$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: pw9ZGfG5ESrCpjYX6Aw7/27VA0BbV+hHS2U4smyT9iM= Subject key identifier: 1A:37:12:2B:C3:6D:0C:D2:9F:16:0F:20:2C:00:0C:F4:E9:3F:1B:06 Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 6D92CA04F3231A7C92050AAD24F032DA7C9EB1CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 01F5 Signing time: Tue 05 Aug 2025 15:22:13 +0000 Manifest this update: Tue 05 Aug 2025 15:17:13 +0000 Manifest next update: Fri 08 Aug 2025 16:58:13 +0000 Files and hashes: 1: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: jqR9KDElnfn7ux1bUREGY9kLqVW2r1BDyhjKjuN6AKI=) 2: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=) 3: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=) 4: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 16:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:92:ca:04:f3:23:1a:7c:92:05:0a:ad:24:f0:32:da:7c:9e:b1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Aug 5 15:17:13 2025 GMT Not After : Aug 8 16:58:13 2025 GMT Subject: CN=1A37122BC36D0CD29F160F202C000CF4E93F1B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:54:09:bd:4a:30:a1:2b:76:27:11:ac:23:34: d3:ed:a7:36:45:e3:41:a2:d5:b4:07:33:1b:38:51: 51:ea:60:e0:39:a9:fc:48:6e:71:be:b6:85:4a:16: 51:58:38:9e:f5:0a:dc:70:de:43:b7:42:6b:0e:c2: 67:ea:6c:4b:08:ac:72:ff:7e:26:b3:b8:97:c3:02: 0a:8c:54:32:f0:c5:47:77:09:70:a2:c6:03:f4:3b: 0c:36:90:07:65:d2:42:da:a2:7b:4e:ad:b6:cb:c4: 5c:47:e9:59:51:3d:62:3a:46:ea:bf:1d:29:1e:9b: 65:23:60:2b:76:36:fb:a6:0f:51:92:e8:a6:d1:6a: 28:12:f3:eb:aa:8d:57:63:5e:fe:28:1c:12:ee:4c: 4a:df:65:3c:64:ae:c3:62:ac:39:9c:27:e3:b9:0d: d9:58:1c:b1:ec:3c:05:a9:ed:15:09:01:2c:da:b5: bc:ad:e6:32:88:e7:6e:e9:01:33:e5:c7:ab:fb:b0: af:92:df:27:70:1c:b9:98:12:11:c9:c7:c5:98:d1: 11:b6:39:c8:5e:5b:8f:13:cf:30:2e:e3:69:1c:19: 63:79:a8:a7:cb:a2:9a:6a:ce:1f:2a:ab:99:d5:8e: af:8b:1f:ac:3e:ba:46:44:76:1a:bb:f6:eb:b9:75: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:37:12:2B:C3:6D:0C:D2:9F:16:0F:20:2C:00:0C:F4:E9:3F:1B:06 X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:87:53:a7:fa:7a:aa:3a:d8:61:b4:b7:3f:94:35:5d:67:e0: 38:04:47:ae:8c:03:0d:5c:20:73:21:34:5a:60:76:97:dc:35: 0c:34:49:7d:27:c0:fb:47:14:7b:6b:98:e3:e3:f1:ec:95:aa: fc:8e:f0:01:be:a2:10:ad:29:02:52:6c:0f:2e:47:8c:ed:01: d3:05:2a:d3:6c:2a:66:c3:a2:a5:fa:61:29:1d:8c:6d:3e:f3: d7:9c:15:0a:dc:29:c9:9e:25:6e:e4:af:f3:03:aa:7b:1a:d2: 14:68:28:db:83:65:66:77:7d:45:2e:f5:bd:a9:5c:5e:11:f3: 07:c6:2b:02:71:b2:b5:d7:bc:ac:3e:0c:a7:9e:eb:06:90:ec: 18:1f:6f:72:dd:fa:ca:bc:46:67:10:31:d9:60:62:6d:8a:a4: 6a:65:de:e2:83:7f:c8:da:db:26:eb:06:67:76:7a:bf:2a:e0: d8:82:c6:7b:c3:c2:84:a4:f6:4c:e6:1b:00:92:d9:de:d1:9a: 5f:f3:fe:c8:49:85:ca:05:16:67:0e:06:8a:2a:cb:fd:4c:a8: b0:9e:1d:52:24:74:14:5f:fe:08:55:17:5b:cc:60:66:77:ce: fa:9c:20:55:bb:90:b9:ae:29:6a:df:30:20:a8:14:67:a4:77: d9:76:69:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbZLKBPMjGnySBQqtJPAy2nyescowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNTA4MDUxNTE3MTNaFw0yNTA4MDgxNjU4MTNaMDMxMTAvBgNV BAMTKDFBMzcxMjJCQzM2RDBDRDI5RjE2MEYyMDJDMDAwQ0Y0RTkzRjFCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVAm9SjChK3YnEawjNNPtpzZF 40Gi1bQHMxs4UVHqYOA5qfxIbnG+toVKFlFYOJ71Ctxw3kO3QmsOwmfqbEsIrHL/ fiazuJfDAgqMVDLwxUd3CXCixgP0Oww2kAdl0kLaontOrbbLxFxH6VlRPWI6Ruq/ HSkem2UjYCt2NvumD1GS6KbRaigS8+uqjVdjXv4oHBLuTErfZTxkrsNirDmcJ+O5 DdlYHLHsPAWp7RUJASzatbyt5jKI527pATPlx6v7sK+S3ydwHLmYEhHJx8WY0RG2 OcheW48TzzAu42kcGWN5qKfLoppqzh8qq5nVjq+LH6w+ukZEdhq79uu5dfrbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGjcSK8NtDNKfFg8gLAAM9Ok/GwYwHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqHU6f6eqo62GG0tz+UNV1n4DgER66MAw1c IHMhNFpgdpfcNQw0SX0nwPtHFHtrmOPj8eyVqvyO8AG+ohCtKQJSbA8uR4ztAdMF KtNsKmbDoqX6YSkdjG0+89ecFQrcKcmeJW7kr/MDqnsa0hRoKNuDZWZ3fUUu9b2p XF4R8wfGKwJxsrXXvKw+DKee6waQ7Bgfb3Ld+sq8RmcQMdlgYm2KpGpl3uKDf8ja 2ybrBmd2er8q4NiCxnvDwoSk9kzmGwCS2d7Rml/z/shJhcoFFmcOBooqy/1MqLCe HVIkdBRf/ghVF1vMYGZ3zvqcIFW7kLmuKWrfMCCoFGekd9l2aSU= -----END CERTIFICATE-----Generated at Thu Aug 7 05:03:12 2025 by rpki-client