$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft File: DD29F5E4CE561760A0212F0448987AFBE75263D7.mft (raw, json) Hash identifier: ArD//ztTenArQ84LuKY6tPXBNxNjFivJDtxSGDhZgno= Subject key identifier: CD:CE:0F:A2:55:F7:75:9C:6E:E5:91:A2:8A:18:C0:5F:6B:5E:60:8F Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 2ABC9FA412D11936EEB699D35024EF8A26268B95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft Manifest number: 02E8 Signing time: Thu 08 May 2025 11:32:03 +0000 Manifest this update: Thu 08 May 2025 11:27:03 +0000 Manifest next update: Sun 11 May 2025 22:54:03 +0000 Files and hashes: 1: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: KCwggPDyjMOHP+o7do6DpKf6RZ3T2/Rfig0q6lMutLA=) 2: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: q0d8NLaf44QcZ0mXu0lgVK/f2ztOAP51wfbILAD0OWE=) 3: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: +pkqBDcSIJauOHhuC/iQUrXCbfOiU5mYoeOXWd/Jx7I=) 4: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: Tr8KoztX4g1WXnF+96HqpgOulMvRhy41cuaQJFwuUXc=) 5: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: XlRIM2drE0eVYSx46A7CTq2auxNTRxDcpQdmTnDOrQU=) 6: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: ORf8MBvb0cc1Hlu83aqDGCB77dQwtn/c/kHba/c2HYo=) 7: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: VCpqet2tltq6OwAAWmXLVEpkSYf/oR/zTCEWMlMzr2Y=) 8: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: w6bNOjpU0I0jjnq/DeAF5pAdWd2fSBGqPyk3RRIO0Ys=) 9: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: e59wQms8v5jMBeQnHJR3rPXGniQiJS1tDMckcJ4pEwQ=) 10: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: pui7zb2XJ4+X3ruOIeMi3Iddl1A0mCCFNXvLOJrEw2o=) 11: 3130332e34322e3132322e302f32342d3234203d3e203234353334.roa (hash: U0ZYfoLEU7/YUTuj/HEbmKOFNpez0H5ASCN++eNNi6Y=) 12: DD29F5E4CE561760A0212F0448987AFBE75263D7.crl (hash: 6xUFfGsV6brltTuY9tHJ6sqICd/zupy5T2XflW0hozc=) 13: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: Rflx89NQ3S/Ei3ZTUD7ICkgdTWu+XfG7H70uY/x+4wc=) 14: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: of7XjX89CiHFfIQLpt1o6+DFkAA2fUQ2SMQAsL24xtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:bc:9f:a4:12:d1:19:36:ee:b6:99:d3:50:24:ef:8a:26:26:8b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: May 8 11:27:03 2025 GMT Not After : May 11 22:54:03 2025 GMT Subject: CN=CDCE0FA255F7759C6EE591A28A18C05F6B5E608F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:5e:2d:7d:9a:b1:fd:b5:46:63:d5:81:34: 15:d7:a5:44:7d:59:89:bd:12:2b:29:6b:b7:f7:dc: de:e9:90:7c:67:5d:62:6d:a0:4f:37:35:fd:e0:74: 44:e8:bb:2f:ce:26:5b:34:38:8e:18:b2:89:2f:cc: 89:8a:cf:5e:89:1c:c8:9e:6a:ee:c5:03:62:9a:cf: aa:3c:17:c3:0d:c8:2e:30:2a:53:25:e0:b6:cf:9c: 40:a8:3f:8c:0c:77:a7:9b:2d:51:c3:dd:7a:90:3f: f9:96:f9:57:77:50:ed:5c:e3:0d:16:0a:7f:de:3e: 83:63:0e:7a:37:bc:94:ae:5a:b7:ca:f4:da:f5:14: d3:0e:4e:47:ec:f6:15:96:14:78:e1:81:38:eb:27: d3:75:83:43:98:36:44:61:22:84:72:71:75:2d:46: 25:8e:27:a7:9a:32:5f:2d:65:c4:f4:e8:7a:45:15: f5:a8:12:56:2b:32:53:b9:85:b3:69:25:f2:3d:83: 76:75:b3:46:dc:a9:71:37:0b:60:9e:36:f8:77:f0: a8:65:86:09:44:8f:50:96:c8:82:a7:6d:3c:3c:a1: eb:93:87:0c:86:45:a6:de:2f:d2:4e:7f:06:dc:14: 88:b2:f4:e4:34:3d:1e:30:82:e1:11:4c:97:24:9f: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CE:0F:A2:55:F7:75:9C:6E:E5:91:A2:8A:18:C0:5F:6B:5E:60:8F X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:fb:50:7a:9b:74:c0:7e:00:60:a4:e6:6c:87:72:49:e1:1f: c7:40:06:ac:51:66:2e:a3:f1:8b:6f:e8:64:d9:7c:b0:a0:08: f3:04:b5:55:46:8a:02:e1:d1:1d:31:de:1e:3f:2a:1d:37:e7: 6c:db:93:33:27:b0:4d:b6:b5:02:74:08:27:dc:40:b8:11:47: 7a:6d:70:d1:48:e2:8e:c7:1a:64:95:25:0c:6d:9c:4b:6e:98: 36:9f:ab:da:33:f1:fd:b7:b6:5e:25:75:a7:e4:f4:11:09:ee: 67:4c:ee:0d:ce:ad:eb:e1:44:06:56:8e:81:ed:7e:54:eb:82: 2c:16:f3:7c:ef:95:05:69:b6:43:2e:2e:75:20:ff:24:8a:80: cb:b4:ef:bb:fd:ce:d1:4b:54:a9:7a:13:eb:25:ba:f7:a3:61: a9:52:d1:59:f3:00:1f:c1:13:31:a0:4a:ef:24:87:3d:93:f9: 4b:bd:4a:f3:c7:2c:70:a8:2b:8a:37:64:dd:bd:9b:3e:04:29: ed:78:d3:75:4d:d1:d5:f0:e9:a5:55:ba:f3:27:10:f0:03:51: dc:e7:21:08:03:48:89:e9:15:88:f4:63:6f:34:e0:3c:01:e9: 27:92:80:8d:5c:9f:1f:e5:0b:6c:0b:cf:e7:d8:8d:24:c6:e9: 43:b4:18:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKryfpBLRGTbutpnTUCTviiYmi5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTA1MDgxMTI3MDNaFw0yNTA1MTEyMjU0MDNaMDMxMTAvBgNV BAMTKENEQ0UwRkEyNTVGNzc1OUM2RUU1OTFBMjhBMThDMDVGNkI1RTYwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNv14tfZqx/bVGY9WBNBXXpUR9 WYm9Eispa7f33N7pkHxnXWJtoE83Nf3gdETouy/OJls0OI4YsokvzImKz16JHMie au7FA2Kaz6o8F8MNyC4wKlMl4LbPnECoP4wMd6ebLVHD3XqQP/mW+Vd3UO1c4w0W Cn/ePoNjDno3vJSuWrfK9Nr1FNMOTkfs9hWWFHjhgTjrJ9N1g0OYNkRhIoRycXUt RiWOJ6eaMl8tZcT06HpFFfWoElYrMlO5hbNpJfI9g3Z1s0bcqXE3C2CeNvh38Khl hglEj1CWyIKnbTw8oeuThwyGRabeL9JOfwbcFIiy9OQ0PR4wguERTJcknwdjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzc4PolX3dZxu5ZGiihjAX2teYI8wHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYyNDA1MmUtMjIwNS00OGYzLWEz Y2ItY2U4YjMyNmI4ZjcxLzAvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdB RkJFNzUyNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL7UHqbdMB+AGCk5myHcknhH8dABqxRZi6j 8Ytv6GTZfLCgCPMEtVVGigLh0R0x3h4/Kh0352zbkzMnsE22tQJ0CCfcQLgRR3pt cNFI4o7HGmSVJQxtnEtumDafq9oz8f23tl4ldafk9BEJ7mdM7g3OrevhRAZWjoHt flTrgiwW83zvlQVptkMuLnUg/ySKgMu077v9ztFLVKl6E+sluvejYalS0VnzAB/B EzGgSu8khz2T+Uu9SvPHLHCoK4o3ZN29mz4EKe1403VN0dXw6aVVuvMnEPADUdzn IQgDSInpFYj0Y2804DwB6SeSgI1cnx/lC2wLz+fYjSTG6UO0GGE= -----END CERTIFICATE-----Generated at Sat May 10 17:02:21 2025 by rpki-client