$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: fcvFK4TC8S+sPhtrZM6EAoDMltP5bR3SlRmcB15xPOY= Subject key identifier: 33:80:1E:A8:02:69:EA:CC:34:B3:8F:FC:8B:44:EE:5A:6F:31:68:4C Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 4D0B1CCFDAC9677AC1274C327E8A5494FF99E87F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 025C Signing time: Wed 25 Mar 2026 11:02:43 +0000 Manifest this update: Wed 25 Mar 2026 10:57:43 +0000 Manifest next update: Sat 28 Mar 2026 16:10:43 +0000 Files and hashes: 1: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=) 2: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=) 3: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: q+cxN/ZZn4kQbXvAozH7bOq65PmpFbqblK+v1EUuTUY=) 4: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: 6YppYQBmze+QjQsjns3D6bEx0CLiUBYJBxjSLx6K1N0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0b:1c:cf:da:c9:67:7a:c1:27:4c:32:7e:8a:54:94:ff:99:e8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Mar 25 10:57:43 2026 GMT Not After : Mar 28 16:10:43 2026 GMT Subject: CN=33801EA80269EACC34B38FFC8B44EE5A6F31684C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:22:7b:30:d6:00:df:bf:9f:eb:a5:b7:0c:d0: 17:bf:f6:90:cb:50:4a:2c:33:a4:06:d1:08:6e:b1: 14:1e:3f:0c:9b:8d:ea:a9:00:f2:1d:8b:12:a3:95: d9:f8:e2:17:a5:b2:42:32:d5:44:94:f1:1a:0a:df: cb:f8:c9:73:63:1e:20:32:a4:5f:b5:3e:49:ee:07: 56:90:47:1d:1b:9f:46:d6:70:e9:bb:f3:cd:ca:d6: 91:f2:f0:20:2d:75:e8:b2:c7:47:26:a5:9a:20:e4: a6:89:a5:59:3e:ca:f1:03:96:67:c2:3a:4d:4e:73: ec:45:b4:58:bb:76:00:22:f7:16:34:75:85:b9:7f: e5:d5:69:cd:77:71:fe:94:ce:d0:ee:59:7c:56:19: 64:00:e2:b8:e1:22:fa:83:22:e8:01:21:6a:2e:d2: fb:0b:b9:f9:62:3c:a7:8c:30:51:30:1e:c1:47:c6: 00:d7:47:be:04:50:0c:b4:f1:9c:5f:ec:4e:de:b2: f4:24:73:52:d6:66:9a:ab:79:1c:ad:e0:63:38:e2: 4b:91:8f:f3:f2:17:05:81:95:aa:60:21:a3:f9:52: 82:3b:48:9b:50:2e:d5:a9:d1:12:42:e4:dc:d7:0e: f5:2f:c7:8e:c4:c8:c0:3e:e6:77:31:95:0a:3b:76: cb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:80:1E:A8:02:69:EA:CC:34:B3:8F:FC:8B:44:EE:5A:6F:31:68:4C X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a5:ce:a8:5b:d5:19:74:44:7e:82:72:a5:d8:30:80:26:ab: b0:e0:d6:34:78:ce:63:f5:84:43:6d:15:d3:03:54:35:e8:4c: 5d:50:46:cf:81:5f:eb:08:e7:3c:5e:3c:e2:db:a6:6c:e4:b7: 9c:c0:f7:27:89:a6:45:5b:b1:02:cc:52:54:cb:15:6d:28:53: 8d:d7:38:29:05:3f:8e:1f:70:97:56:0d:d9:43:6c:27:ac:8e: a0:6f:4a:1b:32:64:87:3a:9d:f1:1c:bf:24:58:48:b0:2b:1a: 51:c5:03:08:d9:1f:5d:67:34:61:cc:e6:f8:97:38:4f:f0:e2: 4a:0f:c3:db:04:47:ff:28:cf:0c:7c:e1:de:d5:d5:38:27:dd: eb:71:da:9e:d4:10:ca:2d:58:95:08:c8:e9:1e:7f:4f:3a:e6: e3:4c:9a:ad:60:fe:a8:28:e1:bd:72:31:55:a9:26:1e:28:c1: 17:2b:67:99:1e:03:e3:69:0a:a2:cf:3b:ec:9f:ec:ad:81:f4: 72:5f:df:fe:ee:40:70:24:90:21:d3:96:a9:c7:c5:6d:98:ad: 2e:9b:c6:66:35:9a:95:8e:d1:11:8b:40:35:a8:21:38:76:31: 2e:d8:3b:a3:ec:7e:f6:4a:b0:54:07:15:ca:c2:84:b8:a5:30: 25:b2:f0:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQscz9rJZ3rBJ0wyfopUlP+Z6H8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNjAzMjUxMDU3NDNaFw0yNjAzMjgxNjEwNDNaMDMxMTAvBgNV BAMTKDMzODAxRUE4MDI2OUVBQ0MzNEIzOEZGQzhCNDRFRTVBNkYzMTY4NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjInsw1gDfv5/rpbcM0Be/9pDL UEosM6QG0QhusRQePwybjeqpAPIdixKjldn44helskIy1USU8RoK38v4yXNjHiAy pF+1PknuB1aQRx0bn0bWcOm7883K1pHy8CAtdeiyx0cmpZog5KaJpVk+yvEDlmfC Ok1Oc+xFtFi7dgAi9xY0dYW5f+XVac13cf6UztDuWXxWGWQA4rjhIvqDIugBIWou 0vsLufliPKeMMFEwHsFHxgDXR74EUAy08Zxf7E7esvQkc1LWZpqreRyt4GM44kuR j/PyFwWBlapgIaP5UoI7SJtQLtWp0RJC5NzXDvUvx47EyMA+5ncxlQo7dsuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM4AeqAJp6sw0s4/8i0TuWm8xaEwwHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGlzqhb1Rl0RH6CcqXYMIAmq7Dg1jR4zmP1 hENtFdMDVDXoTF1QRs+BX+sI5zxePOLbpmzkt5zA9yeJpkVbsQLMUlTLFW0oU43X OCkFP44fcJdWDdlDbCesjqBvShsyZIc6nfEcvyRYSLArGlHFAwjZH11nNGHM5viX OE/w4koPw9sER/8ozwx84d7V1Tgn3etx2p7UEMotWJUIyOkef0865uNMmq1g/qgo 4b1yMVWpJh4owRcrZ5keA+NpCqLPO+yf7K2B9HJf3/7uQHAkkCHTlqnHxW2YrS6b xmY1mpWO0RGLQDWoITh2MS7YO6PsfvZKsFQHFcrChLilMCWy8KQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:19:45 2026 by rpki-client