$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: jV0hcLyY/lNtINlvOp5863lUiTJHcDjm2LKS30KcM/Q= Subject key identifier: B2:A4:FE:0F:1F:89:38:6B:2D:41:D7:E1:1F:EC:13:74:16:11:CA:54 Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 1FF7CD3CC019D9956D446AC1420F9B31982FEEE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: A6 Signing time: Thu 19 Jun 2025 00:21:55 +0000 Manifest this update: Thu 19 Jun 2025 00:16:55 +0000 Manifest next update: Sun 22 Jun 2025 06:36:55 +0000 Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: n4yqQXKL8SMuRwuqEpnuanjaf2DYDnDTnHlImB+5QWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f7:cd:3c:c0:19:d9:95:6d:44:6a:c1:42:0f:9b:31:98:2f:ee:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Jun 19 00:16:55 2025 GMT Not After : Jun 22 06:36:55 2025 GMT Subject: CN=B2A4FE0F1F89386B2D41D7E11FEC13741611CA54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:30:1d:69:08:d5:c8:cf:27:9d:5e:27:c0: 18:d5:8f:88:3f:55:2f:b9:1e:ac:01:85:78:f7:27: 32:d6:69:76:41:e6:05:55:13:f6:6d:17:77:01:b3: 60:18:f1:22:7a:5d:37:c5:7f:f1:77:62:f7:ec:ed: 60:73:8a:ec:30:6d:d2:86:5b:48:22:7b:95:17:d6: a9:0e:da:e3:0b:9d:9b:23:21:41:ec:27:b7:b0:46: 1e:94:36:82:a9:33:06:02:80:a5:63:2b:41:c4:40: 26:b4:e8:8b:b7:31:23:e4:f3:2e:2f:60:bf:bd:c2: fb:c2:b2:c7:1d:c2:2c:e6:3b:22:69:03:d6:17:fd: 43:e3:3f:68:a2:e8:28:ff:6a:0a:04:0e:83:c7:71: 22:da:14:99:d5:fe:4c:de:ce:ab:d9:3a:fe:bf:ff: 17:1b:87:61:f0:85:8a:60:98:77:96:46:49:fe:66: 00:67:f6:90:7b:da:16:ea:5a:51:71:99:d5:a2:d9: a6:3a:06:f1:4e:d1:80:4e:b1:48:5f:34:7f:ba:35: 9a:c8:a7:87:3d:cd:41:2b:e0:ec:d8:53:93:fe:f2: af:8d:f2:6a:3a:f8:bb:81:af:98:50:f4:e8:62:17: 1b:9f:40:a6:09:1b:a1:c2:1f:61:ae:ed:62:7f:99: 83:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A4:FE:0F:1F:89:38:6B:2D:41:D7:E1:1F:EC:13:74:16:11:CA:54 X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:9e:48:01:54:d6:0f:7c:19:10:f1:8b:30:7b:39:5f:33:66: 9b:53:29:b6:59:df:c0:6f:2e:91:d2:7a:ba:d6:06:d9:47:05: 1b:ad:63:5a:cd:bf:e1:28:89:b2:32:cb:4c:00:72:4b:39:45: 04:28:8b:9a:c3:47:05:80:dc:40:e9:ce:2e:33:f6:a8:9c:48: 47:76:64:58:30:a7:d0:9a:5f:c5:02:8b:54:e5:f0:84:18:64: 86:8d:bd:d8:11:d6:a7:a7:d4:32:ce:b9:8a:38:90:14:77:62: f6:2b:bf:ef:2e:0b:01:2e:de:89:15:4a:90:17:a7:17:3d:4f: b8:34:0f:2c:8a:84:05:8b:6c:15:e1:06:9f:39:8e:7b:9d:75: 59:9c:ec:0d:9d:90:0e:99:81:4c:c0:c5:67:0a:43:b4:d0:d1: e9:34:e5:85:5b:9e:dc:0c:b1:d0:41:33:41:76:e4:8c:6b:13: cb:69:10:88:d3:17:e8:b7:06:0b:df:a8:2c:74:1d:21:01:15: f8:f3:af:b9:46:8a:6a:f0:4e:91:30:4d:a6:46:32:92:97:ce: 8f:84:6f:a0:5f:8e:41:ba:0f:a5:84:f5:74:31:64:96:27:0b: d0:18:69:93:bc:25:1b:1d:81:6e:24:c6:43:8e:42:db:5f:b8: e6:60:a2:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/fNPMAZ2ZVtRGrBQg+bMZgv7uYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTA2MTkwMDE2NTVaFw0yNTA2MjIwNjM2NTVaMDMxMTAvBgNV BAMTKEIyQTRGRTBGMUY4OTM4NkIyRDQxRDdFMTFGRUMxMzc0MTYxMUNBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kzAdaQjVyM8nnV4nwBjVj4g/ VS+5HqwBhXj3JzLWaXZB5gVVE/ZtF3cBs2AY8SJ6XTfFf/F3Yvfs7WBziuwwbdKG W0gie5UX1qkO2uMLnZsjIUHsJ7ewRh6UNoKpMwYCgKVjK0HEQCa06Iu3MSPk8y4v YL+9wvvCsscdwizmOyJpA9YX/UPjP2ii6Cj/agoEDoPHcSLaFJnV/kzezqvZOv6/ /xcbh2HwhYpgmHeWRkn+ZgBn9pB72hbqWlFxmdWi2aY6BvFO0YBOsUhfNH+6NZrI p4c9zUEr4OzYU5P+8q+N8mo6+LuBr5hQ9OhiFxufQKYJG6HCH2Gu7WJ/mYP/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsqT+Dx+JOGstQdfhH+wTdBYRylQwHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWeSAFU1g98GRDxizB7OV8zZptTKbZZ38Bv LpHSerrWBtlHBRutY1rNv+EoibIyy0wAcks5RQQoi5rDRwWA3EDpzi4z9qicSEd2 ZFgwp9CaX8UCi1Tl8IQYZIaNvdgR1qen1DLOuYo4kBR3YvYrv+8uCwEu3okVSpAX pxc9T7g0DyyKhAWLbBXhBp85jnuddVmc7A2dkA6ZgUzAxWcKQ7TQ0ek05YVbntwM sdBBM0F25IxrE8tpEIjTF+i3BgvfqCx0HSEBFfjzr7lGimrwTpEwTaZGMpKXzo+E b6BfjkG6D6WE9XQxZJYnC9AYaZO8JRsdgW4kxkOOQttfuOZgorE= -----END CERTIFICATE-----Generated at Fri Jun 20 17:18:02 2025 by rpki-client