$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft File: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft (raw, json) Hash identifier: o/PNpGSZEt7QDgiQFY8jnRcpPzTJTZlSD7MhvaxKYtI= Subject key identifier: FD:B7:34:24:C2:F9:AC:03:D1:DE:6E:9F:FB:EA:AC:BF:C7:36:33:43 Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Certificate serial: 3CFF7B470366EAC079E4C20B42C889304EF178E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft Manifest number: 0227 Signing time: Sun 19 Oct 2025 20:51:58 +0000 Manifest this update: Sun 19 Oct 2025 20:46:58 +0000 Manifest next update: Wed 22 Oct 2025 21:22:58 +0000 Files and hashes: 1: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: N8Hp5zFXrvVRTETGbbuYPmuPvC+hIoWpg8/FhaH5avg=) 2: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: NYSNKUm/BgmT5rJhU5PDu3zm0ji32HyB3xQtf69bB+8=) 3: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: Zv0VjyXOs/YJcxUITNpIWw5z1xu1WaEnf3VgeGVypQs=) 4: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl (hash: oiVaWzapamedftbuCsXSNyBGboz0lY+2WCny7xo94+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ff:7b:47:03:66:ea:c0:79:e4:c2:0b:42:c8:89:30:4e:f1:78:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Validity Not Before: Oct 19 20:46:58 2025 GMT Not After : Oct 22 21:22:58 2025 GMT Subject: CN=FDB73424C2F9AC03D1DE6E9FFBEAACBFC7363343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:eb:af:2e:c6:c6:6f:40:e9:24:33:c9:e6: de:4e:11:5c:5a:e9:28:17:77:05:6b:21:ff:dc:28: e2:19:23:dd:cd:55:b8:48:6c:c9:55:02:a0:ab:19: 4f:9b:b2:01:d5:bf:08:93:d9:9b:87:c5:95:0f:a4: 86:b8:2d:2a:12:07:ea:c1:80:02:7b:55:8a:4e:f3: 50:71:46:40:46:36:2e:8b:c9:61:cb:ab:7b:8a:0f: 3c:96:8a:dd:bb:63:3f:43:6b:24:70:ad:2d:3e:9e: 8a:ac:a3:ab:f5:4f:89:aa:06:62:c5:a9:58:84:7e: d9:5a:76:16:a7:6d:46:ce:f8:48:68:16:eb:30:cc: 63:b4:43:b8:40:2b:0d:7e:87:d3:b0:a2:42:04:86: e9:eb:f6:74:63:c7:f3:c4:c5:08:80:6d:93:44:9a: ac:bf:e3:96:1a:8f:eb:04:be:6e:9e:ae:65:ac:8b: 52:4c:a5:a5:8c:9e:ec:47:8b:91:d6:de:ea:51:e1: f6:b6:25:9a:98:3c:0a:5f:e3:57:14:4b:8d:47:0c: 54:57:5e:29:f5:3a:81:fe:53:e8:cb:a0:93:69:ba: 0f:19:c1:9e:0e:68:5a:03:13:b3:4d:7d:e9:1f:62: e9:a6:38:02:05:db:12:94:86:50:41:f2:a2:3c:8f: 9c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B7:34:24:C2:F9:AC:03:D1:DE:6E:9F:FB:EA:AC:BF:C7:36:33:43 X509v3 Authority Key Identifier: keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4c:f6:fe:f2:96:02:23:73:01:d3:9b:b2:09:99:7e:05:e2: 55:89:a3:d5:e9:a9:bd:5a:0b:61:a0:a3:f8:f9:9b:1b:2f:10: 3e:c6:ba:53:46:cc:82:bb:bd:f3:d2:6f:79:d7:75:1d:5a:7f: 46:66:4d:95:2b:ad:27:20:36:e8:cf:4b:e2:a0:e5:ca:f9:9c: cd:6f:24:ef:b0:6a:05:df:bc:1b:33:a5:cb:4e:a4:fd:7c:83: 63:de:d3:1b:d1:41:c0:e6:47:f8:5a:a5:14:76:e8:e5:89:5e: ef:4a:1e:b5:86:ae:db:c0:fc:e3:e0:66:30:0d:2e:75:50:7d: b7:d0:18:cd:c9:c3:77:c1:51:1e:8a:7a:b8:42:0a:85:5a:e6: 55:af:0e:c0:a9:72:aa:7b:38:61:05:62:bc:35:a5:15:ca:cd: 12:8c:98:b8:81:59:3b:15:d6:54:dd:21:51:c5:31:58:cd:eb: 3c:a2:6f:f5:06:99:a7:60:d5:50:44:3e:23:88:0d:bc:69:7e: b7:2c:71:22:23:26:57:5d:49:3d:44:a5:cc:f9:7c:bb:7a:5b: cc:42:b2:1b:2b:a2:81:0e:99:44:d1:e3:19:da:31:4b:6a:4f: 1e:ba:1f:36:27:df:38:54:1a:ac:4a:64:d1:02:72:2d:63:e7: bf:89:58:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPP97RwNm6sB55MILQsiJME7xeOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFB Q0YwRjMwRjAeFw0yNTEwMTkyMDQ2NThaFw0yNTEwMjIyMTIyNThaMDMxMTAvBgNV BAMTKEZEQjczNDI0QzJGOUFDMDNEMURFNkU5RkZCRUFBQ0JGQzczNjMzNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWuuvLsbGb0DpJDPJ5t5OEVxa 6SgXdwVrIf/cKOIZI93NVbhIbMlVAqCrGU+bsgHVvwiT2ZuHxZUPpIa4LSoSB+rB gAJ7VYpO81BxRkBGNi6LyWHLq3uKDzyWit27Yz9DayRwrS0+noqso6v1T4mqBmLF qViEftladhanbUbO+EhoFuswzGO0Q7hAKw1+h9OwokIEhunr9nRjx/PExQiAbZNE mqy/45Yaj+sEvm6ermWsi1JMpaWMnuxHi5HW3upR4fa2JZqYPApf41cUS41HDFRX Xin1OoH+U+jLoJNpug8ZwZ4OaFoDE7NNfekfYummOAIF2xKUhlBB8qI8j5wPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/bc0JML5rAPR3m6f++qsv8c2M0MwHwYDVR0j BBgwFoAU3Pz+ToGX/6+5pXkgvUDcwazw8w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWFmMTQ0Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9EQ0ZDRkU0RTgx OTdGRkFGQjlBNTc5MjBCRDQwRENDMUFDRjBGMzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFBQ0Yw RjMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERD QzFBQ0YwRjMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRM9v7ylgIjcwHTm7IJmX4F4lWJo9Xpqb1a C2Ggo/j5mxsvED7GulNGzIK7vfPSb3nXdR1af0ZmTZUrrScgNujPS+Kg5cr5nM1v JO+wagXfvBszpctOpP18g2Pe0xvRQcDmR/hapRR26OWJXu9KHrWGrtvA/OPgZjAN LnVQfbfQGM3Jw3fBUR6KerhCCoVa5lWvDsCpcqp7OGEFYrw1pRXKzRKMmLiBWTsV 1lTdIVHFMVjN6zyib/UGmadg1VBEPiOIDbxpfrcscSIjJlddST1Epcz5fLt6W8xC shsrooEOmUTR4xnaMUtqTx66HzYn3zhUGqxKZNECci1j57+JWPM= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:35 2025 by rpki-client