$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft File: DD29F5E4CE561760A0212F0448987AFBE75263D7.mft (raw, json) Hash identifier: +zaWkYVUOgaBKgI6GFMddwlmy49RhKS9ZSvsGgeM45w= Subject key identifier: 5E:55:B6:E5:1A:88:E3:52:DB:F8:F5:2B:99:87:A9:D0:CE:F1:37:77 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 290FF7CD886AAEBB45D226BC02A24F9DB6606A3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft Manifest number: 02F9 Signing time: Mon 16 Jun 2025 05:12:05 +0000 Manifest this update: Mon 16 Jun 2025 05:07:05 +0000 Manifest next update: Thu 19 Jun 2025 16:37:05 +0000 Files and hashes: 1: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: KCwggPDyjMOHP+o7do6DpKf6RZ3T2/Rfig0q6lMutLA=) 2: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: +pkqBDcSIJauOHhuC/iQUrXCbfOiU5mYoeOXWd/Jx7I=) 3: DD29F5E4CE561760A0212F0448987AFBE75263D7.crl (hash: c715XXIj4rzbMJfn6xkg+xXMTYuzqTfio4I+PCIh12k=) 4: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: VCpqet2tltq6OwAAWmXLVEpkSYf/oR/zTCEWMlMzr2Y=) 5: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: of7XjX89CiHFfIQLpt1o6+DFkAA2fUQ2SMQAsL24xtw=) 6: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: ORf8MBvb0cc1Hlu83aqDGCB77dQwtn/c/kHba/c2HYo=) 7: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: w6bNOjpU0I0jjnq/DeAF5pAdWd2fSBGqPyk3RRIO0Ys=) 8: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: e59wQms8v5jMBeQnHJR3rPXGniQiJS1tDMckcJ4pEwQ=) 9: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: q0d8NLaf44QcZ0mXu0lgVK/f2ztOAP51wfbILAD0OWE=) 10: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: Tr8KoztX4g1WXnF+96HqpgOulMvRhy41cuaQJFwuUXc=) 11: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: Rflx89NQ3S/Ei3ZTUD7ICkgdTWu+XfG7H70uY/x+4wc=) 12: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: XlRIM2drE0eVYSx46A7CTq2auxNTRxDcpQdmTnDOrQU=) 13: 3130332e34322e3132322e302f32342d3234203d3e203234353334.roa (hash: U0ZYfoLEU7/YUTuj/HEbmKOFNpez0H5ASCN++eNNi6Y=) 14: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: pui7zb2XJ4+X3ruOIeMi3Iddl1A0mCCFNXvLOJrEw2o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:0f:f7:cd:88:6a:ae:bb:45:d2:26:bc:02:a2:4f:9d:b6:60:6a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Jun 16 05:07:05 2025 GMT Not After : Jun 19 16:37:05 2025 GMT Subject: CN=5E55B6E51A88E352DBF8F52B9987A9D0CEF13777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:12:96:17:38:99:62:80:52:76:4e:78:fe: ee:3d:9d:70:3e:96:79:ef:19:a4:d7:06:34:4f:76: c9:c6:70:77:5b:9b:7f:93:ae:a1:53:b9:de:e3:52: 7f:25:67:54:33:05:10:2f:df:a6:fb:46:20:16:4b: 19:ab:ff:05:99:88:c9:8c:7a:58:c8:f0:b7:af:03: 4c:1d:87:4e:cb:65:99:fc:ec:3a:47:82:37:e8:94: 29:25:b7:36:46:72:a0:de:f4:7c:6b:1d:43:ac:3c: 0f:7d:26:69:98:86:5d:7f:61:7e:21:71:d6:3a:41: 40:62:9b:50:c5:82:24:b1:f4:94:6b:15:a7:17:d6: b7:7f:53:90:0f:cf:c5:5d:ee:05:b6:91:14:6b:4b: e0:5c:0e:ac:2b:71:a3:13:e8:4c:c6:4b:e5:de:cd: cf:b4:42:24:d7:29:e1:84:d7:39:41:f0:42:91:a7: 68:46:23:35:39:33:2c:c0:75:a9:42:3f:be:ff:5f: 73:ae:7d:ea:d5:ed:51:a4:65:af:d2:80:39:bf:2b: af:31:74:17:8e:aa:c9:55:60:fd:00:65:18:fa:33: 8b:9c:1c:aa:f6:7e:47:a4:6b:65:07:88:93:2e:f3: bf:73:f6:b7:1e:6a:82:40:a5:c9:96:12:57:f2:22: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:55:B6:E5:1A:88:E3:52:DB:F8:F5:2B:99:87:A9:D0:CE:F1:37:77 X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b3:68:2d:ad:9c:6a:af:af:00:56:5f:21:a6:d5:29:cf:08: 89:63:38:20:12:98:c2:de:81:ce:cb:5d:c5:7c:eb:b5:65:4d: e1:ed:86:54:a4:89:72:61:2f:9f:bf:5b:c5:38:bb:0f:b4:9b: 3a:dd:52:de:3a:37:4f:e1:91:38:bd:de:4f:2c:1a:be:6a:5d: 32:7a:e1:75:97:60:87:d0:84:b4:0f:4b:82:9f:79:73:4a:4a: b7:0d:9f:ae:65:e7:9e:86:36:86:cb:79:21:23:c5:9f:53:91: 53:0e:bd:b8:6d:ac:d5:af:22:53:51:e0:6b:f6:08:1d:b1:44: 19:95:77:d0:ae:c3:88:2f:e7:5b:84:47:66:58:d2:46:ec:cf: 77:98:3a:b5:11:de:40:50:0b:bb:76:3e:c7:ac:4a:ee:ae:39: 28:0d:9e:f8:28:78:28:d4:c9:77:30:81:d6:ae:54:83:7b:8b: e1:3d:50:10:fd:fb:7e:99:31:df:4c:86:d9:f9:b2:2e:bc:1e: e5:75:2d:96:9b:e3:e3:f4:a4:53:fc:10:cc:ba:7e:e1:4e:25: 2a:0b:c5:b3:09:ba:92:2d:ac:57:16:67:27:1a:0f:22:d0:1f: 5a:e0:23:0b:f3:14:12:42:27:f2:f6:37:2f:eb:51:27:9a:4c: df:20:7c:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKQ/3zYhqrrtF0ia8AqJPnbZgaj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTA2MTYwNTA3MDVaFw0yNTA2MTkxNjM3MDVaMDMxMTAvBgNV BAMTKDVFNTVCNkU1MUE4OEUzNTJEQkY4RjUyQjk5ODdBOUQwQ0VGMTM3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAhKWFziZYoBSdk54/u49nXA+ lnnvGaTXBjRPdsnGcHdbm3+TrqFTud7jUn8lZ1QzBRAv36b7RiAWSxmr/wWZiMmM eljI8LevA0wdh07LZZn87DpHgjfolCkltzZGcqDe9HxrHUOsPA99JmmYhl1/YX4h cdY6QUBim1DFgiSx9JRrFacX1rd/U5APz8Vd7gW2kRRrS+BcDqwrcaMT6EzGS+Xe zc+0QiTXKeGE1zlB8EKRp2hGIzU5MyzAdalCP77/X3OuferV7VGkZa/SgDm/K68x dBeOqslVYP0AZRj6M4ucHKr2fkeka2UHiJMu879z9rceaoJApcmWElfyIrIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXlW25RqI41Lb+PUrmYep0M7xN3cwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYyNDA1MmUtMjIwNS00OGYzLWEz Y2ItY2U4YjMyNmI4ZjcxLzAvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdB RkJFNzUyNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCzaC2tnGqvrwBWXyGm1SnPCIljOCASmMLe gc7LXcV867VlTeHthlSkiXJhL5+/W8U4uw+0mzrdUt46N0/hkTi93k8sGr5qXTJ6 4XWXYIfQhLQPS4KfeXNKSrcNn65l556GNobLeSEjxZ9TkVMOvbhtrNWvIlNR4Gv2 CB2xRBmVd9Cuw4gv51uER2ZY0kbsz3eYOrUR3kBQC7t2PsesSu6uOSgNnvgoeCjU yXcwgdauVIN7i+E9UBD9+36ZMd9Mhtn5si68HuV1LZab4+P0pFP8EMy6fuFOJSoL xbMJupItrFcWZycaDyLQH1rgIwvzFBJCJ/L2Ny/rUSeaTN8gfCY= -----END CERTIFICATE-----Generated at Mon Jun 16 15:30:47 2025 by rpki-client