$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: MnPJMZ45wwJlWVNvcrZT5Y7dlo9Mmg7mgV6yfB9dxnc= Subject key identifier: 6C:84:52:96:DF:B3:35:A4:15:CD:41:F8:7D:7B:92:DD:47:A6:99:69 Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 129FF1EE97C3CC0C129EAAA0AF34838097D39820 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 01E4 Signing time: Fri 27 Jun 2025 12:12:09 +0000 Manifest this update: Fri 27 Jun 2025 12:07:09 +0000 Manifest next update: Mon 30 Jun 2025 23:03:09 +0000 Files and hashes: 1: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=) 2: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=) 3: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: +o9B2fUb6eMjXz/RwJFZS4b5GPadrAL15EJtwBp+LWk=) 4: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 23:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9f:f1:ee:97:c3:cc:0c:12:9e:aa:a0:af:34:83:80:97:d3:98:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Jun 27 12:07:09 2025 GMT Not After : Jun 30 23:03:09 2025 GMT Subject: CN=6C845296DFB335A415CD41F87D7B92DD47A69969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:c7:19:ec:43:99:00:dc:da:ff:28:94:0f: df:d9:f6:3a:26:91:7e:21:20:2e:49:c9:55:b3:fb: d3:f5:e3:f9:a6:2f:b9:e2:a7:20:66:58:37:f5:1b: 1b:ef:ec:2c:da:fd:79:5c:54:5d:96:38:f2:14:31: 8b:45:3b:07:ab:90:3d:84:16:32:f7:71:b1:17:e3: b1:8d:ba:0c:39:0e:3e:42:36:22:dd:6b:bb:f8:35: a9:66:dc:10:4e:48:33:0a:f3:be:ac:ec:1b:70:a2: 94:3c:af:10:f5:6b:e4:02:ad:1d:29:92:58:9f:42: 74:0c:67:b1:dc:72:60:86:ba:17:35:14:e3:e3:df: 32:5b:ff:7a:33:6b:54:e0:93:0e:26:99:01:be:6b: 0e:3f:de:82:fc:19:7c:2e:90:07:18:d3:e7:15:e7: b4:51:2a:a8:b3:ec:4a:2f:af:a3:66:b0:f3:94:fb: 1c:67:d3:3c:c5:3b:5a:df:43:6c:fc:58:86:77:cf: 8f:1c:bc:e9:7f:7d:f8:25:d9:25:c9:d7:8e:dd:69: 0b:ce:58:de:b1:e8:c2:1a:06:e2:6b:1d:03:8b:7f: c0:8c:d5:7e:22:bb:4c:41:72:76:70:ae:47:19:ac: 1b:94:8e:e8:ef:13:a9:95:41:9b:7c:7c:32:82:1f: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:84:52:96:DF:B3:35:A4:15:CD:41:F8:7D:7B:92:DD:47:A6:99:69 X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:06:35:2c:d7:36:24:c8:3c:01:7e:66:60:ed:f1:5f:97:d9: e0:56:7b:f5:a8:2e:7c:a7:22:2b:96:b8:85:bc:a2:c4:9c:f0: 50:02:b8:3f:1f:af:d1:0f:9f:87:98:cc:09:5b:ee:f2:e7:33: a7:43:0f:20:75:ad:07:42:b0:43:fc:89:b8:26:97:7b:5e:40: 89:0f:46:6e:7f:e8:25:67:39:88:84:d2:56:8d:20:96:28:be: 79:47:53:85:a5:a9:fb:37:d2:cc:05:f4:43:a9:98:a4:f4:aa: 7d:8e:ce:49:5a:1a:c5:0b:f4:09:63:ca:cc:f7:33:26:05:b3: 92:51:20:09:0d:31:ad:9c:03:96:fd:1e:86:20:90:0a:ad:7f: 83:93:da:a6:95:31:3c:99:de:dd:8e:43:97:2a:a1:36:6a:7e: a0:ec:20:78:f7:2a:1e:59:67:a2:7b:6d:30:b7:26:f5:85:47: 19:29:2b:07:04:68:79:50:f3:0f:05:7a:53:e5:ab:a1:89:fe: ac:82:c0:e6:0e:5f:6b:a5:f8:c7:8a:03:92:f4:12:23:9f:35: 74:c6:b7:dd:75:35:b5:71:b5:a7:bf:e8:3d:42:53:76:43:de: bd:d0:e7:95:c9:f0:24:d7:32:3d:5d:85:b8:86:5e:da:22:86: 4b:2b:32:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEp/x7pfDzAwSnqqgrzSDgJfTmCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNTA2MjcxMjA3MDlaFw0yNTA2MzAyMzAzMDlaMDMxMTAvBgNV BAMTKDZDODQ1Mjk2REZCMzM1QTQxNUNENDFGODdEN0I5MkRENDdBNjk5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FccZ7EOZANza/yiUD9/Z9jom kX4hIC5JyVWz+9P14/mmL7nipyBmWDf1Gxvv7Cza/XlcVF2WOPIUMYtFOwerkD2E FjL3cbEX47GNugw5Dj5CNiLda7v4Nalm3BBOSDMK876s7BtwopQ8rxD1a+QCrR0p klifQnQMZ7HccmCGuhc1FOPj3zJb/3oza1Tgkw4mmQG+aw4/3oL8GXwukAcY0+cV 57RRKqiz7Eovr6NmsPOU+xxn0zzFO1rfQ2z8WIZ3z48cvOl/ffgl2SXJ147daQvO WN6x6MIaBuJrHQOLf8CM1X4iu0xBcnZwrkcZrBuUjujvE6mVQZt8fDKCH12dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbIRSlt+zNaQVzUH4fXuS3UemmWkwHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgGNSzXNiTIPAF+ZmDt8V+X2eBWe/WoLnyn IiuWuIW8osSc8FACuD8fr9EPn4eYzAlb7vLnM6dDDyB1rQdCsEP8ibgml3teQIkP Rm5/6CVnOYiE0laNIJYovnlHU4Wlqfs30swF9EOpmKT0qn2OzklaGsUL9Aljysz3 MyYFs5JRIAkNMa2cA5b9HoYgkAqtf4OT2qaVMTyZ3t2OQ5cqoTZqfqDsIHj3Kh5Z Z6J7bTC3JvWFRxkpKwcEaHlQ8w8FelPlq6GJ/qyCwOYOX2ul+MeKA5L0EiOfNXTG t911NbVxtae/6D1CU3ZD3r3Q55XJ8CTXMj1dhbiGXtoihksrMuA= -----END CERTIFICATE-----Generated at Sun Jun 29 19:48:07 2025 by rpki-client