$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json) Hash identifier: GsK/OxYtR8IiesEDninYaEFFl/YX7RX8wOaF53hFjj4= Subject key identifier: 69:65:24:72:F7:30:5A:5E:4F:67:F5:12:E4:D1:C0:8B:BA:29:1F:C7 Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Certificate serial: 379752DB776054902AB505F2DE8BCC384EED0EB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft Manifest number: 03F1 Signing time: Sat 18 Oct 2025 09:31:20 +0000 Manifest this update: Sat 18 Oct 2025 09:26:20 +0000 Manifest next update: Tue 21 Oct 2025 20:47:20 +0000 Files and hashes: 1: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: K3vShF0D9bPRn6sv5SW8yGmWNIRGvlLBsD0vPKS9a4E=) 2: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: c3TzylCEjs5xy8RF441nXx1uAnBKNVsy3aYQ1eehMFs=) 3: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: 4jZB6MLWsFxivy3yVfHGe+ch1ul3re6PBFTaSR/V4mY=) 4: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: Y/t7s83TrJfcnDGlxRGeWKMHBRcUwBBITgOCbUYiXEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:97:52:db:77:60:54:90:2a:b5:05:f2:de:8b:cc:38:4e:ed:0e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Validity Not Before: Oct 18 09:26:20 2025 GMT Not After : Oct 21 20:47:20 2025 GMT Subject: CN=69652472F7305A5E4F67F512E4D1C08BBA291FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:a2:24:92:1c:bd:0a:25:c9:9c:c3:0a:cc: 6f:19:8d:74:87:08:ed:28:eb:bc:be:f0:a5:f9:31: db:cc:2d:ba:e0:fd:9e:d0:a3:5a:59:88:86:0b:2d: 22:a2:d2:4d:2c:52:dc:64:9d:63:11:2b:8d:81:90: 1e:3d:85:b8:ef:f7:63:34:ea:32:e6:bd:b7:e7:cc: 4b:15:4a:f1:6d:36:b0:c6:3d:fd:9d:ee:1f:73:1b: 5a:be:26:7f:60:90:fd:e6:90:6b:f2:cc:52:80:ca: 24:b6:e2:b5:4e:2c:6e:be:52:96:26:24:ce:65:8d: 75:38:07:27:2c:02:97:0c:3b:36:80:ae:9c:a6:17: 0c:fc:3e:b0:15:eb:a1:4f:a3:28:8f:e3:15:8a:16: 65:0d:64:11:41:11:35:22:4a:87:7d:41:80:6b:f1: 7a:81:28:ca:a8:32:1d:1a:6f:47:cc:7b:a8:b3:12: e4:bb:7b:f6:de:0a:29:4f:26:30:81:f6:7f:bd:10: b1:8c:7e:97:31:80:45:47:1b:3b:bc:77:fe:cc:31: fc:ab:6b:59:29:46:f5:f0:6e:60:77:1b:fc:d6:a8: 96:8d:c9:b5:b8:9d:89:80:48:25:e1:3e:37:b9:fd: 6d:a2:d8:56:ba:b0:b5:4b:f9:9e:f1:89:75:45:c5: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:65:24:72:F7:30:5A:5E:4F:67:F5:12:E4:D1:C0:8B:BA:29:1F:C7 X509v3 Authority Key Identifier: keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:da:8a:35:ba:18:7b:2f:5e:41:d3:ea:6e:e4:07:99:2d:3a: 93:44:68:df:45:86:e3:7b:0f:ac:16:be:75:8d:e5:f9:a6:56: 5a:cd:62:b7:2e:19:d4:26:81:30:ee:f4:ed:7e:b0:d7:c4:23: ab:6e:90:66:be:43:20:54:0c:8e:9e:c9:e9:17:d3:1a:b0:f2: 80:88:c0:cc:d9:31:47:25:38:a8:08:da:08:7d:2f:67:52:47: 51:2e:c3:ce:cc:ec:3c:68:7a:05:17:a0:90:ac:40:0a:4b:33: 84:24:a3:eb:d3:29:44:30:18:71:ca:61:26:34:63:ef:9c:9f: 8f:1a:b4:07:13:9b:72:19:4f:fd:dd:1e:84:b9:5a:59:5d:86: bb:4b:bd:34:5a:33:0a:6c:bb:3d:f8:13:83:ae:26:26:0f:4d: f0:f3:e3:9f:1a:eb:63:6e:a1:ae:af:a8:ce:a1:44:43:26:42: 6e:04:03:92:56:a5:ee:53:33:1f:90:4b:c0:5c:8f:98:9d:ac: 9c:47:a3:c6:db:c0:0c:31:07:2e:6b:72:68:45:21:ee:0f:2c: 51:bc:00:8e:d0:1e:29:d3:4f:2f:56:21:06:27:29:29:72:84: af:25:90:f0:dd:16:48:eb:0a:06:49:bc:98:21:43:90:93:03: 84:44:cc:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5dS23dgVJAqtQXy3ovMOE7tDrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5 MTU1MDJGNTAeFw0yNTEwMTgwOTI2MjBaFw0yNTEwMjEyMDQ3MjBaMDMxMTAvBgNV BAMTKDY5NjUyNDcyRjczMDVBNUU0RjY3RjUxMkU0RDFDMDhCQkEyOTFGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0U6Ikkhy9CiXJnMMKzG8ZjXSH CO0o67y+8KX5MdvMLbrg/Z7Qo1pZiIYLLSKi0k0sUtxknWMRK42BkB49hbjv92M0 6jLmvbfnzEsVSvFtNrDGPf2d7h9zG1q+Jn9gkP3mkGvyzFKAyiS24rVOLG6+UpYm JM5ljXU4BycsApcMOzaArpymFwz8PrAV66FPoyiP4xWKFmUNZBFBETUiSod9QYBr 8XqBKMqoMh0ab0fMe6izEuS7e/beCilPJjCB9n+9ELGMfpcxgEVHGzu8d/7MMfyr a1kpRvXwbmB3G/zWqJaNybW4nYmASCXhPje5/W2i2Fa6sLVL+Z7xiXVFxRNRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaWUkcvcwWl5PZ/US5NHAi7opH8cwHwYDVR0j BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5 RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1 MDJGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0 OUQ5MTU1MDJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHaijW6GHsvXkHT6m7kB5ktOpNEaN9FhuN7 D6wWvnWN5fmmVlrNYrcuGdQmgTDu9O1+sNfEI6tukGa+QyBUDI6eyekX0xqw8oCI wMzZMUclOKgI2gh9L2dSR1Euw87M7DxoegUXoJCsQApLM4Qko+vTKUQwGHHKYSY0 Y++cn48atAcTm3IZT/3dHoS5WlldhrtLvTRaMwpsuz34E4OuJiYPTfDz458a62Nu oa6vqM6hREMmQm4EA5JWpe5TMx+QS8Bcj5idrJxHo8bbwAwxBy5rcmhFIe4PLFG8 AI7QHinTTy9WIQYnKSlyhK8lkPDdFkjrCgZJvJghQ5CTA4REzP8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:30 2025 by rpki-client