$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft File: DC0680824B7F80117B62C239676444B0691128B8.mft (raw, json) Hash identifier: N6kIxBqv/+6Jvc0pmNWacfyVmxNkarBsxn9Nj+UZ3P8= Subject key identifier: 90:55:FE:94:C3:04:4D:39:BF:0C:5D:DE:CE:DE:D3:58:26:60:4A:E6 Authority key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Certificate issuer: /CN=DC0680824B7F80117B62C239676444B0691128B8 Certificate serial: 1C68A47237806A1E3DA24170EA4AE41EF81BC95E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft Manifest number: 9E Signing time: Sun 02 Nov 2025 23:51:38 +0000 Manifest this update: Sun 02 Nov 2025 23:46:38 +0000 Manifest next update: Thu 06 Nov 2025 02:56:38 +0000 Files and hashes: 1: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: Qqyhh99wvN9qzOgai05gzAsYuhy6QSvltygf/7XId1w=) 2: DC0680824B7F80117B62C239676444B0691128B8.crl (hash: DEctBWBRB5yulqiaUa4cldoWm+UyWuPZ26HvCMf4hvw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:68:a4:72:37:80:6a:1e:3d:a2:41:70:ea:4a:e4:1e:f8:1b:c9:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC0680824B7F80117B62C239676444B0691128B8 Validity Not Before: Nov 2 23:46:38 2025 GMT Not After : Nov 6 02:56:38 2025 GMT Subject: CN=9055FE94C3044D39BF0C5DDECEDED35826604AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:eb:73:78:34:b3:6e:34:f8:de:8e:4d:9c: 69:30:8f:d9:d2:f3:e0:28:55:8d:7a:9b:90:9c:6f: cc:dc:30:6d:c6:fe:ad:ea:46:37:b8:cd:eb:68:54: aa:13:06:92:ac:7c:92:fb:68:f3:3b:e2:96:ed:06: e2:a7:d3:35:a3:83:d0:dc:2e:5c:0d:63:2f:15:12: 4c:bc:a7:7e:63:8d:91:68:a3:2e:59:81:6c:ed:2b: 01:7b:c2:9c:ee:e9:d3:8a:9d:bc:d5:a2:d6:45:62: 6d:11:04:c6:98:e5:72:9f:4a:4f:e4:8d:15:ed:31: 78:b0:af:b2:92:b1:1e:8c:52:d9:66:e0:60:da:46: 3e:05:e4:33:52:1e:6e:0e:94:e2:db:fd:02:f4:0c: 99:3e:ab:16:17:77:38:04:65:78:5d:17:b2:c8:1e: 1d:45:46:bb:b4:fc:95:7e:c4:6b:bf:5c:6e:b6:3c: b4:44:35:1c:48:ad:2e:ca:df:79:23:4c:ea:fa:4e: 2b:80:4a:6a:d9:45:d3:76:4c:71:b6:f3:d5:50:73: 5a:81:3b:6b:fd:c7:3d:8e:79:57:bb:3c:f1:8f:2b: cb:d5:d8:94:ed:9a:c4:65:08:c0:48:a9:67:84:54: 43:81:1e:78:e3:ad:3b:1b:02:2c:6d:5f:cc:3c:58: 2b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:55:FE:94:C3:04:4D:39:BF:0C:5D:DE:CE:DE:D3:58:26:60:4A:E6 X509v3 Authority Key Identifier: keyid:DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:63:95:4c:bb:ff:e0:ff:5f:3a:2d:1d:69:18:04:ac:36:ea: a7:0f:ab:f6:e7:e6:5b:36:25:31:a1:10:30:f3:29:53:b6:4c: f3:9a:a5:88:5a:55:18:00:a2:07:8b:68:ce:d4:73:4f:62:7c: 4c:85:1c:4a:92:2c:58:92:39:48:cf:ff:1f:43:ea:2d:67:cf: ce:28:d0:f2:f0:2d:bb:b3:df:db:97:9c:70:e0:b9:be:22:96: fe:34:02:8e:79:5a:f5:a7:ee:a1:b1:6d:b2:de:b9:9f:9d:cf: 39:a1:26:18:5a:e1:25:02:b9:f4:85:3e:dc:ae:0e:a9:57:73: e8:78:ed:23:ef:82:bc:a5:a9:ae:22:a1:30:f9:bb:49:f7:a9: 9e:d1:ea:c3:b0:92:0b:ba:60:0d:94:d8:29:77:bc:11:11:a0: c2:56:a0:38:cc:70:98:60:70:ac:3b:92:da:a2:2f:3c:49:2f: 28:3e:bc:d9:54:12:b1:c7:11:a1:1a:1b:9d:ee:81:79:08:d1: 01:ea:73:86:af:aa:53:e2:f5:60:fd:1a:78:23:74:86:78:35: a2:eb:93:0c:cb:f2:b1:a6:c3:25:3f:50:e2:22:40:64:5d:cb: 31:a6:13:94:74:a8:06:35:68:5c:f0:d5:48:c3:ce:e7:18:34: d7:e3:b7:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHGikcjeAah49okFw6krkHvgbyV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2 OTExMjhCODAeFw0yNTExMDIyMzQ2MzhaFw0yNTExMDYwMjU2MzhaMDMxMTAvBgNV BAMTKDkwNTVGRTk0QzMwNDREMzlCRjBDNURERUNFREVEMzU4MjY2MDRBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rutzeDSzbjT43o5NnGkwj9nS 8+AoVY16m5Ccb8zcMG3G/q3qRje4zetoVKoTBpKsfJL7aPM74pbtBuKn0zWjg9Dc LlwNYy8VEky8p35jjZFooy5ZgWztKwF7wpzu6dOKnbzVotZFYm0RBMaY5XKfSk/k jRXtMXiwr7KSsR6MUtlm4GDaRj4F5DNSHm4OlOLb/QL0DJk+qxYXdzgEZXhdF7LI Hh1FRru0/JV+xGu/XG62PLRENRxIrS7K33kjTOr6TiuASmrZRdN2THG289VQc1qB O2v9xz2OeVe7PPGPK8vV2JTtmsRlCMBIqWeEVEOBHnjjrTsbAixtX8w8WCuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkFX+lMMETTm/DF3ezt7TWCZgSuYwHwYDVR0j BBgwFoAU3AaAgkt/gBF7YsI5Z2REsGkRKLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMC9EQzA2ODA4MjRC N0Y4MDExN0I2MkMyMzk2NzY0NDRCMDY5MTEyOEI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2OTEx MjhCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0 QjA2OTExMjhCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFljlUy7/+D/XzotHWkYBKw26qcPq/bn5ls2 JTGhEDDzKVO2TPOapYhaVRgAogeLaM7Uc09ifEyFHEqSLFiSOUjP/x9D6i1nz84o 0PLwLbuz39uXnHDgub4ilv40Ao55WvWn7qGxbbLeuZ+dzzmhJhha4SUCufSFPtyu DqlXc+h47SPvgrylqa4ioTD5u0n3qZ7R6sOwkgu6YA2U2Cl3vBERoMJWoDjMcJhg cKw7ktqiLzxJLyg+vNlUErHHEaEaG53ugXkI0QHqc4avqlPi9WD9GngjdIZ4NaLr kwzL8rGmwyU/UOIiQGRdyzGmE5R0qAY1aFzw1UjDzucYNNfjt5Y= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:53 2025 by rpki-client