$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json) Hash identifier: hEjF+n09vg84vHAzIIQrafiVoBo5GhgmPhdz59Ccl3Q= Subject key identifier: 37:98:E7:B7:97:F6:BD:65:88:26:5E:11:05:9C:E2:BA:18:FF:A4:D5 Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Certificate serial: 2A114D1C3624831DD0EC503A7F0D76DC3E7C4B19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft Manifest number: 03D8 Signing time: Fri 22 Aug 2025 19:11:28 +0000 Manifest this update: Fri 22 Aug 2025 19:06:28 +0000 Manifest next update: Mon 25 Aug 2025 22:47:28 +0000 Files and hashes: 1: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: K3vShF0D9bPRn6sv5SW8yGmWNIRGvlLBsD0vPKS9a4E=) 2: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: c3TzylCEjs5xy8RF441nXx1uAnBKNVsy3aYQ1eehMFs=) 3: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: Y/t7s83TrJfcnDGlxRGeWKMHBRcUwBBITgOCbUYiXEc=) 4: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: GZqeu7IahaQO9SZAxzhNkYy/2eQ1shJDX4Z/LWLdaiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:11:4d:1c:36:24:83:1d:d0:ec:50:3a:7f:0d:76:dc:3e:7c:4b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Validity Not Before: Aug 22 19:06:28 2025 GMT Not After : Aug 25 22:47:28 2025 GMT Subject: CN=3798E7B797F6BD6588265E11059CE2BA18FFA4D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:4c:c2:a8:e9:46:ac:5d:84:a0:c7:94:b3: c0:a9:e6:68:0e:5c:a6:32:3c:0c:06:2c:a6:3c:12: 72:45:4f:ce:e0:87:0b:db:d1:38:24:ef:06:bf:f1: 48:ca:9b:36:3d:b2:b1:78:e7:5a:41:f1:8c:27:0d: 77:ce:ce:29:d6:86:76:69:67:c7:77:a7:fa:dc:ed: 6a:41:97:4d:c9:12:0a:35:51:87:f2:f5:36:ab:9b: 61:f7:24:8f:43:5f:56:44:04:a7:8f:99:8b:8e:3b: 18:a5:4a:67:37:f8:a8:d4:06:9b:47:ae:bd:2e:9b: af:a2:57:2b:ab:b1:49:28:cf:f3:17:89:56:26:b5: 43:e8:f3:5a:dd:9b:25:c8:6e:b0:2d:39:3f:f3:65: 6f:6f:7c:15:0d:99:b0:9f:8a:d3:69:03:d1:25:48: 98:0d:53:69:cb:fb:7a:15:ab:9e:d6:c2:e2:e3:21: a1:ab:51:8b:d6:ee:19:ff:a0:82:cf:14:96:6c:97: 05:b6:d4:0c:9b:16:77:7e:36:f7:73:95:e8:96:f8: 60:52:f9:3b:bd:27:06:c8:33:89:9f:45:d2:a6:92: bd:fa:12:fa:42:ad:96:22:d2:59:57:ae:4b:5c:2c: 79:f0:1d:c0:26:60:4a:7d:5a:8d:c0:d7:cf:aa:e8: 76:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:98:E7:B7:97:F6:BD:65:88:26:5E:11:05:9C:E2:BA:18:FF:A4:D5 X509v3 Authority Key Identifier: keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:5f:e4:9e:45:8c:86:3a:eb:7e:68:c2:c4:5f:59:02:d3:ff: b1:20:54:2d:ee:9c:f7:85:09:0a:cc:88:1b:71:ef:07:70:05: 2f:ed:30:3f:3d:3e:35:ac:d6:4e:cb:da:b5:95:62:85:a6:55: 30:08:53:d8:ef:43:fa:25:c2:3c:51:14:2b:28:7e:09:de:6f: 33:ff:17:5d:8b:1f:a6:38:27:8e:2d:01:3e:11:78:91:06:35: e6:18:e2:8e:d7:3e:1a:07:78:27:fb:21:2f:78:e9:6e:da:16: ad:d3:5b:e1:6f:c6:63:37:99:0b:f2:d9:86:fb:fe:b7:65:c8: 8b:6e:07:ab:be:e1:4e:cd:a7:46:da:df:43:5b:19:9a:9e:fe: 96:3c:e4:98:d7:c4:49:e8:2b:a5:22:df:d8:c3:00:82:cb:af: 7b:8b:46:e6:24:ca:97:d2:92:99:fe:37:74:c8:47:26:0d:69: 54:eb:f2:5e:6c:10:32:99:c6:f0:68:58:0d:61:19:43:e6:40: a4:b1:4d:79:34:2b:38:d7:64:76:59:55:9a:b3:91:aa:db:c2: 88:5f:fa:f7:3e:2e:6b:92:79:18:d9:30:08:5b:39:dc:07:7d: 2c:3e:f2:00:2c:03:a2:fc:c1:33:c1:da:65:47:26:09:61:12: d1:c5:57:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhFNHDYkgx3Q7FA6fw123D58SxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5 MTU1MDJGNTAeFw0yNTA4MjIxOTA2MjhaFw0yNTA4MjUyMjQ3MjhaMDMxMTAvBgNV BAMTKDM3OThFN0I3OTdGNkJENjU4ODI2NUUxMTA1OUNFMkJBMThGRkE0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FEzCqOlGrF2EoMeUs8Cp5mgO XKYyPAwGLKY8EnJFT87ghwvb0Tgk7wa/8UjKmzY9srF451pB8YwnDXfOzinWhnZp Z8d3p/rc7WpBl03JEgo1UYfy9Tarm2H3JI9DX1ZEBKePmYuOOxilSmc3+KjUBptH rr0um6+iVyursUkoz/MXiVYmtUPo81rdmyXIbrAtOT/zZW9vfBUNmbCfitNpA9El SJgNU2nL+3oVq57WwuLjIaGrUYvW7hn/oILPFJZslwW21AybFnd+NvdzleiW+GBS +Tu9JwbIM4mfRdKmkr36EvpCrZYi0llXrktcLHnwHcAmYEp9Wo3A18+q6HYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN5jnt5f2vWWIJl4RBZziuhj/pNUwHwYDVR0j BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5 RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1 MDJGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0 OUQ5MTU1MDJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBf5J5FjIY6635owsRfWQLT/7EgVC3unPeF CQrMiBtx7wdwBS/tMD89PjWs1k7L2rWVYoWmVTAIU9jvQ/olwjxRFCsofgnebzP/ F12LH6Y4J44tAT4ReJEGNeYY4o7XPhoHeCf7IS946W7aFq3TW+FvxmM3mQvy2Yb7 /rdlyItuB6u+4U7Np0ba30NbGZqe/pY85JjXxEnoK6Ui39jDAILLr3uLRuYkypfS kpn+N3TIRyYNaVTr8l5sEDKZxvBoWA1hGUPmQKSxTXk0KzjXZHZZVZqzkarbwohf +vc+LmuSeRjZMAhbOdwHfSw+8gAsA6L8wTPB2mVHJglhEtHFV4Q= -----END CERTIFICATE-----Generated at Sat Aug 23 12:18:56 2025 by rpki-client