$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft File: DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft (raw, json) Hash identifier: XT2bVgTSRDhRz9v/xPxHBVDH5wEvdhmWb/xzbUaxIWQ= Subject key identifier: 9C:D7:4F:60:36:FD:46:2D:79:F2:AB:90:9F:40:6B:57:F5:1B:D1:A7 Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 45E56164C1D300A1750207DB200B4EE07DD9C06F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft Manifest number: 0520 Signing time: Sun 19 Oct 2025 11:31:22 +0000 Manifest this update: Sun 19 Oct 2025 11:26:22 +0000 Manifest next update: Wed 22 Oct 2025 19:35:22 +0000 Files and hashes: 1: DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl (hash: dosbUpW+eJnQ9798McKryF5OmPGhGaMH52FJch1WUp0=) 2: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: jn5ELD9d7J3S6Is4OuoIa81jRUPNRS7VH/L2BxODy7U=) 3: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: rYgMn0qf5Si8F9ykekewfrOOH5qLGsXSWGvHlZ0POHo=) 4: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: D73qWtixS2k2vo+e7xc07gepRtYm2z1PcaFmujji1Q8=) 5: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: wjmU/K5zRzNrMxAbA5/SGYFAg8fk9jDDkhO1NhPUnYI=) 6: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: hmVwMqOMWMCg4u7PLlh1Exia8tg6dmrIe5GDT9aQuPk=) 7: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: rUMnL5o4jfF8Xk23x+nY13Og9gVdfKtim/VgsCTFYWA=) 8: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: VU7yTZJJzE9+CKf+7CWEBUbMLNLkqTfujFALCx1f38Y=) 9: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: einwJ3TMLG60eX8vOb8BP75bS+iG2kasu0kVBXw/aA0=) 10: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: 8V7ZayO1EWtoGgR7suJnzq42sHcJ3tI9V47XAXCkvzA=) 11: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: Px+0ZRxXqTaYuiAQpr845u2JpmHBGtqVxsdEAa7WjAw=) 12: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: eEzhgEkeswxEJB6cH8f720KKqD00kZq88ScuJtLKf4Q=) 13: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: f2/bnQrR/MLXFGa/5XG9w5LNWrb6RKk/0zpBaeZlPjA=) 14: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: etbWGeSjVYbqYZZMPVvxJ5PNehJHsptjSIChJ05okfk=) 15: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: 4jp4D5hGaWte1m9qxFKzFTLNIkMefUQAPu+RDi1XoZE=) 16: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: +RTivfqLEwyAM8Z9a8tLky4YZfcHjdt6gpcJXVO2krI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e5:61:64:c1:d3:00:a1:75:02:07:db:20:0b:4e:e0:7d:d9:c0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Oct 19 11:26:22 2025 GMT Not After : Oct 22 19:35:22 2025 GMT Subject: CN=9CD74F6036FD462D79F2AB909F406B57F51BD1A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:38:c6:0e:b4:2a:6a:45:7d:fb:ef:c8:05:48: 4c:b2:84:f0:36:21:cf:07:99:ab:28:dd:67:6d:90: 23:f1:3f:27:bd:29:7a:a2:e0:fd:2d:1d:96:c0:4f: 0d:14:de:0a:3b:1a:d1:09:e7:93:1f:41:fd:3c:8f: 21:e8:ca:86:ea:ab:4f:29:a7:e4:12:e2:0a:83:90: 82:94:9c:8e:76:8b:9b:b6:c8:85:b1:49:ec:01:d1: 11:a0:e2:a3:e5:41:c1:63:67:02:dd:1c:24:9a:01: c2:fc:c5:4e:69:26:0c:03:af:2a:25:4a:83:73:82: 06:47:2e:70:3c:41:4b:b3:ae:ce:4e:04:06:ea:4f: 9a:0e:06:fb:27:65:d9:62:98:70:bc:95:3d:06:f0: 7b:c0:b0:d0:ee:da:f3:7c:99:df:68:01:f4:7c:b6: ba:74:b9:ff:e0:c3:16:37:52:72:da:af:b0:54:49: 11:5d:dc:9d:b3:a2:60:7f:9a:c6:cf:02:ac:f0:43: ef:d8:5d:f5:96:fc:30:c2:37:ca:92:0b:1f:7f:d9: 40:3d:e9:be:93:ee:59:5b:d0:a6:78:63:19:1b:6a: f9:3b:02:a4:59:28:c2:a3:e5:43:32:ab:3a:43:71: 19:9f:f7:66:96:3b:04:c5:64:63:d1:4f:62:27:3a: 9c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D7:4F:60:36:FD:46:2D:79:F2:AB:90:9F:40:6B:57:F5:1B:D1:A7 X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a8:1a:a5:c9:b5:fb:9d:87:f7:c5:60:d0:68:b0:aa:3e:e5: 9e:0a:6f:67:a8:d4:75:48:b3:5e:b6:be:ce:b7:57:5a:97:37: ba:60:0a:82:16:46:1b:43:b2:e4:8f:3d:df:2f:f1:c7:92:f1: 05:0f:51:bc:03:6d:8b:90:be:c8:16:4d:9e:0d:e7:f8:66:1b: 9f:1e:a9:89:ce:7b:70:81:01:88:f7:95:6a:92:e3:16:e6:76: 1a:39:28:e5:d4:4d:13:e1:c4:56:f7:f2:9b:e3:7e:9b:ed:f5: 06:30:da:39:88:34:f7:bb:2a:5c:0f:ca:4c:7d:cb:4b:4a:c2: 28:8f:b5:36:2e:18:75:4d:f9:30:37:5e:e4:17:c7:3f:38:d8: 66:19:1b:f0:34:72:df:dc:c9:b4:95:8d:75:19:19:49:f6:e4: a8:2f:c7:bb:5b:3e:46:4d:15:d3:a0:d6:0d:8d:02:a8:41:85: 80:8a:24:f5:5f:aa:14:d5:d4:2b:94:a5:35:bb:eb:7a:0b:a7: 25:f5:59:f1:47:09:c1:84:c9:3e:f4:bc:54:a5:c1:5b:41:dd: 6e:ca:15:20:35:99:d4:08:d5:a3:a0:9d:39:a7:8c:aa:f1:e0: 2d:86:f0:f0:71:e0:fe:ac:fc:e0:e4:74:d5:3d:34:05:40:31: 66:83:90:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUReVhZMHTAKF1AgfbIAtO4H3ZwG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yNTEwMTkxMTI2MjJaFw0yNTEwMjIxOTM1MjJaMDMxMTAvBgNV BAMTKDlDRDc0RjYwMzZGRDQ2MkQ3OUYyQUI5MDlGNDA2QjU3RjUxQkQxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfOMYOtCpqRX3778gFSEyyhPA2 Ic8Hmaso3WdtkCPxPye9KXqi4P0tHZbATw0U3go7GtEJ55MfQf08jyHoyobqq08p p+QS4gqDkIKUnI52i5u2yIWxSewB0RGg4qPlQcFjZwLdHCSaAcL8xU5pJgwDryol SoNzggZHLnA8QUuzrs5OBAbqT5oOBvsnZdlimHC8lT0G8HvAsNDu2vN8md9oAfR8 trp0uf/gwxY3UnLar7BUSRFd3J2zomB/msbPAqzwQ+/YXfWW/DDCN8qSCx9/2UA9 6b6T7llb0KZ4Yxkbavk7AqRZKMKj5UMyqzpDcRmf92aWOwTFZGPRT2InOpxbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnNdPYDb9Ri158quQn0BrV/Ub0acwHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlmMDEzZjktYjRmNy00NThjLWFh YzUtMDgwNDFiM2Y2NWU2LzAvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0Qjgx MjU3MkFCNzY5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALioGqXJtfudh/fFYNBosKo+5Z4Kb2eo1HVI s162vs63V1qXN7pgCoIWRhtDsuSPPd8v8ceS8QUPUbwDbYuQvsgWTZ4N5/hmG58e qYnOe3CBAYj3lWqS4xbmdho5KOXUTRPhxFb38pvjfpvt9QYw2jmINPe7KlwPykx9 y0tKwiiPtTYuGHVN+TA3XuQXxz842GYZG/A0ct/cybSVjXUZGUn25Kgvx7tbPkZN FdOg1g2NAqhBhYCKJPVfqhTV1CuUpTW763oLpyX1WfFHCcGEyT70vFSlwVtB3W7K FSA1mdQI1aOgnTmnjKrx4C2G8PBx4P6s/ODkdNU9NAVAMWaDkB8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:07 2025 by rpki-client