$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft File: DD29F5E4CE561760A0212F0448987AFBE75263D7.mft (raw, json) Hash identifier: d3NV3xM5i0VtNTve5QSBvFCZXPYtSykFFDOlNyJ5Y8Q= Subject key identifier: A9:8D:CA:AE:AD:A9:71:C7:44:74:82:CF:E0:65:60:C5:D6:DE:27:B9 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 6AD373DC0814F60FDA00BF5F26C89F82D3DEFD02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft Manifest number: 0333 Signing time: Sun 19 Oct 2025 16:52:10 +0000 Manifest this update: Sun 19 Oct 2025 16:47:10 +0000 Manifest next update: Thu 23 Oct 2025 04:50:10 +0000 Files and hashes: 1: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: s32Asfb0Vk2AoqdXXpuFo/1b1Jpm9sVE9gF86xInAZ8=) 2: DD29F5E4CE561760A0212F0448987AFBE75263D7.crl (hash: grmM6wsUTt4Kc/YKGWK12CIW1BaVvnnclgBqoONGhbs=) 3: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: R+HBHXL62WCqMu+S9XZ2lfDd7q3jJVRrizTgz3Qq4sM=) 4: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: ORf8MBvb0cc1Hlu83aqDGCB77dQwtn/c/kHba/c2HYo=) 5: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: 8qZ2PfVPSW4Gale+B6XAN2CyhRmIb70LvF4xop7XFFw=) 6: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: X9EKF8Z1uFLJC9IzjlT1aPQkzE/clRuy5X9NkdqNVow=) 7: 3130332e34322e3132322e302f32342d3234203d3e203234353334.roa (hash: XqcXXJVRLAigakZzITIJ9WqM9shB4JwPgUNXZenmspo=) 8: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: w6bNOjpU0I0jjnq/DeAF5pAdWd2fSBGqPyk3RRIO0Ys=) 9: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: yHFhz7s9vTM+0GwcewjykllWnmywdIchHv+vwnUyUtQ=) 10: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: x2jz47JNdTLcNfT8vbEKIJnVX3m/vRvrmqpmvqODREA=) 11: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: hfJYX7IXK2yRsIkXzTXumWYWspYzmgD5u1H3fLVubkc=) 12: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: of7XjX89CiHFfIQLpt1o6+DFkAA2fUQ2SMQAsL24xtw=) 13: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: 0+6+N7y7+z5+GZ0LUn4in9mnEACESucH1zgQmC9xHAA=) 14: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: e59wQms8v5jMBeQnHJR3rPXGniQiJS1tDMckcJ4pEwQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d3:73:dc:08:14:f6:0f:da:00:bf:5f:26:c8:9f:82:d3:de:fd:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Oct 19 16:47:10 2025 GMT Not After : Oct 23 04:50:10 2025 GMT Subject: CN=A98DCAAEADA971C7447482CFE06560C5D6DE27B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:de:de:ff:c9:16:43:b4:6b:76:f2:89:d5:7e: b4:6d:ee:2e:0e:69:2d:13:d4:6a:b8:f0:f0:de:52: 25:2d:c2:5d:cc:65:ef:32:6f:1b:d1:ff:9e:5e:2a: db:3f:e8:35:df:17:80:c4:72:b9:9b:7e:b0:7b:95: 96:33:b3:89:6a:83:4b:55:53:08:a8:c2:21:c3:16: 86:e1:f4:dd:1a:13:50:30:21:dc:77:a8:0c:4a:21: 6b:ca:41:84:53:6d:2e:6f:be:cb:08:8f:d2:fc:34: e7:4a:de:98:8c:65:93:77:42:cc:73:82:12:b4:4f: 75:17:5b:73:b1:2f:89:c4:32:a3:27:c8:4a:0b:f4: fa:1a:38:ab:e7:be:ac:4b:9b:67:90:11:80:c9:59: 97:24:7e:ec:97:f6:b7:15:bd:8a:df:06:40:19:9b: 68:b0:74:c3:29:e0:78:fb:60:63:93:22:0a:7e:cc: 05:90:85:1f:1c:90:29:19:e2:94:90:76:fa:83:42: 8d:d9:54:7e:e8:44:f2:eb:15:a4:c7:ca:e3:c0:52: 77:ed:6d:ae:93:74:06:8d:09:a7:1c:62:5d:99:27: c0:60:be:f9:ba:77:1d:48:a8:6d:66:52:06:e7:64: 9e:55:b3:0d:26:2b:4e:0f:e0:04:bf:fc:c6:7b:b1: 95:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8D:CA:AE:AD:A9:71:C7:44:74:82:CF:E0:65:60:C5:D6:DE:27:B9 X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:39:56:6e:dd:3e:9c:35:36:e1:31:06:9c:01:1f:16:61:13: 92:b0:33:d7:fb:ee:c6:04:a0:ed:69:2a:57:d0:6f:3f:f5:61: 68:d8:b5:8b:96:ca:aa:e4:c0:0b:23:78:48:94:51:70:a4:81: 0f:c1:f0:84:d6:ba:27:8d:1b:0f:5a:db:b7:2b:4e:a7:9a:13: 1b:24:aa:25:21:95:26:c4:31:ec:94:f9:03:cb:c9:f0:ba:33: 4c:64:1f:ac:dd:74:c2:55:13:df:83:03:de:67:dd:c4:28:0c: bf:49:fe:7e:e0:e6:32:5e:76:16:f6:00:72:c5:93:81:2d:cb: 3e:35:43:d7:d4:35:c1:0b:da:53:69:75:14:06:77:a4:a2:d1: 1c:36:11:47:85:43:11:b1:38:b4:25:3e:55:b9:70:29:af:58: bf:96:23:d4:67:c5:d4:9d:e0:07:b8:d4:b6:a5:b1:ba:be:42: 25:9e:45:b8:33:d6:cc:60:cc:6e:bc:4a:7d:4c:1a:b1:6a:28: c6:fd:1f:f6:14:a3:d3:f3:d8:4d:0d:e2:9b:f3:7a:72:6e:9e: a6:3c:10:2d:7d:e6:d7:f9:17:2e:28:21:06:08:dc:22:04:a0: 6b:cf:ae:eb:89:5a:49:2e:0f:bb:4f:5d:9b:3a:60:48:7f:47: 43:83:c7:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUatNz3AgU9g/aAL9fJsifgtPe/QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTEwMTkxNjQ3MTBaFw0yNTEwMjMwNDUwMTBaMDMxMTAvBgNV BAMTKEE5OERDQUFFQURBOTcxQzc0NDc0ODJDRkUwNjU2MEM1RDZERTI3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY3t7/yRZDtGt28onVfrRt7i4O aS0T1Gq48PDeUiUtwl3MZe8ybxvR/55eKts/6DXfF4DEcrmbfrB7lZYzs4lqg0tV UwiowiHDFobh9N0aE1AwIdx3qAxKIWvKQYRTbS5vvssIj9L8NOdK3piMZZN3Qsxz ghK0T3UXW3OxL4nEMqMnyEoL9PoaOKvnvqxLm2eQEYDJWZckfuyX9rcVvYrfBkAZ m2iwdMMp4Hj7YGOTIgp+zAWQhR8ckCkZ4pSQdvqDQo3ZVH7oRPLrFaTHyuPAUnft ba6TdAaNCaccYl2ZJ8Bgvvm6dx1IqG1mUgbnZJ5Vsw0mK04P4AS//MZ7sZXNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqY3Krq2pccdEdILP4GVgxdbeJ7kwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYyNDA1MmUtMjIwNS00OGYzLWEz Y2ItY2U4YjMyNmI4ZjcxLzAvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdB RkJFNzUyNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIo5Vm7dPpw1NuExBpwBHxZhE5KwM9f77sYE oO1pKlfQbz/1YWjYtYuWyqrkwAsjeEiUUXCkgQ/B8ITWuieNGw9a27crTqeaExsk qiUhlSbEMeyU+QPLyfC6M0xkH6zddMJVE9+DA95n3cQoDL9J/n7g5jJedhb2AHLF k4Etyz41Q9fUNcEL2lNpdRQGd6Si0Rw2EUeFQxGxOLQlPlW5cCmvWL+WI9RnxdSd 4Ae41Lalsbq+QiWeRbgz1sxgzG68Sn1MGrFqKMb9H/YUo9Pz2E0N4pvzenJunqY8 EC195tf5Fy4oIQYI3CIEoGvPruuJWkkuD7tPXZs6YEh/R0ODx+o= -----END CERTIFICATE-----Generated at Mon Oct 20 19:41:17 2025 by rpki-client