
$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
File: DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft (raw, json)
Hash identifier: WS9NdxEl2T04QbYnZwAjnqx48tZL+XMJwCU87dwI8VM=
Subject key identifier: 73:1C:E5:F9:A0:B3:B6:3B:B7:BA:AF:3F:9E:F1:6F:5E:47:74:CB:8B
Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B
Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
Certificate serial: 5EB3E2200C88769A6EE80F12B538D6A108CC80B3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
Manifest number: 0528
Signing time: Tue 04 Nov 2025 16:51:22 +0000
Manifest this update: Tue 04 Nov 2025 16:46:22 +0000
Manifest next update: Fri 07 Nov 2025 20:36:22 +0000
Files and hashes: 1: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: 9cT4iugSxv8GmMun4x7hly+W1FXP98Oz1aJbYUXbphk=)
2: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: 8V7ZayO1EWtoGgR7suJnzq42sHcJ3tI9V47XAXCkvzA=)
3: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: fyFpznbRMF6ODJByEnZRGU+1l5nWWTK42b2kDTub5ng=)
4: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: +RTivfqLEwyAM8Z9a8tLky4YZfcHjdt6gpcJXVO2krI=)
5: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: f2/bnQrR/MLXFGa/5XG9w5LNWrb6RKk/0zpBaeZlPjA=)
6: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: rYgMn0qf5Si8F9ykekewfrOOH5qLGsXSWGvHlZ0POHo=)
7: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6nG++9Zfsyp00x723uMAP6ndpbIZ+69e5sHDGWiKNkk=)
8: DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl (hash: oTDILK9qn3On3QDCX7Tw5mKWT0RzBBc2i37rCyPThHw=)
9: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: 4jp4D5hGaWte1m9qxFKzFTLNIkMefUQAPu+RDi1XoZE=)
10: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: 0qjl6ejKCXE+eF92NFpusciVm5OV6Kg83rjP6jAiQxg=)
11: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: uWwiOJltrZFVipiBhXuhkZCxDk18qXrBbeqh2tDeBHY=)
12: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: /x0d/B7SH930zGuc3qy32lnZBzw3Tko/OpPt1flx/d4=)
13: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: hmVwMqOMWMCg4u7PLlh1Exia8tg6dmrIe5GDT9aQuPk=)
14: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: etbWGeSjVYbqYZZMPVvxJ5PNehJHsptjSIChJ05okfk=)
15: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: wjmU/K5zRzNrMxAbA5/SGYFAg8fk9jDDkhO1NhPUnYI=)
16: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: UTSVYP8TuDxGN9w/aLP45n2ry9eglsw2DYtgDGOkId4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl
rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 13:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b3:e2:20:0c:88:76:9a:6e:e8:0f:12:b5:38:d6:a1:08:cc:80:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
Validity
Not Before: Nov 4 16:46:22 2025 GMT
Not After : Nov 7 20:36:22 2025 GMT
Subject: CN=731CE5F9A0B3B63BB7BAAF3F9EF16F5E4774CB8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:18:12:2d:e5:82:20:6b:1b:74:d8:62:fe:
29:b8:0a:54:9f:16:b3:8e:c4:a3:14:34:b4:45:63:
a9:73:f3:d1:2a:61:06:68:db:55:51:30:16:ef:6a:
2a:7c:ac:8a:c8:b8:a1:fe:d4:96:84:82:e6:8b:7d:
67:e6:8c:79:71:65:53:b5:15:13:76:42:00:d0:be:
5b:ed:8e:ec:44:27:a2:2e:b1:42:86:22:5a:67:00:
7e:23:05:77:4d:f6:dc:c7:25:6c:52:2f:b3:b5:35:
88:d0:fd:7a:da:f0:cb:cc:ff:d6:d6:60:95:29:f2:
60:d3:7a:b8:08:30:96:58:b8:2a:65:c7:5e:da:5f:
72:da:56:88:7e:ed:ea:54:f7:79:bb:85:d5:ce:9b:
5b:74:70:8f:dd:7e:1f:0e:b0:ec:2d:c6:a1:23:6e:
2e:33:cf:25:8e:8d:02:c0:61:de:53:3f:54:11:22:
71:da:d4:60:69:9f:28:ca:ae:ba:3b:8e:01:de:27:
32:7c:63:86:0f:fe:77:69:68:ca:d4:77:98:3a:fd:
32:36:28:c7:5a:a7:4f:48:80:07:db:a5:cf:ac:67:
22:00:2e:e1:d6:0f:c5:75:ab:37:dd:17:c1:71:48:
cc:ed:17:fb:b3:64:bf:14:62:66:b8:c6:df:92:cd:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1C:E5:F9:A0:B3:B6:3B:B7:BA:AF:3F:9E:F1:6F:5E:47:74:CB:8B
X509v3 Authority Key Identifier:
keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5f:13:b9:f8:b5:04:94:46:e7:33:91:12:4c:4a:4c:ad:14:
e4:2b:24:43:cf:68:8c:28:94:d8:35:3a:25:9a:e9:91:7c:7e:
82:d1:40:8a:7b:78:91:df:df:d4:2d:7f:0f:89:d0:d0:29:40:
08:eb:be:61:43:2e:43:a4:33:f1:80:98:9f:0f:f1:99:e8:2a:
10:e5:1a:16:8c:c2:1d:a3:41:2b:cb:04:50:63:5d:7e:df:16:
99:d3:b0:1b:e0:20:34:07:95:76:7d:47:79:0d:eb:20:87:26:
9c:15:9e:27:7a:e6:8b:0b:8b:2b:b9:f4:f5:d8:20:62:90:23:
a4:dd:c6:a5:0f:da:5c:7f:d3:76:94:2a:5e:88:4d:dd:32:8e:
ca:3e:34:a6:3b:26:ec:13:66:ec:bc:70:a0:d0:51:57:5a:d8:
19:b0:ca:c2:36:bb:9a:5e:ff:d6:9e:f6:2b:94:42:4d:bb:63:
29:ee:9d:2e:c4:fc:b0:c4:d7:33:7b:21:89:70:ec:88:1a:51:
76:ad:d6:5d:9a:8e:4b:03:e9:c6:73:89:c7:f5:34:7e:8b:ba:
0d:f5:b2:82:53:43:ef:fe:b6:e3:a2:04:83:1f:0d:b7:8a:5f:
de:63:2a:67:37:3e:fb:da:47:ee:1c:99:2d:7c:ff:29:e3:77:
4c:22:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:16:30 2025 by rpki-client