$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: xIiB8P/MrClRWc8UFR17dkTnlXp6/LOqU9qgc7MvfSk= Subject key identifier: BB:BA:6C:D6:07:4B:BF:B5:0E:84:D5:02:F5:EC:93:D8:5D:15:BB:54 Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 3B32038972CB00716FDB96DBD59EF270F485372D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 0199 Signing time: Tue 04 Nov 2025 14:11:57 +0000 Manifest this update: Tue 04 Nov 2025 14:06:57 +0000 Manifest next update: Fri 07 Nov 2025 22:20:57 +0000 Files and hashes: 1: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) 2: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) 3: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: V0BiPUlUgTje45F0U4drxPct3MfGRPOLligNibWK104=) 4: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) 5: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: sfj/xLZEElFZFm97ASqdb3Sh5i8unBwVhTxljUPKis0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:32:03:89:72:cb:00:71:6f:db:96:db:d5:9e:f2:70:f4:85:37:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Nov 4 14:06:57 2025 GMT Not After : Nov 7 22:20:57 2025 GMT Subject: CN=BBBA6CD6074BBFB50E84D502F5EC93D85D15BB54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:4b:77:48:7f:7c:56:71:55:a2:a2:ad:62: 6b:59:6e:8a:6f:2e:09:93:47:04:5e:41:1f:f5:c5: b0:1a:16:78:5b:b6:4d:40:ea:4e:38:cb:f8:46:bf: 3b:bc:b7:4d:71:91:3b:8a:82:a9:93:f7:d4:0e:5f: 7b:60:37:c0:21:80:2d:c1:e2:73:1c:76:f2:42:7c: a4:34:47:0f:5a:da:38:00:00:48:e0:59:e3:7c:dc: 68:18:ab:19:c7:73:da:3f:86:c4:60:94:67:89:05: da:74:fb:30:8c:e1:2f:f2:58:a0:f2:78:63:08:47: c0:c7:68:87:55:19:1b:ff:ca:86:30:56:a1:1b:2f: fa:a3:46:6a:ad:42:db:5b:b4:6b:ae:25:ec:a8:72: a9:15:48:e8:5c:d9:b7:d3:14:a2:48:e4:2e:ba:72: e4:38:a9:bb:90:65:64:40:57:2e:7a:44:23:2c:8a: 69:63:6f:90:f1:de:2a:ca:27:36:03:c1:56:ff:ba: 6a:ab:6d:84:6e:9a:11:e4:cd:bc:b0:b3:d4:f9:c8: cb:0d:70:1a:55:ee:f0:8c:ca:3e:f6:f9:67:db:da: 5a:07:b5:38:b3:27:f8:e6:e5:85:c3:fd:60:73:10: 96:9e:14:24:ef:bf:21:25:24:86:48:d1:63:b1:48: 0b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BA:6C:D6:07:4B:BF:B5:0E:84:D5:02:F5:EC:93:D8:5D:15:BB:54 X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:15:2c:25:74:c8:33:14:27:9d:32:1d:94:71:f8:a5:2d:00: 36:c2:eb:a5:37:c7:1f:e0:d8:be:39:0f:9d:02:77:bb:52:43: e4:e3:52:cf:36:60:5b:2e:a0:17:2a:44:ae:08:56:39:00:05: 88:da:a5:65:90:94:08:80:02:a8:a8:81:a1:14:24:c3:f6:64: 6c:26:bf:b2:9b:a3:e3:dd:59:b2:72:e2:37:1a:87:79:bf:33: 4a:3b:1a:22:99:73:9a:02:5d:fb:01:dc:9f:ef:8d:3f:3b:8e: 09:ad:a4:9d:fc:c7:49:c8:48:8c:4c:89:36:66:9e:25:bd:ce: 86:b9:5f:e4:86:a3:e6:f7:2c:1d:2f:45:f1:32:b6:1a:02:af: 99:64:b2:91:6a:31:5f:d1:84:0e:19:1e:dd:54:ae:86:ce:21: 17:c3:4a:bd:77:28:bc:bc:e7:49:2c:0e:db:9c:a8:9b:06:6b: 58:b2:7f:6a:13:5b:00:40:a4:87:a3:8a:ef:21:eb:02:7e:aa: f7:1b:70:ab:b1:cd:d3:33:bb:56:a8:77:2f:68:c7:80:42:07: 69:05:3c:6a:31:9c:75:f1:bc:bc:ff:ca:ac:a8:28:c3:8f:89: 51:8f:bb:4d:92:a3:1e:ea:a6:b8:de:5e:c1:9a:93:10:25:3a: f1:2a:30:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzIDiXLLAHFv25bb1Z7ycPSFNy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTExMDQxNDA2NTdaFw0yNTExMDcyMjIwNTdaMDMxMTAvBgNV BAMTKEJCQkE2Q0Q2MDc0QkJGQjUwRTg0RDUwMkY1RUM5M0Q4NUQxNUJCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ykt3SH98VnFVoqKtYmtZbopv LgmTRwReQR/1xbAaFnhbtk1A6k44y/hGvzu8t01xkTuKgqmT99QOX3tgN8AhgC3B 4nMcdvJCfKQ0Rw9a2jgAAEjgWeN83GgYqxnHc9o/hsRglGeJBdp0+zCM4S/yWKDy eGMIR8DHaIdVGRv/yoYwVqEbL/qjRmqtQttbtGuuJeyocqkVSOhc2bfTFKJI5C66 cuQ4qbuQZWRAVy56RCMsimljb5Dx3irKJzYDwVb/umqrbYRumhHkzbyws9T5yMsN cBpV7vCMyj72+Wfb2loHtTizJ/jm5YXD/WBzEJaeFCTvvyElJIZI0WOxSAs3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu7ps1gdLv7UOhNUC9eyT2F0Vu1QwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0VLCV0yDMUJ50yHZRx+KUtADbC66U3xx/g 2L45D50Cd7tSQ+TjUs82YFsuoBcqRK4IVjkABYjapWWQlAiAAqiogaEUJMP2ZGwm v7Kbo+PdWbJy4jcah3m/M0o7GiKZc5oCXfsB3J/vjT87jgmtpJ38x0nISIxMiTZm niW9zoa5X+SGo+b3LB0vRfEythoCr5lkspFqMV/RhA4ZHt1UrobOIRfDSr13KLy8 50ksDtucqJsGa1iyf2oTWwBApIejiu8h6wJ+qvcbcKuxzdMzu1aody9ox4BCB2kF PGoxnHXxvLz/yqyoKMOPiVGPu02Sox7qprjeXsGakxAlOvEqMNw= -----END CERTIFICATE-----Generated at Tue Nov 4 23:38:19 2025 by rpki-client