$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: MUrLwJX+iPbGJ1DGHD9RAdf0nX/oMQVF1h5p04jeAK4= Subject key identifier: 23:95:64:EB:74:B9:51:C7:DB:3A:F8:AE:07:C0:2F:1D:2A:AD:6F:BC Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 2F4AD2C0454BBFDE6A44B3232A35D5625C3ADF7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 0211 Signing time: Tue 24 Mar 2026 11:50:48 +0000 Manifest this update: Tue 24 Mar 2026 11:45:48 +0000 Manifest next update: Fri 27 Mar 2026 19:36:48 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: 2S8hhxkHSoIvSwS19md0MQ630mwRDqTACgONmjxuYFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4a:d2:c0:45:4b:bf:de:6a:44:b3:23:2a:35:d5:62:5c:3a:df:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Mar 24 11:45:48 2026 GMT Not After : Mar 27 19:36:48 2026 GMT Subject: CN=239564EB74B951C7DB3AF8AE07C02F1D2AAD6FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:02:b3:54:93:4e:d6:a4:fc:2d:bc:fe:75: e0:85:8b:6e:c9:3e:75:36:5a:4b:03:3c:22:e8:ab: e8:cb:6e:cb:90:dd:58:85:e9:c9:a1:a4:c4:3b:7a: b8:57:87:67:96:3e:3d:8d:17:4d:11:7f:fd:3e:f1: 96:00:f7:01:fb:21:24:0b:fd:00:ee:55:67:25:a3: de:e0:89:90:e1:a3:0b:7a:2c:9c:4f:89:37:87:50: f5:3c:be:7d:47:55:c8:de:9a:d5:0b:cd:25:b3:c1: c1:1c:c3:5b:20:57:01:b6:cf:15:19:b6:17:b9:19: 1b:13:1c:dc:86:58:1f:83:f7:c5:6e:f9:db:cf:83: cf:25:b0:9c:f5:d9:6e:fc:f0:bd:b4:a5:47:fc:4d: ee:64:13:3a:3e:c4:35:87:07:8c:3a:8d:53:8c:f9: 8e:7f:fd:24:de:90:f7:de:c2:cc:e1:d7:a7:8c:bb: 56:5f:49:e9:86:f5:e6:6a:6a:a5:3f:18:5b:03:f5: 9f:bd:98:26:ca:a5:45:60:ce:72:6a:3b:bc:47:d3: 78:74:8d:e1:e9:84:a7:2e:af:ed:ce:b4:df:bf:6c: 95:69:4b:fa:63:f3:77:e9:64:d3:13:09:28:ab:c5: e0:d9:ac:9a:28:ae:5c:fe:2e:c9:5b:ce:db:9b:3b: 9a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:95:64:EB:74:B9:51:C7:DB:3A:F8:AE:07:C0:2F:1D:2A:AD:6F:BC X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6e:44:ca:b6:c5:4b:7e:c8:e4:92:3c:e9:b1:35:34:b3:a3: e9:5e:20:ae:5f:1b:51:33:74:7a:af:c8:fc:9a:dc:3a:13:18: f0:e1:17:54:0b:a4:d2:1d:4f:93:af:b4:2c:b8:c7:6a:2d:98: ca:1b:3d:c8:07:13:4c:36:76:24:c9:1c:cb:52:2a:33:04:b9: f5:e7:45:6e:a9:9e:b3:68:1f:59:ce:c1:74:cc:54:87:19:32: e6:90:a5:03:be:62:a0:92:2c:6f:84:46:83:6d:44:a9:7e:91: bb:2b:77:5d:8c:31:f8:83:b0:da:f5:49:44:66:71:7b:e3:11: a5:26:3f:c2:32:16:d6:93:42:42:90:c4:42:c0:88:45:93:95: 77:d5:64:08:94:bb:2d:56:46:28:de:a4:dd:f5:8d:c4:5f:42: 78:ab:cb:33:7b:df:e9:e6:05:af:c9:23:fc:bb:cc:0d:fc:67: c6:a0:82:c7:09:54:8f:38:2e:d3:4f:c5:59:7a:26:5d:0a:d1: 80:92:b4:ac:21:5a:dc:8e:09:ec:9e:74:93:c2:20:d0:3b:c9: be:e9:c7:3c:7e:8e:14:d0:16:1f:fa:b1:f2:df:c1:be:8d:0c: bf:ca:db:ed:77:38:89:05:10:71:38:47:df:b2:dd:a2:73:ec: a2:08:96:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0rSwEVLv95qRLMjKjXVYlw6330wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNjAzMjQxMTQ1NDhaFw0yNjAzMjcxOTM2NDhaMDMxMTAvBgNV BAMTKDIzOTU2NEVCNzRCOTUxQzdEQjNBRjhBRTA3QzAyRjFEMkFBRDZGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63QKzVJNO1qT8Lbz+deCFi27J PnU2WksDPCLoq+jLbsuQ3ViF6cmhpMQ7erhXh2eWPj2NF00Rf/0+8ZYA9wH7ISQL /QDuVWclo97giZDhowt6LJxPiTeHUPU8vn1HVcjemtULzSWzwcEcw1sgVwG2zxUZ the5GRsTHNyGWB+D98Vu+dvPg88lsJz12W788L20pUf8Te5kEzo+xDWHB4w6jVOM +Y5//STekPfewszh16eMu1ZfSemG9eZqaqU/GFsD9Z+9mCbKpUVgznJqO7xH03h0 jeHphKcur+3OtN+/bJVpS/pj83fpZNMTCSirxeDZrJoorlz+LslbztubO5prAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI5Vk63S5UcfbOviuB8AvHSqtb7wwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1uRMq2xUt+yOSSPOmxNTSzo+leIK5fG1Ez dHqvyPya3DoTGPDhF1QLpNIdT5OvtCy4x2otmMobPcgHE0w2diTJHMtSKjMEufXn RW6pnrNoH1nOwXTMVIcZMuaQpQO+YqCSLG+ERoNtRKl+kbsrd12MMfiDsNr1SURm cXvjEaUmP8IyFtaTQkKQxELAiEWTlXfVZAiUuy1WRijepN31jcRfQniryzN73+nm Ba/JI/y7zA38Z8aggscJVI84LtNPxVl6Jl0K0YCStKwhWtyOCeyedJPCINA7yb7p xzx+jhTQFh/6sfLfwb6NDL/K2+13OIkFEHE4R9+y3aJz7KIIljs= -----END CERTIFICATE-----Generated at Thu Mar 26 19:09:08 2026 by rpki-client