$ rpki-client -vvf repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft File: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft (raw, json) Hash identifier: V5/pOBmeJUHTJR2Fnf5pN/+FNTlY85wr966YAk5Cp4c= Subject key identifier: D4:84:E6:F1:44:5E:3B:0C:5A:97:A0:35:58:71:DA:D9:87:27:E9:1E Authority key identifier: 9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B Certificate issuer: /CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Certificate serial: 185550F0A25DAA112CDD54C4F4E3BFF49013284D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft Manifest number: 0452 Signing time: Sat 23 Aug 2025 02:21:04 +0000 Manifest this update: Sat 23 Aug 2025 02:16:04 +0000 Manifest next update: Tue 26 Aug 2025 08:48:04 +0000 Files and hashes: 1: 3130332e3136322e3233392e302f32342d3234203d3e20313431363639.roa (hash: BITrYKnWZJgNzxKxBZHGB0Gt44gXAvyXNCG3Kynqo94=) 2: 3130332e3136322e3233382e302f32342d3234203d3e20313431363639.roa (hash: IJE11zWl6Bd22ECBH1B+diB+bL1zv7uu4MShP4zlbeo=) 3: 9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl (hash: aZt2pvMJ1Dj/P2w7EJgXyUektpSgVtoPUatkU7E63eE=) 4: 3130332e3136322e3233382e302f32332d3233203d3e20313431363639.roa (hash: pKHdGJHsGSGfDl46o2wosXGehRbXUqIap7Vy4E4vB9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:55:50:f0:a2:5d:aa:11:2c:dd:54:c4:f4:e3:bf:f4:90:13:28:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DDB1110A2DE9FA031620A330D94EEBAF4F5135B Validity Not Before: Aug 23 02:16:04 2025 GMT Not After : Aug 26 08:48:04 2025 GMT Subject: CN=D484E6F1445E3B0C5A97A0355871DAD98727E91E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:a4:b0:2d:be:a3:51:cb:d3:df:1f:71:69: e4:d8:a6:29:e1:7a:34:52:3c:da:98:ce:d8:a7:43: 1b:2b:93:6f:65:92:45:8f:b4:9f:04:3a:ba:b5:31: 84:d5:26:f1:44:4a:a9:e9:22:23:5c:79:b1:0a:d3: 45:a3:a4:42:b7:0c:61:e7:4d:06:da:9a:11:95:0f: 35:c7:b2:2c:f8:8a:1e:89:5b:da:87:60:46:e5:1a: d5:d1:f7:c5:94:0b:5a:49:0d:0e:56:b3:c8:bf:c6: 9b:63:8f:14:2a:20:c0:89:db:ac:57:e9:a5:95:39: a4:1d:60:19:d0:1d:cf:3b:47:3e:ee:c7:fa:51:b3: 6f:ef:3d:95:f3:4f:d1:89:34:49:70:a4:99:cb:b4: 7c:57:36:fe:5d:3f:54:7b:d0:3f:33:31:33:cc:52: c9:08:6a:0a:70:10:d5:1d:d2:86:68:9c:38:36:7b: ea:70:2c:9d:97:44:03:2c:22:be:42:f5:c0:60:d9: df:b7:a6:ac:c3:6f:9b:e7:86:e6:d3:ff:ad:d0:e0: 7a:0b:2b:91:fe:f7:de:07:c9:d2:a3:9c:92:92:be: ed:ca:a5:ea:87:55:0a:ff:a8:b2:37:1a:7b:23:57: 1f:34:3a:13:66:b5:ee:25:93:f1:82:4d:ce:1e:95: 81:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:84:E6:F1:44:5E:3B:0C:5A:97:A0:35:58:71:DA:D9:87:27:E9:1E X509v3 Authority Key Identifier: keyid:9D:DB:11:10:A2:DE:9F:A0:31:62:0A:33:0D:94:EE:BA:F4:F5:13:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaf6984f-ccf9-4c40-b114-380356a8cd88/0/9DDB1110A2DE9FA031620A330D94EEBAF4F5135B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b2:3d:17:9b:36:53:97:aa:9f:06:dc:f1:54:19:91:2f:a8: 32:77:1d:fa:58:15:43:85:ac:3b:63:53:90:5d:7b:ce:12:d0: dd:ae:a4:3c:ab:01:20:5e:ce:c2:93:52:82:1b:8f:b6:87:1c: 9c:50:f1:01:ef:b2:18:d8:64:96:5e:f4:b4:a9:4c:e3:83:69: 07:ea:f2:35:cb:b8:77:b1:b4:b5:30:6c:db:52:67:a6:af:0b: 76:26:d6:6b:05:70:bc:68:14:88:4b:53:a9:3f:71:c1:e7:61: 40:ae:14:c2:71:79:dc:05:f6:f6:41:64:91:f6:47:3c:a2:c8: 76:8c:25:10:21:20:d9:53:52:b6:51:7b:75:37:e9:9b:1d:29: bd:4e:f8:13:40:b7:7a:2c:48:6c:7f:bf:53:8b:b2:8a:3e:f8: a4:05:1c:bb:86:87:06:d5:86:8c:12:35:2b:1e:5e:4c:ef:63: 0b:12:c0:24:97:16:2d:ea:09:ac:4a:76:fa:c8:42:e9:4b:a7: 67:95:77:d3:0c:f6:b4:93:c3:9c:35:8d:d0:92:f1:90:b2:39: 97:f5:3a:89:c3:15:ad:d0:c5:0b:61:36:b2:21:b9:ee:f7:c2: 2b:dd:c4:04:2f:e8:3a:ab:c9:28:0e:94:13:23:6d:64:75:0b: 70:95:5f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFVQ8KJdqhEs3VTE9OO/9JATKE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFG NEY1MTM1QjAeFw0yNTA4MjMwMjE2MDRaFw0yNTA4MjYwODQ4MDRaMDMxMTAvBgNV BAMTKEQ0ODRFNkYxNDQ1RTNCMEM1QTk3QTAzNTU4NzFEQUQ5ODcyN0U5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSaaSwLb6jUcvT3x9xaeTYpinh ejRSPNqYztinQxsrk29lkkWPtJ8EOrq1MYTVJvFESqnpIiNcebEK00WjpEK3DGHn TQbamhGVDzXHsiz4ih6JW9qHYEblGtXR98WUC1pJDQ5Ws8i/xptjjxQqIMCJ26xX 6aWVOaQdYBnQHc87Rz7ux/pRs2/vPZXzT9GJNElwpJnLtHxXNv5dP1R70D8zMTPM UskIagpwENUd0oZonDg2e+pwLJ2XRAMsIr5C9cBg2d+3pqzDb5vnhubT/63Q4HoL K5H+994HydKjnJKSvu3KpeqHVQr/qLI3GnsjVx80OhNmte4lk/GCTc4elYEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ITm8UReOwxal6A1WHHa2Ycn6R4wHwYDVR0j BBgwFoAUndsREKLen6AxYgozDZTuuvT1E1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWY2OTg0Zi1jY2Y5LTRjNDAtYjExNC0zODAzNTZhOGNkODgvMC85RERCMTExMEEy REU5RkEwMzE2MjBBMzMwRDk0RUVCQUY0RjUxMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVFQkFGNEY1 MTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmNjk4NGYtY2NmOS00YzQwLWIx MTQtMzgwMzU2YThjZDg4LzAvOUREQjExMTBBMkRFOUZBMDMxNjIwQTMzMEQ5NEVF QkFGNEY1MTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOyPRebNlOXqp8G3PFUGZEvqDJ3HfpYFUOF rDtjU5Bde84S0N2upDyrASBezsKTUoIbj7aHHJxQ8QHvshjYZJZe9LSpTOODaQfq 8jXLuHextLUwbNtSZ6avC3Ym1msFcLxoFIhLU6k/ccHnYUCuFMJxedwF9vZBZJH2 RzyiyHaMJRAhINlTUrZRe3U36ZsdKb1O+BNAt3osSGx/v1OLsoo++KQFHLuGhwbV howSNSseXkzvYwsSwCSXFi3qCaxKdvrIQulLp2eVd9MM9rSTw5w1jdCS8ZCyOZf1 OonDFa3QxQthNrIhue73wivdxAQv6DqrySgOlBMjbWR1C3CVX7k= -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:42 2025 by rpki-client