$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: OQeZ9OnLT5Rx2wHLTXFtzbdpRbprjS4K/rgb0MWrc3o= Subject key identifier: 13:96:B1:63:E2:32:EB:42:6A:F6:01:7E:71:C2:92:4C:0F:6B:1F:B4 Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 713B6FB5396F29F96DD30F45475EC73F60CFD29D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 015F Signing time: Sun 29 Jun 2025 19:12:06 +0000 Manifest this update: Sun 29 Jun 2025 19:07:06 +0000 Manifest next update: Wed 02 Jul 2025 20:28:06 +0000 Files and hashes: 1: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: UFBLvP8VDtl1DDf5zqVe0BV9zCT/XMTCGYLgIbR/Dbo=) 2: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) 3: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: 9NdE9Yt64lHcZmHfcp/BPdUY3C5A8B6IZ0IM6khU6pM=) 4: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) 5: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:3b:6f:b5:39:6f:29:f9:6d:d3:0f:45:47:5e:c7:3f:60:cf:d2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Jun 29 19:07:06 2025 GMT Not After : Jul 2 20:28:06 2025 GMT Subject: CN=1396B163E232EB426AF6017E71C2924C0F6B1FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:8e:ec:c4:3a:c7:4c:e8:9d:b3:a4:96:dc: e2:06:ee:bf:80:e6:9f:cc:ff:f4:34:94:f0:8c:f0: c9:96:18:4b:5a:dd:f4:2e:9d:0d:d1:5b:64:9f:c6: 27:c6:c2:b2:a7:79:82:28:e2:11:0b:2d:03:24:3d: 84:e4:a3:2c:15:20:00:a5:1b:de:db:b1:7e:93:9c: aa:78:8b:2d:ff:45:35:c3:e9:61:b2:23:1b:ac:62: 1a:b7:aa:08:99:81:4b:44:29:af:7c:2a:00:ca:52: 0d:71:29:17:e9:36:08:ff:0d:c6:76:e9:94:df:bb: 3b:6f:32:0d:4a:24:e6:20:12:93:b7:9d:54:29:1e: 60:70:0c:a0:2b:7e:0e:0b:fa:dc:02:61:9b:1c:64: fa:68:71:de:7f:7f:aa:0a:de:0c:73:2c:d8:96:ee: 2e:ed:65:62:38:2c:05:06:e5:a4:f9:67:c8:90:06: 14:12:7c:15:4e:30:13:e8:1f:dc:2c:17:2b:31:40: 90:1d:57:70:1c:c9:e2:94:f7:ff:f1:36:4f:db:e8: fe:00:64:ff:f2:5d:c7:48:11:26:bb:15:94:b1:0e: 74:be:d9:3b:85:07:24:c2:be:56:10:74:2c:da:97: 4d:64:44:b4:72:01:a9:b7:b5:2e:e4:72:4e:46:55: 4c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:96:B1:63:E2:32:EB:42:6A:F6:01:7E:71:C2:92:4C:0F:6B:1F:B4 X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:25:fc:dc:a3:bd:90:fc:4d:c7:62:7a:ba:1f:65:fa:83:dd: f2:cf:ff:e8:d8:ed:a3:85:2d:af:8a:9f:97:f0:45:50:8c:ea: a9:68:10:24:de:2a:35:e4:6f:ef:14:9e:4a:cf:57:90:c1:ed: 32:b3:d0:01:18:bf:96:b1:7b:97:b9:e9:30:14:df:0f:c6:4b: ab:cb:3c:17:e5:71:c4:ce:69:8d:60:a6:c2:93:c5:c4:5c:1b: 3f:86:79:d6:ed:cd:a1:2d:86:88:60:b4:fb:a3:5c:35:cd:da: a2:bd:46:41:b6:91:b3:fa:78:17:86:e4:da:44:25:61:ed:9e: 9d:8d:26:1d:40:69:d5:36:09:b7:a5:eb:ef:04:f3:33:54:77: 2d:ac:f4:b0:51:18:ae:4f:31:71:b6:86:31:e5:47:54:a6:7c: 6d:4d:48:7d:0c:eb:fa:2e:11:de:aa:9b:4b:3f:7a:fc:2e:ef: 56:76:40:c8:4a:9b:77:c7:d1:9e:31:12:98:7e:83:e0:1d:b9: 45:6a:cc:48:6d:e9:a8:05:99:f4:fe:d8:b6:f3:de:0e:dd:03: 86:a2:31:79:3b:4b:f3:24:0d:26:1f:36:5b:87:9f:74:52:57: 5d:e4:e0:07:0a:d6:22:31:bd:3e:ed:8e:40:db:cb:5c:88:3e: f7:05:13:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTtvtTlvKflt0w9FR17HP2DP0p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTA2MjkxOTA3MDZaFw0yNTA3MDIyMDI4MDZaMDMxMTAvBgNV BAMTKDEzOTZCMTYzRTIzMkVCNDI2QUY2MDE3RTcxQzI5MjRDMEY2QjFGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Xo7sxDrHTOids6SW3OIG7r+A 5p/M//Q0lPCM8MmWGEta3fQunQ3RW2SfxifGwrKneYIo4hELLQMkPYTkoywVIACl G97bsX6TnKp4iy3/RTXD6WGyIxusYhq3qgiZgUtEKa98KgDKUg1xKRfpNgj/DcZ2 6ZTfuztvMg1KJOYgEpO3nVQpHmBwDKArfg4L+twCYZscZPpocd5/f6oK3gxzLNiW 7i7tZWI4LAUG5aT5Z8iQBhQSfBVOMBPoH9wsFysxQJAdV3AcyeKU9//xNk/b6P4A ZP/yXcdIESa7FZSxDnS+2TuFByTCvlYQdCzal01kRLRyAam3tS7kck5GVUzzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE5axY+Iy60Jq9gF+ccKSTA9rH7QwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUl/NyjvZD8TcdierofZfqD3fLP/+jY7aOF La+Kn5fwRVCM6qloECTeKjXkb+8UnkrPV5DB7TKz0AEYv5axe5e56TAU3w/GS6vL PBflccTOaY1gpsKTxcRcGz+GedbtzaEthohgtPujXDXN2qK9RkG2kbP6eBeG5NpE JWHtnp2NJh1AadU2Cbel6+8E8zNUdy2s9LBRGK5PMXG2hjHlR1SmfG1NSH0M6/ou Ed6qm0s/evwu71Z2QMhKm3fH0Z4xEph+g+AduUVqzEht6agFmfT+2Lbz3g7dA4ai MXk7S/MkDSYfNluHn3RSV13k4AcK1iIxvT7tjkDby1yIPvcFEwY= -----END CERTIFICATE-----Generated at Mon Jun 30 17:16:14 2025 by rpki-client