$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: Kuyn0xWpEWIlZdC6Di4cBBGGv9zI0cSAdSq7GeHqdY4= Subject key identifier: 0C:49:08:48:AC:3F:C2:F7:91:6E:88:64:BC:8D:7B:AF:F3:D5:7B:A9 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 7B1A691C360A3CEF1F2DD20074B111695A6120A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 01D2 Signing time: Tue 04 Nov 2025 00:40:42 +0000 Manifest this update: Tue 04 Nov 2025 00:35:42 +0000 Manifest next update: Fri 07 Nov 2025 01:48:42 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: E+3MCT1Wx0dJRWqIMacX7EaYTEjTEy9urvqTwnaJ+Ro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1a:69:1c:36:0a:3c:ef:1f:2d:d2:00:74:b1:11:69:5a:61:20:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Nov 4 00:35:42 2025 GMT Not After : Nov 7 01:48:42 2025 GMT Subject: CN=0C490848AC3FC2F7916E8864BC8D7BAFF3D57BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d4:17:f5:1f:fb:2c:12:c3:93:9e:5d:76:8d: e3:33:6c:99:f2:95:4d:2f:b4:2e:a2:3b:2c:80:57: c7:01:fc:c1:3b:4e:6e:fb:e5:18:8b:46:ba:65:74: c8:48:c8:ac:ed:83:9a:d7:32:92:6e:52:5d:9e:18: 9f:12:23:66:b5:52:45:d5:e8:18:72:db:4f:13:b7: e4:6a:1c:4c:bc:c5:7b:d4:64:23:29:e2:71:13:7d: 98:47:a4:ca:1e:a7:48:c3:c0:c7:42:c3:67:2f:58: 89:95:89:9c:37:a5:40:c8:0b:26:82:d4:eb:1e:7d: d4:1f:1c:dd:89:04:cd:db:f7:48:42:6d:85:04:51: 55:a7:f2:52:51:8f:4f:41:d4:ff:e8:d3:25:ce:ae: 08:88:2c:57:12:16:fd:2c:a7:01:02:fb:a3:0c:8b: dc:c0:61:e0:21:83:3a:88:3e:06:18:b5:07:e4:9a: 62:e0:0c:18:21:43:b7:b7:33:4e:4a:96:02:7d:83: 38:d6:f0:d0:c0:9e:7d:3b:5e:a1:ca:0e:80:62:b6: 4b:78:7e:28:41:81:c9:c3:e2:24:09:56:0f:c5:59: e8:c6:b5:4b:41:21:39:72:73:09:7e:1c:ab:3e:42: 81:05:2b:9e:5b:c2:75:86:da:09:4b:56:0a:ca:53: 88:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:49:08:48:AC:3F:C2:F7:91:6E:88:64:BC:8D:7B:AF:F3:D5:7B:A9 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:fb:2f:df:50:f8:c9:ad:a3:9b:c4:8c:5d:19:50:a1:96:cb: a4:32:f5:0b:e4:8c:40:1a:5e:c2:7f:26:14:7c:a6:7f:09:68: dd:ce:a4:32:47:28:ae:be:c8:d7:d6:25:03:eb:8b:d7:0f:57: 28:37:c9:a4:cb:5a:e7:f8:4a:11:6d:32:6f:50:a0:e5:2f:cf: 98:f9:5f:d1:da:d2:f0:21:1d:eb:b1:c8:84:3c:09:a4:bf:93: 9a:09:86:39:40:4d:db:c6:d5:7b:7d:b4:37:ab:fa:c1:a5:6a: 0d:ed:bd:40:45:17:29:6a:c5:30:29:9e:b0:bd:78:5b:61:da: bc:4a:66:63:4d:98:fd:2e:f6:0d:b3:27:5b:06:7f:af:ae:a5: 8e:e1:34:3b:59:df:81:52:0f:99:8c:87:a6:f0:29:0f:63:c6: 8a:88:62:8a:55:50:2c:a5:91:16:1f:ad:28:a1:4f:05:49:25: 79:8d:b4:1b:ab:61:2c:6b:75:50:2f:bf:07:61:cb:27:5e:f0: b5:05:f9:0c:00:93:0f:d6:de:20:9a:b5:7b:6e:af:61:55:ae: c0:2b:15:d6:84:18:2d:92:3e:53:b5:22:d1:b1:d1:a6:84:33: 2b:6f:13:49:3d:33:15:13:ba:4f:be:1c:3a:2b:56:56:57:1d: c2:72:d3:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexppHDYKPO8fLdIAdLERaVphIKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNTExMDQwMDM1NDJaFw0yNTExMDcwMTQ4NDJaMDMxMTAvBgNV BAMTKDBDNDkwODQ4QUMzRkMyRjc5MTZFODg2NEJDOEQ3QkFGRjNENTdCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt1Bf1H/ssEsOTnl12jeMzbJny lU0vtC6iOyyAV8cB/ME7Tm775RiLRrpldMhIyKztg5rXMpJuUl2eGJ8SI2a1UkXV 6Bhy208Tt+RqHEy8xXvUZCMp4nETfZhHpMoep0jDwMdCw2cvWImViZw3pUDICyaC 1OsefdQfHN2JBM3b90hCbYUEUVWn8lJRj09B1P/o0yXOrgiILFcSFv0spwEC+6MM i9zAYeAhgzqIPgYYtQfkmmLgDBghQ7e3M05KlgJ9gzjW8NDAnn07XqHKDoBitkt4 fihBgcnD4iQJVg/FWejGtUtBITlycwl+HKs+QoEFK55bwnWG2glLVgrKU4jJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDEkISKw/wveRbohkvI17r/PVe6kwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFb7L99Q+Mmto5vEjF0ZUKGWy6Qy9QvkjEAa XsJ/JhR8pn8JaN3OpDJHKK6+yNfWJQPri9cPVyg3yaTLWuf4ShFtMm9QoOUvz5j5 X9Ha0vAhHeuxyIQ8CaS/k5oJhjlATdvG1Xt9tDer+sGlag3tvUBFFylqxTApnrC9 eFth2rxKZmNNmP0u9g2zJ1sGf6+upY7hNDtZ34FSD5mMh6bwKQ9jxoqIYopVUCyl kRYfrSihTwVJJXmNtBurYSxrdVAvvwdhyyde8LUF+QwAkw/W3iCatXtur2FVrsAr FdaEGC2SPlO1ItGx0aaEMytvE0k9MxUTuk++HDorVlZXHcJy030= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:43 2025 by rpki-client