$ rpki-client -vvf repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft File: DD68C98D519CC8D624F664B026AEB9B289EE819C.mft (raw, json) Hash identifier: nHDxMI8Skz48bJZqMdmaiivKYMSyVA35BCLoAS30xdQ= Subject key identifier: D3:2B:44:AD:5B:6E:B5:66:88:C4:FF:34:8E:4D:EE:DB:A9:25:7A:7A Authority key identifier: DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C Certificate issuer: /CN=DD68C98D519CC8D624F664B026AEB9B289EE819C Certificate serial: 2D26974E87994734CFCD5785744ED73964859937 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft Manifest number: 01CE Signing time: Fri 05 Sep 2025 02:01:47 +0000 Manifest this update: Fri 05 Sep 2025 01:56:47 +0000 Manifest next update: Mon 08 Sep 2025 11:35:47 +0000 Files and hashes: 1: DD68C98D519CC8D624F664B026AEB9B289EE819C.crl (hash: YR09a7m4s0AaP2LCDKqTvnhal3+68DjQ38AkrmQpD4U=) 2: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: 9XabV5C+bxTzwQpxWRFJ2J0ODxVlFWpwxY4ZIRRll5s=) 3: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: 4vYKKc9gCQNLGbY6CdycYfIML4Cvt54/Y7bjgPLGEYU=) 4: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: avxCSiDbdDW7kOsh1a+dBlMPbboYpQF+S49u7QzrJXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 11:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:26:97:4e:87:99:47:34:cf:cd:57:85:74:4e:d7:39:64:85:99:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD68C98D519CC8D624F664B026AEB9B289EE819C Validity Not Before: Sep 5 01:56:47 2025 GMT Not After : Sep 8 11:35:47 2025 GMT Subject: CN=D32B44AD5B6EB56688C4FF348E4DEEDBA9257A7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:97:3f:9b:a9:d3:d1:c5:4a:09:00:d8:6e: 66:9e:48:41:df:64:77:03:ae:7e:d2:1c:ac:58:5f: ac:60:dc:36:2e:e8:92:d4:ec:22:b1:89:72:c8:fe: 84:5d:a7:a5:19:31:5b:b6:a5:eb:62:dd:f6:6d:ed: df:16:72:16:f0:3e:1d:4b:f7:05:6b:4a:9a:ca:1c: 30:62:f6:61:33:78:38:69:4a:f0:62:9d:50:a5:50: 71:c9:ab:a1:07:81:18:13:10:cd:ef:e9:af:19:4b: f5:76:58:af:aa:2d:1e:6a:d4:79:5a:b7:c4:ec:b9: 65:e0:3b:63:3d:7f:be:32:ee:5c:a0:63:d8:ff:6b: e8:29:a5:9c:98:78:7e:38:c0:ef:e5:3d:bb:28:bc: 94:3c:fe:c0:af:53:4d:6b:01:e4:0c:54:0b:73:86: 1a:e3:7d:6b:7f:9d:94:98:85:b5:4f:27:9e:49:1a: 5a:a4:79:c4:2b:46:11:86:a8:eb:85:f1:ae:ae:a3: 35:3a:0a:f0:9a:ff:3d:89:dd:ff:b2:39:b3:40:3a: 1c:bf:9d:e8:07:f9:52:15:51:3a:db:4e:91:76:49: 6b:02:e5:7b:73:3e:29:97:bb:25:6c:db:dd:cd:c8: f9:76:bd:16:28:d7:11:95:99:0b:2f:d4:f1:ec:00: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2B:44:AD:5B:6E:B5:66:88:C4:FF:34:8E:4D:EE:DB:A9:25:7A:7A X509v3 Authority Key Identifier: keyid:DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:1a:d7:cc:70:a3:23:0e:c3:cc:bf:38:8b:16:e6:61:32:87: bf:98:b4:9e:ce:e0:e5:75:8a:dd:b0:1a:b7:94:ea:2e:5b:96: e6:94:ed:c3:e9:db:01:5d:95:68:6e:f8:9c:a9:a1:f7:dc:8d: 89:1b:9b:d6:f7:54:a4:05:a9:94:96:8b:7e:d0:20:f4:e1:65: 2d:cc:1a:69:97:41:3f:0a:f6:2b:e9:23:b0:5f:0d:55:31:50: e0:29:c2:24:ad:b0:e3:11:bc:b0:58:f2:27:20:33:94:8e:d9: 0b:5a:ae:67:ba:56:2b:96:c7:c1:78:6d:79:d3:a0:35:54:1d: 22:71:09:fe:bb:0e:ed:4c:ff:d7:d7:59:c9:4b:65:1d:5b:cf: 82:bc:bf:39:f0:68:2d:7c:b7:75:65:ce:15:12:7b:4b:e9:dd: d1:f3:64:da:85:55:0c:d2:5d:37:d3:37:41:44:cd:b1:e9:93: 02:82:c9:06:23:69:b5:61:a7:e8:6d:e1:ef:62:91:1d:ac:d0: 7e:3f:ff:e2:e2:0f:74:18:84:b8:5b:de:0d:b2:86:31:4c:95: 5c:1e:47:e3:6b:1c:b0:b6:ce:68:35:cc:55:76:31:53:67:36: f7:e4:c1:f3:24:65:67:49:46:a3:5a:d9:86:e9:39:f4:ef:58: e1:76:52:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSaXToeZRzTPzVeFdE7XOWSFmTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4 OUVFODE5QzAeFw0yNTA5MDUwMTU2NDdaFw0yNTA5MDgxMTM1NDdaMDMxMTAvBgNV BAMTKEQzMkI0NEFENUI2RUI1NjY4OEM0RkYzNDhFNERFRURCQTkyNTdBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcpc/m6nT0cVKCQDYbmaeSEHf ZHcDrn7SHKxYX6xg3DYu6JLU7CKxiXLI/oRdp6UZMVu2peti3fZt7d8WchbwPh1L 9wVrSprKHDBi9mEzeDhpSvBinVClUHHJq6EHgRgTEM3v6a8ZS/V2WK+qLR5q1Hla t8TsuWXgO2M9f74y7lygY9j/a+gppZyYeH44wO/lPbsovJQ8/sCvU01rAeQMVAtz hhrjfWt/nZSYhbVPJ55JGlqkecQrRhGGqOuF8a6uozU6CvCa/z2J3f+yObNAOhy/ negH+VIVUTrbTpF2SWsC5XtzPimXuyVs293NyPl2vRYo1xGVmQsv1PHsAM5ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ytErVtutWaIxP80jk3u26klenowHwYDVR0j BBgwFoAU3WjJjVGcyNYk9mSwJq65sonugZwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQzYTg4OS1jODYxLTRkMjktOWQ3Ny05MjNkOTI3ZTc2MzQvMC9ERDY4Qzk4RDUx OUNDOEQ2MjRGNjY0QjAyNkFFQjlCMjg5RUU4MTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4OUVF ODE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5 QjI4OUVFODE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALga18xwoyMOw8y/OIsW5mEyh7+YtJ7O4OV1 it2wGreU6i5bluaU7cPp2wFdlWhu+JypoffcjYkbm9b3VKQFqZSWi37QIPThZS3M GmmXQT8K9ivpI7BfDVUxUOApwiStsOMRvLBY8icgM5SO2Qtarme6ViuWx8F4bXnT oDVUHSJxCf67Du1M/9fXWclLZR1bz4K8vznwaC18t3VlzhUSe0vp3dHzZNqFVQzS XTfTN0FEzbHpkwKCyQYjabVhp+ht4e9ikR2s0H4//+LiD3QYhLhb3g2yhjFMlVwe R+NrHLC2zmg1zFV2MVNnNvfkwfMkZWdJRqNa2YbpOfTvWOF2Uok= -----END CERTIFICATE-----Generated at Fri Sep 5 10:15:03 2025 by rpki-client