$ rpki-client -vvf repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft File: DD8ADB0CD599281204D387EB652787650920B6C5.mft (raw, json) Hash identifier: ZGdxF03PXQskzQV8tHV9Lo6NRhJGEqul9V9hZqd0l0U= Subject key identifier: 71:C9:7B:0F:20:E3:BB:9C:F4:F9:DF:B0:BE:E1:52:B6:7E:44:50:75 Authority key identifier: DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 Certificate issuer: /CN=DD8ADB0CD599281204D387EB652787650920B6C5 Certificate serial: 69278CFAED9413E5575A5002B090606210C65034 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft Manifest number: 011B Signing time: Fri 22 Aug 2025 14:00:38 +0000 Manifest this update: Fri 22 Aug 2025 13:55:38 +0000 Manifest next update: Mon 25 Aug 2025 16:26:38 +0000 Files and hashes: 1: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: 5FFzhuEH4sCF54XVtFSTU94fa/L5mjleJyrEVu3hEAE=) 2: DD8ADB0CD599281204D387EB652787650920B6C5.crl (hash: vYWqhnzyz97nYTkJTAkS88pViRanp3MHX1DsDGh+skE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:27:8c:fa:ed:94:13:e5:57:5a:50:02:b0:90:60:62:10:c6:50:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8ADB0CD599281204D387EB652787650920B6C5 Validity Not Before: Aug 22 13:55:38 2025 GMT Not After : Aug 25 16:26:38 2025 GMT Subject: CN=71C97B0F20E3BB9CF4F9DFB0BEE152B67E445075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:7b:aa:7e:ac:cb:dc:04:e3:ae:b6:3c:e0: 82:b1:16:f8:a8:6e:14:8e:e2:53:4a:f2:66:c8:f8: 93:b5:36:c3:63:75:c1:db:5b:a3:94:0a:8d:84:1f: 0d:a5:93:4a:1c:50:73:81:19:c5:8d:40:6d:76:a6: 29:a8:74:f9:1d:ee:72:ad:61:73:3e:73:b1:27:a4: 96:b0:a5:d0:b3:14:8f:34:99:8a:09:e4:b2:db:df: a3:14:02:a7:3b:57:ab:6a:f3:5f:5c:98:9e:d5:7f: b8:b5:5a:39:a6:c0:4f:c8:81:e8:c1:3b:58:7b:06: 5a:31:8c:42:05:fe:0e:ec:b5:af:e5:c4:1d:fe:1a: 6d:2b:e0:37:ba:7b:73:1e:e2:45:fa:fd:d0:65:03: 84:bb:a3:7a:a5:17:87:24:42:0f:39:ef:83:06:35: fb:a7:d7:8b:ac:2d:10:d5:36:53:b1:26:ed:9a:ef: 50:1b:df:0a:ca:7f:e8:9e:56:5c:c1:b7:30:b3:db: 82:f0:7b:1c:ef:89:84:36:27:ca:86:e3:d6:b1:f3: d1:bf:0b:9c:db:c6:8c:20:b8:ed:19:65:89:fa:b8: af:7d:d5:3c:12:41:61:1f:b9:0d:cd:b9:d4:b0:1a: b1:e9:65:18:e0:00:04:62:b3:0c:bb:3d:04:61:bd: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C9:7B:0F:20:E3:BB:9C:F4:F9:DF:B0:BE:E1:52:B6:7E:44:50:75 X509v3 Authority Key Identifier: keyid:DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:2b:a6:3b:11:03:54:4b:41:6e:c3:d5:0c:b2:52:d1:2a:ba: be:e7:6b:c5:22:f8:86:54:80:85:87:de:88:32:a7:6d:4d:d0: ee:c2:19:75:14:ec:7c:0e:5f:d4:d5:da:de:f5:95:95:47:20: ab:77:b4:b8:1b:2d:f3:5e:55:cb:e9:68:51:c4:8b:3e:18:8b: 0f:2b:c4:41:b8:50:69:c5:0c:5b:a9:b4:a4:ae:d8:3b:de:67: c7:0c:70:b1:ef:1a:5d:0b:1a:a6:84:fb:a4:29:a9:b7:9e:a0: d5:38:93:a7:07:c4:d6:8e:89:c6:84:51:34:44:54:ab:10:42: 6a:c1:14:ce:cc:8b:59:63:98:b3:d8:c5:30:22:31:a5:c9:ae: 7d:ae:ae:7f:6d:ac:d4:d9:e5:0f:52:b4:2f:36:82:fd:63:c6: 7d:b3:b0:41:91:b3:07:d2:80:d0:e8:ed:86:a2:f9:85:ae:ef: 84:60:74:da:e9:5a:47:af:28:25:01:7d:e5:0f:22:db:1a:d9: 2f:26:4e:8c:b2:a1:b3:99:aa:91:ed:f4:98:09:85:7b:f2:74: b5:11:40:ac:e7:9d:da:98:63:21:a7:ab:15:9f:14:c5:72:f7: a4:33:cf:9c:69:a5:a6:14:80:06:1b:98:ac:c8:07:d3:32:67: c3:42:a6:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaSeM+u2UE+VXWlACsJBgYhDGUDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUw OTIwQjZDNTAeFw0yNTA4MjIxMzU1MzhaFw0yNTA4MjUxNjI2MzhaMDMxMTAvBgNV BAMTKDcxQzk3QjBGMjBFM0JCOUNGNEY5REZCMEJFRTE1MkI2N0U0NDUwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mXuqfqzL3ATjrrY84IKxFvio bhSO4lNK8mbI+JO1NsNjdcHbW6OUCo2EHw2lk0ocUHOBGcWNQG12pimodPkd7nKt YXM+c7EnpJawpdCzFI80mYoJ5LLb36MUAqc7V6tq819cmJ7Vf7i1WjmmwE/IgejB O1h7BloxjEIF/g7sta/lxB3+Gm0r4De6e3Me4kX6/dBlA4S7o3qlF4ckQg8574MG Nfun14usLRDVNlOxJu2a71Ab3wrKf+ieVlzBtzCz24LwexzviYQ2J8qG49ax89G/ C5zbxowguO0ZZYn6uK991TwSQWEfuQ3NudSwGrHpZRjgAARiswy7PQRhvTkpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUccl7DyDju5z0+d+wvuFStn5EUHUwHwYDVR0j BBgwFoAU3YrbDNWZKBIE04frZSeHZQkgtsUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmU2NGIwZC02NDZjLTRjZWMtOTQxZi03NDNiMmQxYmNlNGUvMC9ERDhBREIwQ0Q1 OTkyODEyMDREMzg3RUI2NTI3ODc2NTA5MjBCNkM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUwOTIw QjZDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3 NjUwOTIwQjZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkrpjsRA1RLQW7D1QyyUtEqur7na8Ui+IZU gIWH3ogyp21N0O7CGXUU7HwOX9TV2t71lZVHIKt3tLgbLfNeVcvpaFHEiz4Yiw8r xEG4UGnFDFuptKSu2DveZ8cMcLHvGl0LGqaE+6QpqbeeoNU4k6cHxNaOicaEUTRE VKsQQmrBFM7Mi1ljmLPYxTAiMaXJrn2urn9trNTZ5Q9StC82gv1jxn2zsEGRswfS gNDo7Yai+YWu74RgdNrpWkevKCUBfeUPItsa2S8mToyyobOZqpHt9JgJhXvydLUR QKznndqYYyGnqxWfFMVy96Qzz5xppaYUgAYbmKzIB9MyZ8NCplU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:36:56 2025 by rpki-client