$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft File: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft (raw, json) Hash identifier: VmD250Imd/C/h/bPCK1We1wUtwVsbv04Kn0iswmUtvI= Subject key identifier: 17:A5:C5:14:12:8C:F7:D1:29:6C:ED:DF:44:D7:E3:EE:B2:8A:67:2C Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 75547F064BEBAC2EABBCBC5B9C5929193B92BD57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft Manifest number: 85 Signing time: Tue 04 Nov 2025 08:11:59 +0000 Manifest this update: Tue 04 Nov 2025 08:06:59 +0000 Manifest next update: Fri 07 Nov 2025 17:13:59 +0000 Files and hashes: 1: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: mizXQiZMhSS2dg4DmWjoCSbZiybtKsfGNPxNOZ0yF9I=) 2: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl (hash: ctFbNVMLCH9+wcvlZjzc36zvjJJKXPu883HnDB4I9SA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:54:7f:06:4b:eb:ac:2e:ab:bc:bc:5b:9c:59:29:19:3b:92:bd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: Nov 4 08:06:59 2025 GMT Not After : Nov 7 17:13:59 2025 GMT Subject: CN=17A5C514128CF7D1296CEDDF44D7E3EEB28A672C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:95:83:a5:57:39:c7:bd:e7:0b:13:d5:5c: da:fe:24:eb:7e:bc:62:5d:a2:b3:ed:75:c6:89:de: 36:d9:8b:99:43:fb:2d:42:d4:1d:0f:81:55:cf:f9: 31:67:d7:29:bb:6c:f8:f3:3f:eb:b8:8e:67:be:d8: eb:35:ff:92:3c:e9:e3:22:58:32:25:4c:94:89:6d: 94:83:e1:47:15:3c:df:ef:be:ac:99:76:4f:b2:d8: 6b:f7:8d:fd:14:ab:9f:68:09:21:26:b5:ab:47:eb: 8d:d7:88:1f:69:a5:1c:d0:7b:c4:76:b5:29:81:e9: 95:fc:f0:ed:3b:f5:ce:0c:96:e2:a6:29:a6:58:a5: 6a:b0:f1:2e:fd:90:d9:5a:7d:e0:af:4c:d8:99:7c: 49:77:8c:df:59:42:1d:85:da:1d:c9:a4:47:82:c1: 5f:09:4a:8a:f1:74:4e:5d:99:b3:00:5c:06:68:46: bd:9c:da:5b:21:fb:35:e3:c9:a4:6f:72:29:87:cd: ef:33:14:35:93:ab:19:f4:17:6f:2f:fb:29:1f:6a: 46:b4:32:39:9c:2a:7e:83:75:f6:d4:44:e3:9a:26: 18:4a:69:ea:31:3d:4b:01:a2:b0:49:4c:00:77:38: d4:f8:6e:79:88:f9:d5:23:f2:2b:1d:e6:a8:2c:97: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A5:C5:14:12:8C:F7:D1:29:6C:ED:DF:44:D7:E3:EE:B2:8A:67:2C X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a3:9e:30:9d:15:a4:ac:ef:f0:51:8d:f3:74:9e:ea:64:93: b5:11:59:d9:4d:bf:ff:18:90:38:63:84:9b:9b:bf:b7:cb:49: e6:a9:d6:a7:28:e0:96:96:d1:0e:e1:3f:46:f6:e7:bd:b5:41: a7:f3:2a:57:6c:af:4f:8a:0a:e1:fe:ca:64:2a:33:88:de:61: 16:3f:98:c6:4b:f7:34:21:3e:34:1d:b1:68:81:e2:48:23:40: 02:5e:72:4b:5f:f7:dc:54:4c:f9:7d:22:69:23:64:09:ae:26: ad:85:de:36:0c:d2:5a:b4:db:1f:1e:1b:bc:f3:f5:82:bf:69: 2f:a8:c1:b9:cc:27:ce:b0:5c:fb:8b:2b:29:7f:ef:1a:79:ae: 74:53:6e:b7:00:84:e2:8e:32:c6:79:aa:21:d7:90:f2:56:ff: 0e:d8:4c:a2:30:ec:18:5b:cd:c5:10:86:c2:10:e2:cb:33:6c: 76:9b:8e:af:be:53:22:59:48:50:7e:b3:59:01:cd:77:fb:26: d0:a6:bf:bd:95:29:d7:de:b2:4a:25:4d:31:e2:6d:5a:df:9a: ae:de:a0:95:1c:fb:89:ab:a3:55:89:cb:b6:fb:5b:30:29:e6: 6d:84:20:d8:3b:fd:ce:ec:27:51:ec:87:63:9a:87:c5:ad:b9: 84:36:de:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVR/BkvrrC6rvLxbnFkpGTuSvVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNTExMDQwODA2NTlaFw0yNTExMDcxNzEzNTlaMDMxMTAvBgNV BAMTKDE3QTVDNTE0MTI4Q0Y3RDEyOTZDRURERjQ0RDdFM0VFQjI4QTY3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzdJWDpVc5x73nCxPVXNr+JOt+ vGJdorPtdcaJ3jbZi5lD+y1C1B0PgVXP+TFn1ym7bPjzP+u4jme+2Os1/5I86eMi WDIlTJSJbZSD4UcVPN/vvqyZdk+y2Gv3jf0Uq59oCSEmtatH643XiB9ppRzQe8R2 tSmB6ZX88O079c4MluKmKaZYpWqw8S79kNlafeCvTNiZfEl3jN9ZQh2F2h3JpEeC wV8JSorxdE5dmbMAXAZoRr2c2lsh+zXjyaRvcimHze8zFDWTqxn0F28v+ykfaka0 MjmcKn6DdfbUROOaJhhKaeoxPUsBorBJTAB3ONT4bnmI+dUj8isd5qgslwQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6XFFBKM99EpbO3fRNfj7rKKZywwHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFE QkY2REExODBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmjnjCdFaSs7/BRjfN0nupkk7URWdlNv/8Y kDhjhJubv7fLSeap1qco4JaW0Q7hP0b25721QafzKldsr0+KCuH+ymQqM4jeYRY/ mMZL9zQhPjQdsWiB4kgjQAJecktf99xUTPl9ImkjZAmuJq2F3jYM0lq02x8eG7zz 9YK/aS+owbnMJ86wXPuLKyl/7xp5rnRTbrcAhOKOMsZ5qiHXkPJW/w7YTKIw7Bhb zcUQhsIQ4sszbHabjq++UyJZSFB+s1kBzXf7JtCmv72VKdfeskolTTHibVrfmq7e oJUc+4mro1WJy7b7WzAp5m2EINg7/c7sJ1Hsh2Oah8WtuYQ23oM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:22 2025 by rpki-client