$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json) Hash identifier: aStj0lu0Z9EKe0xgigdsuVn0d75yfJ5c4s3AgAm+Lpg= Subject key identifier: 3D:2D:D9:88:D1:A0:7D:A2:BA:31:6F:3F:0C:4D:72:E3:BE:DC:81:CC Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 3E057BA766D3B3AF90D75C9DBAF9A59BDDDDFB28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft Manifest number: 025E Signing time: Sun 19 Oct 2025 07:10:52 +0000 Manifest this update: Sun 19 Oct 2025 07:05:52 +0000 Manifest next update: Wed 22 Oct 2025 07:15:52 +0000 Files and hashes: 1: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: G7BNKn0aQeDATXJ1JamzPIxZOqsRSSDm9xJMQAbHt5c=) 2: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: b5CMeUNLFBdcsiFXDI1xzrYwQw/tQkuaZHJ3axZvFpM=) 3: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: xpJYN2koDz6242yH404bncg8zalibRwq73KpJsJcVB8=) 4: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: gV2Q8xF8XiWikE1+w9yu7jENKeKHaDELW9P6oOlSzDE=) 5: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: 09EcthFcc0U294qSUk1qjMUpfEmQzlaHp9ePt/3ow3Q=) 6: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: tArDMQ0CljWlxInpOnDNWhLbYH4HF1sjePzkXRXnEac=) 7: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: fW5qne1R9fTa45nGDciUROmSkAV8mbUeGR9m/oXMOAw=) 8: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: ebXS+Tyb8iuyOHa8yQE2FE8hZAgaawDNcd7a/TUN4jY=) 9: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: vuTTJNURLP5vgJImsWTQOQLshtByIl8yIWAQC+TExAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:05:7b:a7:66:d3:b3:af:90:d7:5c:9d:ba:f9:a5:9b:dd:dd:fb:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Oct 19 07:05:52 2025 GMT Not After : Oct 22 07:15:52 2025 GMT Subject: CN=3D2DD988D1A07DA2BA316F3F0C4D72E3BEDC81CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:26:6e:b1:1f:f7:57:4f:01:b5:da:0f:e2: d3:97:91:41:40:8c:3d:32:42:fc:18:80:dc:54:b7: 6a:90:1f:bf:2d:73:df:a4:03:03:1d:ac:5b:8e:1c: 51:9c:ce:b1:42:9c:0e:44:81:ee:23:1e:0a:2e:da: 91:95:7c:42:55:37:d1:f2:53:9e:ee:1d:7c:e6:22: dd:8c:f8:85:70:2a:33:8b:8d:84:8b:5a:e5:bd:aa: d2:9c:c8:53:13:ca:48:e9:04:2a:07:1f:2e:87:36: 60:1d:ee:40:34:33:99:c2:a7:5c:30:c9:67:ce:8d: 71:62:80:dd:8f:1b:f0:1a:44:e5:dc:f4:4d:0e:35: 4f:26:71:0e:5d:c2:88:73:d6:bc:c2:a9:04:08:37: 4a:c0:bc:d2:16:3a:48:8d:b0:d2:d5:f9:4b:10:7d: 0e:5d:47:66:9c:94:02:3f:93:46:3d:4f:1d:3c:42: 7b:6a:67:d3:19:eb:66:b0:14:47:fe:5f:29:78:54: 14:17:30:79:ce:3f:e4:b6:52:10:6c:61:91:26:52: a5:a1:5c:42:aa:ed:3f:6e:fc:61:c0:fc:f7:70:65: ed:ad:2c:c6:43:83:c7:2b:59:eb:cc:d5:13:6e:16: f9:16:e8:ee:68:15:2c:31:56:5f:b5:82:47:66:9b: cc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2D:D9:88:D1:A0:7D:A2:BA:31:6F:3F:0C:4D:72:E3:BE:DC:81:CC X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f2:a8:45:16:d9:81:d6:30:64:03:9b:1c:26:db:1e:3e:89: a7:19:1f:0d:a3:83:07:9c:28:a2:ff:4e:9f:c1:29:cc:e9:b4: 40:1c:77:f5:a2:e2:0b:96:da:cd:47:bb:7d:ba:1d:ba:1f:5a: ce:e7:b0:c5:a0:11:4d:6b:4e:57:ad:ae:fd:88:5a:6a:85:46: 73:dd:b0:85:08:ad:09:07:2a:6c:47:98:96:eb:14:f7:ce:aa: 95:74:60:51:16:6c:73:12:95:3a:fa:f9:a6:7a:4d:0b:31:14: 57:aa:4b:06:6b:9b:40:95:50:78:25:06:69:41:28:ac:c3:01: 60:7f:e0:23:e3:6a:8e:b8:9e:60:fc:cb:b6:28:a7:cd:36:a3: 16:c0:0d:99:4c:5f:c1:e1:c3:ed:c0:c0:47:7c:bf:51:ab:68: 01:28:2d:21:68:bc:a1:48:3d:6b:d6:84:48:30:c6:08:78:6e: b9:63:68:b5:8a:40:b6:12:32:83:37:0a:f6:37:00:b1:9a:68: ef:f3:83:d6:3d:26:96:d4:7b:fd:e5:c4:1c:43:69:95:a7:0f: 08:4e:99:a1:44:76:2f:69:3d:3e:b3:70:52:8d:31:3d:87:48: 34:c2:c8:af:df:47:41:3f:78:9a:7d:ad:d4:da:aa:b4:f4:d7: 46:c5:44:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgV7p2bTs6+Q11yduvmlm93d+ygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNTEwMTkwNzA1NTJaFw0yNTEwMjIwNzE1NTJaMDMxMTAvBgNV BAMTKDNEMkREOTg4RDFBMDdEQTJCQTMxNkYzRjBDNEQ3MkUzQkVEQzgxQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3SZusR/3V08BtdoP4tOXkUFA jD0yQvwYgNxUt2qQH78tc9+kAwMdrFuOHFGczrFCnA5Ege4jHgou2pGVfEJVN9Hy U57uHXzmIt2M+IVwKjOLjYSLWuW9qtKcyFMTykjpBCoHHy6HNmAd7kA0M5nCp1ww yWfOjXFigN2PG/AaROXc9E0ONU8mcQ5dwohz1rzCqQQIN0rAvNIWOkiNsNLV+UsQ fQ5dR2aclAI/k0Y9Tx08QntqZ9MZ62awFEf+Xyl4VBQXMHnOP+S2UhBsYZEmUqWh XEKq7T9u/GHA/PdwZe2tLMZDg8crWevM1RNuFvkW6O5oFSwxVl+1gkdmm8zHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPS3ZiNGgfaK6MW8/DE1y477cgcwwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2 OUFGNjhCMTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELyqEUW2YHWMGQDmxwm2x4+iacZHw2jgwec KKL/Tp/BKczptEAcd/Wi4guW2s1Hu326HbofWs7nsMWgEU1rTletrv2IWmqFRnPd sIUIrQkHKmxHmJbrFPfOqpV0YFEWbHMSlTr6+aZ6TQsxFFeqSwZrm0CVUHglBmlB KKzDAWB/4CPjao64nmD8y7Yop802oxbADZlMX8Hhw+3AwEd8v1GraAEoLSFovKFI PWvWhEgwxgh4brljaLWKQLYSMoM3CvY3ALGaaO/zg9Y9JpbUe/3lxBxDaZWnDwhO maFEdi9pPT6zcFKNMT2HSDTCyK/fR0E/eJp9rdTaqrT010bFRHg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:56:21 2025 by rpki-client