$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: tlxC7eZUDdSwiN9ocSwINRXd/K6qKJKavC9gWMVD6o8= Subject key identifier: BD:FB:9A:44:BF:A3:A2:08:69:41:F2:DB:6C:5A:64:08:C3:57:5B:6D Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 3EE64AF288C5051D9E6B491D4958A30840F23BF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 0170 Signing time: Tue 05 Aug 2025 06:31:57 +0000 Manifest this update: Tue 05 Aug 2025 06:26:57 +0000 Manifest next update: Fri 08 Aug 2025 14:53:57 +0000 Files and hashes: 1: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) 2: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: tBSsfjhQO5X9ScfGxx+EhAfH9q2OzWjKdKzoa6bUExY=) 3: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) 4: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: 9NdE9Yt64lHcZmHfcp/BPdUY3C5A8B6IZ0IM6khU6pM=) 5: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e6:4a:f2:88:c5:05:1d:9e:6b:49:1d:49:58:a3:08:40:f2:3b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Aug 5 06:26:57 2025 GMT Not After : Aug 8 14:53:57 2025 GMT Subject: CN=BDFB9A44BFA3A2086941F2DB6C5A6408C3575B6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:30:e9:f1:0d:c4:d4:5b:ee:ff:d4:fa:81: c7:5c:c7:90:f8:f2:47:67:74:95:a1:fc:28:52:47: 74:63:c3:6d:ac:4c:f1:42:6b:23:7c:7f:d5:08:e7: d8:16:83:13:5f:b5:a3:61:42:94:0f:be:e0:1c:0a: 73:6c:c5:18:3b:bf:9a:c8:1d:6d:85:4d:e7:a6:c7: b1:0e:74:41:06:5d:7a:2b:ad:d0:60:9a:be:7e:de: b5:29:4d:52:75:9a:9b:d1:b0:4f:1f:d6:f3:3d:b9: ce:ba:5a:5a:b9:1a:c8:b4:c3:50:1b:a0:1a:79:b1: d9:0d:25:b4:f6:ea:74:ce:42:2f:3d:a2:1a:09:72: 5b:91:de:3b:5c:2c:77:82:ad:7d:c9:37:80:2d:d3: 1c:88:1f:b1:9f:66:a3:d8:2b:6a:98:04:02:39:f3: ed:e1:83:c5:43:f5:f0:bf:3e:64:77:a2:9a:f2:91: b9:3c:96:28:a9:a0:ba:1e:50:5e:73:8a:0a:2e:fd: c2:da:27:53:eb:85:22:44:c5:52:8d:db:3d:82:a4: 7f:97:4b:ed:90:9a:fb:02:07:9c:9c:2e:d2:20:42: 42:f0:f7:7d:67:8b:2c:69:a0:a5:54:5a:e0:ad:2d: 56:92:c2:c9:ff:4b:17:6c:42:7f:e9:01:9c:19:20: 97:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FB:9A:44:BF:A3:A2:08:69:41:F2:DB:6C:5A:64:08:C3:57:5B:6D X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f5:db:a0:47:96:b3:66:15:90:47:57:55:34:96:ac:b0:4a: 07:4a:66:0b:14:37:71:f7:a2:38:d8:49:19:68:4b:21:3f:96: d9:99:ea:3a:17:7e:4e:80:fd:99:8e:eb:a4:65:a3:35:1e:ce: 34:6d:45:f0:db:df:c4:84:bb:39:22:98:ec:4d:48:be:9d:cb: 19:42:1b:ce:30:89:ca:86:6f:c4:69:92:ce:c5:c6:4e:fb:b0: ee:8e:48:43:ef:67:2f:b9:14:26:e7:dd:55:a7:10:86:89:4a: 0d:4e:7d:58:c1:21:ab:6a:df:15:83:67:be:3a:f4:c3:38:39: ff:4c:90:a4:8f:23:80:7c:a2:b5:ed:e2:63:29:5c:98:fb:00: e6:74:ec:a4:2c:42:e2:ce:6f:c4:2c:79:da:30:58:85:f0:f5: 3a:f7:96:dc:ab:57:44:b2:f5:fb:8d:31:f3:ba:5b:8d:d5:9d: 3a:87:f7:29:77:94:31:21:06:64:70:ef:e6:b4:bf:02:60:61: 4c:45:a4:b9:65:d7:18:49:04:3c:78:79:4e:87:2d:d1:2c:65: 05:01:84:3a:81:6d:42:41:01:7b:8d:9d:63:83:9f:ca:d5:cd: 8a:1a:53:1a:f9:53:a1:d6:ae:14:7c:8e:5a:1b:df:e0:60:dc: 86:25:3a:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPuZK8ojFBR2ea0kdSVijCEDyO/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTA4MDUwNjI2NTdaFw0yNTA4MDgxNDUzNTdaMDMxMTAvBgNV BAMTKEJERkI5QTQ0QkZBM0EyMDg2OTQxRjJEQjZDNUE2NDA4QzM1NzVCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63DDp8Q3E1Fvu/9T6gcdcx5D4 8kdndJWh/ChSR3Rjw22sTPFCayN8f9UI59gWgxNftaNhQpQPvuAcCnNsxRg7v5rI HW2FTeemx7EOdEEGXXorrdBgmr5+3rUpTVJ1mpvRsE8f1vM9uc66Wlq5Gsi0w1Ab oBp5sdkNJbT26nTOQi89ohoJcluR3jtcLHeCrX3JN4At0xyIH7GfZqPYK2qYBAI5 8+3hg8VD9fC/PmR3oprykbk8liipoLoeUF5zigou/cLaJ1PrhSJExVKN2z2CpH+X S+2QmvsCB5ycLtIgQkLw931niyxpoKVUWuCtLVaSwsn/SxdsQn/pAZwZIJfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvfuaRL+joghpQfLbbFpkCMNXW20wHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHf126BHlrNmFZBHV1U0lqywSgdKZgsUN3H3 ojjYSRloSyE/ltmZ6joXfk6A/ZmO66RlozUezjRtRfDb38SEuzkimOxNSL6dyxlC G84wicqGb8Rpks7Fxk77sO6OSEPvZy+5FCbn3VWnEIaJSg1OfVjBIatq3xWDZ746 9MM4Of9MkKSPI4B8orXt4mMpXJj7AOZ07KQsQuLOb8QsedowWIXw9Tr3ltyrV0Sy 9fuNMfO6W43VnTqH9yl3lDEhBmRw7+a0vwJgYUxFpLll1xhJBDx4eU6HLdEsZQUB hDqBbUJBAXuNnWODn8rVzYoaUxr5U6HWrhR8jlob3+Bg3IYlOvU= -----END CERTIFICATE-----Generated at Wed Aug 6 16:26:18 2025 by rpki-client