$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: JOmoYjx4r0DpwCf9KoSydm2ndnhWoXubHnAVpUPIyy4= Subject key identifier: 00:66:BF:1A:EB:00:9A:1B:29:B1:7E:45:9A:C4:66:1D:6F:A3:95:24 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 311BFD5A3013B72E5C1EE4CB9C512E033BE7296E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 021B Signing time: Thu 16 Apr 2026 10:30:49 +0000 Manifest this update: Thu 16 Apr 2026 10:25:49 +0000 Manifest next update: Sun 19 Apr 2026 22:01:49 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: aXccX6UpWwq7XLClun4qoLEYSkTs9yH6ixYJ18Dte10=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 22:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1b:fd:5a:30:13:b7:2e:5c:1e:e4:cb:9c:51:2e:03:3b:e7:29:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Apr 16 10:25:49 2026 GMT Not After : Apr 19 22:01:49 2026 GMT Subject: CN=0066BF1AEB009A1B29B17E459AC4661D6FA39524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:88:69:9e:4f:f8:54:ee:ff:a9:e7:28:1b: 14:07:53:32:2a:8c:9f:73:c6:11:24:31:c3:27:4c: aa:4d:e1:15:4e:d2:b2:e9:85:31:8f:fd:a9:61:06: 03:ca:da:6f:f7:46:2f:4c:73:7b:49:9b:ff:37:7b: a4:11:30:20:9b:6b:45:86:1a:aa:a6:e1:05:05:b8: fb:38:9f:33:bc:fd:de:00:49:a8:bf:97:11:cb:51: 94:2a:1c:15:dd:2d:75:a7:38:34:c7:a4:5d:b8:01: ac:71:13:a6:55:47:b7:56:ed:05:06:90:e7:af:92: 90:02:4f:56:37:b6:7e:06:ae:dd:64:7a:4c:ee:e8: 40:41:4d:58:43:8e:8e:66:00:80:7b:01:34:b4:5a: 7f:9c:b5:3d:c4:42:0e:f1:50:d0:fd:77:ca:27:8b: 6d:a6:25:f4:dc:4c:cd:59:5d:36:65:03:9d:4c:8c: a5:01:f7:b9:59:d4:70:15:32:b6:ba:26:e9:fb:95: c4:51:96:f7:01:39:2a:2f:fd:c5:8b:85:25:f0:67: 5b:cc:1b:7f:2e:b7:29:77:fd:99:86:4d:e0:1d:a4: f8:2a:27:aa:61:e5:16:4d:b4:8b:60:37:cb:00:d2: d0:00:4f:ad:d7:e0:de:c0:04:54:cd:66:25:5e:09: fb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:66:BF:1A:EB:00:9A:1B:29:B1:7E:45:9A:C4:66:1D:6F:A3:95:24 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6c:ee:28:e5:c2:55:d8:96:e1:6e:27:8d:00:a5:92:57:40: 9f:b6:5e:67:52:4a:8d:2f:19:de:0b:59:39:65:98:5a:56:c8: 8e:07:ff:2e:80:0d:59:a4:79:38:f6:15:d2:27:e3:90:00:50: d8:40:f6:e2:f6:bd:6a:61:79:1f:ce:47:7a:9c:83:49:a3:33: 83:45:8d:02:98:3e:70:36:21:97:fb:22:88:bb:3a:ec:c7:39: 0f:6e:19:cb:43:0f:80:9f:c3:d8:a8:93:90:8e:c7:8e:40:27: 40:1f:bb:80:ad:33:7c:3a:5f:e1:d4:00:c6:45:c8:a4:44:91: ff:9e:48:5c:69:61:75:05:0d:ce:da:a2:d5:c5:2f:88:22:1d: 4d:d1:5f:29:5d:7d:2d:1e:17:3d:a7:b8:14:72:4d:7d:d0:67: 84:b5:30:56:8f:35:56:9d:c5:ad:70:49:79:31:f0:73:a2:b6: e9:b5:20:22:bf:e7:81:cb:08:21:ec:b4:70:a3:ce:e0:b9:52: 2a:39:f1:2c:28:05:f6:6c:74:9d:78:e9:29:23:0c:86:2f:8b: 9e:4c:e3:3c:4c:e8:67:2f:89:5a:cc:25:91:08:a8:93:ec:39: ac:80:10:65:2e:8e:2e:fa:f6:9d:7f:1f:c5:ab:48:e5:b9:ec: 48:3b:ab:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRv9WjATty5cHuTLnFEuAzvnKW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNjA0MTYxMDI1NDlaFw0yNjA0MTkyMjAxNDlaMDMxMTAvBgNV BAMTKDAwNjZCRjFBRUIwMDlBMUIyOUIxN0U0NTlBQzQ2NjFENkZBMzk1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC514hpnk/4VO7/qecoGxQHUzIq jJ9zxhEkMcMnTKpN4RVO0rLphTGP/alhBgPK2m/3Ri9Mc3tJm/83e6QRMCCba0WG Gqqm4QUFuPs4nzO8/d4ASai/lxHLUZQqHBXdLXWnODTHpF24AaxxE6ZVR7dW7QUG kOevkpACT1Y3tn4Grt1kekzu6EBBTVhDjo5mAIB7ATS0Wn+ctT3EQg7xUND9d8on i22mJfTcTM1ZXTZlA51MjKUB97lZ1HAVMra6Jun7lcRRlvcBOSov/cWLhSXwZ1vM G38utyl3/ZmGTeAdpPgqJ6ph5RZNtItgN8sA0tAAT63X4N7ABFTNZiVeCfu/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAGa/GusAmhspsX5FmsRmHW+jlSQwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1s7ijlwlXYluFuJ40ApZJXQJ+2XmdSSo0v Gd4LWTllmFpWyI4H/y6ADVmkeTj2FdIn45AAUNhA9uL2vWpheR/OR3qcg0mjM4NF jQKYPnA2IZf7Ioi7OuzHOQ9uGctDD4Cfw9iok5COx45AJ0Afu4CtM3w6X+HUAMZF yKREkf+eSFxpYXUFDc7aotXFL4giHU3RXyldfS0eFz2nuBRyTX3QZ4S1MFaPNVad xa1wSXkx8HOitum1ICK/54HLCCHstHCjzuC5Uio58SwoBfZsdJ146SkjDIYvi55M 4zxM6GcviVrMJZEIqJPsOayAEGUuji769p1/H8WrSOW57Eg7q4s= -----END CERTIFICATE-----Generated at Fri Apr 17 19:12:23 2026 by rpki-client