$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: 6HP1DO8R8YjtB53eMYjYAS3FIu/TfiMebRWyl2sbaDc= Subject key identifier: C5:F3:7A:BA:AA:34:85:DF:EA:24:E7:A4:0F:8C:91:2B:D8:77:20:61 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 71154944B7869C899383C698630438B784903895 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 0193 Signing time: Sun 15 Jun 2025 04:00:41 +0000 Manifest this update: Sun 15 Jun 2025 03:55:41 +0000 Manifest next update: Wed 18 Jun 2025 10:40:41 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: mwyWJjx9ebnzTSNOWZtM7LJEr97601b1v2Qdzek/5Ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:15:49:44:b7:86:9c:89:93:83:c6:98:63:04:38:b7:84:90:38:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Jun 15 03:55:41 2025 GMT Not After : Jun 18 10:40:41 2025 GMT Subject: CN=C5F37ABAAA3485DFEA24E7A40F8C912BD8772061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:91:df:ed:be:17:28:e1:a6:e9:6c:bd:44:c5: 01:d9:3b:93:a1:6c:4f:bf:09:0c:95:93:8b:4c:fe: 85:ce:4d:5b:a4:b7:7b:7f:1b:30:3d:12:36:c4:6e: e9:14:a9:c0:3c:0e:f3:0a:39:79:5a:d0:4c:68:23: cb:64:34:93:8f:84:b3:25:d9:e2:6a:2d:41:73:15: b4:62:32:83:57:f2:d5:78:26:ee:03:fc:26:87:14: 2a:90:04:ca:d6:f7:06:ea:61:03:84:80:71:56:15: 69:5c:ca:f0:df:1b:ad:e6:4a:8a:fa:16:67:9a:0a: 9d:01:be:d2:8a:01:0e:b7:2b:ac:fc:a3:ee:21:f7: 33:81:c0:ab:7c:cb:6c:69:eb:5b:c8:79:00:13:cc: bd:a1:34:2b:5d:2d:4b:0b:ed:60:40:f3:b9:9f:be: e1:c5:95:aa:3a:c9:b3:8d:df:3c:22:e5:3f:30:f4: e1:5b:61:73:6d:21:29:cf:60:83:e5:6f:c0:a2:f3: 02:0f:8d:ce:5d:6e:db:0b:43:20:f4:6f:00:13:d8: 15:4c:19:ad:4f:a3:2d:21:ac:e9:ee:2a:4a:bd:79: 9a:f9:23:f5:68:56:6b:d8:f0:c7:12:16:b2:b8:24: 3e:71:c4:40:f7:d8:e1:66:b2:22:b7:15:0d:f0:e7: ab:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F3:7A:BA:AA:34:85:DF:EA:24:E7:A4:0F:8C:91:2B:D8:77:20:61 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ad:46:91:c6:09:02:56:fc:20:07:df:d9:80:b6:20:e7:a3: c6:3c:eb:c9:d7:be:89:a1:8a:38:12:7b:6e:df:c3:8d:a5:79: 49:01:3f:bf:6d:a0:a5:46:a4:79:44:d1:c9:ef:27:4a:22:c3: 81:04:b5:95:14:4f:c5:b5:46:a2:a9:d5:44:7b:38:db:29:03: dd:e1:0e:7f:3c:18:b5:b3:92:f5:d0:69:95:ea:ce:d1:12:a6: b5:4e:14:53:80:e3:74:ee:ba:df:4d:37:5b:01:71:e1:5c:18: de:28:3f:40:1e:21:09:f9:6b:1d:a0:4b:15:8f:58:4c:f5:1f: d7:a5:23:8d:c6:04:68:80:62:83:2d:09:a0:7b:dc:a5:39:d8: fd:6a:e1:7f:61:b3:d4:ec:57:a2:4c:b5:19:95:8c:f6:94:d1: c3:3e:6f:a1:37:85:13:1b:c3:8a:f9:89:b0:1c:17:5c:09:f4: d3:d0:19:d2:4b:ff:42:21:24:2b:d1:a4:bf:2b:9c:3b:03:9b: 44:e9:b5:20:88:57:db:e7:9a:e4:32:9d:e0:ac:66:09:a2:0a: 07:e3:19:b7:52:48:0b:9c:9b:17:14:ad:a5:00:54:b7:a5:24: b0:03:02:9f:fc:66:25:69:b9:10:02:07:85:18:57:f3:36:b0: be:fc:ba:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRVJRLeGnImTg8aYYwQ4t4SQOJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNTA2MTUwMzU1NDFaFw0yNTA2MTgxMDQwNDFaMDMxMTAvBgNV BAMTKEM1RjM3QUJBQUEzNDg1REZFQTI0RTdBNDBGOEM5MTJCRDg3NzIwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlkd/tvhco4abpbL1ExQHZO5Oh bE+/CQyVk4tM/oXOTVukt3t/GzA9EjbEbukUqcA8DvMKOXla0ExoI8tkNJOPhLMl 2eJqLUFzFbRiMoNX8tV4Ju4D/CaHFCqQBMrW9wbqYQOEgHFWFWlcyvDfG63mSor6 FmeaCp0BvtKKAQ63K6z8o+4h9zOBwKt8y2xp61vIeQATzL2hNCtdLUsL7WBA87mf vuHFlao6ybON3zwi5T8w9OFbYXNtISnPYIPlb8Ci8wIPjc5dbtsLQyD0bwAT2BVM Ga1Poy0hrOnuKkq9eZr5I/VoVmvY8McSFrK4JD5xxED32OFmsiK3FQ3w56thAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxfN6uqo0hd/qJOekD4yRK9h3IGEwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAButRpHGCQJW/CAH39mAtiDno8Y868nXvomh ijgSe27fw42leUkBP79toKVGpHlE0cnvJ0oiw4EEtZUUT8W1RqKp1UR7ONspA93h Dn88GLWzkvXQaZXqztESprVOFFOA43Tuut9NN1sBceFcGN4oP0AeIQn5ax2gSxWP WEz1H9elI43GBGiAYoMtCaB73KU52P1q4X9hs9TsV6JMtRmVjPaU0cM+b6E3hRMb w4r5ibAcF1wJ9NPQGdJL/0IhJCvRpL8rnDsDm0TptSCIV9vnmuQyneCsZgmiCgfj GbdSSAucmxcUraUAVLelJLADAp/8ZiVpuRACB4UYV/M2sL78usw= -----END CERTIFICATE-----Generated at Sun Jun 15 17:40:14 2025 by rpki-client