$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: Jj8/GlV1A9NnSki8Unh/mQCFlcKdMrCERLdIw1zxns4= Subject key identifier: 8A:88:18:09:2B:55:2D:01:FC:BA:29:B5:34:2F:50:5B:6A:E3:A6:C7 Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 4AE10DA5D08E9BFD7FD1F176051FBA584FA8404C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 04D2 Signing time: Sun 19 Oct 2025 16:20:45 +0000 Manifest this update: Sun 19 Oct 2025 16:15:45 +0000 Manifest next update: Thu 23 Oct 2025 02:59:45 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: b32x5WxBWJcPTeZq41W9yKorneF4CMT6tHJatkHuThI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e1:0d:a5:d0:8e:9b:fd:7f:d1:f1:76:05:1f:ba:58:4f:a8:40:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Oct 19 16:15:45 2025 GMT Not After : Oct 23 02:59:45 2025 GMT Subject: CN=8A8818092B552D01FCBA29B5342F505B6AE3A6C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:0d:55:30:33:c6:53:dc:b3:9e:31:c8:aa: ce:2e:ef:08:98:b7:86:bf:ca:c3:6d:cb:03:03:0b: cd:c4:97:c9:f7:68:08:fb:e7:8b:37:57:26:83:44: b9:1e:57:ae:5c:34:f8:3e:5b:3d:43:b0:b5:30:23: e3:fe:74:91:4d:48:64:2d:ec:1f:de:7d:c5:c2:f4: ee:79:87:f4:43:e4:08:43:b8:97:af:c1:a3:d8:a9: 19:68:f0:56:8d:dc:97:8a:9c:70:2d:3b:64:3e:ed: 8a:ed:2a:41:58:a8:10:c6:12:4b:37:ac:78:aa:e4: 1b:23:c1:6f:99:bb:08:02:ca:76:f0:d9:5f:8d:a9: 27:14:86:81:71:cb:de:9f:bb:60:40:21:fc:0c:27: ea:58:78:de:b2:0a:2c:49:35:17:d4:ef:c6:0e:1c: bf:f4:c5:90:ac:81:31:5c:6c:7d:dd:16:26:78:d8: 5b:2e:67:4f:a1:27:f8:25:97:3d:92:19:68:59:36: f8:28:3d:03:4f:94:dd:eb:92:c8:00:b8:8d:0f:7d: fd:b7:b3:89:43:be:37:e9:9e:0e:df:d2:6c:24:5b: b4:e6:f4:a4:b7:48:74:0e:89:23:8f:fa:63:59:71: 62:2e:24:9f:7f:79:92:8f:f2:a0:29:9d:d3:67:d3: 69:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:88:18:09:2B:55:2D:01:FC:BA:29:B5:34:2F:50:5B:6A:E3:A6:C7 X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f6:5a:e2:82:f3:5a:40:77:f4:86:4d:96:42:71:74:3d:20: bf:b8:75:d5:bb:b3:f9:bb:0c:60:e5:3a:97:e4:72:d6:02:cf: ca:69:9c:8c:1b:9b:18:a4:d8:2e:5e:35:6e:ac:ec:86:c8:ea: 85:c8:db:40:bd:9b:5d:8e:4a:2d:9e:f1:5d:41:b7:27:ca:91: 2c:1b:92:72:98:0b:79:3e:85:fa:19:37:b6:5d:fc:d9:5e:64: ce:44:ff:f3:90:f6:ac:26:a7:f8:f9:42:35:76:83:fe:e3:64: 9d:99:91:0f:84:cf:1a:66:ff:28:75:ad:99:16:f9:a0:95:4b: 5b:a0:3d:12:09:94:ad:f8:14:d9:85:a6:0b:5d:4a:c2:f3:37: 02:d6:a6:b7:6d:b2:f9:42:c9:b1:28:f4:e5:35:c8:04:13:f1: 42:03:56:ec:f1:3e:f0:99:d8:0f:f5:fa:67:ce:e0:c1:31:f0: 83:dd:65:e7:34:27:77:d3:1c:9e:52:2a:89:b0:20:30:24:38: d8:dd:e1:54:6f:53:42:93:69:4b:6a:0e:4d:ea:82:47:aa:9e: 05:fe:ce:a4:31:3a:ff:b4:f6:a0:fb:cf:39:aa:15:9e:b0:a1: d9:25:73:8e:24:d0:02:34:cc:a8:6b:61:2f:49:10:25:15:34: 41:b9:83:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuENpdCOm/1/0fF2BR+6WE+oQEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTEwMTkxNjE1NDVaFw0yNTEwMjMwMjU5NDVaMDMxMTAvBgNV BAMTKDhBODgxODA5MkI1NTJEMDFGQ0JBMjlCNTM0MkY1MDVCNkFFM0E2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Zw1VMDPGU9yznjHIqs4u7wiY t4a/ysNtywMDC83El8n3aAj754s3VyaDRLkeV65cNPg+Wz1DsLUwI+P+dJFNSGQt 7B/efcXC9O55h/RD5AhDuJevwaPYqRlo8FaN3JeKnHAtO2Q+7YrtKkFYqBDGEks3 rHiq5BsjwW+ZuwgCynbw2V+NqScUhoFxy96fu2BAIfwMJ+pYeN6yCixJNRfU78YO HL/0xZCsgTFcbH3dFiZ42FsuZ0+hJ/gllz2SGWhZNvgoPQNPlN3rksgAuI0Pff23 s4lDvjfpng7f0mwkW7Tm9KS3SHQOiSOP+mNZcWIuJJ9/eZKP8qApndNn02nHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiogYCStVLQH8uim1NC9QW2rjpscwHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFT2WuKC81pAd/SGTZZCcXQ9IL+4ddW7s/m7 DGDlOpfkctYCz8ppnIwbmxik2C5eNW6s7IbI6oXI20C9m12OSi2e8V1BtyfKkSwb knKYC3k+hfoZN7Zd/NleZM5E//OQ9qwmp/j5QjV2g/7jZJ2ZkQ+Ezxpm/yh1rZkW +aCVS1ugPRIJlK34FNmFpgtdSsLzNwLWprdtsvlCybEo9OU1yAQT8UIDVuzxPvCZ 2A/1+mfO4MEx8IPdZec0J3fTHJ5SKomwIDAkONjd4VRvU0KTaUtqDk3qgkeqngX+ zqQxOv+09qD7zzmqFZ6wodklc44k0AI0zKhrYS9JECUVNEG5g5w= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:08 2025 by rpki-client