$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: Q8Gy2UC1r303J80lAW1+gHA0NurSuH0jVuwCyT6Zhbo= Subject key identifier: 10:A3:40:B5:89:7C:B5:1D:56:33:DF:4F:BA:24:8C:FE:B4:08:05:90 Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 2B46B8405B86330F0CA0D984EE675858BDB29071 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 0210 Signing time: Sun 19 Oct 2025 03:32:14 +0000 Manifest this update: Sun 19 Oct 2025 03:27:14 +0000 Manifest next update: Wed 22 Oct 2025 15:17:14 +0000 Files and hashes: 1: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: +1UYfah2sMtONDB/OoldFG+BYx98xj3msO1QiEcg0kk=) 2: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) 3: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) 4: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:46:b8:40:5b:86:33:0f:0c:a0:d9:84:ee:67:58:58:bd:b2:90:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Oct 19 03:27:14 2025 GMT Not After : Oct 22 15:17:14 2025 GMT Subject: CN=10A340B5897CB51D5633DF4FBA248CFEB4080590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:0f:54:51:52:49:5a:06:72:b4:d1:8a:cc: 99:c1:1e:e9:cf:4e:66:eb:e6:94:d4:ef:ee:c0:b3: 9f:5b:ad:6a:18:81:d5:4d:75:8f:b0:55:6d:78:57: 03:c2:de:5b:a8:bd:00:12:13:a1:a1:bc:18:c9:cd: d0:02:77:29:f9:18:db:b4:05:cb:66:df:7a:93:28: 3c:61:75:00:f9:f8:28:73:ad:5a:1e:77:31:10:dc: 0b:e7:a8:bd:68:20:78:8b:9c:df:fc:53:57:54:e7: ea:b8:75:9e:a4:f5:61:45:8c:65:d7:0d:4d:29:ce: 00:02:20:05:cf:68:55:b0:1c:de:c8:0b:c8:22:23: 26:5f:57:e5:f7:54:59:29:99:43:d1:d6:15:ec:4f: 28:f4:da:e1:99:d5:a8:01:53:d2:3d:a3:6c:d3:2d: a0:30:1f:e7:42:52:e4:ce:c5:8d:6e:3e:b0:ec:67: 0f:4d:3f:2f:3c:f5:14:88:72:61:ad:ee:e3:53:73: 87:cb:ee:6b:9e:86:a8:2a:10:7d:2b:59:51:aa:a1: 8b:4a:fe:96:90:55:65:a3:e2:f2:0d:88:a2:2a:cb: 55:b4:c1:06:30:e3:00:c8:ea:8d:f5:d8:41:0f:f7: 25:bd:4a:fa:33:46:10:26:77:98:5a:23:c1:a8:c8: 3d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A3:40:B5:89:7C:B5:1D:56:33:DF:4F:BA:24:8C:FE:B4:08:05:90 X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:db:39:ef:1a:7d:56:f4:93:3c:85:c7:c6:0e:9a:60:40:4b: bd:57:80:d2:f1:59:c1:59:10:5d:67:25:7e:ec:d2:b1:5b:62: 45:9d:e3:d1:0e:85:df:41:d0:a0:44:ae:49:a7:a7:e3:ab:86: c9:3c:9b:a7:63:c9:ae:76:4a:b2:ca:26:e9:54:4e:15:37:10: 31:1e:ae:79:e4:eb:1c:4f:07:ac:96:5a:38:58:6d:2d:29:94: 5c:a8:57:27:c5:de:74:d4:b1:53:a3:df:f1:01:da:84:8a:dd: 49:78:9b:d5:98:9a:47:83:b1:a9:4d:60:90:d9:fa:48:ed:7e: ba:1c:ea:60:79:2f:05:3b:3f:55:04:54:35:f8:4a:da:60:75: ed:99:0e:f0:9f:d2:e4:9c:bc:50:db:6f:a8:7a:33:ae:c8:cb: d7:35:5e:f6:93:5f:d8:fe:92:cd:db:8f:3f:15:05:df:20:d6: b7:4d:06:e2:62:c3:a1:6d:71:e4:e0:27:ff:44:a3:06:6b:70: 46:4d:42:fd:3b:66:7c:5d:00:b4:3a:0c:b0:1d:dd:38:1a:f6: db:09:7b:8c:06:0f:46:0c:fd:1a:87:bd:ab:49:15:19:44:09: 5b:cd:54:53:10:5a:e3:62:b9:4e:75:60:35:80:4e:59:ca:56: 8a:c0:b5:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0a4QFuGMw8MoNmE7mdYWL2ykHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNTEwMTkwMzI3MTRaFw0yNTEwMjIxNTE3MTRaMDMxMTAvBgNV BAMTKDEwQTM0MEI1ODk3Q0I1MUQ1NjMzREY0RkJBMjQ4Q0ZFQjQwODA1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8A9UUVJJWgZytNGKzJnBHunP Tmbr5pTU7+7As59brWoYgdVNdY+wVW14VwPC3luovQASE6GhvBjJzdACdyn5GNu0 Bctm33qTKDxhdQD5+ChzrVoedzEQ3AvnqL1oIHiLnN/8U1dU5+q4dZ6k9WFFjGXX DU0pzgACIAXPaFWwHN7IC8giIyZfV+X3VFkpmUPR1hXsTyj02uGZ1agBU9I9o2zT LaAwH+dCUuTOxY1uPrDsZw9NPy889RSIcmGt7uNTc4fL7muehqgqEH0rWVGqoYtK /paQVWWj4vINiKIqy1W0wQYw4wDI6o312EEP9yW9SvozRhAmd5haI8GoyD1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEKNAtYl8tR1WM99PuiSM/rQIBZAwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETbOe8afVb0kzyFx8YOmmBAS71XgNLxWcFZ EF1nJX7s0rFbYkWd49EOhd9B0KBErkmnp+Orhsk8m6djya52SrLKJulUThU3EDEe rnnk6xxPB6yWWjhYbS0plFyoVyfF3nTUsVOj3/EB2oSK3Ul4m9WYmkeDsalNYJDZ +kjtfroc6mB5LwU7P1UEVDX4Stpgde2ZDvCf0uScvFDbb6h6M67Iy9c1XvaTX9j+ ks3bjz8VBd8g1rdNBuJiw6FtceTgJ/9EowZrcEZNQv07ZnxdALQ6DLAd3Tga9tsJ e4wGD0YM/RqHvatJFRlECVvNVFMQWuNiuU51YDWATlnKVorAtRA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:16 2025 by rpki-client