$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: K28woVrg9m1zyoj6to6Qxfy+sIkRH6MDapXE8+xrPlw= Subject key identifier: 4A:CA:16:E4:DB:20:E5:8F:46:E2:43:FE:53:3D:85:F5:AC:69:E1:9F Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 3099F1257E41B6507B40F339CAC701B9BFC39BAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 0216 Signing time: Sat 18 Oct 2025 10:02:18 +0000 Manifest this update: Sat 18 Oct 2025 09:57:18 +0000 Manifest next update: Tue 21 Oct 2025 20:35:18 +0000 Files and hashes: 1: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=) 2: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=) 3: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=) 4: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: jCZULv/Ik+Ki4PZ8GwGxVpPPNiKm4CVfRIvYVRXUWPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:99:f1:25:7e:41:b6:50:7b:40:f3:39:ca:c7:01:b9:bf:c3:9b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Oct 18 09:57:18 2025 GMT Not After : Oct 21 20:35:18 2025 GMT Subject: CN=4ACA16E4DB20E58F46E243FE533D85F5AC69E19F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:03:a2:60:98:e0:65:2a:a8:79:11:da:10: ae:03:8a:7d:73:d5:21:b7:96:25:60:54:81:98:cb: d7:12:df:0a:70:c1:6d:f4:e6:57:a9:82:94:06:8c: 37:8c:c1:c2:11:f7:88:c9:cb:ac:f0:bd:05:b6:2c: b6:8e:db:82:dd:5c:25:15:de:13:01:86:51:cb:f8: a0:f5:90:8b:d5:ba:eb:15:0d:aa:b9:d8:69:cd:1b: 3d:de:4f:75:49:3e:6d:24:b4:08:8f:2b:ec:0b:71: 6e:70:d9:5c:c1:93:9a:ee:98:dc:02:ca:91:34:89: 6f:59:71:62:00:8c:7f:85:3c:5c:2e:40:71:47:d9: 46:0e:52:36:6a:34:e9:76:40:eb:a2:cb:1d:71:92: 30:7d:c3:e5:5f:1b:0d:27:05:54:d9:dd:90:51:4e: 76:b8:ec:8e:03:c9:7a:86:83:97:97:78:b7:8d:95: 64:be:60:70:74:3b:ae:50:3d:c8:42:ed:21:9b:eb: 10:9a:e6:f6:19:3b:f0:e5:f7:fa:17:a3:eb:43:72: 21:8d:8d:ec:ac:3b:f6:81:65:7a:b6:3f:4a:43:34: 5a:1a:aa:90:22:72:29:42:8b:42:0e:bc:2f:ab:ac: 72:05:5c:77:e6:2b:bb:db:b9:7b:e2:57:ba:31:f6: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CA:16:E4:DB:20:E5:8F:46:E2:43:FE:53:3D:85:F5:AC:69:E1:9F X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:df:cc:c4:03:a2:01:50:64:84:0d:fa:1b:4f:b8:f9:96:d4: 6f:8c:a1:22:6d:c3:07:34:8c:c3:fe:2f:66:2d:f3:0e:53:03: 6e:47:3f:eb:0b:da:f1:ad:e0:6a:96:65:cb:b2:e3:eb:59:2f: 34:b6:54:ae:a4:78:3e:c4:29:bf:9f:e7:cf:ee:ef:7c:e4:49: 80:6d:b0:51:8a:3b:a8:9c:d3:38:b2:59:3e:30:ec:25:8b:25: 33:18:4f:1f:17:0f:50:54:47:57:01:a7:97:d4:62:85:8a:f1: a4:fa:29:44:74:e5:cf:6a:e3:ee:87:d7:dd:1d:0f:40:97:85: f2:6a:89:09:b3:36:b7:a4:ec:70:f5:79:1c:fd:c5:a7:9c:e4: 08:54:27:31:21:6e:2f:36:8c:e6:b7:e0:2b:81:36:c1:0e:c2: 1b:6d:5c:3a:45:a9:0e:60:8a:c5:a4:fc:f7:a5:2a:5a:f6:5a: 10:8d:fe:84:8e:bd:02:25:d6:30:16:63:e8:56:6a:44:db:fa: 57:11:12:68:d3:89:9b:a4:61:2c:0c:06:11:0a:1f:f3:ac:e5: e5:b2:ce:26:8a:8c:f0:e6:5c:e3:00:7f:2f:83:49:c7:66:db: 44:49:a7:e7:95:38:c4:f7:d1:41:7f:34:a0:ac:7c:b6:3f:dc: 01:45:9d:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMJnxJX5BtlB7QPM5yscBub/Dm64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNTEwMTgwOTU3MThaFw0yNTEwMjEyMDM1MThaMDMxMTAvBgNV BAMTKDRBQ0ExNkU0REIyMEU1OEY0NkUyNDNGRTUzM0Q4NUY1QUM2OUUxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUwOiYJjgZSqoeRHaEK4Din1z 1SG3liVgVIGYy9cS3wpwwW305lepgpQGjDeMwcIR94jJy6zwvQW2LLaO24LdXCUV 3hMBhlHL+KD1kIvVuusVDaq52GnNGz3eT3VJPm0ktAiPK+wLcW5w2VzBk5rumNwC ypE0iW9ZcWIAjH+FPFwuQHFH2UYOUjZqNOl2QOuiyx1xkjB9w+VfGw0nBVTZ3ZBR Tna47I4DyXqGg5eXeLeNlWS+YHB0O65QPchC7SGb6xCa5vYZO/Dl9/oXo+tDciGN jeysO/aBZXq2P0pDNFoaqpAicilCi0IOvC+rrHIFXHfmK7vbuXviV7ox9pWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSsoW5Nsg5Y9G4kP+Uz2F9axp4Z8wHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzfzMQDogFQZIQN+htPuPmW1G+MoSJtwwc0 jMP+L2Yt8w5TA25HP+sL2vGt4GqWZcuy4+tZLzS2VK6keD7EKb+f58/u73zkSYBt sFGKO6ic0ziyWT4w7CWLJTMYTx8XD1BUR1cBp5fUYoWK8aT6KUR05c9q4+6H190d D0CXhfJqiQmzNrek7HD1eRz9xaec5AhUJzEhbi82jOa34CuBNsEOwhttXDpFqQ5g isWk/PelKlr2WhCN/oSOvQIl1jAWY+hWakTb+lcREmjTiZukYSwMBhEKH/Os5eWy ziaKjPDmXOMAfy+DScdm20RJp+eVOMT30UF/NKCsfLY/3AFFnSk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:12 2025 by rpki-client