$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft File: DD29F5E4CE561760A0212F0448987AFBE75263D7.mft (raw, json) Hash identifier: WWVZ7OwkL4lfFScTFMscbEoyjCTtf78ghfDC7o0gAx8= Subject key identifier: FA:DA:80:31:C6:D1:D2:AB:32:99:82:1D:B9:C0:E6:13:47:25:3D:93 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 51F2FA000EF0FD06830FC4E59E6EDFCA2E8228CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft Manifest number: 0319 Signing time: Thu 21 Aug 2025 18:22:07 +0000 Manifest this update: Thu 21 Aug 2025 18:17:07 +0000 Manifest next update: Mon 25 Aug 2025 03:40:07 +0000 Files and hashes: 1: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: R+HBHXL62WCqMu+S9XZ2lfDd7q3jJVRrizTgz3Qq4sM=) 2: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: 0+6+N7y7+z5+GZ0LUn4in9mnEACESucH1zgQmC9xHAA=) 3: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: of7XjX89CiHFfIQLpt1o6+DFkAA2fUQ2SMQAsL24xtw=) 4: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: hfJYX7IXK2yRsIkXzTXumWYWspYzmgD5u1H3fLVubkc=) 5: 3130332e34322e3132322e302f32342d3234203d3e203234353334.roa (hash: XqcXXJVRLAigakZzITIJ9WqM9shB4JwPgUNXZenmspo=) 6: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: x2jz47JNdTLcNfT8vbEKIJnVX3m/vRvrmqpmvqODREA=) 7: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: yHFhz7s9vTM+0GwcewjykllWnmywdIchHv+vwnUyUtQ=) 8: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: X9EKF8Z1uFLJC9IzjlT1aPQkzE/clRuy5X9NkdqNVow=) 9: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: s32Asfb0Vk2AoqdXXpuFo/1b1Jpm9sVE9gF86xInAZ8=) 10: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: w6bNOjpU0I0jjnq/DeAF5pAdWd2fSBGqPyk3RRIO0Ys=) 11: DD29F5E4CE561760A0212F0448987AFBE75263D7.crl (hash: TjIF0W0W2lgeSyAcRLZvAKcqjCBwYvZ0AzoBQE2dqxA=) 12: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: 8qZ2PfVPSW4Gale+B6XAN2CyhRmIb70LvF4xop7XFFw=) 13: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: e59wQms8v5jMBeQnHJR3rPXGniQiJS1tDMckcJ4pEwQ=) 14: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: ORf8MBvb0cc1Hlu83aqDGCB77dQwtn/c/kHba/c2HYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f2:fa:00:0e:f0:fd:06:83:0f:c4:e5:9e:6e:df:ca:2e:82:28:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Aug 21 18:17:07 2025 GMT Not After : Aug 25 03:40:07 2025 GMT Subject: CN=FADA8031C6D1D2AB3299821DB9C0E61347253D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:b7:2d:74:30:41:5f:d7:fa:be:3b:31:26: 07:12:6f:ae:dc:57:21:81:9b:d2:9f:6f:39:3d:b2: 50:c5:f5:c7:79:52:c8:3f:e0:e8:cb:16:f7:e1:d0: 22:7e:f5:f1:e0:aa:0e:d2:fb:64:5b:fe:7a:af:d6: 6f:4f:c2:53:44:ff:c0:19:54:9e:0d:56:96:22:cf: 16:6b:b0:b2:f8:6f:b6:75:8e:bd:a5:45:b4:7b:89: f7:47:3b:00:47:9d:45:12:7d:34:15:51:cc:28:74: be:66:a4:7d:da:30:42:2f:48:a1:0a:e8:67:68:aa: 82:4a:ea:d4:fe:87:d2:c8:88:6b:67:ba:09:d3:39: 84:ad:7e:19:f7:a7:05:07:6a:f1:30:57:5e:99:d8: 76:17:35:3e:78:66:0a:05:0e:53:36:31:03:b2:7e: 9c:f7:80:76:1f:29:d5:6b:44:9e:f6:ab:a4:05:84: 8f:38:36:35:36:d8:f3:54:e7:f7:dc:5a:49:f5:60: 82:c7:6b:c7:7d:d1:9a:a6:2d:9c:a7:75:58:45:0b: 76:37:36:0c:19:ac:69:f8:71:50:3b:b4:4a:94:14: 94:b9:1b:2c:fd:1e:87:23:56:b4:9e:b3:c1:fd:d4: 9a:4c:5b:b2:40:41:0e:4e:6d:e5:62:6f:77:20:78: 47:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DA:80:31:C6:D1:D2:AB:32:99:82:1D:B9:C0:E6:13:47:25:3D:93 X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:37:0e:0c:a4:b9:63:6d:66:da:35:16:41:39:71:00:3f:d8: 51:4a:7d:bd:67:c2:11:d7:e3:3e:43:9a:18:96:9d:2b:d7:fa: 5f:77:c0:2b:d5:14:9a:df:8a:bc:ce:6f:70:1a:46:e2:b2:33: 76:d5:14:5d:43:56:bc:c4:9b:d4:05:5b:ab:06:52:62:1f:24: 74:b5:3e:d0:fc:6a:fa:8a:ab:cd:7e:8f:33:b1:55:81:bd:0a: 15:a2:00:27:97:bf:59:3e:2d:00:23:0a:c6:3e:4a:37:27:4d: fe:f1:cb:90:55:8a:22:a3:ad:53:80:d0:8a:c4:90:2c:d5:4a: ce:d6:a0:4e:3e:d2:9b:cb:5d:90:dc:cf:a9:9b:e2:bb:33:0f: 4c:9c:85:b1:49:a0:17:64:fb:41:e1:a1:1f:09:8b:e2:e9:9d: aa:2f:c7:07:85:7c:d3:45:8d:cd:8c:9d:d9:32:2f:48:40:1a: 07:e4:b9:f7:a2:4f:00:8d:b5:ef:4f:ba:b3:c0:4f:42:e1:c3: ec:b0:85:b2:e7:3f:cc:91:12:6e:a6:96:2e:8f:8d:35:d1:0b: ff:f6:61:bc:0e:36:1f:32:38:ec:22:e5:cd:3a:aa:c7:51:7a: 1f:7a:ec:f7:b3:e2:1e:53:17:56:b5:ef:71:d7:4f:a9:5c:e2: a1:63:31:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUfL6AA7w/QaDD8Tlnm7fyi6CKMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTA4MjExODE3MDdaFw0yNTA4MjUwMzQwMDdaMDMxMTAvBgNV BAMTKEZBREE4MDMxQzZEMUQyQUIzMjk5ODIxREI5QzBFNjEzNDcyNTNEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAubctdDBBX9f6vjsxJgcSb67c VyGBm9Kfbzk9slDF9cd5Usg/4OjLFvfh0CJ+9fHgqg7S+2Rb/nqv1m9PwlNE/8AZ VJ4NVpYizxZrsLL4b7Z1jr2lRbR7ifdHOwBHnUUSfTQVUcwodL5mpH3aMEIvSKEK 6GdoqoJK6tT+h9LIiGtnugnTOYStfhn3pwUHavEwV16Z2HYXNT54ZgoFDlM2MQOy fpz3gHYfKdVrRJ72q6QFhI84NjU22PNU5/fcWkn1YILHa8d90ZqmLZyndVhFC3Y3 NgwZrGn4cVA7tEqUFJS5Gyz9HocjVrSes8H91JpMW7JAQQ5ObeVib3cgeEc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+tqAMcbR0qsymYIducDmE0clPZMwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYyNDA1MmUtMjIwNS00OGYzLWEz Y2ItY2U4YjMyNmI4ZjcxLzAvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdB RkJFNzUyNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD43DgykuWNtZto1FkE5cQA/2FFKfb1nwhHX 4z5DmhiWnSvX+l93wCvVFJrfirzOb3AaRuKyM3bVFF1DVrzEm9QFW6sGUmIfJHS1 PtD8avqKq81+jzOxVYG9ChWiACeXv1k+LQAjCsY+SjcnTf7xy5BViiKjrVOA0IrE kCzVSs7WoE4+0pvLXZDcz6mb4rszD0ychbFJoBdk+0HhoR8Ji+LpnaovxweFfNNF jc2MndkyL0hAGgfkufeiTwCNte9PurPAT0Lhw+ywhbLnP8yREm6mli6PjTXRC//2 YbwONh8yOOwi5c06qsdReh967Pez4h5TF1a173HXT6lc4qFjMe0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:18 2025 by rpki-client