$ rpki-client -vvf repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft File: DD8ADB0CD599281204D387EB652787650920B6C5.mft (raw, json) Hash identifier: lvzp90kCrjj6HiWAW921v1g1XweKj76JeCSUgajwQME= Subject key identifier: 66:43:6A:C0:48:72:DA:D0:C8:B1:FA:7B:AF:8B:62:24:EC:6A:CD:51 Authority key identifier: DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 Certificate issuer: /CN=DD8ADB0CD599281204D387EB652787650920B6C5 Certificate serial: 54BBE262A625D6DCA97647C0669847F9AF3D1BDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft Manifest number: 0136 Signing time: Mon 20 Oct 2025 11:40:39 +0000 Manifest this update: Mon 20 Oct 2025 11:35:39 +0000 Manifest next update: Thu 23 Oct 2025 20:43:39 +0000 Files and hashes: 1: DD8ADB0CD599281204D387EB652787650920B6C5.crl (hash: QrZKpmbZ1v91J1+IAlkAsS9TCohifCwEnhFStjJmQQo=) 2: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: vsLIgIdtrTNWl7Rz7Ctudnow9DnVKuYX5ZMk8sfL1S4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:bb:e2:62:a6:25:d6:dc:a9:76:47:c0:66:98:47:f9:af:3d:1b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8ADB0CD599281204D387EB652787650920B6C5 Validity Not Before: Oct 20 11:35:39 2025 GMT Not After : Oct 23 20:43:39 2025 GMT Subject: CN=66436AC04872DAD0C8B1FA7BAF8B6224EC6ACD51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:b0:f4:d0:e6:4c:86:41:4e:dc:79:de:2e: 89:f4:4f:9d:24:f5:56:d4:62:b8:78:8b:18:6f:f4: 3e:57:89:34:12:f8:da:2c:43:2a:02:1c:7c:01:fd: 1e:05:f7:7c:44:83:f0:0b:91:3a:85:75:d1:73:47: 2a:f1:34:49:51:64:f8:af:06:bf:6a:bc:ee:3c:66: 28:45:db:8f:c0:56:5f:0f:32:53:b3:5f:20:9b:f2: 2b:0c:86:83:2e:ec:43:0d:78:95:c0:2c:f2:fd:1d: 31:f6:7c:80:0c:55:48:ef:ab:40:c0:1a:28:8d:42: 8e:34:e7:21:dc:c0:e4:30:5e:ad:32:69:da:98:2b: 80:d9:29:a9:f8:e1:d2:49:65:2d:d9:d3:f4:c2:76: 58:fb:4b:94:57:0a:e4:d1:bf:39:cf:aa:23:4c:f2: 2c:69:11:1b:0d:0f:eb:c8:5a:1f:86:b8:f5:05:86: d2:00:c6:33:c4:10:ec:3a:1f:7d:03:a9:c2:3e:fb: b6:c7:82:a0:6f:de:df:b6:d7:a5:1b:e0:01:0e:eb: d9:67:66:12:3c:8f:ba:1c:5d:1e:4d:d5:65:c7:24: 20:6f:11:7f:40:bd:ac:f6:f5:b2:fa:01:d6:01:6f: f0:54:f9:b1:f8:af:02:24:79:9c:d6:ce:46:a2:02: 85:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:43:6A:C0:48:72:DA:D0:C8:B1:FA:7B:AF:8B:62:24:EC:6A:CD:51 X509v3 Authority Key Identifier: keyid:DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:16:5e:5d:9c:9b:99:bf:1a:71:21:e2:17:c0:68:b3:d8:74: 06:7e:cd:c4:49:7a:f4:ee:ed:49:9c:ab:31:39:20:d1:fb:be: 80:49:88:c6:b5:ff:93:21:b9:9c:91:b0:a3:53:e5:57:29:07: 28:99:b0:99:90:4c:cf:48:87:f8:e1:bf:e6:51:db:d4:1e:e3: 23:e8:0e:fe:77:9d:c1:c1:c5:4f:51:f0:86:0a:b6:bb:72:6f: 80:21:30:f8:8f:fe:2d:f6:57:ca:be:19:85:86:77:3f:b1:88: 52:ca:af:09:66:31:3f:a9:1e:d6:08:ae:e8:8d:a4:d9:3a:1b: 88:cf:68:4b:39:f2:fd:4c:42:be:06:5b:72:8b:b5:de:75:c9: 2b:b1:80:3c:1f:b2:8a:29:7d:ac:94:5b:31:15:17:4e:27:12: 2a:31:e2:4d:cc:62:74:cc:fb:1f:4b:fe:71:bf:c3:99:79:52: 52:85:cf:5f:9e:64:f6:76:cf:d0:c8:fd:ea:a7:22:77:09:cf: db:b5:c2:45:39:f9:4e:d9:9d:09:6d:16:f2:9f:f1:41:ef:72: b4:0d:a9:36:f9:ee:3a:4b:b0:ad:21:36:d2:aa:da:72:31:73: 59:fb:1c:20:b7:90:00:25:be:e4:b3:94:ca:2f:7b:58:27:9d: 2b:c2:9d:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVLviYqYl1typdkfAZphH+a89G9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUw OTIwQjZDNTAeFw0yNTEwMjAxMTM1MzlaFw0yNTEwMjMyMDQzMzlaMDMxMTAvBgNV BAMTKDY2NDM2QUMwNDg3MkRBRDBDOEIxRkE3QkFGOEI2MjI0RUM2QUNENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSrD00OZMhkFO3HneLon0T50k 9VbUYrh4ixhv9D5XiTQS+NosQyoCHHwB/R4F93xEg/ALkTqFddFzRyrxNElRZPiv Br9qvO48ZihF24/AVl8PMlOzXyCb8isMhoMu7EMNeJXALPL9HTH2fIAMVUjvq0DA GiiNQo405yHcwOQwXq0yadqYK4DZKan44dJJZS3Z0/TCdlj7S5RXCuTRvznPqiNM 8ixpERsND+vIWh+GuPUFhtIAxjPEEOw6H30DqcI++7bHgqBv3t+216Ub4AEO69ln ZhI8j7ocXR5N1WXHJCBvEX9Avaz29bL6AdYBb/BU+bH4rwIkeZzWzkaiAoVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZkNqwEhy2tDIsfp7r4tiJOxqzVEwHwYDVR0j BBgwFoAU3YrbDNWZKBIE04frZSeHZQkgtsUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmU2NGIwZC02NDZjLTRjZWMtOTQxZi03NDNiMmQxYmNlNGUvMC9ERDhBREIwQ0Q1 OTkyODEyMDREMzg3RUI2NTI3ODc2NTA5MjBCNkM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUwOTIw QjZDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3 NjUwOTIwQjZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkWXl2cm5m/GnEh4hfAaLPYdAZ+zcRJevTu 7UmcqzE5INH7voBJiMa1/5MhuZyRsKNT5VcpByiZsJmQTM9Ih/jhv+ZR29Qe4yPo Dv53ncHBxU9R8IYKtrtyb4AhMPiP/i32V8q+GYWGdz+xiFLKrwlmMT+pHtYIruiN pNk6G4jPaEs58v1MQr4GW3KLtd51ySuxgDwfsoopfayUWzEVF04nEiox4k3MYnTM +x9L/nG/w5l5UlKFz1+eZPZ2z9DI/eqnIncJz9u1wkU5+U7ZnQltFvKf8UHvcrQN qTb57jpLsK0hNtKq2nIxc1n7HCC3kAAlvuSzlMove1gnnSvCna4= -----END CERTIFICATE-----Generated at Tue Oct 21 01:34:20 2025 by rpki-client