$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: NbLpSAGsb70N4CeDlisHPjclUFvC0CcaHM2dVPtIEWk= Subject key identifier: A2:55:5D:66:AF:CF:65:0B:E9:ED:0D:53:96:15:72:3D:5A:32:CA:1F Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 717441592208BD2FF5A7E01CBD0C3B55B5B40F69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 01B1 Signing time: Thu 21 Aug 2025 19:50:47 +0000 Manifest this update: Thu 21 Aug 2025 19:45:47 +0000 Manifest next update: Sun 24 Aug 2025 21:37:47 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: T9Gw5/s+egiMmoLFH9iWThoYSI9LR7c3DJHVNwXjj+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:74:41:59:22:08:bd:2f:f5:a7:e0:1c:bd:0c:3b:55:b5:b4:0f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Aug 21 19:45:47 2025 GMT Not After : Aug 24 21:37:47 2025 GMT Subject: CN=A2555D66AFCF650BE9ED0D539615723D5A32CA1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:bd:c9:25:2e:9c:fa:07:02:1d:d0:ec:d6: 53:41:41:13:46:ed:14:00:2e:69:3d:d9:25:18:8b: 88:d3:93:56:2d:4b:a6:02:f4:ef:c6:01:65:ef:84: 28:79:40:2d:aa:f2:5b:90:b5:14:73:e7:b0:28:9a: 6d:27:5e:24:38:8c:9b:64:6a:be:41:e0:e5:b4:5c: b3:51:35:2c:46:92:b5:c8:a6:75:c7:46:c7:9d:31: ab:d5:9c:cd:03:8d:fb:01:85:95:e6:ed:dc:d8:a7: 57:b5:8b:75:06:e3:83:0e:69:5a:0c:b5:43:e4:87: 0b:8a:53:5f:c5:03:bc:93:a1:2b:12:2c:59:cc:bd: 49:5a:21:cb:f4:9d:49:b1:43:1b:a4:1b:73:84:fb: 56:f6:b6:a5:46:23:8c:da:80:ea:5f:cd:fb:f1:3a: d3:fb:66:9b:d3:8c:ab:90:ce:ec:d0:b9:4b:b9:92: a1:3d:00:89:23:32:70:3e:17:3b:a8:32:2e:fb:a5: 26:4e:ad:5b:8f:46:0c:d3:35:aa:66:77:0c:b0:f8: 36:4e:1d:6a:91:19:8f:18:6a:9e:10:7e:3c:3a:26: 6f:08:66:87:bd:d8:09:82:9e:0a:02:87:bf:6d:d7: 02:73:f9:46:33:c7:09:13:24:6d:c7:b2:a6:3a:f1: a9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:55:5D:66:AF:CF:65:0B:E9:ED:0D:53:96:15:72:3D:5A:32:CA:1F X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ae:55:d4:99:f5:b5:e2:38:34:4e:06:c9:a7:66:f4:77:01: d8:11:eb:f5:bc:e0:c8:be:21:34:a5:b6:dc:83:a8:78:80:82: c7:4d:30:39:ae:4c:30:43:c6:82:4f:ad:83:99:9e:f7:f5:aa: f4:2c:d4:8a:94:a2:c3:96:c4:3e:30:5a:59:17:e4:83:a5:c7: c7:d6:b0:4f:21:e5:15:c7:f4:24:22:fb:e4:cd:0b:43:ec:14: 8f:d4:71:56:e7:45:54:94:3b:1b:2e:49:b5:42:4c:3d:27:67: 79:49:e1:85:c4:78:bc:74:64:90:1f:4e:95:ff:e6:c5:52:e6: b7:5f:ab:f2:f6:5b:68:f5:36:1a:73:05:3c:6a:cd:d7:8f:28: a6:c1:f7:67:d1:b3:da:7b:87:00:dc:88:3f:38:ec:4b:ea:ee: 33:dc:2c:e5:43:09:0f:84:6e:f0:fa:f4:96:25:2c:7e:66:4e: de:9a:8c:97:bd:b6:2c:ec:ba:43:78:1e:cd:a8:86:d7:da:a6: 28:dd:4e:58:43:e9:a5:98:02:a3:1f:6c:a1:aa:9a:d7:00:32: 06:b2:c0:32:86:62:18:5c:53:42:34:a4:23:2c:bb:02:aa:c4: b1:26:59:43:07:64:fa:ba:4f:d9:02:68:d8:8b:53:e6:1b:45: 07:8c:a8:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXRBWSIIvS/1p+AcvQw7VbW0D2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNTA4MjExOTQ1NDdaFw0yNTA4MjQyMTM3NDdaMDMxMTAvBgNV BAMTKEEyNTU1RDY2QUZDRjY1MEJFOUVEMEQ1Mzk2MTU3MjNENUEzMkNBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupr3JJS6c+gcCHdDs1lNBQRNG 7RQALmk92SUYi4jTk1YtS6YC9O/GAWXvhCh5QC2q8luQtRRz57Aomm0nXiQ4jJtk ar5B4OW0XLNRNSxGkrXIpnXHRsedMavVnM0DjfsBhZXm7dzYp1e1i3UG44MOaVoM tUPkhwuKU1/FA7yToSsSLFnMvUlaIcv0nUmxQxukG3OE+1b2tqVGI4zagOpfzfvx OtP7ZpvTjKuQzuzQuUu5kqE9AIkjMnA+FzuoMi77pSZOrVuPRgzTNapmdwyw+DZO HWqRGY8Yap4Qfjw6Jm8IZoe92AmCngoCh79t1wJz+UYzxwkTJG3HsqY68anJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUolVdZq/PZQvp7Q1TlhVyPVoyyh8wHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeuVdSZ9bXiODROBsmnZvR3AdgR6/W84Mi+ ITSlttyDqHiAgsdNMDmuTDBDxoJPrYOZnvf1qvQs1IqUosOWxD4wWlkX5IOlx8fW sE8h5RXH9CQi++TNC0PsFI/UcVbnRVSUOxsuSbVCTD0nZ3lJ4YXEeLx0ZJAfTpX/ 5sVS5rdfq/L2W2j1NhpzBTxqzdePKKbB92fRs9p7hwDciD847Evq7jPcLOVDCQ+E bvD69JYlLH5mTt6ajJe9tizsukN4Hs2ohtfapijdTlhD6aWYAqMfbKGqmtcAMgay wDKGYhhcU0I0pCMsuwKqxLEmWUMHZPq6T9kCaNiLU+YbRQeMqNM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:00:24 2025 by rpki-client