$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: TMpbNUkNDxA0OYQ6OxAYnHdui0sQWXMQ7F2gqcYyx6k= Subject key identifier: D9:05:82:E5:CF:C2:82:0F:76:C9:3B:ED:D7:73:2E:D0:F3:0D:21:FE Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 03C1933D93963E5D3069A73447C2BB415145BA77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 0182 Signing time: Wed 07 May 2025 18:31:08 +0000 Manifest this update: Wed 07 May 2025 18:26:08 +0000 Manifest next update: Sat 10 May 2025 23:08:08 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: OSyNKxfaMtjG37EZxMjyjvpwfK+nQCg8gLhP+/caeGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 23:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c1:93:3d:93:96:3e:5d:30:69:a7:34:47:c2:bb:41:51:45:ba:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: May 7 18:26:08 2025 GMT Not After : May 10 23:08:08 2025 GMT Subject: CN=D90582E5CFC2820F76C93BEDD7732ED0F30D21FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:c6:2c:75:35:f5:bc:fb:11:42:75:45:f8: 67:86:ec:ea:70:70:2b:45:17:7c:f6:33:9d:1a:f7: c6:72:5a:1a:e0:85:b8:b4:b0:76:89:b6:af:87:da: 6e:00:7e:84:8b:dd:cd:2e:0b:5e:1e:bc:d9:a1:fe: 9b:9f:37:07:90:ff:5f:01:60:e8:b6:32:7e:ee:fb: 93:29:04:9e:0c:65:8c:dc:b4:73:2b:ff:b6:3e:5b: 66:9c:c8:e7:27:fc:9a:da:ac:27:59:d0:95:df:62: 84:2e:74:17:e6:d1:77:75:2e:55:29:e8:f2:ac:5a: 21:83:20:04:52:8d:4c:d8:da:28:43:a8:2d:97:df: 3e:3e:e8:bd:10:de:3a:29:23:00:76:e2:d9:52:85: 14:d3:09:23:e8:4f:84:85:7f:05:5a:6d:b8:d1:7d: 4d:e9:07:21:50:19:5e:02:1c:c7:c4:89:82:e3:00: 32:50:6a:61:0d:6d:50:e3:d8:20:5f:e9:04:ed:29: 56:0a:5a:3f:1c:f3:f2:65:6e:17:4f:d2:35:50:9c: 14:99:f1:45:90:b4:84:8b:8a:33:bf:d2:74:57:84: 71:9e:d6:7b:d9:f2:4b:22:b3:08:b7:f0:ca:dc:69: 00:c5:de:23:81:26:b8:8d:01:cb:04:b8:cd:8e:27: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:05:82:E5:CF:C2:82:0F:76:C9:3B:ED:D7:73:2E:D0:F3:0D:21:FE X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c0:84:20:60:3f:30:ef:00:51:75:a4:90:db:c8:66:24:40: b9:47:e8:ff:6e:97:79:13:8a:76:57:a1:2a:3e:fa:ff:07:c3: 18:71:35:35:34:20:db:ae:da:44:7e:c0:c7:11:24:64:08:4c: 5d:4e:c2:5b:f2:ff:06:8f:3c:b7:9f:6d:a4:11:da:51:15:05: 63:54:72:53:c6:db:4f:2f:51:cf:ba:37:a4:5b:be:9e:08:bf: 2f:0d:ea:ce:0d:a9:6c:1e:58:de:e9:39:fc:78:05:cb:38:9e: 61:67:c4:6c:cb:1b:21:f2:9d:34:5f:bc:d0:08:fa:89:70:ff: ac:ba:8e:2c:bf:9b:b2:ab:3e:16:fd:18:ee:56:59:ee:a6:ef: e1:a3:b9:7e:c5:8b:39:ad:28:81:84:5a:d7:57:1f:85:d9:b3: 79:19:39:d0:af:fb:ff:15:b8:10:84:2b:d6:e0:4e:b5:d5:9a: cf:40:8c:df:18:66:68:13:8f:8d:c7:d7:a0:a0:e3:5f:1c:65: a2:cf:70:d3:7f:47:48:33:a3:b8:ef:54:01:06:f0:af:86:35: 2d:1c:49:29:f8:b7:fa:d8:19:7d:ed:93:90:32:7f:b5:fc:17: de:24:58:f4:88:36:10:cf:3a:4b:c9:81:c7:b1:21:bd:86:6b: a5:11:e3:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8GTPZOWPl0waac0R8K7QVFFuncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNTA1MDcxODI2MDhaFw0yNTA1MTAyMzA4MDhaMDMxMTAvBgNV BAMTKEQ5MDU4MkU1Q0ZDMjgyMEY3NkM5M0JFREQ3NzMyRUQwRjMwRDIxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGcYsdTX1vPsRQnVF+GeG7Opw cCtFF3z2M50a98ZyWhrghbi0sHaJtq+H2m4AfoSL3c0uC14evNmh/pufNweQ/18B YOi2Mn7u+5MpBJ4MZYzctHMr/7Y+W2acyOcn/JrarCdZ0JXfYoQudBfm0Xd1LlUp 6PKsWiGDIARSjUzY2ihDqC2X3z4+6L0Q3jopIwB24tlShRTTCSPoT4SFfwVabbjR fU3pByFQGV4CHMfEiYLjADJQamENbVDj2CBf6QTtKVYKWj8c8/JlbhdP0jVQnBSZ 8UWQtISLijO/0nRXhHGe1nvZ8ksiswi38MrcaQDF3iOBJriNAcsEuM2OJwenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2QWC5c/Cgg92yTvt13Mu0PMNIf4wHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnAhCBgPzDvAFF1pJDbyGYkQLlH6P9ul3kT inZXoSo++v8HwxhxNTU0INuu2kR+wMcRJGQITF1Owlvy/waPPLefbaQR2lEVBWNU clPG208vUc+6N6Rbvp4Ivy8N6s4NqWweWN7pOfx4Bcs4nmFnxGzLGyHynTRfvNAI +olw/6y6jiy/m7KrPhb9GO5WWe6m7+GjuX7FizmtKIGEWtdXH4XZs3kZOdCv+/8V uBCEK9bgTrXVms9AjN8YZmgTj43H16Cg418cZaLPcNN/R0gzo7jvVAEG8K+GNS0c SSn4t/rYGX3tk5Ayf7X8F94kWPSINhDPOkvJgcexIb2Ga6UR4+Q= -----END CERTIFICATE-----Generated at Thu May 8 21:32:30 2025 by rpki-client