$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: 64Uh8ecZL7J5iObZ4X1Z6QNOIBml4HEO4JV9wRfoSqY= Subject key identifier: C2:68:00:E0:79:CC:5E:11:F7:92:9C:28:D1:41:17:E5:AA:17:D0:65 Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 75A06B29BA196466277EF2BC52312B24B5C07F3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 0221 Signing time: Tue 11 Nov 2025 10:12:19 +0000 Manifest this update: Tue 11 Nov 2025 10:07:19 +0000 Manifest next update: Fri 14 Nov 2025 15:02:19 +0000 Files and hashes: 1: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: 966KIgTfxB0t5PPq04DNLyeONYMiE2PF18/0MTom/sg=) 2: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=) 3: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=) 4: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 15:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a0:6b:29:ba:19:64:66:27:7e:f2:bc:52:31:2b:24:b5:c0:7f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Nov 11 10:07:19 2025 GMT Not After : Nov 14 15:02:19 2025 GMT Subject: CN=C26800E079CC5E11F7929C28D14117E5AA17D065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:36:82:84:bc:73:27:34:be:df:46:a4:51: fb:83:f9:6a:1e:ce:31:d8:80:47:21:3e:9b:a9:81: 9b:ca:84:7b:c0:49:a9:c0:e2:67:b9:fa:a2:2f:61: f0:2c:48:7a:4e:14:71:c0:e6:9f:12:fb:82:2f:90: 08:64:0a:a1:08:c7:4c:3a:4f:f5:75:a9:12:bd:dc: 12:29:77:45:a5:82:93:73:4b:54:9c:20:05:5d:29: d1:14:92:12:fe:c8:f8:18:37:81:8f:18:70:dd:af: a6:67:bb:c6:0e:71:4a:8e:d9:79:a0:53:a7:5f:ae: d6:e3:a9:5a:c5:51:74:c5:e6:16:c4:4b:2b:b3:e0: 7c:9c:38:56:58:09:54:c8:96:94:6b:a3:4d:27:8b: 8b:4f:29:75:3b:64:81:00:39:dd:11:a7:0f:2e:ef: 73:85:eb:68:ef:a5:3d:14:fb:57:97:42:19:17:e1: 39:9c:2f:d1:65:b8:aa:4d:f2:a7:d5:7e:10:92:6e: ee:d0:63:71:cb:a4:b4:f4:f6:1e:1e:b4:73:af:04: e1:2d:5c:f0:8f:4f:73:4f:e6:15:36:10:a2:dc:ee: 5b:55:0b:fd:24:60:aa:74:e7:b9:7c:3e:c2:a8:bc: 80:02:22:73:63:d1:a4:fe:14:5c:e2:81:2c:3a:f8: ca:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:68:00:E0:79:CC:5E:11:F7:92:9C:28:D1:41:17:E5:AA:17:D0:65 X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f7:df:26:29:30:fe:fb:80:95:4a:01:8d:99:1b:f7:6f:83: dd:d0:27:9d:41:01:1b:18:91:bc:48:00:f3:cc:a0:e6:16:7c: e0:11:3c:c9:5f:38:33:31:05:8b:e4:79:53:58:c4:24:5b:d1: c0:04:7f:12:59:04:94:60:4e:66:d9:a3:97:7f:30:00:b1:67: 0c:1c:98:c5:05:7b:52:dd:4d:b0:b7:25:1c:04:07:b2:39:c7: 49:6c:94:32:a8:c4:c0:17:d3:dd:55:d3:47:c9:63:d0:dc:ba: 8f:0c:bd:72:50:7f:07:67:5f:c4:58:43:c3:76:b2:0e:42:10: 7e:2d:f9:ae:70:19:42:42:84:36:7c:bb:d2:2b:70:c9:91:11: 24:20:68:24:bb:49:12:cc:0b:c3:16:c4:47:5d:f2:1d:61:f9: d2:a8:01:f7:66:ab:9d:a5:4a:38:7f:77:4c:b8:5c:97:76:7a: f1:f4:a7:57:61:10:5e:a6:64:37:69:1f:b3:32:24:cc:7f:82: 28:2d:f5:79:5c:73:41:71:fe:2b:0f:f0:b6:f1:6e:8e:61:5e: 05:75:0b:7f:61:76:96:22:89:7d:6b:3b:89:2f:d5:ec:94:e5: 9d:b8:fb:8f:68:86:65:97:54:18:fe:01:02:f5:5c:28:70:5d: be:44:52:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdaBrKboZZGYnfvK8UjErJLXAfz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNTExMTExMDA3MTlaFw0yNTExMTQxNTAyMTlaMDMxMTAvBgNV BAMTKEMyNjgwMEUwNzlDQzVFMTFGNzkyOUMyOEQxNDExN0U1QUExN0QwNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrjaChLxzJzS+30akUfuD+Woe zjHYgEchPpupgZvKhHvASanA4me5+qIvYfAsSHpOFHHA5p8S+4IvkAhkCqEIx0w6 T/V1qRK93BIpd0WlgpNzS1ScIAVdKdEUkhL+yPgYN4GPGHDdr6Znu8YOcUqO2Xmg U6dfrtbjqVrFUXTF5hbESyuz4HycOFZYCVTIlpRro00ni4tPKXU7ZIEAOd0Rpw8u 73OF62jvpT0U+1eXQhkX4TmcL9FluKpN8qfVfhCSbu7QY3HLpLT09h4etHOvBOEt XPCPT3NP5hU2EKLc7ltVC/0kYKp057l8PsKovIACInNj0aT+FFzigSw6+MojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwmgA4HnMXhH3kpwo0UEX5aoX0GUwHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFb33yYpMP77gJVKAY2ZG/dvg93QJ51BARsY kbxIAPPMoOYWfOARPMlfODMxBYvkeVNYxCRb0cAEfxJZBJRgTmbZo5d/MACxZwwc mMUFe1LdTbC3JRwEB7I5x0lslDKoxMAX091V00fJY9Dcuo8MvXJQfwdnX8RYQ8N2 sg5CEH4t+a5wGUJChDZ8u9IrcMmRESQgaCS7SRLMC8MWxEdd8h1h+dKoAfdmq52l Sjh/d0y4XJd2evH0p1dhEF6mZDdpH7MyJMx/gigt9Xlcc0Fx/isP8Lbxbo5hXgV1 C39hdpYiiX1rO4kv1eyU5Z24+49ohmWXVBj+AQL1XChwXb5EUho= -----END CERTIFICATE-----Generated at Thu Nov 13 09:26:38 2025 by rpki-client