$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: HwEm6ccq+jmgl3xfKJrbhnVwNCLlH63rWxOgalEYWWE= Subject key identifier: 97:50:D9:96:25:65:D0:EF:87:B7:7E:01:31:B8:7D:48:85:6B:BF:B3 Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 1745B036F0EB570B64F5E09BB3242EA7CCEE66A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: BE Signing time: Mon 11 Aug 2025 15:31:59 +0000 Manifest this update: Mon 11 Aug 2025 15:26:59 +0000 Manifest next update: Thu 14 Aug 2025 18:50:59 +0000 Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: CMKYU7TMuXM/6tMPJAs/qsY+P9VmT8XIxXJ/k2aXzkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 18:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:45:b0:36:f0:eb:57:0b:64:f5:e0:9b:b3:24:2e:a7:cc:ee:66:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Aug 11 15:26:59 2025 GMT Not After : Aug 14 18:50:59 2025 GMT Subject: CN=9750D9962565D0EF87B77E0131B87D48856BBFB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0f:26:56:9e:d3:56:f3:98:cb:cb:39:c4:ba: b3:40:29:69:6a:74:98:f0:95:a8:7a:d7:98:a1:c7: 6a:18:aa:c0:b9:3e:c3:85:c0:a5:8c:fd:1e:50:12: 19:c9:f5:c7:1b:dc:0d:8e:bf:0d:2b:b1:13:44:df: 40:4d:5c:5f:b6:79:d3:63:62:66:24:e6:09:74:21: 1d:58:d3:c7:b2:95:64:31:44:f8:57:db:c8:6e:98: 40:c0:97:c4:0b:e8:97:9f:ce:73:2a:ba:55:5d:a6: 90:d2:84:a6:2f:f4:e4:2d:0f:32:bd:33:79:0d:ab: 19:3f:f8:b0:a2:de:7e:a8:4a:0b:43:7b:c7:99:d0: 9d:f3:1f:5e:d8:af:c5:5c:78:9a:8d:e6:b3:a1:4d: e6:70:f7:7e:e9:b3:15:81:a6:27:59:30:26:04:7d: c6:86:f8:3d:53:1f:70:42:30:78:64:4a:15:ed:31: 02:81:70:c9:8b:55:e8:13:ff:17:9f:74:2a:5c:d0: d5:b0:32:ef:db:64:10:09:0e:3d:e9:73:2b:bf:4e: ca:a8:bf:2c:ff:4a:43:eb:da:26:2b:1f:da:f7:7a: 8c:94:8a:ed:3a:57:30:f4:7a:6f:06:b3:b9:c6:dc: b9:58:da:d1:f0:e9:3e:73:2e:14:25:a4:68:20:18: c1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:50:D9:96:25:65:D0:EF:87:B7:7E:01:31:B8:7D:48:85:6B:BF:B3 X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f8:08:1b:24:c6:53:53:3d:83:97:32:b2:1b:58:46:77:94: c4:7c:8e:bf:28:f7:82:94:7d:c7:97:f9:4f:d5:66:c8:af:d7: 5f:1b:7c:cd:18:2e:34:49:71:28:73:27:d5:39:30:55:72:35: d0:4e:89:c6:a4:b8:7c:b2:df:0e:d8:8a:59:4f:cb:59:19:a7: 55:46:1c:e3:30:1d:e1:9b:9d:45:81:7d:35:80:e7:8e:43:eb: b7:4c:e2:0e:fc:90:2f:5d:b8:6e:8f:ca:44:a8:eb:6d:6a:d4: 62:a9:b6:af:e8:43:b0:b0:d6:8c:ef:bf:73:ec:e6:13:7b:ec: 51:2a:34:58:9a:69:e3:08:9c:32:56:04:b2:34:e4:08:19:6f: c2:cc:54:4d:31:a7:33:9f:cc:17:c6:23:d5:68:29:11:85:4f: 1c:b3:d7:f6:09:33:09:f2:e9:3a:6f:c7:4c:0e:c2:72:8b:6f: 31:bd:b9:70:16:72:9b:56:82:a9:37:a9:cb:2a:b8:4a:68:74: e7:f0:ac:af:00:33:5c:7e:b0:b6:ca:b3:7b:ad:fe:04:fa:48: 03:3d:c1:69:01:34:41:d1:59:2b:30:84:ed:77:b0:b4:0e:6c: 40:06:f0:47:88:30:d1:99:18:8c:8a:50:59:22:22:11:e7:45: 1b:0d:a5:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0WwNvDrVwtk9eCbsyQup8zuZqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTA4MTExNTI2NTlaFw0yNTA4MTQxODUwNTlaMDMxMTAvBgNV BAMTKDk3NTBEOTk2MjU2NUQwRUY4N0I3N0UwMTMxQjg3RDQ4ODU2QkJGQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDyZWntNW85jLyznEurNAKWlq dJjwlah615ihx2oYqsC5PsOFwKWM/R5QEhnJ9ccb3A2Ovw0rsRNE30BNXF+2edNj YmYk5gl0IR1Y08eylWQxRPhX28humEDAl8QL6JefznMqulVdppDShKYv9OQtDzK9 M3kNqxk/+LCi3n6oSgtDe8eZ0J3zH17Yr8VceJqN5rOhTeZw937psxWBpidZMCYE fcaG+D1TH3BCMHhkShXtMQKBcMmLVegT/xefdCpc0NWwMu/bZBAJDj3pcyu/Tsqo vyz/SkPr2iYrH9r3eoyUiu06VzD0em8Gs7nG3LlY2tHw6T5zLhQlpGggGMHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl1DZliVl0O+Ht34BMbh9SIVrv7MwHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABP4CBskxlNTPYOXMrIbWEZ3lMR8jr8o94KU fceX+U/VZsiv118bfM0YLjRJcShzJ9U5MFVyNdBOicakuHyy3w7YillPy1kZp1VG HOMwHeGbnUWBfTWA545D67dM4g78kC9duG6PykSo621q1GKptq/oQ7Cw1ozvv3Ps 5hN77FEqNFiaaeMInDJWBLI05AgZb8LMVE0xpzOfzBfGI9VoKRGFTxyz1/YJMwny 6Tpvx0wOwnKLbzG9uXAWcptWgqk3qcsquEpodOfwrK8AM1x+sLbKs3ut/gT6SAM9 wWkBNEHRWSswhO13sLQObEAG8EeIMNGZGIyKUFkiIhHnRRsNpW8= -----END CERTIFICATE-----Generated at Tue Aug 12 22:50:27 2025 by rpki-client