$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft File: DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft (raw, json) Hash identifier: 5VS7GwViDKlyEDkFMWo7gAdJVhG1etllUTFZYcWCR20= Subject key identifier: A2:C7:7E:8B:AD:75:78:2E:F0:A4:19:C8:3F:37:D0:D0:14:49:EC:3B Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 66CE172CC9000FD6EBEE20AA9DD0AB9546D3848E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft Manifest number: 04EF Signing time: Tue 01 Jul 2025 15:51:23 +0000 Manifest this update: Tue 01 Jul 2025 15:46:23 +0000 Manifest next update: Fri 04 Jul 2025 22:38:23 +0000 Files and hashes: 1: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: hmVwMqOMWMCg4u7PLlh1Exia8tg6dmrIe5GDT9aQuPk=) 2: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: rUMnL5o4jfF8Xk23x+nY13Og9gVdfKtim/VgsCTFYWA=) 3: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: eEzhgEkeswxEJB6cH8f720KKqD00kZq88ScuJtLKf4Q=) 4: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: 4jp4D5hGaWte1m9qxFKzFTLNIkMefUQAPu+RDi1XoZE=) 5: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: jn5ELD9d7J3S6Is4OuoIa81jRUPNRS7VH/L2BxODy7U=) 6: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: etbWGeSjVYbqYZZMPVvxJ5PNehJHsptjSIChJ05okfk=) 7: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: +RTivfqLEwyAM8Z9a8tLky4YZfcHjdt6gpcJXVO2krI=) 8: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: wjmU/K5zRzNrMxAbA5/SGYFAg8fk9jDDkhO1NhPUnYI=) 9: DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl (hash: iDBbHKKYCapBKuR5Gyupa4p92riedcES15N2xTCqsSI=) 10: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: Px+0ZRxXqTaYuiAQpr845u2JpmHBGtqVxsdEAa7WjAw=) 11: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: rYgMn0qf5Si8F9ykekewfrOOH5qLGsXSWGvHlZ0POHo=) 12: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: einwJ3TMLG60eX8vOb8BP75bS+iG2kasu0kVBXw/aA0=) 13: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: VU7yTZJJzE9+CKf+7CWEBUbMLNLkqTfujFALCx1f38Y=) 14: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: 8V7ZayO1EWtoGgR7suJnzq42sHcJ3tI9V47XAXCkvzA=) 15: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: D73qWtixS2k2vo+e7xc07gepRtYm2z1PcaFmujji1Q8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 22:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ce:17:2c:c9:00:0f:d6:eb:ee:20:aa:9d:d0:ab:95:46:d3:84:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Jul 1 15:46:23 2025 GMT Not After : Jul 4 22:38:23 2025 GMT Subject: CN=A2C77E8BAD75782EF0A419C83F37D0D01449EC3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:aa:bd:72:94:36:c8:31:13:7f:5c:2f:2f: b2:b2:b3:3a:0b:07:7f:2e:27:d9:9f:ac:42:98:91: ed:cf:03:0d:ef:50:18:30:ea:1f:86:29:67:4a:97: af:fb:a6:ec:05:e2:2f:16:05:da:de:5c:5b:2d:02: f5:b8:c2:c2:e3:b0:ed:48:27:85:ea:a1:2e:dd:d6: 1c:f4:66:ed:58:83:a9:70:4d:33:08:b8:89:d3:39: d9:6b:6c:34:86:bd:bb:54:a2:85:e8:ec:26:05:e8: b0:0d:95:63:89:17:5d:22:2c:74:b3:80:28:1a:9e: d2:67:62:13:19:07:a8:2e:41:a1:6d:47:a7:37:d4: ce:06:23:9c:aa:b6:96:1a:40:44:17:31:25:cd:c9: fb:c7:9b:3f:cb:0d:58:2d:86:0a:2b:ff:cf:96:7a: 71:cb:e0:f5:4b:1c:f3:03:f2:a1:00:c6:8b:4d:bb: cc:a3:2c:4e:a0:6c:4e:ab:e5:90:9c:7a:aa:fc:74: 24:84:ba:ff:f6:b6:f9:91:28:67:7c:6b:b1:d4:6c: 1f:47:c2:c9:be:e0:50:ac:d1:44:86:2b:c7:7e:56: f3:bd:c5:03:63:e2:ef:28:ce:dc:62:8a:c7:b1:4d: 4a:2d:0b:5a:52:7c:f8:cf:8c:7c:26:72:d3:48:8d: d9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C7:7E:8B:AD:75:78:2E:F0:A4:19:C8:3F:37:D0:D0:14:49:EC:3B X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:9f:0f:d6:31:d4:ed:15:d3:6b:a9:89:8d:48:b1:fc:50:a6: fc:78:54:c2:f7:c0:97:c2:7b:d6:68:43:d9:eb:44:00:d3:2e: 84:cd:9b:3f:47:22:71:6c:ec:5b:68:1f:04:cb:08:d2:2d:c9: fa:9c:b7:a8:52:6b:34:dd:1c:c2:3e:fd:e1:7d:5a:a1:07:e4: 45:ac:f1:bc:89:90:75:45:07:64:24:aa:08:07:35:ed:a6:dd: 7d:45:8c:8e:b9:d8:28:6c:4d:e4:1f:c3:76:e0:dd:9a:19:ef: b5:4a:67:28:ab:60:46:b8:c4:ae:b5:01:49:cc:b5:3d:6e:5b: 95:87:ec:61:f9:0b:1b:ae:74:bd:6e:de:43:42:b3:49:53:55: 2a:d1:47:fe:cf:bf:97:6e:0f:b9:b2:51:ac:56:52:ed:3a:18: 00:dd:7c:92:7f:56:91:f5:af:6d:9b:1f:39:09:1b:92:3e:78: 0b:71:68:0b:f1:3f:de:c9:3d:1f:89:3e:b9:c3:f3:b8:5b:ba: 9e:e5:47:01:2f:3a:7a:74:05:ed:e1:f3:1f:a5:7e:e3:b3:6b: 2b:3f:0b:59:66:39:72:1f:7c:f6:4a:64:67:5c:bb:0b:eb:da: ca:34:91:ee:c3:50:b5:d3:60:58:c1:8e:cb:15:27:45:16:22: 8b:8a:44:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZs4XLMkAD9br7iCqndCrlUbThI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yNTA3MDExNTQ2MjNaFw0yNTA3MDQyMjM4MjNaMDMxMTAvBgNV BAMTKEEyQzc3RThCQUQ3NTc4MkVGMEE0MTlDODNGMzdEMEQwMTQ0OUVDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZaq9cpQ2yDETf1wvL7KyszoL B38uJ9mfrEKYke3PAw3vUBgw6h+GKWdKl6/7puwF4i8WBdreXFstAvW4wsLjsO1I J4XqoS7d1hz0Zu1Yg6lwTTMIuInTOdlrbDSGvbtUooXo7CYF6LANlWOJF10iLHSz gCgantJnYhMZB6guQaFtR6c31M4GI5yqtpYaQEQXMSXNyfvHmz/LDVgthgor/8+W enHL4PVLHPMD8qEAxotNu8yjLE6gbE6r5ZCceqr8dCSEuv/2tvmRKGd8a7HUbB9H wsm+4FCs0USGK8d+VvO9xQNj4u8oztxiisexTUotC1pSfPjPjHwmctNIjdk1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUosd+i611eC7wpBnIPzfQ0BRJ7DswHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlmMDEzZjktYjRmNy00NThjLWFh YzUtMDgwNDFiM2Y2NWU2LzAvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0Qjgx MjU3MkFCNzY5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOfD9Yx1O0V02upiY1IsfxQpvx4VML3wJfC e9ZoQ9nrRADTLoTNmz9HInFs7FtoHwTLCNItyfqct6hSazTdHMI+/eF9WqEH5EWs 8byJkHVFB2QkqggHNe2m3X1FjI652ChsTeQfw3bg3ZoZ77VKZyirYEa4xK61AUnM tT1uW5WH7GH5CxuudL1u3kNCs0lTVSrRR/7Pv5duD7myUaxWUu06GADdfJJ/VpH1 r22bHzkJG5I+eAtxaAvxP97JPR+JPrnD87hbup7lRwEvOnp0Be3h8x+lfuOzays/ C1lmOXIffPZKZGdcuwvr2so0ke7DULXTYFjBjssVJ0UWIouKREY= -----END CERTIFICATE-----Generated at Thu Jul 3 16:27:00 2025 by rpki-client