$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: 6r4juo4rCXH5ZJ/mWE25EkIh7dpGDxVDhuqopSJotkk= Subject key identifier: D9:C8:D6:C9:7F:F8:E2:DF:96:C0:06:29:9E:9B:44:92:14:17:A7:5E Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 3AD26550DD5C74D1F2E506C71651DA83257F2E56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 0190 Signing time: Sun 08 Jun 2025 07:30:41 +0000 Manifest this update: Sun 08 Jun 2025 07:25:41 +0000 Manifest next update: Wed 11 Jun 2025 19:17:41 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: hlNVTVZTIDN9pxs++FsajyC9pMgzP4YyeO8sekjghOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d2:65:50:dd:5c:74:d1:f2:e5:06:c7:16:51:da:83:25:7f:2e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Jun 8 07:25:41 2025 GMT Not After : Jun 11 19:17:41 2025 GMT Subject: CN=D9C8D6C97FF8E2DF96C006299E9B44921417A75E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ca:df:ad:f8:1b:ba:1a:fe:4f:84:2b:4c:5c: 57:08:58:2d:bc:87:dc:82:46:e5:35:84:bc:ee:3c: 2e:5f:01:d6:3a:a3:09:c6:30:bb:e9:db:61:60:1e: e7:17:79:5c:91:62:d1:9a:df:78:61:39:67:41:be: 45:dd:9b:c8:18:2a:91:0e:d2:11:be:85:02:28:a3: 31:b9:9a:e4:64:a8:25:74:95:ed:b5:1b:9e:46:2f: 55:dc:c5:fe:d3:29:58:99:05:1f:61:e6:7d:70:e5: bc:46:91:45:2f:30:e2:b0:ba:81:16:fd:cb:7e:8a: 5e:22:ea:6c:f6:61:b0:84:ba:79:94:31:c6:ab:7f: df:5d:4a:53:a1:2e:20:65:bc:77:02:dc:41:6f:dd: e8:29:8d:9d:f7:d3:41:ad:0e:51:30:d4:07:48:a4: 34:85:7d:06:b3:7b:a8:ea:3f:a8:65:18:0e:d2:96: 0a:61:a7:7d:24:09:b9:dc:bc:fd:cd:99:58:a2:e5: d7:b6:f6:57:2d:a6:d1:c0:f4:de:cc:c5:d2:c8:67: 29:ad:29:ab:46:62:3c:14:ec:12:17:2e:38:e3:8d: 78:e1:dd:ce:56:7f:5e:6e:d0:f5:cd:9f:48:bf:49: 39:bb:2f:82:28:8f:72:c4:35:fb:12:9c:5d:88:1e: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C8:D6:C9:7F:F8:E2:DF:96:C0:06:29:9E:9B:44:92:14:17:A7:5E X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cf:13:1d:32:a8:0e:8b:41:12:3e:51:c1:64:a3:3e:c5:ae: 3c:d9:69:ab:57:0a:09:20:2c:36:52:a5:10:a4:61:66:d3:75: 22:ce:db:e2:ff:75:f4:0f:11:56:8b:d0:8e:13:75:c0:44:ac: 6e:86:fc:d8:7b:e4:27:81:b8:db:ab:1b:fd:ae:aa:79:36:d0: 8a:28:9f:b5:c1:f9:9f:94:59:14:1f:5b:a5:a8:c7:ef:63:b5: b4:c0:11:06:e1:51:fd:af:e1:ba:3f:cf:d3:a0:4f:92:99:79: 4b:04:5f:37:b8:cc:e1:5a:26:fb:db:ff:16:f4:ae:db:c3:73: c6:75:ae:05:96:e9:f5:39:9a:01:64:2b:50:48:68:d0:c7:7f: f6:c0:d6:7b:9a:24:c8:a6:c4:8d:c1:00:fd:3a:f7:b2:bf:e4: e8:60:d1:4a:e0:4f:36:79:d2:d5:7d:04:67:04:22:35:72:d2: db:ae:7d:17:26:61:ca:eb:a9:e3:0a:a8:7b:e7:95:74:a5:cb: 71:63:15:da:84:3b:3f:6a:3b:23:1d:e0:6a:e6:d6:59:6b:21: 19:96:7f:d8:ec:55:9c:ec:f1:ed:bd:da:2b:1a:7a:e0:e4:18: c5:97:7c:ca:40:c6:de:91:76:54:f5:ea:5f:f3:fc:56:c3:59: 45:17:e9:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtJlUN1cdNHy5QbHFlHagyV/LlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNTA2MDgwNzI1NDFaFw0yNTA2MTExOTE3NDFaMDMxMTAvBgNV BAMTKEQ5QzhENkM5N0ZGOEUyREY5NkMwMDYyOTlFOUI0NDkyMTQxN0E3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUyt+t+Bu6Gv5PhCtMXFcIWC28 h9yCRuU1hLzuPC5fAdY6ownGMLvp22FgHucXeVyRYtGa33hhOWdBvkXdm8gYKpEO 0hG+hQIoozG5muRkqCV0le21G55GL1Xcxf7TKViZBR9h5n1w5bxGkUUvMOKwuoEW /ct+il4i6mz2YbCEunmUMcarf99dSlOhLiBlvHcC3EFv3egpjZ3300GtDlEw1AdI pDSFfQaze6jqP6hlGA7Slgphp30kCbncvP3NmVii5de29lctptHA9N7MxdLIZymt KatGYjwU7BIXLjjjjXjh3c5Wf15u0PXNn0i/STm7L4Ioj3LENfsSnF2IHuwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2cjWyX/44t+WwAYpnptEkhQXp14wHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrPEx0yqA6LQRI+UcFkoz7FrjzZaatXCgkg LDZSpRCkYWbTdSLO2+L/dfQPEVaL0I4TdcBErG6G/Nh75CeBuNurG/2uqnk20Ioo n7XB+Z+UWRQfW6Wox+9jtbTAEQbhUf2v4bo/z9OgT5KZeUsEXze4zOFaJvvb/xb0 rtvDc8Z1rgWW6fU5mgFkK1BIaNDHf/bA1nuaJMimxI3BAP0697K/5Ohg0UrgTzZ5 0tV9BGcEIjVy0tuufRcmYcrrqeMKqHvnlXSly3FjFdqEOz9qOyMd4Grm1llrIRmW f9jsVZzs8e292isaeuDkGMWXfMpAxt6RdlT16l/z/FbDWUUX6Ro= -----END CERTIFICATE-----Generated at Sun Jun 8 09:14:37 2025 by rpki-client