$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: 01W130EV2rGvt+YcNKkci0dC+EtjWQxoHJY59H7Kmbk= Subject key identifier: 51:A9:AD:EC:C4:ED:C7:97:11:67:BD:5C:D3:E1:B6:37:4C:DA:4F:4F Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 71A013CE50A159622BED1AD4A2D2089C048CD9C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 0178 Signing time: Fri 22 Aug 2025 13:41:57 +0000 Manifest this update: Fri 22 Aug 2025 13:36:56 +0000 Manifest next update: Mon 25 Aug 2025 21:05:56 +0000 Files and hashes: 1: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: bmJtImjcJ6mB2vRNZ2LQXJxzymd7VQPl3WvXTYQk5T4=) 2: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) 3: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) 4: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: 9NdE9Yt64lHcZmHfcp/BPdUY3C5A8B6IZ0IM6khU6pM=) 5: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a0:13:ce:50:a1:59:62:2b:ed:1a:d4:a2:d2:08:9c:04:8c:d9:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Aug 22 13:36:56 2025 GMT Not After : Aug 25 21:05:56 2025 GMT Subject: CN=51A9ADECC4EDC7971167BD5CD3E1B6374CDA4F4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:83:5a:ab:a0:67:be:3f:40:7f:ab:d1:26:d8: 76:c5:c5:47:05:46:0a:ff:6c:ee:03:51:9b:b2:e1: 51:57:53:b0:35:3d:2e:4b:e5:9f:b0:ad:fb:8b:99: 53:4c:b0:ca:1b:61:eb:35:06:46:97:ed:c9:5b:70: a7:ca:c0:0a:73:a0:60:ca:fa:b3:f4:0a:35:17:5a: 75:ff:50:01:a8:c6:b3:76:98:0a:1c:74:11:b6:2e: 7c:a7:dc:1b:c6:dc:b3:4c:93:32:f3:38:5e:5d:a7: 4f:53:1a:63:37:cb:43:db:32:76:59:30:34:39:b6: 6a:2d:86:1f:4e:fe:29:15:3e:3a:a0:a0:ba:26:43: e5:e6:d1:67:df:7f:43:a4:8b:2a:74:83:3f:2e:7b: 2a:45:28:b7:79:0b:ac:01:cc:38:e5:b1:08:8c:8f: 04:c8:cb:66:76:25:3a:49:52:02:2a:dd:45:a2:df: 54:7a:62:3b:04:f6:4a:1c:3e:37:d0:0f:25:e7:de: 66:b2:2e:4b:df:b9:7f:56:0d:54:01:b5:b4:61:27: 6c:c0:48:ca:60:1a:1c:78:3b:be:d2:18:80:0e:df: d3:30:15:69:b2:85:96:86:9e:93:03:96:9c:49:16: ed:d1:17:fa:45:a2:d5:f7:72:4a:8d:da:29:39:33: 5d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A9:AD:EC:C4:ED:C7:97:11:67:BD:5C:D3:E1:B6:37:4C:DA:4F:4F X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ac:fe:30:23:fc:a0:04:0b:c7:64:82:b7:b4:53:26:0b:d4: 8b:75:63:44:da:61:41:fc:5f:a5:36:06:92:4d:9f:5d:f3:83: 68:33:38:2c:3f:7a:1c:f8:9b:fd:48:49:ed:7c:49:77:cc:d5: 03:37:63:65:40:c6:9b:ec:1b:fb:ed:d0:74:e0:b7:e4:33:63: 82:3b:05:00:b5:4d:ff:ce:a9:42:09:63:e1:49:e0:dd:f6:71: 38:8a:5d:00:f9:4d:93:cd:fe:d9:68:7e:ad:83:79:66:2d:e0: 48:3c:35:fc:ec:e4:7f:b1:f7:a3:a3:4a:1a:ea:65:80:aa:7d: 3b:e6:5c:ea:d5:3d:33:75:5e:fa:20:39:bd:0c:f6:71:90:ab: bc:19:16:a1:f5:9b:63:3b:d4:6e:78:e8:ca:cb:93:58:a3:4e: 70:a8:ad:bc:85:4b:19:ab:30:3d:8c:de:5f:10:38:04:41:de: a2:ff:e6:b6:5d:ca:cb:08:56:3f:62:b4:fb:12:90:f7:b4:4a: 9a:51:6d:96:da:a0:db:34:fc:b2:1b:12:8c:35:6a:58:a8:0a: 22:0a:f0:85:0b:27:1b:15:b4:0f:b0:69:ca:f6:b0:50:68:c9: 7e:f4:f6:71:c0:31:25:85:45:e1:36:8f:43:a1:8d:d5:4d:ca: b2:55:44:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcaATzlChWWIr7RrUotIInASM2cMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTA4MjIxMzM2NTZaFw0yNTA4MjUyMTA1NTZaMDMxMTAvBgNV BAMTKDUxQTlBREVDQzRFREM3OTcxMTY3QkQ1Q0QzRTFCNjM3NENEQTRGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDag1qroGe+P0B/q9Em2HbFxUcF Rgr/bO4DUZuy4VFXU7A1PS5L5Z+wrfuLmVNMsMobYes1BkaX7clbcKfKwApzoGDK +rP0CjUXWnX/UAGoxrN2mAocdBG2Lnyn3BvG3LNMkzLzOF5dp09TGmM3y0PbMnZZ MDQ5tmothh9O/ikVPjqgoLomQ+Xm0Wfff0Okiyp0gz8ueypFKLd5C6wBzDjlsQiM jwTIy2Z2JTpJUgIq3UWi31R6YjsE9kocPjfQDyXn3mayLkvfuX9WDVQBtbRhJ2zA SMpgGhx4O77SGIAO39MwFWmyhZaGnpMDlpxJFu3RF/pFotX3ckqN2ik5M127AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUamt7MTtx5cRZ71c0+G2N0zaT08wHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWs/jAj/KAEC8dkgre0UyYL1It1Y0TaYUH8 X6U2BpJNn13zg2gzOCw/ehz4m/1ISe18SXfM1QM3Y2VAxpvsG/vt0HTgt+QzY4I7 BQC1Tf/OqUIJY+FJ4N32cTiKXQD5TZPN/tlofq2DeWYt4Eg8Nfzs5H+x96OjShrq ZYCqfTvmXOrVPTN1XvogOb0M9nGQq7wZFqH1m2M71G546MrLk1ijTnCorbyFSxmr MD2M3l8QOARB3qL/5rZdyssIVj9itPsSkPe0SppRbZbaoNs0/LIbEow1alioCiIK 8IULJxsVtA+wacr2sFBoyX709nHAMSWFReE2j0OhjdVNyrJVRFQ= -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:35 2025 by rpki-client