$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft File: DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft (raw, json) Hash identifier: rhT5B818yQId7uY/Tz5nQv2Lod7hsBTGMzn92IHDN9k= Subject key identifier: 3D:33:0A:E5:56:82:40:6F:93:C9:78:BE:B6:2D:7B:5E:CD:F7:01:F8 Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 0AC8D5013429703761137AF9A3A2BA074AD6CB54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft Manifest number: 0565 Signing time: Tue 24 Mar 2026 13:21:40 +0000 Manifest this update: Tue 24 Mar 2026 13:16:40 +0000 Manifest next update: Fri 27 Mar 2026 17:25:40 +0000 Files and hashes: 1: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: 8V7ZayO1EWtoGgR7suJnzq42sHcJ3tI9V47XAXCkvzA=) 2: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: 9cT4iugSxv8GmMun4x7hly+W1FXP98Oz1aJbYUXbphk=) 3: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: 4jp4D5hGaWte1m9qxFKzFTLNIkMefUQAPu+RDi1XoZE=) 4: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: etbWGeSjVYbqYZZMPVvxJ5PNehJHsptjSIChJ05okfk=) 5: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6nG++9Zfsyp00x723uMAP6ndpbIZ+69e5sHDGWiKNkk=) 6: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: wjmU/K5zRzNrMxAbA5/SGYFAg8fk9jDDkhO1NhPUnYI=) 7: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: f2/bnQrR/MLXFGa/5XG9w5LNWrb6RKk/0zpBaeZlPjA=) 8: DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl (hash: baSKPFl8whFXV2lJqLOY5crN1oE1p4ImcRnIA1O+BBg=) 9: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: rYgMn0qf5Si8F9ykekewfrOOH5qLGsXSWGvHlZ0POHo=) 10: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: /x0d/B7SH930zGuc3qy32lnZBzw3Tko/OpPt1flx/d4=) 11: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: UTSVYP8TuDxGN9w/aLP45n2ry9eglsw2DYtgDGOkId4=) 12: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: hmVwMqOMWMCg4u7PLlh1Exia8tg6dmrIe5GDT9aQuPk=) 13: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: +RTivfqLEwyAM8Z9a8tLky4YZfcHjdt6gpcJXVO2krI=) 14: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: uWwiOJltrZFVipiBhXuhkZCxDk18qXrBbeqh2tDeBHY=) 15: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: 0qjl6ejKCXE+eF92NFpusciVm5OV6Kg83rjP6jAiQxg=) 16: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: fyFpznbRMF6ODJByEnZRGU+1l5nWWTK42b2kDTub5ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c8:d5:01:34:29:70:37:61:13:7a:f9:a3:a2:ba:07:4a:d6:cb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Mar 24 13:16:40 2026 GMT Not After : Mar 27 17:25:40 2026 GMT Subject: CN=3D330AE55682406F93C978BEB62D7B5ECDF701F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:e8:9a:aa:ab:03:e7:c8:91:c5:5c:96:f6: be:be:bd:c8:93:13:d6:4c:ad:43:cf:a0:3c:b7:42: 7d:de:e4:e4:92:10:37:b5:34:f6:a5:87:4f:5b:88: b2:2b:dc:34:56:c6:e8:95:2c:1f:a4:b0:4e:e0:a3: 7d:7a:6a:0f:e4:f7:bf:bb:db:85:50:de:a7:ac:49: 6f:96:93:5c:00:9c:ff:48:6c:a1:3a:03:a0:bc:38: 2d:25:6d:3e:0a:ac:3b:9c:a1:38:73:b3:79:16:dc: 1e:ce:d4:75:26:e3:2f:42:9a:f2:60:20:ad:91:06: 52:56:b6:bd:1b:66:c7:be:48:f3:24:6d:8b:02:13: 83:d6:79:69:7b:e0:37:79:34:c9:72:47:74:40:f1: e8:59:9c:d7:9e:20:a1:0d:64:da:46:3d:a5:38:b7: 5a:fe:ef:7f:98:dc:21:03:9a:99:11:f3:f5:ed:83: 82:b4:1c:45:d8:ee:7a:f7:a4:b4:e8:72:61:f1:27: ed:ae:35:1f:61:d9:c3:d7:fd:2d:33:ca:fd:9f:fb: 01:a9:8a:d5:8c:ab:0f:f1:9d:e6:6a:74:51:dc:81: 66:0b:77:2c:61:aa:b1:b4:68:96:79:a3:fd:82:49: e0:bb:18:2c:90:5a:53:35:71:7c:e4:f9:da:3e:1e: 2d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:33:0A:E5:56:82:40:6F:93:C9:78:BE:B6:2D:7B:5E:CD:F7:01:F8 X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:0e:45:c1:55:f4:e2:9c:2c:7d:0f:c7:26:85:b9:ee:de:97: 39:d5:b1:c9:41:7a:23:06:28:62:db:0e:88:25:b8:54:ec:c5: 3f:4d:8d:48:8b:bd:60:31:31:f5:b0:0a:76:c7:5d:71:f9:df: 05:e1:44:14:15:84:0a:bd:eb:80:96:55:7a:82:94:f5:a7:97: 68:dd:21:79:ce:ae:83:2d:9f:e6:6d:3c:91:7c:85:0a:de:d3: 85:e7:64:1b:18:f2:49:7e:13:25:a2:c9:54:9a:26:09:a4:c2: 5b:9a:b8:13:ea:b7:06:68:16:28:6b:a5:d3:3b:93:75:e7:c5: 43:a1:59:92:ec:04:2c:40:2d:1b:0a:42:85:c3:7a:9d:dd:95: c4:54:d5:84:4c:1a:33:69:d4:3e:c4:26:66:d1:d0:a5:45:d2: 7e:e2:e4:54:f3:0d:d0:c1:9b:4e:fd:8e:42:64:eb:bb:0c:9f: 5e:7e:ff:87:09:21:5e:60:21:a7:02:6e:66:ad:fa:78:17:52: bb:c8:41:90:d0:f0:87:ee:78:ca:a8:a2:a5:ba:3d:27:4d:be: 99:c2:18:b1:67:d9:55:73:8a:c4:92:a6:09:73:25:e3:59:29: 6e:95:2c:e1:74:cb:eb:a4:b3:7b:8c:2a:7e:b9:c6:f4:ac:24: a9:d6:6c:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCsjVATQpcDdhE3r5o6K6B0rWy1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yNjAzMjQxMzE2NDBaFw0yNjAzMjcxNzI1NDBaMDMxMTAvBgNV BAMTKDNEMzMwQUU1NTY4MjQwNkY5M0M5NzhCRUI2MkQ3QjVFQ0RGNzAxRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/uiaqqsD58iRxVyW9r6+vciT E9ZMrUPPoDy3Qn3e5OSSEDe1NPalh09biLIr3DRWxuiVLB+ksE7go316ag/k97+7 24VQ3qesSW+Wk1wAnP9IbKE6A6C8OC0lbT4KrDucoThzs3kW3B7O1HUm4y9CmvJg IK2RBlJWtr0bZse+SPMkbYsCE4PWeWl74Dd5NMlyR3RA8ehZnNeeIKENZNpGPaU4 t1r+73+Y3CEDmpkR8/Xtg4K0HEXY7nr3pLTocmHxJ+2uNR9h2cPX/S0zyv2f+wGp itWMqw/xneZqdFHcgWYLdyxhqrG0aJZ5o/2CSeC7GCyQWlM1cXzk+do+Hi0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPTMK5VaCQG+TyXi+ti17Xs33AfgwHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlmMDEzZjktYjRmNy00NThjLWFh YzUtMDgwNDFiM2Y2NWU2LzAvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0Qjgx MjU3MkFCNzY5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkORcFV9OKcLH0PxyaFue7elznVsclBeiMG KGLbDogluFTsxT9NjUiLvWAxMfWwCnbHXXH53wXhRBQVhAq964CWVXqClPWnl2jd IXnOroMtn+ZtPJF8hQre04XnZBsY8kl+EyWiyVSaJgmkwluauBPqtwZoFihrpdM7 k3XnxUOhWZLsBCxALRsKQoXDep3dlcRU1YRMGjNp1D7EJmbR0KVF0n7i5FTzDdDB m079jkJk67sMn15+/4cJIV5gIacCbmat+ngXUrvIQZDQ8IfueMqooqW6PSdNvpnC GLFn2VVzisSSpglzJeNZKW6VLOF0y+uks3uMKn65xvSsJKnWbLc= -----END CERTIFICATE-----Generated at Thu Mar 26 05:44:53 2026 by rpki-client