$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: AVx7RrVZFifUNo2tidyGoou7AuEOwmx1pwL0P/jATnE= Subject key identifier: 0D:CC:57:99:BC:01:9D:C8:B8:CD:A8:0C:64:44:3D:C0:C6:D9:25:AB Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 501656EFBFAB3D2EFE4F7156DFAFE11DE4E3E170 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 0520 Signing time: Mon 03 Nov 2025 14:30:40 +0000 Manifest this update: Mon 03 Nov 2025 14:25:40 +0000 Manifest next update: Thu 06 Nov 2025 22:49:40 +0000 Files and hashes: 1: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: IRZUoX6giIzocnieegh+jhCGcm3NJfUDoJas/fn7lAQ=) 2: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 1Oab07RIZCU6Wr6N0vZAT3UZeBpPId8GfzsxV9iRdK8=) 3: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: VW/9nDJQjFvUWNt8EqbaeORZUsYDdJ6mH99j9xi/Rqk=) 4: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: k7ibyopUV9/XrMW2a9JFbhidu+OXQwQx2OObsR3bxGk=) 5: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 4PaQM0H/onjaHT/Kh1zZPEAnjrQ5QUcaM+Ku8Nb2uPM=) 6: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: LF6fkR6wHHLHaK6n5THO1FAaW1/pu2et9XJ8qxbKTqY=) 7: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: rZ6xFcdvrZepULyMbdGd+kxrh/vJFiCfrx4GSYa9yts=) 8: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=) 9: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: U3YAzhxWZTCt/oxBbAHRCIQ8qo+3qQIQoKDzJoR7MV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:16:56:ef:bf:ab:3d:2e:fe:4f:71:56:df:af:e1:1d:e4:e3:e1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Nov 3 14:25:40 2025 GMT Not After : Nov 6 22:49:40 2025 GMT Subject: CN=0DCC5799BC019DC8B8CDA80C64443DC0C6D925AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:5f:4a:0e:d2:6f:61:09:ca:a9:cf:4d:50: 83:51:e8:a4:15:60:7a:71:94:d9:5d:c0:04:2d:92: 30:05:84:70:e7:c5:23:dd:41:a8:b9:02:55:a5:92: 92:a9:c8:f7:4f:6f:17:7f:2d:9d:80:f2:08:26:e2: 03:10:1d:d5:d7:ea:f1:93:26:26:fb:36:96:88:e4: bd:b4:18:2c:95:22:85:2e:14:98:74:19:c5:7e:d1: 96:77:b1:5d:a7:d2:7c:5f:3d:d2:2e:fc:f1:0f:d1: 6b:c6:6f:6f:6b:bc:11:a1:5f:59:e6:75:d2:51:7d: 01:8c:91:94:0b:f6:c0:5d:8c:8a:33:eb:08:6b:fd: c6:4f:f2:e1:7c:81:c2:87:3b:1d:5c:c4:ac:76:c2: 96:65:3f:77:4e:4a:76:05:7f:d7:4e:63:0a:b0:2e: 39:77:a1:c1:f7:a3:7b:5d:ee:ad:b9:8b:b1:bf:51: a6:af:57:ef:b8:1f:38:a2:85:c2:e7:7c:cc:46:ae: 95:9c:d6:b1:bd:71:94:af:50:02:b2:f3:20:46:a8: f8:7b:a4:70:c2:8f:ad:c1:3e:d9:89:03:03:88:d1: 2c:ea:10:bd:92:9e:95:35:64:4c:84:d1:19:94:07: b1:a5:73:3e:0f:a7:f3:7a:2b:16:ab:55:8e:2a:2c: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CC:57:99:BC:01:9D:C8:B8:CD:A8:0C:64:44:3D:C0:C6:D9:25:AB X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:87:7b:ea:ec:56:15:59:b8:e8:ca:81:de:b2:71:0b:b3:a5: 34:cb:b8:bf:69:55:3e:62:9b:ab:92:8b:6c:78:05:64:1e:fc: 6d:fa:74:51:5f:57:a9:d8:fc:26:76:c4:a9:5f:a9:9e:64:f9: cd:50:d5:d5:d7:d9:7b:dd:1f:65:57:dc:33:de:5d:7f:5c:c4: fc:1c:25:5c:0c:e0:f8:7c:29:b3:45:65:1b:5c:67:a8:c0:45: 1a:19:fd:d2:c8:25:df:b8:51:46:d9:14:bb:e5:e5:77:b9:35: 87:d6:69:d2:0c:b9:b0:a2:94:90:1c:34:84:5e:59:e4:83:f1: 5d:2c:ea:79:90:3a:26:77:c6:de:08:dd:ce:cd:25:17:a6:28: 00:02:d0:75:1f:25:d9:f7:b2:3b:d5:07:90:28:c6:03:4a:30: 9d:c2:8f:d3:d2:08:6e:9b:89:9d:cc:6a:53:97:e2:bd:d5:4e: 42:5a:6e:bb:4b:8d:c4:53:55:b4:1f:88:e6:5d:d9:72:c8:9e: 64:c1:8e:cf:5a:47:0c:04:23:bd:87:1e:a2:40:b0:40:01:0f: 7a:bf:a6:5d:9b:2e:9a:51:b3:a8:fa:e9:85:f8:b4:bd:1c:fc: 8e:ef:8d:7a:2c:b0:f0:eb:9f:cb:b3:a2:97:a6:16:e9:25:51: f9:3e:ad:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUBZW77+rPS7+T3FW36/hHeTj4XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNTExMDMxNDI1NDBaFw0yNTExMDYyMjQ5NDBaMDMxMTAvBgNV BAMTKDBEQ0M1Nzk5QkMwMTlEQzhCOENEQTgwQzY0NDQzREMwQzZEOTI1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3l9KDtJvYQnKqc9NUINR6KQV YHpxlNldwAQtkjAFhHDnxSPdQai5AlWlkpKpyPdPbxd/LZ2A8ggm4gMQHdXX6vGT Jib7NpaI5L20GCyVIoUuFJh0GcV+0ZZ3sV2n0nxfPdIu/PEP0WvGb29rvBGhX1nm ddJRfQGMkZQL9sBdjIoz6whr/cZP8uF8gcKHOx1cxKx2wpZlP3dOSnYFf9dOYwqw Ljl3ocH3o3td7q25i7G/UaavV++4HziihcLnfMxGrpWc1rG9cZSvUAKy8yBGqPh7 pHDCj63BPtmJAwOI0SzqEL2SnpU1ZEyE0RmUB7Glcz4Pp/N6KxarVY4qLOdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDcxXmbwBnci4zagMZEQ9wMbZJaswHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOHe+rsVhVZuOjKgd6ycQuzpTTLuL9pVT5i m6uSi2x4BWQe/G36dFFfV6nY/CZ2xKlfqZ5k+c1Q1dXX2XvdH2VX3DPeXX9cxPwc JVwM4Ph8KbNFZRtcZ6jARRoZ/dLIJd+4UUbZFLvl5Xe5NYfWadIMubCilJAcNIRe WeSD8V0s6nmQOiZ3xt4I3c7NJRemKAAC0HUfJdn3sjvVB5AoxgNKMJ3Cj9PSCG6b iZ3MalOX4r3VTkJabrtLjcRTVbQfiOZd2XLInmTBjs9aRwwEI72HHqJAsEABD3q/ pl2bLppRs6j66YX4tL0c/I7vjXossPDrn8uzopemFuklUfk+rf8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:56:03 2025 by rpki-client