$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: ZhDka//9Zdr1txED5vyWd+cNC83sYc9hmm5EV+vU3Gs= Subject key identifier: 39:4D:66:88:B9:8C:CD:3F:39:BA:7D:66:94:27:40:CE:11:6D:04:B6 Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 335E558C1854BA09AFA1352F7662306C9901FCEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 01F1 Signing time: Sat 09 Aug 2025 22:32:14 +0000 Manifest this update: Sat 09 Aug 2025 22:27:14 +0000 Manifest next update: Wed 13 Aug 2025 04:45:14 +0000 Files and hashes: 1: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) 2: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) 3: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) 4: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: bSSLxCGgEjKFj/cbZWfdewWiBiPr5pnIza/ajxYuhJ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5e:55:8c:18:54:ba:09:af:a1:35:2f:76:62:30:6c:99:01:fc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Aug 9 22:27:14 2025 GMT Not After : Aug 13 04:45:14 2025 GMT Subject: CN=394D6688B98CCD3F39BA7D66942740CE116D04B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2e:5c:23:cd:23:aa:1f:cc:b1:e5:fc:80:59: 4b:3f:ea:c2:7b:66:00:09:25:bc:f2:a3:37:74:4b: a8:96:0b:fa:1a:a4:16:bb:eb:f0:38:75:b4:54:71: cc:dc:f0:a7:99:55:45:98:1a:17:56:1c:71:eb:56: 08:66:af:bf:c6:a8:77:d3:20:bb:94:b5:0b:c4:0e: 8a:dc:44:ea:10:73:c3:49:45:bf:21:a9:ce:52:a1: 0f:d6:1d:be:e7:f4:3d:d9:ab:2a:c6:9f:f6:53:a0: 5a:16:b6:ab:5d:fd:f4:60:e5:7d:41:16:12:77:b4: 20:86:5b:eb:3d:69:7b:54:e3:a1:86:91:04:c9:39: 82:f4:62:d7:b7:43:d2:32:d3:0e:dc:cf:d4:d9:38: 28:36:42:22:0f:e6:fc:1a:5f:1d:2a:68:40:c5:cd: c1:1b:61:e2:b5:d9:53:74:43:54:95:60:9d:f9:51: 5e:26:6d:28:fb:81:59:59:88:aa:aa:e3:a4:a4:31: dc:34:04:40:53:b6:7a:5f:61:2a:05:95:0c:03:ce: cb:68:c6:3d:20:ec:ad:b3:c7:6e:ac:e4:df:7e:74: 44:28:d8:89:af:13:7f:ba:40:43:b0:1c:62:52:b9: 7b:2b:08:e3:4e:2f:37:c3:7d:30:10:56:5e:c0:5d: 3b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4D:66:88:B9:8C:CD:3F:39:BA:7D:66:94:27:40:CE:11:6D:04:B6 X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:67:cb:e0:3e:d8:8a:9e:a9:99:28:49:ba:18:e9:8b:fd:27: f2:ac:f8:65:6e:99:4c:f8:e8:53:b7:f3:ba:df:4d:43:98:40: a2:c4:9a:f0:54:16:ef:30:32:b4:fd:05:ff:29:35:a2:56:4c: b7:13:17:3a:ac:25:c4:b8:bb:b6:3b:0e:d2:0c:d4:f6:f4:68: 4e:63:8c:80:ed:46:43:be:86:34:cd:68:4b:c6:56:d8:fb:b7: 6e:00:41:84:21:c1:ce:de:2f:0d:fa:5d:8a:35:a2:88:0b:9c: 2f:00:eb:2f:3c:2d:ed:2d:08:fb:2f:8a:c8:61:fb:4d:3d:e8: 94:4e:3f:b6:fe:40:c3:bb:9b:90:8f:36:28:f3:d7:8a:9b:6f: 88:01:65:2f:26:91:5f:f2:af:ac:ad:fd:1c:ad:bf:bf:c4:57: e7:1c:13:03:3c:71:f1:83:ff:da:9f:2a:ef:d9:00:11:df:2d: 18:b6:94:5b:17:ae:9d:e6:81:27:be:b0:82:c3:d4:1f:26:32: 59:95:9e:27:6a:42:ac:7f:b0:33:16:c3:c6:ba:6e:e2:b4:df: 8e:b3:ec:6d:29:5b:0a:f0:9c:99:db:ca:a6:f5:8e:5c:15:bb: 2b:b0:5f:2a:82:bb:c6:cd:da:a6:eb:85:eb:2a:b3:83:b0:2e: 95:17:32:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM15VjBhUugmvoTUvdmIwbJkB/OswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNTA4MDkyMjI3MTRaFw0yNTA4MTMwNDQ1MTRaMDMxMTAvBgNV BAMTKDM5NEQ2Njg4Qjk4Q0NEM0YzOUJBN0Q2Njk0Mjc0MENFMTE2RDA0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgLlwjzSOqH8yx5fyAWUs/6sJ7 ZgAJJbzyozd0S6iWC/oapBa76/A4dbRUcczc8KeZVUWYGhdWHHHrVghmr7/GqHfT ILuUtQvEDorcROoQc8NJRb8hqc5SoQ/WHb7n9D3ZqyrGn/ZToFoWtqtd/fRg5X1B FhJ3tCCGW+s9aXtU46GGkQTJOYL0Yte3Q9Iy0w7cz9TZOCg2QiIP5vwaXx0qaEDF zcEbYeK12VN0Q1SVYJ35UV4mbSj7gVlZiKqq46SkMdw0BEBTtnpfYSoFlQwDzsto xj0g7K2zx26s5N9+dEQo2ImvE3+6QEOwHGJSuXsrCONOLzfDfTAQVl7AXTuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOU1miLmMzT85un1mlCdAzhFtBLYwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNny+A+2IqeqZkoSboY6Yv9J/Ks+GVumUz4 6FO387rfTUOYQKLEmvBUFu8wMrT9Bf8pNaJWTLcTFzqsJcS4u7Y7DtIM1Pb0aE5j jIDtRkO+hjTNaEvGVtj7t24AQYQhwc7eLw36XYo1oogLnC8A6y88Le0tCPsvishh +0096JROP7b+QMO7m5CPNijz14qbb4gBZS8mkV/yr6yt/Rytv7/EV+ccEwM8cfGD /9qfKu/ZABHfLRi2lFsXrp3mgSe+sILD1B8mMlmVnidqQqx/sDMWw8a6buK0346z 7G0pWwrwnJnbyqb1jlwVuyuwXyqCu8bN2qbrhesqs4OwLpUXMh0= -----END CERTIFICATE-----Generated at Sun Aug 10 19:48:31 2025 by rpki-client