$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json) Hash identifier: fIOS2Kq/5ch1C5LbP+Sgsq4QACG5reEbswHyHVbXImc= Subject key identifier: 69:8E:2A:46:2A:7C:C3:F4:64:A1:23:C5:6A:BB:D2:56:8F:4B:58:99 Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Certificate serial: 76B93DDC03E1D35E80E487E5972418EDF6705B8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft Manifest number: 03F8 Signing time: Mon 03 Nov 2025 04:31:21 +0000 Manifest this update: Mon 03 Nov 2025 04:26:21 +0000 Manifest next update: Thu 06 Nov 2025 10:52:21 +0000 Files and hashes: 1: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: K3vShF0D9bPRn6sv5SW8yGmWNIRGvlLBsD0vPKS9a4E=) 2: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: c3TzylCEjs5xy8RF441nXx1uAnBKNVsy3aYQ1eehMFs=) 3: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: Y/t7s83TrJfcnDGlxRGeWKMHBRcUwBBITgOCbUYiXEc=) 4: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: cZNRdo0biPGejYkDVnb71PmZ035TF0z8i2OMZrmfqbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b9:3d:dc:03:e1:d3:5e:80:e4:87:e5:97:24:18:ed:f6:70:5b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Validity Not Before: Nov 3 04:26:21 2025 GMT Not After : Nov 6 10:52:21 2025 GMT Subject: CN=698E2A462A7CC3F464A123C56ABBD2568F4B5899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:65:97:55:6a:2a:2b:1f:bb:5d:4b:fa:16: 3d:28:fe:a1:ae:cd:58:6a:09:24:2d:3c:cd:b6:42: d9:70:46:c6:47:2d:1e:ca:06:d0:62:ec:73:f9:22: b5:10:72:03:b4:32:aa:2a:fa:6f:69:16:3c:28:0d: af:27:dd:78:9e:49:a2:3b:d8:d6:a4:4b:81:86:17: 6b:f0:4e:57:a9:61:7c:ac:25:44:55:7d:fc:d8:d0: 87:2f:fd:2d:de:91:19:32:07:ee:1b:cd:1c:5a:89: 64:dc:95:08:55:42:e3:59:e0:95:ad:32:3a:7c:a9: 74:69:27:34:58:fc:ea:e8:70:6e:46:37:c4:2d:39: c6:43:ed:1e:dd:2a:ff:a5:04:a0:db:cf:bd:6a:50: cf:c9:6e:43:e1:be:91:ab:2c:9b:c0:11:d2:83:ce: ad:61:95:b7:a3:3c:d2:d9:22:fa:ae:a0:ce:46:09: c9:85:a3:56:a0:7f:15:f6:0a:dc:22:da:f0:69:43: 69:95:37:2b:ff:67:3e:b9:74:e2:11:7c:0e:85:57: 17:5e:f7:e5:c7:8f:49:6c:28:31:22:8e:20:7d:db: 46:97:29:29:0b:21:51:70:72:3d:6a:81:94:45:98: 1b:a2:c7:80:7f:f2:2c:1f:19:3b:1a:73:16:a0:b4: a6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8E:2A:46:2A:7C:C3:F4:64:A1:23:C5:6A:BB:D2:56:8F:4B:58:99 X509v3 Authority Key Identifier: keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2a:0a:3b:c2:b9:2d:62:80:20:2d:4f:0a:45:f8:15:f8:f9: d6:d2:26:85:83:c4:ce:bb:69:97:f5:4d:a0:4c:f9:2d:fa:a9: 66:b8:fb:52:03:c8:5c:dc:78:7e:07:5a:f6:df:8b:e3:99:ce: a4:1d:60:38:2e:9a:23:97:57:29:08:40:a0:7f:b6:d2:7d:d4: 81:c3:89:a8:e0:32:2b:6e:05:9e:60:64:92:e5:b4:75:b4:32: e8:29:f3:49:61:34:51:fd:36:89:f1:58:bc:a1:f2:38:40:b5: cf:8f:cc:04:90:d5:9c:b7:da:6e:29:4a:ca:d9:3a:d6:cc:b4: dd:58:89:21:6e:b5:38:97:61:51:b6:5b:d0:45:31:e2:10:2c: 23:8b:e1:88:74:8b:6a:a2:99:50:73:11:9b:3b:18:87:9b:fc: 81:21:b4:3d:c3:a7:9d:4f:2e:fc:17:55:38:1a:e9:97:c1:11: db:d7:af:ae:bc:28:3a:b2:d2:5a:3e:ae:26:0e:1d:54:1d:eb: 88:e5:9b:1d:0f:7e:3b:8e:f2:2d:28:f7:14:6f:c2:09:77:25: de:79:5f:a7:8f:b7:7e:84:46:7c:e2:26:3d:2f:9f:90:79:88: c2:9e:7e:ba:74:6f:fa:2c:62:26:a8:06:ad:10:64:13:77:7b: 56:ae:12:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdrk93APh016A5IfllyQY7fZwW44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5 MTU1MDJGNTAeFw0yNTExMDMwNDI2MjFaFw0yNTExMDYxMDUyMjFaMDMxMTAvBgNV BAMTKDY5OEUyQTQ2MkE3Q0MzRjQ2NEExMjNDNTZBQkJEMjU2OEY0QjU4OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvuGWXVWoqKx+7XUv6Fj0o/qGu zVhqCSQtPM22QtlwRsZHLR7KBtBi7HP5IrUQcgO0Mqoq+m9pFjwoDa8n3XieSaI7 2NakS4GGF2vwTlepYXysJURVffzY0Icv/S3ekRkyB+4bzRxaiWTclQhVQuNZ4JWt Mjp8qXRpJzRY/OrocG5GN8QtOcZD7R7dKv+lBKDbz71qUM/JbkPhvpGrLJvAEdKD zq1hlbejPNLZIvquoM5GCcmFo1agfxX2Ctwi2vBpQ2mVNyv/Zz65dOIRfA6FVxde 9+XHj0lsKDEijiB920aXKSkLIVFwcj1qgZRFmBuix4B/8iwfGTsacxagtKaJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaY4qRip8w/RkoSPFarvSVo9LWJkwHwYDVR0j BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5 RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1 MDJGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0 OUQ5MTU1MDJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4qCjvCuS1igCAtTwpF+BX4+dbSJoWDxM67 aZf1TaBM+S36qWa4+1IDyFzceH4HWvbfi+OZzqQdYDgumiOXVykIQKB/ttJ91IHD iajgMituBZ5gZJLltHW0Mugp80lhNFH9NonxWLyh8jhAtc+PzASQ1Zy32m4pSsrZ OtbMtN1YiSFutTiXYVG2W9BFMeIQLCOL4Yh0i2qimVBzEZs7GIeb/IEhtD3Dp51P LvwXVTga6ZfBEdvXr668KDqy0lo+riYOHVQd64jlmx0PfjuO8i0o9xRvwgl3Jd55 X6ePt36ERnziJj0vn5B5iMKefrp0b/osYiaoBq0QZBN3e1auEmo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:10 2025 by rpki-client