$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: 9IhKtBGMXf/1Ipp7YxvRd1WqFQoEFsSd6D16pYN/DoE= Subject key identifier: 48:87:3C:37:F0:78:09:2E:8C:5A:01:4A:6A:43:99:D7:5C:30:D7:02 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 5D2C2B7433F16DC0092807C35284CFA8D5471525 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 01CB Signing time: Sun 19 Oct 2025 07:10:42 +0000 Manifest this update: Sun 19 Oct 2025 07:05:42 +0000 Manifest next update: Wed 22 Oct 2025 15:19:42 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: dNA3UNL0aKaYuYgBPoHVuFKV8MPZEcugS5aLxJs+EVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2c:2b:74:33:f1:6d:c0:09:28:07:c3:52:84:cf:a8:d5:47:15:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Oct 19 07:05:42 2025 GMT Not After : Oct 22 15:19:42 2025 GMT Subject: CN=48873C37F078092E8C5A014A6A4399D75C30D702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:f1:02:10:28:a7:03:73:c2:34:c1:2e:69: 49:e3:06:cb:44:b6:00:5d:33:ce:0f:71:d5:d4:d1: 42:b2:1a:37:6e:87:d2:d3:70:42:b1:0c:90:ef:7e: a5:e7:ed:8b:55:2f:19:6b:a7:8d:54:54:f9:3f:0c: ec:71:a0:db:62:7b:d2:25:20:b6:88:37:d8:bd:cb: c4:18:92:42:af:8b:f5:26:2d:df:0a:12:cc:ad:f0: 8c:08:40:ac:bd:ec:37:a0:c8:fa:a7:87:98:bf:f3: c8:f9:e5:21:d3:71:bd:cc:25:13:8e:ea:71:7c:b0: 39:69:7f:14:6f:b3:95:cd:79:14:0d:87:8b:fd:29: f9:ed:c0:b8:f7:01:bc:cd:3d:23:0b:44:4d:e5:b2: 8b:c5:46:5a:dc:88:44:83:f0:49:f4:17:aa:10:4b: f0:d2:9a:5e:f0:13:50:fa:7f:e3:d7:85:00:24:aa: ef:3b:40:3b:64:26:c3:af:e4:b2:ab:01:a5:97:6c: 51:24:0a:20:8e:b8:dd:de:fb:de:5a:24:e4:03:fc: 6e:a5:f2:09:d0:52:13:be:65:f0:06:cb:6b:95:50: 51:fb:e2:0f:ff:27:ef:72:76:e3:86:fb:b3:7c:e3: 62:ec:bc:6b:74:59:79:b4:81:df:f7:9f:4b:20:5c: 6f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:87:3C:37:F0:78:09:2E:8C:5A:01:4A:6A:43:99:D7:5C:30:D7:02 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d5:3e:ee:6c:c6:b2:be:2c:f5:b2:5a:63:6f:e8:51:f5:54: 5d:b8:61:bf:36:be:27:85:40:7c:a0:ce:f5:6b:49:7b:ff:e6: 41:07:73:6b:b0:88:2b:6e:31:49:dd:b1:bb:08:a6:99:61:0c: 31:3a:b3:04:45:63:21:15:52:68:52:e5:c8:d2:36:50:4b:15: 21:01:49:cb:c0:97:1e:aa:25:54:b6:af:22:ac:83:dd:de:bd: 71:1c:91:97:32:7e:04:af:d2:1b:d4:6e:7d:2d:16:2f:14:0b: 2d:89:85:97:36:44:2e:bd:31:10:9b:f4:b7:48:d9:5b:d8:f0: 19:79:9c:22:32:f3:36:2b:2a:8d:2d:7a:06:c5:c6:36:73:91: 6f:20:e3:e5:9d:a4:30:70:d8:67:d1:61:9b:d6:f8:19:6b:bd: d1:42:2f:2f:61:d1:22:81:93:e2:e7:ea:e2:cf:1c:b2:2a:ef: 7c:e1:01:4a:eb:b3:2f:f4:d7:8e:2d:d3:69:44:6d:a7:0b:18: fb:0e:93:11:90:db:ea:59:ed:97:af:22:45:1d:b3:2f:25:81: 74:27:ec:68:f0:53:c7:6a:2b:6b:a3:84:c4:2c:b4:6b:33:4d: 67:d5:56:52:4c:f5:90:33:ce:eb:dd:f3:1c:ad:1f:82:61:7e: 3f:b7:12:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXSwrdDPxbcAJKAfDUoTPqNVHFSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNTEwMTkwNzA1NDJaFw0yNTEwMjIxNTE5NDJaMDMxMTAvBgNV BAMTKDQ4ODczQzM3RjA3ODA5MkU4QzVBMDE0QTZBNDM5OUQ3NUMzMEQ3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJK/ECECinA3PCNMEuaUnjBstE tgBdM84PcdXU0UKyGjduh9LTcEKxDJDvfqXn7YtVLxlrp41UVPk/DOxxoNtie9Il ILaIN9i9y8QYkkKvi/UmLd8KEsyt8IwIQKy97DegyPqnh5i/88j55SHTcb3MJROO 6nF8sDlpfxRvs5XNeRQNh4v9KfntwLj3AbzNPSMLRE3lsovFRlrciESD8En0F6oQ S/DSml7wE1D6f+PXhQAkqu87QDtkJsOv5LKrAaWXbFEkCiCOuN3e+95aJOQD/G6l 8gnQUhO+ZfAGy2uVUFH74g//J+9yduOG+7N842LsvGt0WXm0gd/3n0sgXG/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSIc8N/B4CS6MWgFKakOZ11ww1wIwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTVPu5sxrK+LPWyWmNv6FH1VF24Yb82vieF QHygzvVrSXv/5kEHc2uwiCtuMUndsbsIpplhDDE6swRFYyEVUmhS5cjSNlBLFSEB ScvAlx6qJVS2ryKsg93evXEckZcyfgSv0hvUbn0tFi8UCy2JhZc2RC69MRCb9LdI 2VvY8Bl5nCIy8zYrKo0tegbFxjZzkW8g4+WdpDBw2GfRYZvW+BlrvdFCLy9h0SKB k+Ln6uLPHLIq73zhAUrrsy/0144t02lEbacLGPsOkxGQ2+pZ7ZevIkUdsy8lgXQn 7GjwU8dqK2ujhMQstGszTWfVVlJM9ZAzzuvd8xytH4Jhfj+3Elc= -----END CERTIFICATE-----Generated at Mon Oct 20 11:06:13 2025 by rpki-client