$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: HZlkC8V9yeku0CJwKa8kPrMexfNQQ1TgGcYOipzT3CM= Subject key identifier: 8D:AC:0E:11:69:7E:78:91:7B:0D:8A:D4:3D:36:9A:42:57:89:98:BC Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 388F211A994A274950EF499F842AB59229461553 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 01F6 Signing time: Thu 21 Aug 2025 15:42:13 +0000 Manifest this update: Thu 21 Aug 2025 15:37:13 +0000 Manifest next update: Mon 25 Aug 2025 00:11:13 +0000 Files and hashes: 1: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) 2: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: n5EZQ6XVrHDx9gKmG2KXfTaxyBzeNEdXNAJ8lqUNWR4=) 3: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) 4: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8f:21:1a:99:4a:27:49:50:ef:49:9f:84:2a:b5:92:29:46:15:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Aug 21 15:37:13 2025 GMT Not After : Aug 25 00:11:13 2025 GMT Subject: CN=8DAC0E11697E78917B0D8AD43D369A42578998BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:e4:34:7a:38:8d:83:52:4e:f2:41:33:fc: 53:3b:d3:92:ad:bf:50:75:2d:90:48:d4:95:52:12: 8d:63:34:83:29:2f:88:93:c2:89:c3:26:ec:61:52: 63:4a:85:4a:95:16:60:62:b6:50:6e:ba:39:d9:51: 12:c4:14:5b:fc:bf:b9:f3:31:1c:98:53:59:e4:ef: c9:7e:0d:34:23:71:67:67:24:f0:7f:8e:a8:73:57: 0f:4d:49:9e:bd:b9:67:e1:38:0a:60:af:4a:9a:02: bc:e6:4d:02:e8:9d:db:1c:62:f0:6c:39:8a:21:f7: c1:b5:c5:d0:c0:83:2b:f2:6c:48:e0:6b:a5:c4:65: 92:26:90:f3:8f:6c:0f:d8:11:04:e0:ff:0c:d0:1c: 1c:5f:fa:e1:51:22:77:98:cd:a2:06:61:61:dc:b2: 36:51:54:fb:25:7f:69:1a:2b:62:f7:b9:5a:ff:9a: fe:9e:d5:93:a4:16:a3:83:f4:51:62:0f:e9:8a:61: 40:1f:f5:38:9e:46:f2:14:43:55:4e:74:31:4a:88: 0c:5e:3b:41:f0:bc:1c:de:b5:8b:f6:50:34:f4:b8: 46:fa:77:ab:c4:e4:fa:d2:77:48:6a:f9:2d:26:ff: 91:ad:da:6c:81:4f:d0:58:bd:86:76:d6:a6:b9:50: 3f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AC:0E:11:69:7E:78:91:7B:0D:8A:D4:3D:36:9A:42:57:89:98:BC X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:dc:fd:db:9e:81:1c:e7:e6:df:2e:e4:3c:36:f2:d3:8a:83: 4f:a7:e7:ce:1f:5b:04:dd:3d:38:1b:db:fb:62:d6:b2:3a:fa: 82:f7:8d:6f:96:69:1f:6f:be:6f:4d:4e:27:5e:5a:5c:d5:11: ad:1a:34:f8:4e:db:aa:97:2c:6a:e7:0f:f2:83:d3:f3:5a:29: d3:4d:01:89:81:7f:da:39:b8:f7:1d:2e:da:ec:1f:c6:96:75: 5f:b5:10:b2:49:a7:71:4d:af:7e:a4:31:9f:a5:f3:f2:f5:07: ab:06:e0:ff:68:42:ee:79:27:d5:36:13:5d:7e:20:a0:1a:59: 5c:93:f3:70:48:13:51:15:a5:4a:ed:70:00:d4:5b:50:dc:f4: 5b:b7:8a:6e:73:85:d5:57:80:ea:21:5f:e5:a6:4c:d2:be:b2: 51:b4:21:f9:64:67:67:af:6b:b5:76:c6:e4:34:82:84:22:4f: e2:1c:56:8c:5b:db:34:5e:b1:19:2e:8c:8f:a3:5c:02:e1:46: 6f:df:90:1c:cf:58:27:c9:d4:42:10:d6:f6:32:82:48:98:6d: f6:6e:ce:41:b8:1f:52:f3:5c:40:16:8a:c3:c2:a3:3b:e5:d1: 5f:c1:b0:cb:e2:de:98:14:a1:75:4c:9c:f3:d7:9f:2e:18:31: 8d:12:23:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOI8hGplKJ0lQ70mfhCq1kilGFVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNTA4MjExNTM3MTNaFw0yNTA4MjUwMDExMTNaMDMxMTAvBgNV BAMTKDhEQUMwRTExNjk3RTc4OTE3QjBEOEFENDNEMzY5QTQyNTc4OTk4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpuQ0ejiNg1JO8kEz/FM705Kt v1B1LZBI1JVSEo1jNIMpL4iTwonDJuxhUmNKhUqVFmBitlBuujnZURLEFFv8v7nz MRyYU1nk78l+DTQjcWdnJPB/jqhzVw9NSZ69uWfhOApgr0qaArzmTQLondscYvBs OYoh98G1xdDAgyvybEjga6XEZZImkPOPbA/YEQTg/wzQHBxf+uFRIneYzaIGYWHc sjZRVPslf2kaK2L3uVr/mv6e1ZOkFqOD9FFiD+mKYUAf9TieRvIUQ1VOdDFKiAxe O0HwvBzetYv2UDT0uEb6d6vE5PrSd0hq+S0m/5Gt2myBT9BYvYZ21qa5UD8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjawOEWl+eJF7DYrUPTaaQleJmLwwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbc/duegRzn5t8u5Dw28tOKg0+n584fWwTd PTgb2/ti1rI6+oL3jW+WaR9vvm9NTideWlzVEa0aNPhO26qXLGrnD/KD0/NaKdNN AYmBf9o5uPcdLtrsH8aWdV+1ELJJp3FNr36kMZ+l8/L1B6sG4P9oQu55J9U2E11+ IKAaWVyT83BIE1EVpUrtcADUW1Dc9Fu3im5zhdVXgOohX+WmTNK+slG0IflkZ2ev a7V2xuQ0goQiT+IcVoxb2zResRkujI+jXALhRm/fkBzPWCfJ1EIQ1vYygkiYbfZu zkG4H1LzXEAWisPCozvl0V/BsMvi3pgUoXVMnPPXny4YMY0SI84= -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:59 2025 by rpki-client