$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: jYaJxW3X9vOdi/8Ox86hQjFrGMv0FltX5PBfbhPm8Zc= Subject key identifier: 89:2A:9F:C9:B4:08:0C:DA:09:F0:2B:5B:3A:46:01:35:63:58:76:7D Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 5984D2E7171D6395D3C19D36B2C41C19CAE8F069 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: 90 Signing time: Thu 01 May 2025 06:31:55 +0000 Manifest this update: Thu 01 May 2025 06:26:55 +0000 Manifest next update: Sun 04 May 2025 10:38:55 +0000 Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: dzZYbVAwGSnGJmwjO5CriLw+cSL2FBKHF5MYiLs5mn8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 10:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:84:d2:e7:17:1d:63:95:d3:c1:9d:36:b2:c4:1c:19:ca:e8:f0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: May 1 06:26:55 2025 GMT Not After : May 4 10:38:55 2025 GMT Subject: CN=892A9FC9B4080CDA09F02B5B3A4601356358767D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:51:ed:0c:53:26:76:8f:a7:40:06:7d:b9:37: e8:49:af:41:3b:6f:d6:e4:3b:fb:db:f4:f5:4d:55: 20:7a:86:18:77:55:23:c1:e1:54:3b:6b:ab:b8:e6: d7:1a:4a:6d:a3:15:ea:b3:c9:c8:4f:c1:7c:1a:6d: 5e:82:7e:d2:74:83:ec:a4:ac:6a:35:76:c5:cb:35: 14:c4:94:20:b1:5c:71:9a:ba:e4:25:88:4b:22:33: bf:ce:30:e9:8e:d0:1b:ee:81:2c:92:f1:1b:17:a5: 88:38:51:9f:8a:22:f4:32:42:cc:2f:d5:36:5b:89: 24:ac:42:92:22:84:2c:5b:35:08:36:d5:13:b5:f0: 64:22:d9:c6:35:b6:e4:89:a7:2f:a0:7e:06:01:af: 1a:d0:ac:3f:26:ac:80:ee:4f:74:b4:9d:a8:a9:79: 61:d7:db:5c:bd:8b:ed:d8:e5:83:d2:d2:d6:ee:f8: e5:9e:31:3f:55:0e:5e:94:fa:2a:3d:cc:fb:69:f4: d3:4e:81:95:e1:a4:a1:50:4a:3e:61:89:d6:e7:a7: 32:bb:08:a4:ab:2c:78:ac:c0:07:90:07:9a:aa:11: a1:82:7e:78:b2:3a:6b:2e:79:8a:c5:50:29:6e:67: d4:bb:d4:e7:34:f4:1b:73:d9:db:3b:44:a8:4f:e9: dd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2A:9F:C9:B4:08:0C:DA:09:F0:2B:5B:3A:46:01:35:63:58:76:7D X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:19:15:9f:71:2d:fd:23:9a:31:b7:a5:fb:2b:b5:27:84:d4: 65:ca:c3:d3:2f:76:8e:94:2e:39:d4:b6:83:ef:1c:3f:cd:e9: ba:b2:70:67:24:dd:b6:54:e9:be:9f:ff:b4:31:d2:ed:49:c1: f3:47:31:b4:5e:70:ec:db:e8:40:ac:5b:7e:30:c8:a7:a4:31: ca:14:89:d9:4f:27:c6:de:81:27:4a:17:8a:d9:a4:32:56:d3: 59:b3:56:89:68:11:51:a3:e4:6d:f4:62:ac:d5:9c:5f:4b:45: 7d:11:d4:3d:b7:61:48:c9:c9:cb:4b:3f:20:41:50:49:38:cc: 1b:af:82:b5:fd:db:93:79:1c:6a:66:8a:ac:86:f2:e2:55:80: 71:4d:bc:db:b5:7a:bf:a7:29:3d:a0:4f:81:70:13:0d:af:49: e0:2f:f6:83:6c:82:2e:a9:75:67:2e:ad:30:d5:a4:79:cd:89: b6:cc:44:b7:fb:8e:8b:71:60:af:04:67:90:60:d8:50:94:de: 4b:42:60:1b:3e:82:ad:d7:ea:36:d2:67:03:8f:df:c4:90:2f: 41:2d:a3:41:ca:21:07:bb:1e:ad:91:ae:7c:83:7f:4a:8d:46: a3:dd:1f:ad:09:3c:9d:7e:86:18:47:22:a3:69:07:35:d3:7f: 2a:5a:ea:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYTS5xcdY5XTwZ02ssQcGcro8GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTA1MDEwNjI2NTVaFw0yNTA1MDQxMDM4NTVaMDMxMTAvBgNV BAMTKDg5MkE5RkM5QjQwODBDREEwOUYwMkI1QjNBNDYwMTM1NjM1ODc2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeUe0MUyZ2j6dABn25N+hJr0E7 b9bkO/vb9PVNVSB6hhh3VSPB4VQ7a6u45tcaSm2jFeqzychPwXwabV6CftJ0g+yk rGo1dsXLNRTElCCxXHGauuQliEsiM7/OMOmO0BvugSyS8RsXpYg4UZ+KIvQyQswv 1TZbiSSsQpIihCxbNQg21RO18GQi2cY1tuSJpy+gfgYBrxrQrD8mrIDuT3S0naip eWHX21y9i+3Y5YPS0tbu+OWeMT9VDl6U+io9zPtp9NNOgZXhpKFQSj5hidbnpzK7 CKSrLHiswAeQB5qqEaGCfniyOmsueYrFUCluZ9S71Oc09Btz2ds7RKhP6d0hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiSqfybQIDNoJ8CtbOkYBNWNYdn0wHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQZFZ9xLf0jmjG3pfsrtSeE1GXKw9Mvdo6U LjnUtoPvHD/N6bqycGck3bZU6b6f/7Qx0u1JwfNHMbRecOzb6ECsW34wyKekMcoU idlPJ8begSdKF4rZpDJW01mzVoloEVGj5G30YqzVnF9LRX0R1D23YUjJyctLPyBB UEk4zBuvgrX925N5HGpmiqyG8uJVgHFNvNu1er+nKT2gT4FwEw2vSeAv9oNsgi6p dWcurTDVpHnNibbMRLf7jotxYK8EZ5Bg2FCU3ktCYBs+gq3X6jbSZwOP38SQL0Et o0HKIQe7Hq2RrnyDf0qNRqPdH60JPJ1+hhhHIqNpBzXTfypa6j4= -----END CERTIFICATE-----Generated at Fri May 2 16:14:40 2025 by rpki-client