$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft File: DD29F5E4CE561760A0212F0448987AFBE75263D7.mft (raw, json) Hash identifier: rCVbN2p4fVgpqak4v9DVfnn75AenJ60sWU7O+BgZ5zQ= Subject key identifier: 4E:D5:73:03:B9:2F:8F:FB:DC:8E:B7:9F:42:7C:3E:AB:F4:44:4D:5C Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 5510BE473FA0474438E1E5A4752FE1F18ECD9712 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft Manifest number: 0301 Signing time: Sat 28 Jun 2025 04:42:04 +0000 Manifest this update: Sat 28 Jun 2025 04:37:04 +0000 Manifest next update: Tue 01 Jul 2025 10:24:04 +0000 Files and hashes: 1: DD29F5E4CE561760A0212F0448987AFBE75263D7.crl (hash: VtRKySNW+vQr0LrNx3v5l5ouT+/RvH3JZOyyIQPqTI8=) 2: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: yHFhz7s9vTM+0GwcewjykllWnmywdIchHv+vwnUyUtQ=) 3: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: e59wQms8v5jMBeQnHJR3rPXGniQiJS1tDMckcJ4pEwQ=) 4: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: 8qZ2PfVPSW4Gale+B6XAN2CyhRmIb70LvF4xop7XFFw=) 5: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: of7XjX89CiHFfIQLpt1o6+DFkAA2fUQ2SMQAsL24xtw=) 6: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: X9EKF8Z1uFLJC9IzjlT1aPQkzE/clRuy5X9NkdqNVow=) 7: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: R+HBHXL62WCqMu+S9XZ2lfDd7q3jJVRrizTgz3Qq4sM=) 8: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: ORf8MBvb0cc1Hlu83aqDGCB77dQwtn/c/kHba/c2HYo=) 9: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: hfJYX7IXK2yRsIkXzTXumWYWspYzmgD5u1H3fLVubkc=) 10: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: 0+6+N7y7+z5+GZ0LUn4in9mnEACESucH1zgQmC9xHAA=) 11: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: x2jz47JNdTLcNfT8vbEKIJnVX3m/vRvrmqpmvqODREA=) 12: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: w6bNOjpU0I0jjnq/DeAF5pAdWd2fSBGqPyk3RRIO0Ys=) 13: 3130332e34322e3132322e302f32342d3234203d3e203234353334.roa (hash: U0ZYfoLEU7/YUTuj/HEbmKOFNpez0H5ASCN++eNNi6Y=) 14: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: s32Asfb0Vk2AoqdXXpuFo/1b1Jpm9sVE9gF86xInAZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 10:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:10:be:47:3f:a0:47:44:38:e1:e5:a4:75:2f:e1:f1:8e:cd:97:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Jun 28 04:37:04 2025 GMT Not After : Jul 1 10:24:04 2025 GMT Subject: CN=4ED57303B92F8FFBDC8EB79F427C3EABF4444D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:91:91:f6:42:76:37:9b:bf:78:d7:eb:05: 28:4f:05:4a:da:61:52:7c:32:a4:91:d5:41:48:a9: e8:99:df:0f:be:eb:8e:58:4c:a1:c4:70:a9:f3:93: 46:2a:f0:88:d2:e7:9d:54:65:8a:0c:f0:95:dc:5a: 0a:ae:f0:96:90:9e:72:17:a0:f2:1d:5a:2b:26:06: 38:6e:72:dd:44:6e:bf:6a:c5:da:18:52:3b:c4:3a: 0f:fd:8c:93:e2:d5:a9:b9:64:02:c8:18:44:cf:bd: 3e:3f:ba:4a:ee:38:f3:a6:97:d5:53:1c:3c:5b:9f: 29:2a:d3:e1:0a:9c:f8:43:0b:4d:84:7a:0d:0e:1b: 8f:c9:15:30:c2:70:9a:4e:25:26:c4:3d:fe:f5:f4: 34:d0:bc:7a:09:e3:7b:bc:c7:9a:d9:16:40:c2:71: ad:98:17:f6:b0:3f:ef:14:8d:e7:75:2a:cb:3a:ae: 87:59:24:ee:66:94:c1:06:3e:c9:5b:73:5c:b8:25: 2a:40:06:b2:de:8b:2e:fd:bd:ec:4d:71:fd:60:4f: 4e:5c:1a:33:e1:9e:44:eb:03:95:d4:79:2d:f5:b8: 5d:0c:f0:8a:42:65:38:f9:72:d9:8c:7e:df:50:a3: c8:e2:c7:e4:fc:be:ae:f1:8b:d3:b8:f2:3b:67:91: c4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D5:73:03:B9:2F:8F:FB:DC:8E:B7:9F:42:7C:3E:AB:F4:44:4D:5C X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b1:2d:a0:45:90:47:06:86:4f:8c:5e:50:f0:31:e7:b7:ce: 39:70:86:01:75:52:43:24:25:2a:e4:a6:47:cf:b7:85:f9:c9: 6f:d9:d7:da:dd:71:ad:a1:ea:72:97:05:5a:c7:e2:38:ee:12: 74:f8:e9:83:53:28:5f:15:e7:ed:ca:54:67:b8:e9:d1:90:8a: 06:07:6e:e7:f6:94:68:9c:66:02:2c:08:3b:56:ef:b4:f5:d1: 44:28:88:0e:26:fc:dd:5f:1a:b1:41:ee:d2:54:98:83:e8:bc: 07:c9:e6:42:db:f8:ee:43:4e:53:52:3b:78:45:6d:98:44:28: dc:62:84:20:1c:b7:62:c5:aa:d6:94:ee:ca:be:b9:80:b7:24: bf:44:93:af:0c:9b:77:4d:3d:d3:e3:74:62:b2:80:7e:c3:21: fc:a3:3f:40:74:dc:cc:10:9f:b9:97:85:f9:f8:34:53:11:6c: 2b:27:6f:a3:b0:d9:14:a1:3b:ea:e3:c6:57:c5:f4:0f:2e:c7: 7b:f0:d0:c2:e6:ae:7b:a7:2f:ff:ef:5c:b7:e2:7e:b1:38:9a: 31:1b:ce:22:65:c2:48:1e:c7:36:39:ea:f8:40:6c:81:ba:7a: e2:22:98:41:90:83:fd:4a:ce:99:52:6c:13:7a:40:67:5d:8c: 3c:64:ba:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVRC+Rz+gR0Q44eWkdS/h8Y7NlxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTA2MjgwNDM3MDRaFw0yNTA3MDExMDI0MDRaMDMxMTAvBgNV BAMTKDRFRDU3MzAzQjkyRjhGRkJEQzhFQjc5RjQyN0MzRUFCRjQ0NDRENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IpGR9kJ2N5u/eNfrBShPBUra YVJ8MqSR1UFIqeiZ3w++645YTKHEcKnzk0Yq8IjS551UZYoM8JXcWgqu8JaQnnIX oPIdWismBjhuct1Ebr9qxdoYUjvEOg/9jJPi1am5ZALIGETPvT4/ukruOPOml9VT HDxbnykq0+EKnPhDC02Eeg0OG4/JFTDCcJpOJSbEPf719DTQvHoJ43u8x5rZFkDC ca2YF/awP+8Ujed1Kss6rodZJO5mlMEGPslbc1y4JSpABrLeiy79vexNcf1gT05c GjPhnkTrA5XUeS31uF0M8IpCZTj5ctmMft9Qo8jix+T8vq7xi9O48jtnkcRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTtVzA7kvj/vcjrefQnw+q/RETVwwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYyNDA1MmUtMjIwNS00OGYzLWEz Y2ItY2U4YjMyNmI4ZjcxLzAvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdB RkJFNzUyNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGxLaBFkEcGhk+MXlDwMee3zjlwhgF1UkMk JSrkpkfPt4X5yW/Z19rdca2h6nKXBVrH4jjuEnT46YNTKF8V5+3KVGe46dGQigYH buf2lGicZgIsCDtW77T10UQoiA4m/N1fGrFB7tJUmIPovAfJ5kLb+O5DTlNSO3hF bZhEKNxihCAct2LFqtaU7sq+uYC3JL9Ek68Mm3dNPdPjdGKygH7DIfyjP0B03MwQ n7mXhfn4NFMRbCsnb6Ow2RShO+rjxlfF9A8ux3vw0MLmrnunL//vXLfifrE4mjEb ziJlwkgexzY56vhAbIG6euIimEGQg/1KzplSbBN6QGddjDxkups= -----END CERTIFICATE-----Generated at Sun Jun 29 18:43:52 2025 by rpki-client