$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: oMQmtyGTSnbLAFUexga7Buo9q/UZWb9V7ub/RyTgXhk= Subject key identifier: D0:8D:EA:0C:91:6A:24:7B:DC:B3:24:F1:A9:02:C9:45:5D:7E:F7:AC Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 502214E5B7A97E3364DAA394272195853B3FABAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 051A Signing time: Mon 20 Oct 2025 02:20:39 +0000 Manifest this update: Mon 20 Oct 2025 02:15:39 +0000 Manifest next update: Thu 23 Oct 2025 13:24:39 +0000 Files and hashes: 1: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: VW/9nDJQjFvUWNt8EqbaeORZUsYDdJ6mH99j9xi/Rqk=) 2: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 4PaQM0H/onjaHT/Kh1zZPEAnjrQ5QUcaM+Ku8Nb2uPM=) 3: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: rZ6xFcdvrZepULyMbdGd+kxrh/vJFiCfrx4GSYa9yts=) 4: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: IRZUoX6giIzocnieegh+jhCGcm3NJfUDoJas/fn7lAQ=) 5: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: LF6fkR6wHHLHaK6n5THO1FAaW1/pu2et9XJ8qxbKTqY=) 6: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 1Oab07RIZCU6Wr6N0vZAT3UZeBpPId8GfzsxV9iRdK8=) 7: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: W8x6bOLnBWoz+//dUsWATaaP/fdXm46GnrbTwQ8PSdg=) 8: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=) 9: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: k7ibyopUV9/XrMW2a9JFbhidu+OXQwQx2OObsR3bxGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 13:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:22:14:e5:b7:a9:7e:33:64:da:a3:94:27:21:95:85:3b:3f:ab:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Oct 20 02:15:39 2025 GMT Not After : Oct 23 13:24:39 2025 GMT Subject: CN=D08DEA0C916A247BDCB324F1A902C9455D7EF7AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cd:e9:d0:48:f6:66:f0:54:6d:2c:00:0c:2b: 03:8b:7b:f0:79:58:e5:5d:f6:a2:f4:de:54:94:45: 9c:e1:24:14:19:7e:b1:8b:42:0d:67:eb:b9:ff:44: 6d:95:4d:32:65:5f:72:3c:a7:22:06:40:25:5a:f6: 45:70:e0:0e:3c:78:e1:c2:e6:16:33:e3:8e:38:30: 3a:e9:0b:c3:97:9a:1e:ca:75:ac:e1:e7:4f:40:bd: 47:5b:74:77:95:f2:80:59:92:4d:26:96:0b:86:c8: ea:06:ea:d9:8b:92:a4:f4:37:48:f8:03:a4:55:94: e7:6c:e6:c4:2e:ad:a4:5b:71:bb:bb:0b:51:b1:4b: fa:04:17:15:51:58:eb:ef:d7:ed:33:1d:77:d6:b9: 01:86:2c:ae:27:c9:32:b4:9f:21:e2:32:96:fc:a7: 7f:14:d9:1e:65:03:b2:b1:56:fb:48:f2:69:f2:2b: d1:95:39:e6:3d:80:3e:2e:c3:96:33:9e:f0:97:a4: a4:b0:fb:e3:f7:3d:04:9a:53:6a:28:10:a2:9f:93: 95:34:b9:35:a9:22:20:3e:ef:61:e4:1d:af:e0:b4: 1e:f0:c7:e3:9b:d0:81:0a:7d:82:db:69:56:7a:0c: df:76:f6:ab:7a:dc:2e:b8:df:a6:59:da:fd:40:79: 7c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8D:EA:0C:91:6A:24:7B:DC:B3:24:F1:A9:02:C9:45:5D:7E:F7:AC X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:4d:5b:fc:a1:75:10:4c:98:ed:a9:b3:02:ef:e4:9e:8a:02: b2:4b:66:12:f5:bd:ec:e3:aa:73:5c:14:01:93:c8:15:69:40: 17:95:e8:e5:dc:71:25:b1:1a:22:1d:f7:bb:83:3d:66:1b:4b: 66:44:6a:84:df:ad:e5:94:8e:6e:76:80:53:5c:ed:a8:30:12: 53:e4:c9:ec:22:1b:44:be:18:e0:7d:d0:3e:04:f6:5a:03:57: 94:29:e4:78:54:be:05:ba:5e:65:51:9b:b2:c9:c2:46:58:c2: 58:e9:bd:8d:58:25:5b:c6:6f:13:2b:2d:84:e1:d9:cd:2d:30: d8:3f:26:f1:e7:23:88:52:c6:31:14:6c:d6:01:37:c3:45:ad: 24:82:a1:ef:8c:c9:6b:11:c4:c4:fa:3c:86:80:c2:f8:09:87: 92:35:81:d8:af:81:e6:d6:0f:ba:34:7c:3e:50:84:08:3e:c0: 8e:ab:86:73:58:ae:f8:f3:db:8d:fc:9d:82:9b:9a:0b:c0:76: 0e:98:14:87:42:d0:90:67:e3:11:bb:d4:25:df:1f:8c:03:1e: 27:5d:13:41:4f:8d:16:63:8b:01:40:2a:71:35:32:77:6f:27: 1f:fd:05:94:8c:1a:29:f7:a4:e0:8a:05:0b:b3:37:d1:19:bf: b6:98:ca:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUCIU5bepfjNk2qOUJyGVhTs/q64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNTEwMjAwMjE1MzlaFw0yNTEwMjMxMzI0MzlaMDMxMTAvBgNV BAMTKEQwOERFQTBDOTE2QTI0N0JEQ0IzMjRGMUE5MDJDOTQ1NUQ3RUY3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZzenQSPZm8FRtLAAMKwOLe/B5 WOVd9qL03lSURZzhJBQZfrGLQg1n67n/RG2VTTJlX3I8pyIGQCVa9kVw4A48eOHC 5hYz4444MDrpC8OXmh7Kdazh509AvUdbdHeV8oBZkk0mlguGyOoG6tmLkqT0N0j4 A6RVlOds5sQuraRbcbu7C1GxS/oEFxVRWOvv1+0zHXfWuQGGLK4nyTK0nyHiMpb8 p38U2R5lA7KxVvtI8mnyK9GVOeY9gD4uw5YznvCXpKSw++P3PQSaU2ooEKKfk5U0 uTWpIiA+72HkHa/gtB7wx+Ob0IEKfYLbaVZ6DN929qt63C6436ZZ2v1AeXyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0I3qDJFqJHvcsyTxqQLJRV1+96wwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZNW/yhdRBMmO2pswLv5J6KArJLZhL1vezj qnNcFAGTyBVpQBeV6OXccSWxGiId97uDPWYbS2ZEaoTfreWUjm52gFNc7agwElPk yewiG0S+GOB90D4E9loDV5Qp5HhUvgW6XmVRm7LJwkZYwljpvY1YJVvGbxMrLYTh 2c0tMNg/JvHnI4hSxjEUbNYBN8NFrSSCoe+MyWsRxMT6PIaAwvgJh5I1gdivgebW D7o0fD5QhAg+wI6rhnNYrvjz2438nYKbmgvAdg6YFIdC0JBn4xG71CXfH4wDHidd E0FPjRZjiwFAKnE1MndvJx/9BZSMGin3pOCKBQuzN9EZv7aYyo8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:32 2025 by rpki-client