$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: u4rc2Mpq+ApXnhcGXaMhelvfozRwMOxO8MHWyZd2UDU= Subject key identifier: 75:5C:4D:9A:74:AC:10:96:DA:54:0D:20:C2:B0:16:23:D3:06:C7:70 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 6AC55C63988E9AD9D7B7D21CAD0055E70CE98B29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 0206 Signing time: Sat 28 Feb 2026 04:40:47 +0000 Manifest this update: Sat 28 Feb 2026 04:35:47 +0000 Manifest next update: Tue 03 Mar 2026 14:47:47 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: FHiUSh12g1EhFc/g55urnZgEeikfnmcwY7I6Ay160E0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 14:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c5:5c:63:98:8e:9a:d9:d7:b7:d2:1c:ad:00:55:e7:0c:e9:8b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Feb 28 04:35:47 2026 GMT Not After : Mar 3 14:47:47 2026 GMT Subject: CN=755C4D9A74AC1096DA540D20C2B01623D306C770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:e6:e0:19:24:18:17:b1:e3:b4:d8:d4:a3: 9b:85:5c:93:83:af:45:35:8b:ec:8c:ac:37:fd:63: ee:bb:44:c8:57:85:7e:d2:45:38:b0:98:2d:61:ab: 71:fd:53:e0:1b:84:ad:15:52:8e:11:0f:dc:fa:c4: 1f:37:a0:18:d1:c8:52:c7:f4:80:0d:ee:8c:1a:82: 8c:df:1e:cb:01:7c:bb:aa:d2:f1:9c:b0:46:2a:6f: 3a:1f:de:ea:98:6d:4b:bf:26:a9:76:e6:f8:40:75: 6c:d7:c3:6a:b9:a8:36:ed:84:1c:7f:84:d9:f3:9a: 9c:1e:0a:76:7d:f2:7a:b9:69:b4:d2:e2:b6:b5:b6: 8b:50:ed:01:5e:74:cb:11:c5:6a:94:54:01:74:8e: 52:3a:a3:b0:b5:bc:ce:99:98:4c:9e:aa:af:99:20: e4:d6:33:80:d2:61:58:ba:31:70:72:20:d7:55:e7: 56:5b:9a:87:62:ec:d2:76:4e:80:39:fe:cd:55:2f: e6:fa:10:0a:2a:4f:58:4e:f5:8b:97:1b:fc:d6:42: 20:97:c0:a1:dd:06:0d:a3:24:53:d8:05:68:bb:17: b1:82:35:20:08:37:6d:99:33:af:37:0d:bc:25:a2: 35:e4:67:5b:ea:3c:27:56:01:15:4d:9b:fa:1d:79: 58:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5C:4D:9A:74:AC:10:96:DA:54:0D:20:C2:B0:16:23:D3:06:C7:70 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:73:8d:5f:04:0a:3b:a0:fd:e5:07:5f:76:68:1a:60:7f:7c: 3b:68:aa:65:e9:60:c0:bb:ce:ea:27:76:d3:70:ce:b4:90:41: d4:a6:3d:51:3d:64:ba:25:84:67:5d:19:46:6c:4c:23:86:35: 65:92:23:8d:61:ff:d3:a1:43:1b:bb:db:72:4b:60:76:89:b4: a2:68:d6:88:dc:3d:74:30:b8:52:b7:4f:12:97:2d:7f:31:63: ef:16:f0:a8:ad:c3:4a:fa:84:ce:94:06:55:34:89:04:ba:3d: 20:b5:ec:50:79:24:fc:be:29:7c:1e:38:b5:61:a3:b3:cf:68: 00:5a:09:7b:cf:bf:9f:01:84:95:54:c0:26:e3:00:9a:ad:cc: 6a:7e:9e:0c:52:e7:05:e9:ee:ee:1f:b9:70:9c:6d:d0:09:4e: 09:ba:bb:27:02:c4:73:f5:89:ac:c1:52:9b:90:7a:76:05:87: 71:ac:0f:18:c4:c7:d2:b7:36:20:14:d1:00:1a:d2:f2:cb:9f: ac:60:6a:bd:11:4f:28:40:7f:48:29:bf:45:76:2b:4b:1b:a1: 68:9b:5c:5a:19:2c:eb:90:d6:50:d5:66:8e:78:53:99:85:75: 8b:73:a2:d5:80:f2:58:a1:50:93:fa:17:6c:23:4e:93:22:bd: 64:39:f4:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUasVcY5iOmtnXt9IcrQBV5wzpiykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNjAyMjgwNDM1NDdaFw0yNjAzMDMxNDQ3NDdaMDMxMTAvBgNV BAMTKDc1NUM0RDlBNzRBQzEwOTZEQTU0MEQyMEMyQjAxNjIzRDMwNkM3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+ObgGSQYF7HjtNjUo5uFXJOD r0U1i+yMrDf9Y+67RMhXhX7SRTiwmC1hq3H9U+AbhK0VUo4RD9z6xB83oBjRyFLH 9IAN7owagozfHssBfLuq0vGcsEYqbzof3uqYbUu/Jql25vhAdWzXw2q5qDbthBx/ hNnzmpweCnZ98nq5abTS4ra1totQ7QFedMsRxWqUVAF0jlI6o7C1vM6ZmEyeqq+Z IOTWM4DSYVi6MXByINdV51Zbmodi7NJ2ToA5/s1VL+b6EAoqT1hO9YuXG/zWQiCX wKHdBg2jJFPYBWi7F7GCNSAIN22ZM683DbwlojXkZ1vqPCdWARVNm/odeVgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdVxNmnSsEJbaVA0gwrAWI9MGx3AwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtzjV8ECjug/eUHX3ZoGmB/fDtoqmXpYMC7 zuondtNwzrSQQdSmPVE9ZLolhGddGUZsTCOGNWWSI41h/9OhQxu723JLYHaJtKJo 1ojcPXQwuFK3TxKXLX8xY+8W8Kitw0r6hM6UBlU0iQS6PSC17FB5JPy+KXweOLVh o7PPaABaCXvPv58BhJVUwCbjAJqtzGp+ngxS5wXp7u4fuXCcbdAJTgm6uycCxHP1 iazBUpuQenYFh3GsDxjEx9K3NiAU0QAa0vLLn6xgar0RTyhAf0gpv0V2K0sboWib XFoZLOuQ1lDVZo54U5mFdYtzotWA8lihUJP6F2wjTpMivWQ59Mc= -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:25 2026 by rpki-client