$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: fqoVTQgAEkP59Qyqduj5Ht0H+I+C9dwqxXuMtINeDCg= Subject key identifier: ED:39:39:38:D8:DE:DD:81:24:D8:2D:A7:97:4B:61:94:56:AB:CE:12 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 2230BF4E1DDC1A0BCCE5BF7CD4C54D4649DFACF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 019A Signing time: Tue 01 Jul 2025 05:11:08 +0000 Manifest this update: Tue 01 Jul 2025 05:06:08 +0000 Manifest next update: Fri 04 Jul 2025 08:29:08 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: jC46cGP5QJ8/FhyC5U82tEVOQv8w/RLKxH3jhyIZAew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 08:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:30:bf:4e:1d:dc:1a:0b:cc:e5:bf:7c:d4:c5:4d:46:49:df:ac:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Jul 1 05:06:08 2025 GMT Not After : Jul 4 08:29:08 2025 GMT Subject: CN=ED393938D8DEDD8124D82DA7974B619456ABCE12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:34:f7:49:63:fd:91:69:78:e5:04:99:88:0d: b0:21:25:a6:17:05:c6:62:79:24:1b:6e:c7:21:9e: 4e:fc:3e:01:bd:bb:6d:40:90:8a:84:16:44:76:47: cd:b2:72:7d:33:67:f0:03:5e:c1:cd:a7:e2:f8:ae: de:37:1a:dd:05:b3:15:f7:fe:98:cc:1f:66:b1:3e: 37:51:12:73:af:cc:04:1e:8d:73:1c:25:e8:55:f0: be:13:1e:7c:f0:44:d2:68:bb:47:0a:5d:51:4f:75: 71:98:6d:17:25:ae:51:a6:6d:b6:b4:d3:b8:79:db: 94:5a:2d:75:54:b8:86:87:6e:d1:67:70:e5:c6:e6: 14:4d:5b:23:d1:8a:34:01:48:55:56:9e:7a:1d:c1: bb:c3:9a:ba:71:eb:63:c0:f6:51:dd:c0:75:e2:81: 2d:99:6b:9b:fa:53:99:d9:7a:72:30:fa:36:d4:0d: 03:4a:26:57:b6:00:aa:38:89:90:a0:fe:a1:18:56: dc:75:e6:8e:32:17:a4:e3:ca:ac:5a:b7:a0:d6:4b: 10:15:c4:44:21:45:4c:9c:c1:54:0e:d6:27:a0:31: d6:fd:c7:ca:50:ca:d2:12:da:fd:98:1f:ef:32:22: 13:3a:c9:87:f3:b0:6e:25:90:9e:b7:e5:79:6c:df: a3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:39:39:38:D8:DE:DD:81:24:D8:2D:A7:97:4B:61:94:56:AB:CE:12 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a9:10:18:9d:2e:37:50:b2:a4:10:af:3b:be:62:50:18:f1: b3:3b:9e:56:bb:55:e0:ff:81:b0:83:05:f4:23:e5:6a:5f:d6: 71:19:fa:46:0a:3a:87:93:43:b1:5f:fc:83:eb:db:e7:c3:c4: 98:9e:37:5a:ae:5e:f1:d9:8a:5f:9b:e8:74:48:d8:00:55:0c: 4f:55:59:97:0e:df:9a:84:a0:a6:31:f4:50:c5:d0:ea:7a:d8: 21:be:4b:95:3c:6b:11:04:23:93:8a:e4:2c:8e:2a:fe:36:ef: 63:89:03:dc:c5:72:1f:23:10:93:2b:cd:ce:8e:00:5e:b7:c9: 5d:90:38:9c:d9:c6:25:d0:b6:56:ec:c9:b3:f4:4d:3d:59:4c: 2b:aa:2a:2b:16:eb:7b:2e:49:74:08:d5:90:ed:42:6c:d8:2c: a2:97:14:23:68:8f:b4:e2:eb:67:0b:19:0c:9f:83:fd:88:6c: e8:fa:90:1e:d4:cc:15:fe:4b:c3:ee:23:5c:a6:ff:6e:27:ac: 24:8f:87:f3:9d:cf:00:c1:05:22:e8:e8:c0:8f:5e:b6:fa:75: e8:31:bc:0e:28:b8:96:34:03:48:23:8f:d8:81:bb:ea:5e:42: 59:eb:9c:06:8f:ec:68:af:e8:8a:9b:92:98:41:ae:26:87:fe: f7:2c:28:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjC/Th3cGgvM5b981MVNRknfrPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNTA3MDEwNTA2MDhaFw0yNTA3MDQwODI5MDhaMDMxMTAvBgNV BAMTKEVEMzkzOTM4RDhERUREODEyNEQ4MkRBNzk3NEI2MTk0NTZBQkNFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoNPdJY/2RaXjlBJmIDbAhJaYX BcZieSQbbschnk78PgG9u21AkIqEFkR2R82ycn0zZ/ADXsHNp+L4rt43Gt0FsxX3 /pjMH2axPjdREnOvzAQejXMcJehV8L4THnzwRNJou0cKXVFPdXGYbRclrlGmbba0 07h525RaLXVUuIaHbtFncOXG5hRNWyPRijQBSFVWnnodwbvDmrpx62PA9lHdwHXi gS2Za5v6U5nZenIw+jbUDQNKJle2AKo4iZCg/qEYVtx15o4yF6Tjyqxat6DWSxAV xEQhRUycwVQO1iegMdb9x8pQytIS2v2YH+8yIhM6yYfzsG4lkJ635Xls36N5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Tk5ONje3YEk2C2nl0thlFarzhIwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHipEBidLjdQsqQQrzu+YlAY8bM7nla7VeD/ gbCDBfQj5Wpf1nEZ+kYKOoeTQ7Ff/IPr2+fDxJieN1quXvHZil+b6HRI2ABVDE9V WZcO35qEoKYx9FDF0Op62CG+S5U8axEEI5OK5CyOKv4272OJA9zFch8jEJMrzc6O AF63yV2QOJzZxiXQtlbsybP0TT1ZTCuqKisW63suSXQI1ZDtQmzYLKKXFCNoj7Ti 62cLGQyfg/2IbOj6kB7UzBX+S8PuI1ym/24nrCSPh/OdzwDBBSLo6MCPXrb6degx vA4ouJY0A0gjj9iBu+peQlnrnAaP7Giv6IqbkphBriaH/vcsKJo= -----END CERTIFICATE-----Generated at Tue Jul 1 23:28:00 2025 by rpki-client