$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: Gn8uYviq5iQBj36RXX4VdsJxwKT9+biRh1qOvBCevEg= Subject key identifier: 4D:02:C7:35:FA:6A:E2:3B:7C:66:C7:F0:5F:A9:79:6E:64:B6:91:54 Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 1BEF7B73748CBA5CDCB8B6A97E583D72E63C5936 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 01EE Signing time: Sun 20 Jul 2025 07:42:15 +0000 Manifest this update: Sun 20 Jul 2025 07:37:15 +0000 Manifest next update: Wed 23 Jul 2025 13:46:15 +0000 Files and hashes: 1: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: QDSZEM8oUe5ph9qUTceexXuF/dGO2njgYkL1MvfG2KA=) 2: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=) 3: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=) 4: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ef:7b:73:74:8c:ba:5c:dc:b8:b6:a9:7e:58:3d:72:e6:3c:59:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Jul 20 07:37:15 2025 GMT Not After : Jul 23 13:46:15 2025 GMT Subject: CN=4D02C735FA6AE23B7C66C7F05FA9796E64B69154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:88:47:a1:9b:fc:f9:06:c7:f1:c3:4c:e5: 62:02:f4:c1:5d:5d:ff:d4:d4:4f:0e:06:cd:a0:9f: 56:7a:3f:fc:1c:d0:d8:52:36:14:c5:b4:09:e9:f0: b7:08:d6:d3:7f:fb:b6:f5:2c:be:f7:87:88:06:cb: 2a:8c:51:1d:6a:fe:3d:85:17:c0:a6:05:46:3f:b5: 1a:de:80:48:32:ba:58:8a:33:18:81:9f:f5:9d:44: 6c:e3:b1:d4:0a:35:7c:f5:f7:77:93:15:f2:8c:c9: 8d:ce:fa:40:22:67:bc:b0:8c:f8:8c:42:59:3b:31: f2:e6:87:8c:e9:78:39:1f:ce:b6:25:e4:1e:8b:3b: c3:0b:2f:0f:e7:8e:83:60:97:8d:be:c8:29:69:ee: ca:a1:b6:18:f5:54:a6:99:3b:1e:d3:92:0f:87:9f: b4:97:c4:5c:f5:42:d8:b5:be:b7:76:e4:14:72:ea: 4a:82:c0:0a:86:b2:4d:fc:ac:f9:59:3d:99:d2:c4: b2:45:54:6b:4b:46:35:a7:ae:e8:3d:6d:ec:7a:b5: b2:09:b7:a8:22:22:c6:aa:8c:66:72:74:48:bc:39: 02:21:27:c0:51:5c:5f:a1:2e:99:aa:8c:c2:02:5d: 49:d1:5c:cb:55:f9:09:2b:36:ae:56:b4:9d:cd:ed: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:02:C7:35:FA:6A:E2:3B:7C:66:C7:F0:5F:A9:79:6E:64:B6:91:54 X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e4:6c:1f:db:9e:1f:18:58:dd:9f:ab:5f:55:48:ba:5f:d1: c6:54:e0:e3:8a:0c:23:ae:e8:94:1f:39:ac:99:6f:2a:17:b5: 40:26:54:47:60:07:16:72:0c:75:a0:a5:84:99:d9:ea:6b:f6: 6a:24:08:a1:c7:d5:da:89:df:83:c7:55:8b:df:ca:4c:68:1d: f9:f2:53:8c:81:59:b4:09:5a:ee:82:02:1b:85:23:61:0e:a8: d3:42:cc:99:4e:de:50:f3:37:43:07:33:49:51:4a:fc:7f:d5: 1d:b1:f2:51:6b:0f:d5:8d:15:2a:dc:ff:5c:a9:75:2b:7b:83: 96:bf:9b:1b:8c:7e:41:47:48:18:d3:bf:12:f8:a6:c0:08:e2: d1:a9:1b:f9:69:0e:42:d1:86:ab:8d:22:e1:d3:c2:fb:25:ef: c8:97:f9:58:96:a8:0c:53:d0:13:93:b8:bb:d4:15:33:33:25: f9:69:a5:a7:4b:bb:a7:79:a4:ef:e4:b0:74:5a:a2:79:80:af: f4:ad:31:85:45:97:d1:b9:50:68:f7:4b:a3:80:f7:f2:c6:f6: 20:38:f5:f6:0f:be:58:8e:c7:94:8b:f7:0d:7b:42:5e:3e:04: 36:04:e6:ff:62:c7:2e:a7:d1:44:52:35:4f:e0:b0:03:ee:1a: bd:24:43:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+97c3SMulzcuLapflg9cuY8WTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNTA3MjAwNzM3MTVaFw0yNTA3MjMxMzQ2MTVaMDMxMTAvBgNV BAMTKDREMDJDNzM1RkE2QUUyM0I3QzY2QzdGMDVGQTk3OTZFNjRCNjkxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEohHoZv8+QbH8cNM5WIC9MFd Xf/U1E8OBs2gn1Z6P/wc0NhSNhTFtAnp8LcI1tN/+7b1LL73h4gGyyqMUR1q/j2F F8CmBUY/tRregEgyuliKMxiBn/WdRGzjsdQKNXz193eTFfKMyY3O+kAiZ7ywjPiM Qlk7MfLmh4zpeDkfzrYl5B6LO8MLLw/njoNgl42+yClp7sqhthj1VKaZOx7Tkg+H n7SXxFz1Qti1vrd25BRy6kqCwAqGsk38rPlZPZnSxLJFVGtLRjWnrug9bex6tbIJ t6giIsaqjGZydEi8OQIhJ8BRXF+hLpmqjMICXUnRXMtV+QkrNq5WtJ3N7Q9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQLHNfpq4jt8ZsfwX6l5bmS2kVQwHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjkbB/bnh8YWN2fq19VSLpf0cZU4OOKDCOu 6JQfOayZbyoXtUAmVEdgBxZyDHWgpYSZ2epr9mokCKHH1dqJ34PHVYvfykxoHfny U4yBWbQJWu6CAhuFI2EOqNNCzJlO3lDzN0MHM0lRSvx/1R2x8lFrD9WNFSrc/1yp dSt7g5a/mxuMfkFHSBjTvxL4psAI4tGpG/lpDkLRhquNIuHTwvsl78iX+ViWqAxT 0BOTuLvUFTMzJflppadLu6d5pO/ksHRaonmAr/StMYVFl9G5UGj3S6OA9/LG9iA4 9fYPvliOx5SL9w17Ql4+BDYE5v9ixy6n0URSNU/gsAPuGr0kQxY= -----END CERTIFICATE-----Generated at Sun Jul 20 21:28:24 2025 by rpki-client