$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft File: DD29F5E4CE561760A0212F0448987AFBE75263D7.mft (raw, json) Hash identifier: w35uQqzZkOuGWpGFI2FaxSap6x59744JglayTrnnJ4c= Subject key identifier: E8:52:A7:AF:51:BF:B9:9A:E9:99:3D:C6:77:5D:D7:96:54:E6:FD:28 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 581616777CEE55322EC900634EF514DB8CA90256 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft Manifest number: 0339 Signing time: Sun 02 Nov 2025 05:12:09 +0000 Manifest this update: Sun 02 Nov 2025 05:07:09 +0000 Manifest next update: Wed 05 Nov 2025 11:31:09 +0000 Files and hashes: 1: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: w6bNOjpU0I0jjnq/DeAF5pAdWd2fSBGqPyk3RRIO0Ys=) 2: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: 8qZ2PfVPSW4Gale+B6XAN2CyhRmIb70LvF4xop7XFFw=) 3: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: 0+6+N7y7+z5+GZ0LUn4in9mnEACESucH1zgQmC9xHAA=) 4: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: of7XjX89CiHFfIQLpt1o6+DFkAA2fUQ2SMQAsL24xtw=) 5: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: s32Asfb0Vk2AoqdXXpuFo/1b1Jpm9sVE9gF86xInAZ8=) 6: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: hfJYX7IXK2yRsIkXzTXumWYWspYzmgD5u1H3fLVubkc=) 7: DD29F5E4CE561760A0212F0448987AFBE75263D7.crl (hash: Qd/6ITeqRrGT98V/EfSNHebBUzClx5DYgke10XhY3aI=) 8: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: x2jz47JNdTLcNfT8vbEKIJnVX3m/vRvrmqpmvqODREA=) 9: 3130332e34322e3132322e302f32342d3234203d3e203234353334.roa (hash: XqcXXJVRLAigakZzITIJ9WqM9shB4JwPgUNXZenmspo=) 10: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: X9EKF8Z1uFLJC9IzjlT1aPQkzE/clRuy5X9NkdqNVow=) 11: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: R+HBHXL62WCqMu+S9XZ2lfDd7q3jJVRrizTgz3Qq4sM=) 12: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: e59wQms8v5jMBeQnHJR3rPXGniQiJS1tDMckcJ4pEwQ=) 13: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: yHFhz7s9vTM+0GwcewjykllWnmywdIchHv+vwnUyUtQ=) 14: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: ORf8MBvb0cc1Hlu83aqDGCB77dQwtn/c/kHba/c2HYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:16:16:77:7c:ee:55:32:2e:c9:00:63:4e:f5:14:db:8c:a9:02:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Nov 2 05:07:09 2025 GMT Not After : Nov 5 11:31:09 2025 GMT Subject: CN=E852A7AF51BFB99AE9993DC6775DD79654E6FD28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:25:cd:6d:31:83:b1:a7:33:58:63:70:64: 6f:89:cf:e9:94:77:5d:a8:5e:77:29:ff:4d:75:79: aa:cf:9e:03:80:67:a4:4b:92:4e:d4:48:4d:9e:c3: e6:fb:08:f0:1c:57:a9:b9:c7:a0:bb:16:fb:1f:be: 42:d8:59:80:04:8a:02:22:22:ac:80:1e:a5:9d:e4: c9:f8:b8:7a:f3:46:46:bd:8c:ab:33:97:ca:dd:6b: a0:aa:72:5c:a6:70:62:57:af:34:dc:2a:d7:d0:46: 2c:95:96:55:28:11:e5:47:05:e4:34:c8:92:c3:c4: c0:99:72:7a:a4:c2:cf:f8:9e:79:93:74:f2:dc:53: c9:c7:dc:11:47:8e:33:13:8b:4f:24:69:b3:d9:01: 81:a1:8b:62:2e:0e:5b:6a:c1:29:fb:e6:65:11:be: 51:e6:fe:13:f0:eb:fe:93:19:82:12:0e:56:94:61: a5:c4:dd:23:c4:e6:d9:a7:2c:5d:27:be:fe:a9:cd: 3a:be:db:89:9b:01:e7:c2:ce:30:3b:c3:1b:1e:2e: 05:a6:04:12:ac:6c:7c:41:ff:f1:d1:ee:50:54:37: 5e:44:17:82:bf:31:c3:bc:43:c6:2a:a8:95:50:bd: 24:90:05:01:2b:d3:33:48:0f:ce:62:13:f9:27:e5: e3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:52:A7:AF:51:BF:B9:9A:E9:99:3D:C6:77:5D:D7:96:54:E6:FD:28 X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:39:b0:24:8d:ca:48:fa:97:7f:40:7e:92:ad:a3:b3:b6:12: 16:41:ec:2b:01:95:65:63:4c:31:f3:b1:1a:98:29:00:05:71: 38:ce:67:44:3e:1e:96:b2:e1:6b:98:f0:6e:7d:3e:51:db:b7: 2a:17:25:00:e8:af:54:28:c9:fa:ac:5e:05:55:b2:f1:3c:84: 67:04:7e:e9:ba:2f:da:76:1b:1a:56:fa:70:fb:11:e9:93:c3: 65:97:73:30:b3:0e:43:f3:b7:39:df:2a:27:b7:5c:bc:42:3c: b9:3a:5f:66:64:89:82:89:64:3b:e9:6d:eb:32:f2:2c:bb:82: 31:9e:33:97:a5:49:d1:19:64:00:27:41:ec:44:58:17:f2:9f: 5a:b3:03:3f:69:1c:ed:43:4d:5b:bb:2c:dd:7e:67:e1:74:6f: 6c:90:36:7b:f7:48:80:86:47:fb:e0:8b:79:d6:2b:58:cb:be: 19:f5:7b:a4:61:b6:e8:ff:ec:92:25:06:39:6a:2e:d0:af:66: 3c:3b:ef:95:22:0a:e4:ad:0f:5c:3d:f4:59:30:0e:5f:bc:57: 18:c5:92:9e:92:11:44:77:6d:c6:17:9e:3d:49:07:87:65:54: 89:ba:ce:90:78:22:47:7b:d2:98:68:ee:04:22:43:9c:fc:b0: 00:42:09:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWBYWd3zuVTIuyQBjTvUU24ypAlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTExMDIwNTA3MDlaFw0yNTExMDUxMTMxMDlaMDMxMTAvBgNV BAMTKEU4NTJBN0FGNTFCRkI5OUFFOTk5M0RDNjc3NURENzk2NTRFNkZEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTiXNbTGDsaczWGNwZG+Jz+mU d12oXncp/011earPngOAZ6RLkk7USE2ew+b7CPAcV6m5x6C7FvsfvkLYWYAEigIi IqyAHqWd5Mn4uHrzRka9jKszl8rda6CqclymcGJXrzTcKtfQRiyVllUoEeVHBeQ0 yJLDxMCZcnqkws/4nnmTdPLcU8nH3BFHjjMTi08kabPZAYGhi2IuDltqwSn75mUR vlHm/hPw6/6TGYISDlaUYaXE3SPE5tmnLF0nvv6pzTq+24mbAefCzjA7wxseLgWm BBKsbHxB//HR7lBUN15EF4K/McO8Q8YqqJVQvSSQBQEr0zNID85iE/kn5ePXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6FKnr1G/uZrpmT3Gd13XllTm/SgwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYyNDA1MmUtMjIwNS00OGYzLWEz Y2ItY2U4YjMyNmI4ZjcxLzAvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdB RkJFNzUyNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABg5sCSNykj6l39AfpKto7O2EhZB7CsBlWVj TDHzsRqYKQAFcTjOZ0Q+Hpay4WuY8G59PlHbtyoXJQDor1QoyfqsXgVVsvE8hGcE fum6L9p2GxpW+nD7EemTw2WXczCzDkPztznfKie3XLxCPLk6X2ZkiYKJZDvpbesy 8iy7gjGeM5elSdEZZAAnQexEWBfyn1qzAz9pHO1DTVu7LN1+Z+F0b2yQNnv3SICG R/vgi3nWK1jLvhn1e6Rhtuj/7JIlBjlqLtCvZjw775UiCuStD1w99FkwDl+8VxjF kp6SEUR3bcYXnj1JB4dlVIm6zpB4Ikd70pho7gQiQ5z8sABCCdo= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:29 2025 by rpki-client