$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: RSmiEK3Ik1gLe9harj1FeRlmIT+ldsAc3Lp7GbOt7Fw= Subject key identifier: 65:6D:DF:29:CA:B3:C8:13:48:E6:72:CD:64:A2:D9:52:BF:F2:20:63 Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 255C8725E128EBB746EB0C856726725D1462C5C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: D5 Signing time: Mon 20 Oct 2025 00:01:47 +0000 Manifest this update: Sun 19 Oct 2025 23:56:47 +0000 Manifest next update: Thu 23 Oct 2025 03:59:47 +0000 Files and hashes: 1: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: r5hUlccSVgQxj75/rCIRRL0wbNmNrj2hvTN8yJsjnMk=) 2: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: TKXDUHh1t8mtQi4naXyKvXUBHMTJG7N6MALAiE8leAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:5c:87:25:e1:28:eb:b7:46:eb:0c:85:67:26:72:5d:14:62:c5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Oct 19 23:56:47 2025 GMT Not After : Oct 23 03:59:47 2025 GMT Subject: CN=656DDF29CAB3C81348E672CD64A2D952BFF22063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:ff:f1:36:7a:7b:37:bc:11:0e:e1:9b:ea: 62:4d:d1:25:01:9d:17:55:41:98:4a:37:27:6b:c6: 10:5f:8e:9e:03:23:6c:85:9a:1d:7b:7f:f2:eb:4e: ba:f8:61:a6:42:58:47:95:c9:6f:ce:22:a9:7c:7f: 31:f9:b1:2d:a8:da:af:69:40:13:65:17:6e:0e:95: d9:7c:d8:22:db:db:85:c9:56:f0:80:d3:aa:3b:53: b7:d1:09:79:23:cf:d1:4b:69:48:c5:02:33:35:0b: df:db:32:33:4f:27:b7:cb:7d:1c:df:c6:d6:08:7a: f1:34:b1:6c:f0:64:6c:c6:8f:de:c6:68:d1:07:b6: e9:af:dc:f2:04:46:8d:85:f0:42:9c:db:01:10:d0: 1a:47:0e:af:87:96:77:41:d9:58:34:fd:79:06:6f: 50:7c:f8:93:b9:a0:88:17:30:98:e1:ba:b3:19:2b: 38:60:75:49:fb:cd:f3:7c:49:36:9a:e5:df:10:c6: 2d:a9:4e:a9:e0:62:bd:84:a6:9a:8d:33:7c:37:a0: a4:ea:2d:e7:51:a9:08:1e:21:d1:4d:6a:3d:06:65: 35:9a:fd:49:f2:6a:03:fb:8a:de:c2:b3:80:a8:3b: 99:bd:51:31:63:0c:38:25:36:44:4b:ed:36:23:a4: 44:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6D:DF:29:CA:B3:C8:13:48:E6:72:CD:64:A2:D9:52:BF:F2:20:63 X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0f:e8:32:1c:02:9f:73:fe:d1:fa:d5:10:5a:27:80:40:a7: b8:22:eb:b0:d0:a2:ed:98:a4:bd:d5:00:7f:f5:24:cd:e1:ef: fd:ab:fb:12:a4:90:75:c6:66:13:ab:bf:61:ec:8c:0f:46:66: 6b:84:22:b4:a0:3b:3d:99:e3:14:73:dc:12:0a:92:20:ef:a6: 0e:e9:d1:11:01:06:7c:e1:e1:18:77:5b:dd:93:cb:c9:21:a5: 59:ff:c8:1c:b3:dd:d2:52:d3:52:27:e1:39:14:c6:c7:27:a1: cc:aa:d8:86:c0:91:50:30:ee:36:4f:e6:26:2e:37:53:58:33: 88:5b:bb:b2:c8:4e:3a:6c:ab:96:71:8a:7c:bf:fc:8f:99:6b: 8d:a3:d9:a8:31:e2:23:c7:ba:f4:45:64:65:bb:38:4f:cb:93: 8b:c3:44:91:d4:88:d1:56:38:b9:98:f9:b4:94:8c:ca:9e:16: 06:cd:5b:09:f3:f2:0b:7a:5e:f3:03:c9:ed:47:13:a3:2b:15: 3e:af:af:ab:a5:5d:8f:c2:8e:fd:bf:a6:7f:c8:f3:3e:7c:f4: c8:a7:b0:77:1f:2e:bc:90:cb:b9:26:cb:6a:47:cb:76:38:2f: c2:71:d8:f2:10:8a:0d:d4:c8:a4:00:94:d4:92:dd:9a:f8:96: 5e:8a:72:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVyHJeEo67dG6wyFZyZyXRRixcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNTEwMTkyMzU2NDdaFw0yNTEwMjMwMzU5NDdaMDMxMTAvBgNV BAMTKDY1NkRERjI5Q0FCM0M4MTM0OEU2NzJDRDY0QTJEOTUyQkZGMjIwNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiBP/xNnp7N7wRDuGb6mJN0SUB nRdVQZhKNydrxhBfjp4DI2yFmh17f/LrTrr4YaZCWEeVyW/OIql8fzH5sS2o2q9p QBNlF24Oldl82CLb24XJVvCA06o7U7fRCXkjz9FLaUjFAjM1C9/bMjNPJ7fLfRzf xtYIevE0sWzwZGzGj97GaNEHtumv3PIERo2F8EKc2wEQ0BpHDq+HlndB2Vg0/XkG b1B8+JO5oIgXMJjhurMZKzhgdUn7zfN8STaa5d8Qxi2pTqngYr2EppqNM3w3oKTq LedRqQgeIdFNaj0GZTWa/UnyagP7it7Cs4CoO5m9UTFjDDglNkRL7TYjpER1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZW3fKcqzyBNI5nLNZKLZUr/yIGMwHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4P6DIcAp9z/tH61RBaJ4BAp7gi67DQou2Y pL3VAH/1JM3h7/2r+xKkkHXGZhOrv2HsjA9GZmuEIrSgOz2Z4xRz3BIKkiDvpg7p 0REBBnzh4Rh3W92Ty8khpVn/yByz3dJS01In4TkUxscnocyq2IbAkVAw7jZP5iYu N1NYM4hbu7LITjpsq5Zxiny//I+Za42j2agx4iPHuvRFZGW7OE/Lk4vDRJHUiNFW OLmY+bSUjMqeFgbNWwnz8gt6XvMDye1HE6MrFT6vr6ulXY/Cjv2/pn/I8z589Min sHcfLryQy7kmy2pHy3Y4L8Jx2PIQig3UyKQAlNSS3Zr4ll6KcpM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:55 2025 by rpki-client