$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: iAc1IuGgZHdMTK7gB/j9YaUbKJZrxlXSxg2guthduQg= Subject key identifier: 4F:16:FD:11:D4:76:4C:52:D4:C9:D2:01:52:70:48:C8:AE:D9:A1:69 Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 7C4FD8E8676FFB2A5217193306EFE5BCF3FD4CDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 01FD Signing time: Fri 22 Aug 2025 20:12:18 +0000 Manifest this update: Fri 22 Aug 2025 20:07:18 +0000 Manifest next update: Tue 26 Aug 2025 06:11:18 +0000 Files and hashes: 1: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: vuO5gFU5Ea9+uMQ1oqiwO0V2UZwjwD8zIyImQoPfl+s=) 2: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=) 3: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=) 4: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4f:d8:e8:67:6f:fb:2a:52:17:19:33:06:ef:e5:bc:f3:fd:4c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Aug 22 20:07:18 2025 GMT Not After : Aug 26 06:11:18 2025 GMT Subject: CN=4F16FD11D4764C52D4C9D201527048C8AED9A169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:6a:1c:58:7d:90:79:94:9a:77:f1:06:80: 72:ca:6e:41:61:a8:97:74:ae:46:8e:f4:eb:76:2b: 9d:bd:91:df:c4:fc:70:37:01:d3:25:4d:52:92:5c: 28:e8:36:22:9c:23:c2:81:18:a2:e4:dd:1f:e8:b6: d0:32:6a:42:91:1d:ab:c2:27:18:01:d1:a7:48:42: ff:f0:44:04:eb:54:b0:37:d7:f3:51:0a:04:a2:41: 88:36:fe:af:68:32:4a:e4:97:a7:08:69:75:70:12: b9:b0:0f:f7:5f:f3:05:a2:86:ed:e9:45:14:7a:28: 5c:0f:f8:56:92:b0:95:73:22:2d:ba:68:08:68:c7: 0b:d9:27:7d:a4:34:f3:f4:02:ce:66:98:b1:7e:e7: 41:75:d6:1f:81:60:51:39:a0:f4:4a:10:8b:df:08: fc:64:68:c9:7d:a6:ad:f0:4c:de:45:c5:43:9b:64: 9c:6e:89:a9:8a:cb:d9:c0:6f:22:c4:76:a6:c3:3e: 61:7e:93:ab:88:b7:94:a2:76:25:d1:6c:0a:e9:af: 80:4d:05:9b:b4:29:0b:30:1a:e6:56:07:ec:9a:a9: 91:3b:66:6e:0c:34:25:fc:23:55:dd:2a:12:fb:37: 1b:8f:73:88:9d:56:cf:b2:a5:fe:ba:21:67:4f:34: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:16:FD:11:D4:76:4C:52:D4:C9:D2:01:52:70:48:C8:AE:D9:A1:69 X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:39:58:3a:b1:46:1a:84:eb:f4:8a:c6:fd:60:41:6b:c3:8b: 33:cd:43:40:9f:64:f2:80:e3:e5:49:e4:01:ce:35:aa:d2:2f: 8c:04:71:81:f9:1f:91:58:da:75:16:52:f9:03:dc:aa:31:0e: 2a:c9:33:ec:7c:0c:2a:2e:09:c2:b5:d0:be:07:6b:f7:fe:ee: 6c:da:e6:4e:55:cc:06:50:a3:67:33:59:40:2a:30:6a:00:5f: b3:55:a8:52:37:a7:29:af:71:d6:6b:85:52:6a:36:9b:32:54: 73:41:fa:31:36:b9:82:58:c4:d4:5c:b2:39:d2:cd:b7:e7:8c: 73:ac:fb:dd:78:22:15:17:c1:d7:79:06:55:44:e0:6c:a6:de: 3f:7a:a0:86:8c:fc:f2:e7:27:5c:95:b3:0d:35:2a:83:50:d7: 5e:cd:14:6f:7f:45:f0:8f:89:14:8b:f2:4c:85:3e:01:cd:3d: 54:d8:a3:53:57:f5:00:3f:df:2d:eb:6f:04:fa:e7:60:2f:79: f0:b6:48:20:e8:6f:c0:0d:00:60:7c:22:f5:cc:0f:17:77:56: fd:b8:f5:5a:e3:96:6d:62:14:05:32:12:f3:0f:81:c9:38:5d: a7:5c:16:6e:dd:17:bb:19:3c:1a:37:a0:51:31:e1:bc:cd:ff: f2:64:e0:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfE/Y6Gdv+ypSFxkzBu/lvPP9TNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNTA4MjIyMDA3MThaFw0yNTA4MjYwNjExMThaMDMxMTAvBgNV BAMTKDRGMTZGRDExRDQ3NjRDNTJENEM5RDIwMTUyNzA0OEM4QUVEOUExNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1GocWH2QeZSad/EGgHLKbkFh qJd0rkaO9Ot2K529kd/E/HA3AdMlTVKSXCjoNiKcI8KBGKLk3R/ottAyakKRHavC JxgB0adIQv/wRATrVLA31/NRCgSiQYg2/q9oMkrkl6cIaXVwErmwD/df8wWihu3p RRR6KFwP+FaSsJVzIi26aAhoxwvZJ32kNPP0As5mmLF+50F11h+BYFE5oPRKEIvf CPxkaMl9pq3wTN5FxUObZJxuiamKy9nAbyLEdqbDPmF+k6uIt5SidiXRbArpr4BN BZu0KQswGuZWB+yaqZE7Zm4MNCX8I1XdKhL7NxuPc4idVs+ypf66IWdPNAR9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTxb9EdR2TFLUydIBUnBIyK7ZoWkwHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo5WDqxRhqE6/SKxv1gQWvDizPNQ0CfZPKA 4+VJ5AHONarSL4wEcYH5H5FY2nUWUvkD3KoxDirJM+x8DCouCcK10L4Ha/f+7mza 5k5VzAZQo2czWUAqMGoAX7NVqFI3pymvcdZrhVJqNpsyVHNB+jE2uYJYxNRcsjnS zbfnjHOs+914IhUXwdd5BlVE4Gym3j96oIaM/PLnJ1yVsw01KoNQ117NFG9/RfCP iRSL8kyFPgHNPVTYo1NX9QA/3y3rbwT652AvefC2SCDob8ANAGB8IvXMDxd3Vv24 9Vrjlm1iFAUyEvMPgck4XadcFm7dF7sZPBo3oFEx4bzN//Jk4Pc= -----END CERTIFICATE-----Generated at Sat Aug 23 16:08:45 2025 by rpki-client