$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: 7kNWQ8mFvvKJNIX7D9l+hS+E+8YNTmXYmKLohoNF7Xc= Subject key identifier: D6:E5:BD:90:70:54:77:C6:4D:1E:75:C1:0C:44:8A:34:C5:7F:FD:BE Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 0D034ED231332B3BCD0B36565860E9F6D800FDC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 0217 Signing time: Mon 03 Nov 2025 21:02:11 +0000 Manifest this update: Mon 03 Nov 2025 20:57:11 +0000 Manifest next update: Fri 07 Nov 2025 04:00:11 +0000 Files and hashes: 1: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) 2: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) 3: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: wn31K63rKMHHtiVGGV87xRWX9TxJ+E1sg1VjdS/zADU=) 4: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:03:4e:d2:31:33:2b:3b:cd:0b:36:56:58:60:e9:f6:d8:00:fd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Nov 3 20:57:11 2025 GMT Not After : Nov 7 04:00:11 2025 GMT Subject: CN=D6E5BD90705477C64D1E75C10C448A34C57FFDBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:9c:1b:7e:19:04:40:f8:2e:ea:c4:cf:a6: a1:6f:7a:53:a9:76:81:a3:e4:64:71:d5:73:35:80: e6:27:ec:48:00:58:3c:41:e0:6f:73:c7:63:67:8d: 31:72:f1:ec:66:f8:eb:c3:ba:e3:6c:35:5c:d5:f6: 49:11:25:70:86:1a:ed:32:37:00:75:09:3f:38:1a: 14:23:1e:a1:2a:72:f4:58:da:94:6a:9d:9b:e9:cb: 1f:35:e7:1c:49:3a:85:76:5f:0a:1d:e9:1e:d9:18: 48:ed:cd:db:70:25:8f:c6:fa:9d:f3:15:b6:c2:03: 92:6d:33:b5:a8:f1:c5:30:1b:17:db:85:0e:c9:d4: 70:bb:8d:17:7f:2e:a3:c3:e8:02:c3:f1:d2:52:11: 92:e4:cd:02:07:37:e5:ca:56:e5:c7:22:6b:ac:9f: 61:1a:fc:82:e3:c1:3e:f4:1b:90:a2:cd:0f:ea:87: 27:11:6d:6b:05:59:ec:7b:4c:bb:e9:92:c2:53:b0: 4e:a4:78:f7:36:b7:7d:a5:f4:7c:de:ef:75:4d:f8: 8a:52:14:bd:be:07:c6:b1:17:5b:6e:0e:d7:a6:59: 9d:7b:9d:a5:22:b9:8a:54:07:a9:ba:61:af:24:81: 62:f4:24:a8:8a:f2:a3:4e:87:18:33:bd:e1:f1:08: 3b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E5:BD:90:70:54:77:C6:4D:1E:75:C1:0C:44:8A:34:C5:7F:FD:BE X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:06:d8:de:82:5e:64:5e:77:de:c6:36:0b:b5:4d:48:97:07: f1:1f:bd:f8:c2:17:2d:d7:a0:07:5d:43:00:7a:02:20:6b:11: 8f:02:e4:bb:c9:10:8e:af:72:2a:9a:d8:b1:b4:06:85:87:cb: 2c:9b:51:3e:b3:b0:e0:80:39:51:cd:46:ce:a2:5e:b5:5e:01: c6:16:bd:02:06:1c:56:d8:1c:7b:50:9a:0d:6e:33:a6:c9:17: 44:d6:8a:2a:0e:ba:3a:85:45:86:25:83:29:04:d1:4f:2a:2f: 33:01:2c:e3:fb:bc:a5:f0:7f:e8:6e:5c:da:89:ae:ca:12:10: 44:e5:3c:8d:6a:8e:79:bc:04:b8:3e:68:e9:69:d3:ab:91:b6: f9:79:da:51:7b:f9:08:6d:4e:22:af:64:5c:52:f2:aa:fc:3f: 64:e3:ce:1d:9f:24:50:af:4a:63:d1:1e:f5:5c:12:59:54:f4: 64:6e:98:28:c9:7c:78:e4:5f:8e:95:70:23:21:73:57:c5:9e: 60:a2:bb:6b:e7:b0:3d:4f:3a:cd:53:99:10:60:4c:53:c0:0f: 71:10:73:c4:ce:7d:db:22:cc:15:db:0a:59:9e:b0:66:6e:40: fd:9f:25:2c:79:ad:a8:6e:9f:b9:41:2b:bc:06:50:c6:13:56: 03:b4:58:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQNO0jEzKzvNCzZWWGDp9tgA/cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNTExMDMyMDU3MTFaFw0yNTExMDcwNDAwMTFaMDMxMTAvBgNV BAMTKEQ2RTVCRDkwNzA1NDc3QzY0RDFFNzVDMTBDNDQ4QTM0QzU3RkZEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+i5wbfhkEQPgu6sTPpqFvelOp doGj5GRx1XM1gOYn7EgAWDxB4G9zx2NnjTFy8exm+OvDuuNsNVzV9kkRJXCGGu0y NwB1CT84GhQjHqEqcvRY2pRqnZvpyx815xxJOoV2Xwod6R7ZGEjtzdtwJY/G+p3z FbbCA5JtM7Wo8cUwGxfbhQ7J1HC7jRd/LqPD6ALD8dJSEZLkzQIHN+XKVuXHImus n2Ea/ILjwT70G5CizQ/qhycRbWsFWex7TLvpksJTsE6kePc2t32l9Hze73VN+IpS FL2+B8axF1tuDtemWZ17naUiuYpUB6m6Ya8kgWL0JKiK8qNOhxgzveHxCDtbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1uW9kHBUd8ZNHnXBDESKNMV//b4wHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkG2N6CXmRed97GNgu1TUiXB/EfvfjCFy3X oAddQwB6AiBrEY8C5LvJEI6vciqa2LG0BoWHyyybUT6zsOCAOVHNRs6iXrVeAcYW vQIGHFbYHHtQmg1uM6bJF0TWiioOujqFRYYlgykE0U8qLzMBLOP7vKXwf+huXNqJ rsoSEETlPI1qjnm8BLg+aOlp06uRtvl52lF7+QhtTiKvZFxS8qr8P2Tjzh2fJFCv SmPRHvVcEllU9GRumCjJfHjkX46VcCMhc1fFnmCiu2vnsD1POs1TmRBgTFPAD3EQ c8TOfdsizBXbClmesGZuQP2fJSx5rahun7lBK7wGUMYTVgO0WKQ= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:22 2025 by rpki-client