$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft File: DC0680824B7F80117B62C239676444B0691128B8.mft (raw, json) Hash identifier: BiNZxhCWQBkpBrhauxwo1rQ5Fyjogf1jrC1LR+xuGG0= Subject key identifier: F0:BD:79:0F:52:33:6E:C6:83:64:A0:8D:B9:AD:7C:4A:7B:6A:6B:52 Authority key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Certificate issuer: /CN=DC0680824B7F80117B62C239676444B0691128B8 Certificate serial: 0F5633BF40E7A2F1C60F35CA32C5F36C795BAD0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft Manifest number: 97 Signing time: Sat 18 Oct 2025 12:41:38 +0000 Manifest this update: Sat 18 Oct 2025 12:36:38 +0000 Manifest next update: Wed 22 Oct 2025 00:03:38 +0000 Files and hashes: 1: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: iw17DMpgfD2nYIWjQL2ZNOlw/a2YjINch68eFMNeuo0=) 2: DC0680824B7F80117B62C239676444B0691128B8.crl (hash: 1LGNzUv8Dje2/2L6E7aS8jsZryb7AzPuqi3jMzrKDfs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:56:33:bf:40:e7:a2:f1:c6:0f:35:ca:32:c5:f3:6c:79:5b:ad:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC0680824B7F80117B62C239676444B0691128B8 Validity Not Before: Oct 18 12:36:38 2025 GMT Not After : Oct 22 00:03:38 2025 GMT Subject: CN=F0BD790F52336EC68364A08DB9AD7C4A7B6A6B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:68:02:fc:e7:4c:34:c9:b9:fe:a3:76:ac: 09:e5:95:24:95:dc:5d:e9:05:3a:b8:aa:8d:dc:48: 8e:3e:f1:20:8b:39:71:fe:e3:17:ec:5e:fe:5c:2d: e4:ca:15:6e:d0:6a:8f:c3:7c:6b:39:81:6c:52:33: 9d:b0:c5:b8:61:03:01:86:16:57:4f:a0:36:50:ad: 15:68:e9:95:de:36:e3:07:16:4e:af:2c:4f:11:45: e7:e6:64:54:93:bb:c6:10:ff:16:a8:af:ca:4f:f8: 44:54:15:24:9a:7f:ac:6c:9b:61:6e:aa:88:34:84: 9b:59:44:52:5b:23:b7:09:ab:57:7b:ae:9d:3d:6e: 9b:51:da:94:7e:43:c6:86:a6:66:30:80:82:da:a5: 55:c1:65:6f:37:02:85:c0:26:a5:e3:d3:60:30:2e: ac:13:da:20:18:56:b5:69:2a:63:7f:33:4b:70:fa: 8b:0c:71:e5:cd:ce:f2:77:c9:75:cb:81:ed:5d:f7: 39:d9:b8:34:a9:a6:c9:bf:b7:e8:32:5d:cc:1e:02: 43:6e:61:86:87:f5:86:c0:14:4e:82:07:0f:c1:fa: 63:ec:f1:3e:70:21:81:e3:a2:98:fd:e2:8d:49:d4: 6c:ca:63:5e:82:98:e9:4e:f6:a0:ad:c8:cd:72:19: 05:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BD:79:0F:52:33:6E:C6:83:64:A0:8D:B9:AD:7C:4A:7B:6A:6B:52 X509v3 Authority Key Identifier: keyid:DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:48:78:66:4f:3c:50:35:76:37:8e:de:f8:11:a8:c4:a8:5e: 72:4f:01:55:c9:ee:5c:ed:f9:21:18:eb:67:fc:c3:73:2a:5a: de:e9:6f:04:60:b5:c9:8c:3c:37:12:00:4a:20:27:0b:da:33: a4:c4:e3:ac:e5:23:00:5f:f0:60:52:50:a3:4a:49:a3:b3:09: 70:42:9e:aa:b8:c2:0e:c4:67:f0:f2:27:b6:57:13:d9:23:6c: ed:3a:8e:81:0c:ec:2c:32:65:f1:46:42:80:f4:2d:f0:1e:9d: bb:2d:70:b7:e9:21:1e:1e:a3:73:aa:e1:b3:9c:28:d4:15:6a: 5c:06:1f:17:4b:c9:88:30:e8:f0:18:82:ee:d9:76:89:f4:69: 28:30:bd:84:28:0b:99:3f:62:fc:1c:88:4a:1e:51:f9:6c:b2: e3:22:6a:4b:dd:c3:5e:7b:a4:83:82:69:ce:99:ef:10:7d:7d: 45:5d:5f:35:26:18:09:b2:2e:a5:44:37:d4:1f:66:b0:17:b5: 3c:8e:29:f8:da:5c:a3:f2:85:e2:72:1a:1e:60:c0:47:07:20: f6:fd:f2:ab:b3:5d:e2:5f:75:10:b4:e4:06:fa:7f:56:ad:3f: bb:4b:98:ff:46:94:83:d7:e0:dd:9b:5a:75:91:0c:87:a2:17: 5e:9b:5c:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1Yzv0DnovHGDzXKMsXzbHlbrQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2 OTExMjhCODAeFw0yNTEwMTgxMjM2MzhaFw0yNTEwMjIwMDAzMzhaMDMxMTAvBgNV BAMTKEYwQkQ3OTBGNTIzMzZFQzY4MzY0QTA4REI5QUQ3QzRBN0I2QTZCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQV2gC/OdMNMm5/qN2rAnllSSV 3F3pBTq4qo3cSI4+8SCLOXH+4xfsXv5cLeTKFW7Qao/DfGs5gWxSM52wxbhhAwGG FldPoDZQrRVo6ZXeNuMHFk6vLE8RRefmZFSTu8YQ/xaor8pP+ERUFSSaf6xsm2Fu qog0hJtZRFJbI7cJq1d7rp09bptR2pR+Q8aGpmYwgILapVXBZW83AoXAJqXj02Aw LqwT2iAYVrVpKmN/M0tw+osMceXNzvJ3yXXLge1d9znZuDSppsm/t+gyXcweAkNu YYaH9YbAFE6CBw/B+mPs8T5wIYHjopj94o1J1GzKY16CmOlO9qCtyM1yGQUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8L15D1IzbsaDZKCNua18Sntqa1IwHwYDVR0j BBgwFoAU3AaAgkt/gBF7YsI5Z2REsGkRKLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMC9EQzA2ODA4MjRC N0Y4MDExN0I2MkMyMzk2NzY0NDRCMDY5MTEyOEI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2OTEx MjhCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0 QjA2OTExMjhCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1IeGZPPFA1djeO3vgRqMSoXnJPAVXJ7lzt +SEY62f8w3MqWt7pbwRgtcmMPDcSAEogJwvaM6TE46zlIwBf8GBSUKNKSaOzCXBC nqq4wg7EZ/DyJ7ZXE9kjbO06joEM7CwyZfFGQoD0LfAenbstcLfpIR4eo3Oq4bOc KNQValwGHxdLyYgw6PAYgu7Zdon0aSgwvYQoC5k/YvwciEoeUflssuMiakvdw157 pIOCac6Z7xB9fUVdXzUmGAmyLqVEN9QfZrAXtTyOKfjaXKPyheJyGh5gwEcHIPb9 8quzXeJfdRC05Ab6f1atP7tLmP9GlIPX4N2bWnWRDIeiF16bXCU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:31:23 2025 by rpki-client