$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: gUS837vrdWOEuWOJ26xpOhkCVLcV7R+Xk2LT84zO8YY= Subject key identifier: A2:A8:91:05:09:39:49:20:47:D1:A5:56:10:F3:A7:6E:AE:9F:47:35 Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 2E947D224CA24C4D560A91CA2C452F6847168795 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 021E Signing time: Tue 04 Nov 2025 21:52:12 +0000 Manifest this update: Tue 04 Nov 2025 21:47:12 +0000 Manifest next update: Sat 08 Nov 2025 04:49:12 +0000 Files and hashes: 1: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=) 2: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=) 3: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: y+l+SNnBsiNIwn5bidOmhtG5G0lYYfKD7T21N5sGOHc=) 4: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:94:7d:22:4c:a2:4c:4d:56:0a:91:ca:2c:45:2f:68:47:16:87:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Nov 4 21:47:12 2025 GMT Not After : Nov 8 04:49:12 2025 GMT Subject: CN=A2A891050939492047D1A55610F3A76EAE9F4735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:70:65:bc:c9:49:68:50:af:fd:ad:15:5f: 9a:1f:a0:41:50:76:0b:2f:a0:c0:5e:31:f8:fb:f2: 65:44:82:01:e1:27:d7:26:b1:fb:db:84:e0:fb:f1: 75:5b:f4:c7:bb:9e:58:50:02:c4:b8:ea:2f:70:f0: ff:a9:39:60:3a:80:47:f9:ea:69:da:ea:fd:9a:1f: 2e:c6:d3:14:d5:14:b7:d7:c3:56:73:22:69:fe:31: 1e:f6:84:86:c9:51:0b:56:cd:cc:30:2c:ec:0d:63: 38:ce:4b:89:98:f9:b6:13:4a:6a:8e:87:59:1d:83: fc:b0:0a:33:8a:cc:a1:8d:78:65:b8:1a:85:c1:0c: 94:2f:74:4d:de:ba:a7:e2:c6:ef:44:9f:17:3b:39: 85:2b:61:09:f4:51:4e:43:ae:72:8b:69:96:a1:ea: b5:57:66:bb:ba:2d:b2:70:83:ae:4e:46:55:7a:5f: 98:18:bf:66:90:dc:bc:17:41:6d:ba:6d:c3:ee:b5: 32:8d:06:fe:bf:5c:bb:7a:6e:60:fd:bb:bb:13:1b: fb:38:10:7c:7c:ce:f4:e9:c2:45:01:b2:7d:96:8a: f2:1d:03:64:b7:68:2b:9f:9c:f8:80:9f:4d:11:dc: 75:3c:51:a9:7d:5a:87:14:c8:79:5b:a7:c8:43:98: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A8:91:05:09:39:49:20:47:D1:A5:56:10:F3:A7:6E:AE:9F:47:35 X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:eb:77:29:54:70:57:3f:38:76:78:b0:de:a0:db:a0:04:08: ab:7f:de:93:2c:1e:0d:63:60:fb:88:7d:7a:40:36:60:f4:e6: 46:7a:88:f8:15:6b:76:40:49:da:c2:82:66:46:09:cd:67:a8: aa:28:c5:5c:e6:5a:00:fb:95:e5:5d:f3:d1:a0:01:87:27:3e: fc:49:c1:d8:23:fe:7d:d6:ec:37:4a:d7:8a:03:77:85:25:57: 24:73:f5:3f:d5:fa:8b:bf:66:13:c0:47:37:f4:71:1f:f3:3b: 6d:71:59:72:5a:27:fa:9c:15:cc:57:cb:aa:8c:34:b2:6c:62: 5e:c2:47:7f:f0:a6:9c:a5:fd:c4:68:dc:ac:48:0a:16:75:fd: 35:4c:27:4c:b7:5a:1f:83:65:66:82:a8:79:fd:2b:57:be:ea: fb:b1:2b:c5:41:88:a1:af:95:fb:45:be:8f:bf:92:1f:85:16: 4e:98:a3:48:c2:cb:e6:34:38:c4:52:02:e2:7d:bc:07:28:c7: 42:0c:54:54:39:6f:36:c5:05:30:59:96:ea:64:7b:48:af:b4: 33:53:0a:5c:23:03:05:49:2d:8e:b9:61:ab:bd:fc:bf:25:eb: d4:c4:a0:21:8d:89:c0:79:11:40:9c:5a:d0:87:fe:7f:8b:9b: 97:ce:e4:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpR9IkyiTE1WCpHKLEUvaEcWh5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNTExMDQyMTQ3MTJaFw0yNTExMDgwNDQ5MTJaMDMxMTAvBgNV BAMTKEEyQTg5MTA1MDkzOTQ5MjA0N0QxQTU1NjEwRjNBNzZFQUU5RjQ3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WnBlvMlJaFCv/a0VX5ofoEFQ dgsvoMBeMfj78mVEggHhJ9cmsfvbhOD78XVb9Me7nlhQAsS46i9w8P+pOWA6gEf5 6mna6v2aHy7G0xTVFLfXw1ZzImn+MR72hIbJUQtWzcwwLOwNYzjOS4mY+bYTSmqO h1kdg/ywCjOKzKGNeGW4GoXBDJQvdE3euqfixu9Enxc7OYUrYQn0UU5DrnKLaZah 6rVXZru6LbJwg65ORlV6X5gYv2aQ3LwXQW26bcPutTKNBv6/XLt6bmD9u7sTG/s4 EHx8zvTpwkUBsn2WivIdA2S3aCufnPiAn00R3HU8Ual9WocUyHlbp8hDmERFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoqiRBQk5SSBH0aVWEPOnbq6fRzUwHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDrdylUcFc/OHZ4sN6g26AECKt/3pMsHg1j YPuIfXpANmD05kZ6iPgVa3ZASdrCgmZGCc1nqKooxVzmWgD7leVd89GgAYcnPvxJ wdgj/n3W7DdK14oDd4UlVyRz9T/V+ou/ZhPARzf0cR/zO21xWXJaJ/qcFcxXy6qM NLJsYl7CR3/wppyl/cRo3KxIChZ1/TVMJ0y3Wh+DZWaCqHn9K1e+6vuxK8VBiKGv lftFvo+/kh+FFk6Yo0jCy+Y0OMRSAuJ9vAcox0IMVFQ5bzbFBTBZlupke0ivtDNT ClwjAwVJLY65Yau9/L8l69TEoCGNicB5EUCcWtCH/n+Lm5fO5Ok= -----END CERTIFICATE-----Generated at Wed Nov 5 03:31:57 2025 by rpki-client