$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: /AiGpOk1ikFdRa2CSjRVlQVpImdh3OStezqgU7VqpYI= Subject key identifier: 1D:32:C4:47:BD:13:9D:CF:7A:13:CA:E4:A5:C7:52:B4:3B:AF:90:47 Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 3957F093DFF6EB0B5C912CFDAD338F2AA40D3B6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: 9C Signing time: Tue 04 Nov 2025 15:41:42 +0000 Manifest this update: Tue 04 Nov 2025 15:36:42 +0000 Manifest next update: Sat 08 Nov 2025 00:30:42 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: wafuUZE7si4cAgMLdkQUrFgk3lQNEG0WidKnSMx5SCY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:57:f0:93:df:f6:eb:0b:5c:91:2c:fd:ad:33:8f:2a:a4:0d:3b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Nov 4 15:36:42 2025 GMT Not After : Nov 8 00:30:42 2025 GMT Subject: CN=1D32C447BD139DCF7A13CAE4A5C752B43BAF9047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:fd:4e:1c:e8:4c:41:eb:f6:5d:e6:33:ab: 9d:b0:d2:90:a9:07:ff:10:05:6c:e5:dc:62:7c:51: eb:05:5d:c8:d0:ef:dc:56:53:e0:e9:a9:85:d4:99: 83:13:a5:78:0b:67:88:e8:d4:08:8c:c9:60:cb:b4: de:46:cd:a8:78:00:5c:12:26:1d:65:e2:aa:35:97: 6d:b6:f9:fb:31:37:24:0b:de:9e:3f:b3:3d:89:c2: 44:8f:4b:f9:c8:84:ea:4e:f6:70:42:12:2b:89:e4: 03:2b:39:85:28:52:7d:ec:1a:37:13:d7:d7:50:83: d6:98:84:68:d5:45:d3:b4:0c:11:db:eb:3d:bc:20: 64:2d:0c:2d:c7:22:1e:a9:cd:f8:09:b1:53:4b:6b: 8e:d4:6e:70:e7:de:97:9e:9e:20:94:d9:e8:95:c0: ba:05:8e:95:9e:7f:5a:9b:70:d3:cb:e2:3b:4e:de: dd:eb:b1:c0:7b:78:b3:3c:5b:28:56:16:88:7f:b9: 61:da:71:ea:e5:4c:ad:0e:89:16:24:c5:4c:9c:32: 60:01:e4:24:5e:54:5d:11:56:4d:0b:35:62:4c:0c: b8:64:72:0c:b2:05:7f:47:38:74:2b:14:ca:63:a1: 73:a3:22:25:ef:87:54:ef:0b:d6:9f:2c:64:4f:d4: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:32:C4:47:BD:13:9D:CF:7A:13:CA:E4:A5:C7:52:B4:3B:AF:90:47 X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:30:55:5f:c7:c1:37:69:da:e7:88:6b:c3:ad:aa:e9:81:e9: f6:8e:0e:87:2c:82:91:40:4d:bb:46:11:5c:61:53:97:c7:29: 9b:f5:ae:ab:cc:ee:11:9e:47:4f:bf:9f:ce:1f:11:c2:2c:a2: bc:37:75:b4:55:fe:c5:06:da:5c:93:38:90:57:8e:ec:21:cf: 1e:81:0f:9f:dd:83:b3:a8:50:91:1e:04:9e:18:1e:39:57:54: 26:00:d4:34:63:1a:f1:33:fd:fa:1f:98:3e:72:51:55:da:88: 14:08:d2:5f:ae:ac:e5:4f:50:24:08:38:15:57:8c:39:a3:7c: e9:a4:c4:58:34:04:b8:78:8d:48:d1:f0:42:76:da:c8:4c:73: 4f:92:f9:43:bb:ba:c3:b2:4f:80:f1:bd:fe:10:ff:15:ca:8b: 81:6e:49:a0:ab:57:0c:ea:f0:99:e8:33:4a:43:3d:6f:07:fa: 96:e1:40:9e:01:18:79:45:ed:ca:67:8e:7d:93:8c:d3:8e:3d: 08:dc:08:49:4d:88:a4:f3:e0:1c:18:77:f8:92:84:9e:91:26: 5d:e1:bf:4f:03:eb:f9:74:62:d5:de:8c:d3:8a:62:bc:33:37: 73:34:ab:6f:7a:26:3e:95:79:3f:67:62:dd:7a:39:2e:a5:92: cd:10:af:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVfwk9/26wtckSz9rTOPKqQNO20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNTExMDQxNTM2NDJaFw0yNTExMDgwMDMwNDJaMDMxMTAvBgNV BAMTKDFEMzJDNDQ3QkQxMzlEQ0Y3QTEzQ0FFNEE1Qzc1MkI0M0JBRjkwNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Rv1OHOhMQev2XeYzq52w0pCp B/8QBWzl3GJ8UesFXcjQ79xWU+DpqYXUmYMTpXgLZ4jo1AiMyWDLtN5Gzah4AFwS Jh1l4qo1l222+fsxNyQL3p4/sz2JwkSPS/nIhOpO9nBCEiuJ5AMrOYUoUn3sGjcT 19dQg9aYhGjVRdO0DBHb6z28IGQtDC3HIh6pzfgJsVNLa47UbnDn3peeniCU2eiV wLoFjpWef1qbcNPL4jtO3t3rscB7eLM8WyhWFoh/uWHacerlTK0OiRYkxUycMmAB 5CReVF0RVk0LNWJMDLhkcgyyBX9HOHQrFMpjoXOjIiXvh1TvC9afLGRP1LgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHTLER70Tnc96E8rkpcdStDuvkEcwHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADowVV/HwTdp2ueIa8OtqumB6faODocsgpFA TbtGEVxhU5fHKZv1rqvM7hGeR0+/n84fEcIsorw3dbRV/sUG2lyTOJBXjuwhzx6B D5/dg7OoUJEeBJ4YHjlXVCYA1DRjGvEz/fofmD5yUVXaiBQI0l+urOVPUCQIOBVX jDmjfOmkxFg0BLh4jUjR8EJ22shMc0+S+UO7usOyT4Dxvf4Q/xXKi4FuSaCrVwzq 8JnoM0pDPW8H+pbhQJ4BGHlF7cpnjn2TjNOOPQjcCElNiKTz4BwYd/iShJ6RJl3h v08D6/l0YtXejNOKYrwzN3M0q296Jj6VeT9nYt16OS6lks0Qr6A= -----END CERTIFICATE-----Generated at Wed Nov 5 09:20:27 2025 by rpki-client