$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: Bs682e/e7yjrMSgYa2S7sNsvT4v8ttU7XVFBcUaFCGo= Subject key identifier: 89:05:A3:54:39:75:7D:FD:91:C0:DA:AD:D3:61:06:FA:84:58:4C:D0 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 57A5CFBEDACCDEDB762061D30BB678AA23F01C13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 01A4 Signing time: Thu 24 Jul 2025 01:40:41 +0000 Manifest this update: Thu 24 Jul 2025 01:35:41 +0000 Manifest next update: Sun 27 Jul 2025 11:49:41 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: jZb7Nsp3TXCWZZ1Zr1y/QIs0EBub+9FvIR1hvC/dBQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 11:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a5:cf:be:da:cc:de:db:76:20:61:d3:0b:b6:78:aa:23:f0:1c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Jul 24 01:35:41 2025 GMT Not After : Jul 27 11:49:41 2025 GMT Subject: CN=8905A35439757DFD91C0DAADD36106FA84584CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:e9:58:b0:a0:08:91:67:ec:4f:78:0c:5d: 46:78:8f:59:80:2c:6f:b6:ae:c2:c4:f8:2b:d2:e6: a4:80:84:2c:b2:91:0f:6e:b0:cf:02:f1:0f:e0:47: 93:ca:10:5f:0b:a7:27:8b:95:d1:d3:1c:3c:dd:61: f3:86:e6:ad:6b:5c:09:00:32:7f:35:ab:e5:b5:8d: 3f:1d:fe:29:f3:d4:67:29:79:3c:14:f2:1f:8c:53: 9f:ab:bd:21:7b:f0:e1:90:92:d0:35:3d:98:70:6f: 55:83:e0:38:dd:42:47:ac:ab:b7:97:48:65:4e:dd: 59:51:ac:a9:fc:12:50:5a:ce:4a:c3:cf:e2:e2:35: 69:72:03:4f:1a:45:1e:93:b6:5d:c6:e5:fe:92:7c: b7:22:91:87:0a:49:be:84:f2:e1:d7:91:36:ad:a8: 70:61:9e:29:2b:5e:7f:20:b8:95:e6:ab:d4:8e:38: 94:aa:59:d1:80:96:4d:2d:d2:a0:bb:a2:c1:db:84: b6:84:79:b3:09:07:45:77:84:31:90:ad:81:a7:68: 0b:a8:e6:2b:82:5e:1a:3e:70:42:74:49:d8:b9:77: 75:f9:50:b5:15:45:73:b0:07:b4:39:13:c5:67:f1: 94:9e:71:47:f6:b2:8c:74:e2:0a:d9:22:6b:94:b0: 3c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:05:A3:54:39:75:7D:FD:91:C0:DA:AD:D3:61:06:FA:84:58:4C:D0 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8e:2f:26:38:50:74:97:42:e5:ba:a7:7d:6c:21:da:b1:06: 93:b3:61:00:db:1e:09:93:bb:a0:30:4d:b7:f8:95:19:7d:d9: f8:72:06:06:2b:be:12:f6:7e:ad:dd:61:93:12:cb:34:52:77: e2:e1:bc:0c:f1:17:11:f7:47:2c:29:61:19:5d:a0:07:c0:e6: 79:4e:0c:7f:4f:ac:32:89:29:09:60:37:a2:22:51:58:2a:86: 6a:62:49:fb:40:83:7d:a5:41:43:31:ec:82:6d:a5:b8:6b:7d: 4f:fd:0c:05:1a:0b:66:2c:6e:dc:54:37:d4:94:16:ed:79:84: fd:36:d9:b3:1f:ac:8f:14:42:94:bf:d7:3e:48:2e:71:c2:c4: 22:60:58:bb:35:70:01:11:2d:69:cb:1c:72:e4:17:c0:11:8d: 38:ae:b8:ba:16:97:83:fe:a2:d0:23:41:07:14:ea:34:ce:d4: 7e:52:31:d1:59:c0:c3:68:d0:5f:9b:83:a1:92:cf:c1:5c:04: 35:4e:a9:07:18:3d:24:67:58:5e:18:67:5b:4f:54:2f:af:df: 98:b1:31:ac:14:d5:f8:97:3a:32:f9:25:09:c2:2f:fa:7e:65: 99:4e:b1:55:b3:20:c6:d9:4f:b7:38:e3:9b:16:85:2a:d3:91: 13:85:8e:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6XPvtrM3tt2IGHTC7Z4qiPwHBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNTA3MjQwMTM1NDFaFw0yNTA3MjcxMTQ5NDFaMDMxMTAvBgNV BAMTKDg5MDVBMzU0Mzk3NTdERkQ5MUMwREFBREQzNjEwNkZBODQ1ODRDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFr+lYsKAIkWfsT3gMXUZ4j1mA LG+2rsLE+CvS5qSAhCyykQ9usM8C8Q/gR5PKEF8LpyeLldHTHDzdYfOG5q1rXAkA Mn81q+W1jT8d/inz1GcpeTwU8h+MU5+rvSF78OGQktA1PZhwb1WD4DjdQkesq7eX SGVO3VlRrKn8ElBazkrDz+LiNWlyA08aRR6Ttl3G5f6SfLcikYcKSb6E8uHXkTat qHBhnikrXn8guJXmq9SOOJSqWdGAlk0t0qC7osHbhLaEebMJB0V3hDGQrYGnaAuo 5iuCXho+cEJ0Sdi5d3X5ULUVRXOwB7Q5E8Vn8ZSecUf2sox04grZImuUsDzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQWjVDl1ff2RwNqt02EG+oRYTNAwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqOLyY4UHSXQuW6p31sIdqxBpOzYQDbHgmT u6AwTbf4lRl92fhyBgYrvhL2fq3dYZMSyzRSd+LhvAzxFxH3RywpYRldoAfA5nlO DH9PrDKJKQlgN6IiUVgqhmpiSftAg32lQUMx7IJtpbhrfU/9DAUaC2YsbtxUN9SU Fu15hP022bMfrI8UQpS/1z5ILnHCxCJgWLs1cAERLWnLHHLkF8ARjTiuuLoWl4P+ otAjQQcU6jTO1H5SMdFZwMNo0F+bg6GSz8FcBDVOqQcYPSRnWF4YZ1tPVC+v35ix MawU1fiXOjL5JQnCL/p+ZZlOsVWzIMbZT7c445sWhSrTkROFjuc= -----END CERTIFICATE-----Generated at Fri Jul 25 05:17:27 2025 by rpki-client