC30B944FC8A20128C484 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft Manifest number: 01E5 Signing time: Tue 28 Oct 2025 08:01:47 +0000 Manifest this update: Tue 28 Oct 2025 07:56:47 +0000 Manifest next update: Fri 31 Oct 2025 14:06:47 +0000 Files and hashes: 1: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: avxCSiDbdDW7kOsh1a+dBlMPbboYpQF+S49u7QzrJXw=) 2: DD68C98D519CC8D624F664B026AEB9B289EE819C.crl (hash: IfL9IRtnvj8egiuaAt1HqbpIngcMtwfuXUmrcqThgv4=) 3: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: 9XabV5C+bxTzwQpxWRFJ2J0ODxVlFWpwxY4ZIRRll5s=) 4: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: 4vYKKc9gCQNLGbY6CdycYfIML4Cvt54/Y7bjgPLGEYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 14:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:27:e0:c2:17:bf:0b:f1:6a:5c:c3:0b:94:4f:c8:a2:01:28:c4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD68C98D519CC8D624F664B026AEB9B289EE819C Validity Not Before: Oct 28 07:56:47 2025 GMT Not After : Oct 31 14:06:47 2025 GMT Subject: CN=E373619C02E4F6D4B5A7094D099ECAFA655BF9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:76:4c:62:39:13:f5:82:46:ac:60:93:46:08: f6:ed:1d:c0:7f:98:92:63:8c:4e:bc:00:96:16:a2: 1f:b2:a6:a3:18:68:7d:df:b8:47:f4:f7:31:d5:1a: a7:1a:76:9b:e1:62:b5:6f:77:57:81:43:5c:b1:eb: 5c:74:1c:2d:58:a8:62:85:44:d9:dc:0f:7e:aa:a6: a2:8b:ac:35:8e:15:fb:6d:ec:18:78:0b:9a:58:a0: 16:b4:de:76:e0:89:23:72:f0:44:c6:aa:3a:19:e9: ed:9a:27:54:16:62:ec:35:8e:0d:19:b8:d0:78:20: df:27:09:13:53:be:a9:34:0b:4e:bc:46:83:76:26: 4b:c6:98:97:f9:13:0e:c6:f4:e4:90:94:da:14:04: 49:4a:56:10:e5:e1:a7:1e:20:ba:87:ee:b7:64:71: c9:02:58:43:89:0e:fb:bc:0d:fe:50:45:c8:62:e1: 17:28:b0:cb:c4:a9:9c:44:b8:f5:85:a0:3d:dc:58: e3:b2:d4:6a:52:46:c4:14:4f:4e:2c:be:26:b9:51: 36:20:d6:12:37:10:6b:e3:ee:c1:94:14:73:9e:6c: c9:67:c0:5f:66:a3:8f:02:9c:52:9c:07:e5:b8:4e: 0c:f4:97:05:8d:4c:2e:62:3a:16:b3:db:c2:e5:b2: 08:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:73:61:9C:02:E4:F6:D4:B5:A7:09:4D:09:9E:CA:FA:65:5B:F9:C3 X509v3 Authority Key Identifier: keyid:DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:05:bb:a4:a2:33:39:00:15:a4:63:62:3e:cb:d4:fd:56:8d: a2:52:e8:4f:40:0c:d0:3f:4e:32:68:f6:4a:b1:5c:2b:db:83: b1:6b:35:cb:64:64:15:0e:8e:3a:b1:c8:26:16:13:3e:b6:d4: a7:99:eb:64:a0:64:21:fd:7c:80:2c:d8:6e:eb:dd:c0:f5:f8: 0f:b5:96:1b:fa:91:c0:40:8c:21:86:c0:d5:18:9a:74:3e:98: 40:bd:5b:01:5a:eb:ba:b1:e7:18:3e:88:6d:b6:e1:10:a4:2a: 51:fd:d4:c6:00:28:8a:5d:93:19:8a:4e:85:ed:a6:34:b1:c6: 1d:d0:87:22:18:95:82:10:88:d0:a8:68:96:52:2a:7e:fb:86: 80:e5:a8:1e:09:57:5b:a3:49:93:c0:c1:00:6b:35:7c:a3:be: b5:cb:88:18:30:ff:d5:3f:b7:23:4a:aa:eb:29:bc:25:e5:71: af:e4:70:08:0d:58:d5:ae:21:1c:ec:f2:c5:bd:21:58:46:ee: b3:67:55:1f:0f:02:d0:67:e6:51:01:14:25:3a:5f:c7:81:72: 4f:af:9b:cf:8e:fc:9b:0d:fe:b1:95:60:5b:97:ca:82:b3:16: c4:b0:a4:fb:33:c0:78:60:f3:f8:f2:d7:24:e0:95:bf:90:96: ad:b0:70:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOifgwhe/C/FqXMMLlE/IogEoxIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4 OUVFODE5QzAeFw0yNTEwMjgwNzU2NDdaFw0yNTEwMzExNDA2NDdaMDMxMTAvBgNV BAMTKEUzNzM2MTlDMDJFNEY2RDRCNUE3MDk0RDA5OUVDQUZBNjU1QkY5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvdkxiORP1gkasYJNGCPbtHcB/ mJJjjE68AJYWoh+ypqMYaH3fuEf09zHVGqcadpvhYrVvd1eBQ1yx61x0HC1YqGKF RNncD36qpqKLrDWOFftt7Bh4C5pYoBa03nbgiSNy8ETGqjoZ6e2aJ1QWYuw1jg0Z uNB4IN8nCRNTvqk0C068RoN2JkvGmJf5Ew7G9OSQlNoUBElKVhDl4aceILqH7rdk cckCWEOJDvu8Df5QRchi4RcosMvEqZxEuPWFoD3cWOOy1GpSRsQUT04svia5UTYg 1hI3EGvj7sGUFHOebMlnwF9mo48CnFKcB+W4Tgz0lwWNTC5iOhaz28LlsgglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU43NhnALk9tS1pwlNCZ7K+mVb+cMwHwYDVR0j BBgwFoAU3WjJjVGcyNYk9mSwJq65sonugZwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQzYTg4OS1jODYxLTRkMjktOWQ3Ny05MjNkOTI3ZTc2MzQvMC9ERDY4Qzk4RDUx OUNDOEQ2MjRGNjY0QjAyNkFFQjlCMjg5RUU4MTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4OUVF ODE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5 QjI4OUVFODE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYFu6SiMzkAFaRjYj7L1P1WjaJS6E9ADNA/ TjJo9kqxXCvbg7FrNctkZBUOjjqxyCYWEz621KeZ62SgZCH9fIAs2G7r3cD1+A+1 lhv6kcBAjCGGwNUYmnQ+mEC9WwFa67qx5xg+iG224RCkKlH91MYAKIpdkxmKToXt pjSxxh3QhyIYlYIQiNCoaJZSKn77hoDlqB4JV1ujSZPAwQBrNXyjvrXLiBgw/9U/ tyNKquspvCXlca/kcAgNWNWuIRzs8sW9IVhG7rNnVR8PAtBn5lEBFCU6X8eBck+v m8+O/JsN/rGVYFuXyoKzFsSwpPszwHhg8/jy1yTglb+Qlq2wcD4= -----END CERTIFICATE-----Generated at Thu Oct 30 14:59:07 2025 by rpki-client