$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: i3jZ7GNYqK9+J1byWONeU19Fxu03WSI0mR/ojRSjgXw= Subject key identifier: 05:FF:70:E6:10:0A:70:65:12:5C:9B:78:21:82:10:F4:96:29:2C:83 Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 39B0CBEA9BFDB29418DFE83A8718131C18EEFD97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 0519 Signing time: Fri 17 Oct 2025 19:00:40 +0000 Manifest this update: Fri 17 Oct 2025 18:55:40 +0000 Manifest next update: Tue 21 Oct 2025 02:13:40 +0000 Files and hashes: 1: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: k7ibyopUV9/XrMW2a9JFbhidu+OXQwQx2OObsR3bxGk=) 2: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 4PaQM0H/onjaHT/Kh1zZPEAnjrQ5QUcaM+Ku8Nb2uPM=) 3: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: VW/9nDJQjFvUWNt8EqbaeORZUsYDdJ6mH99j9xi/Rqk=) 4: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=) 5: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: IRZUoX6giIzocnieegh+jhCGcm3NJfUDoJas/fn7lAQ=) 6: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: LF6fkR6wHHLHaK6n5THO1FAaW1/pu2et9XJ8qxbKTqY=) 7: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 1Oab07RIZCU6Wr6N0vZAT3UZeBpPId8GfzsxV9iRdK8=) 8: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: rZ6xFcdvrZepULyMbdGd+kxrh/vJFiCfrx4GSYa9yts=) 9: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: vRBZ+QyEZIlxabE/SD4TBF/wa8NMf1nrCIq3P7z7eog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 02:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b0:cb:ea:9b:fd:b2:94:18:df:e8:3a:87:18:13:1c:18:ee:fd:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Oct 17 18:55:40 2025 GMT Not After : Oct 21 02:13:40 2025 GMT Subject: CN=05FF70E6100A7065125C9B78218210F496292C83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:77:6f:1b:20:56:15:17:a2:55:96:f4:b9: 9e:a0:83:d5:b5:93:03:f1:6e:a4:f6:1a:19:5a:11: df:0c:30:d3:30:79:d0:5d:cb:06:5b:2e:6e:15:13: a7:c8:d5:fe:1d:a0:c2:f8:d2:57:7f:e4:5b:27:9f: 68:41:ed:f1:c7:3e:08:11:21:2c:8e:12:06:20:cb: 5b:d8:b6:c7:33:ee:08:c5:3c:0f:23:57:2e:4d:73: ba:7c:a3:6f:d8:df:7a:c8:02:6a:97:02:88:60:0c: fd:ea:5f:67:c9:d4:ce:e4:92:90:a2:d2:e7:53:9c: 37:42:82:94:96:a6:7b:08:51:e9:ae:3e:5b:f0:91: 5e:1a:72:6e:2d:22:45:5f:26:1d:f7:bb:44:bc:eb: c5:c9:2b:61:1f:fb:f7:e2:64:14:13:19:da:a5:a5: 1c:1c:f9:7e:83:b0:5a:10:ec:aa:2b:15:60:ee:5e: 92:0d:f1:ed:9f:af:eb:06:fa:02:77:b1:93:a2:bc: d2:44:db:a1:c2:4f:e4:64:88:e8:fb:ab:9e:b9:59: 20:26:3a:45:b3:5f:dd:04:33:bc:29:b0:04:22:cc: a5:7d:6d:10:42:45:95:d2:9c:7c:c3:c7:ae:4a:c0: 04:37:21:95:95:c7:c8:27:6b:bb:63:5d:b6:48:95: 78:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FF:70:E6:10:0A:70:65:12:5C:9B:78:21:82:10:F4:96:29:2C:83 X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:40:af:61:31:2e:b7:5a:ad:c5:b7:f5:68:98:6a:79:4f:87: 19:ba:c0:55:95:57:05:5c:aa:dc:30:34:d2:80:9f:93:17:06: 91:0c:2b:5d:1a:31:94:9f:cd:09:90:41:3a:c1:a1:4e:87:d7: 88:9a:0f:72:12:84:0b:7b:25:12:14:c6:e1:4b:66:60:32:7c: 7d:f0:4a:d9:aa:2a:50:92:56:7f:2a:2b:88:c6:84:d6:14:68: 8f:98:38:a8:2d:df:6e:f5:95:0e:82:0d:a1:16:ea:33:37:51: ff:b0:b5:78:02:b6:8d:11:c3:6d:65:ca:90:fd:ce:ca:50:6f: 20:a1:b1:ba:16:a5:7a:47:71:da:17:72:11:cc:9b:51:1c:8e: 91:a1:ea:b8:b3:05:8f:c2:74:89:f1:ea:57:11:c3:9c:23:05: 5f:a7:1e:91:16:79:63:6c:12:45:a2:ac:7c:63:33:1d:c4:e0: e2:4f:b4:f1:8a:0b:c1:67:14:f4:4e:3d:84:42:74:90:c6:9e: bd:57:8e:c9:41:93:ef:99:30:1b:5a:cf:8a:f8:d9:37:68:b2: 99:0e:97:57:cd:e3:33:ac:08:1b:ac:fe:0b:3c:d2:9d:c2:f9: 42:e6:53:4b:46:f8:99:d8:e5:68:51:5d:be:e1:2f:c4:52:20: b4:27:64:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUObDL6pv9spQY3+g6hxgTHBju/ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNTEwMTcxODU1NDBaFw0yNTEwMjEwMjEzNDBaMDMxMTAvBgNV BAMTKDA1RkY3MEU2MTAwQTcwNjUxMjVDOUI3ODIxODIxMEY0OTYyOTJDODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFPndvGyBWFReiVZb0uZ6gg9W1 kwPxbqT2GhlaEd8MMNMwedBdywZbLm4VE6fI1f4doML40ld/5Fsnn2hB7fHHPggR ISyOEgYgy1vYtscz7gjFPA8jVy5Nc7p8o2/Y33rIAmqXAohgDP3qX2fJ1M7kkpCi 0udTnDdCgpSWpnsIUemuPlvwkV4acm4tIkVfJh33u0S868XJK2Ef+/fiZBQTGdql pRwc+X6DsFoQ7KorFWDuXpIN8e2fr+sG+gJ3sZOivNJE26HCT+RkiOj7q565WSAm OkWzX90EM7wpsAQizKV9bRBCRZXSnHzDx65KwAQ3IZWVx8gna7tjXbZIlXgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBf9w5hAKcGUSXJt4IYIQ9JYpLIMwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBAr2ExLrdarcW39WiYanlPhxm6wFWVVwVc qtwwNNKAn5MXBpEMK10aMZSfzQmQQTrBoU6H14iaD3IShAt7JRIUxuFLZmAyfH3w StmqKlCSVn8qK4jGhNYUaI+YOKgt3271lQ6CDaEW6jM3Uf+wtXgCto0Rw21lypD9 zspQbyChsboWpXpHcdoXchHMm1EcjpGh6rizBY/CdInx6lcRw5wjBV+nHpEWeWNs EkWirHxjMx3E4OJPtPGKC8FnFPROPYRCdJDGnr1XjslBk++ZMBtaz4r42TdospkO l1fN4zOsCBus/gs80p3C+ULmU0tG+JnY5WhRXb7hL8RSILQnZGY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:27:18 2025 by rpki-client