$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: OOyl3QaAoWEtHEME9Tm+eeGdbxI0ro8sUDpMNmjrW1g= Subject key identifier: F5:75:1B:9C:A6:D8:7E:A5:BC:EE:B5:C9:9B:71:7B:CC:AE:82:88:9E Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 11FC1C5F1313DB09F202C8CE11613F51D036EB21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 0105 Signing time: Thu 07 Aug 2025 23:21:10 +0000 Manifest this update: Thu 07 Aug 2025 23:16:10 +0000 Manifest next update: Mon 11 Aug 2025 05:30:10 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: IkVSPTbnxz+4zECSqkTgBzsspsjGBnt/5t47S68RnvU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 05:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:fc:1c:5f:13:13:db:09:f2:02:c8:ce:11:61:3f:51:d0:36:eb:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Aug 7 23:16:10 2025 GMT Not After : Aug 11 05:30:10 2025 GMT Subject: CN=F5751B9CA6D87EA5BCEEB5C99B717BCCAE82889E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:42:0a:c8:1e:5f:4d:80:18:b3:28:50:e3:1f: cb:36:9c:15:9a:e6:4a:b1:91:2d:60:91:5a:8f:30: a4:26:98:29:b3:a0:41:8f:97:4c:f3:af:35:bf:1b: a2:50:5d:59:9d:58:6a:88:d6:ba:c5:e9:75:38:48: 93:19:d2:52:ee:49:a8:d7:39:57:49:09:c8:17:f4: 6d:90:90:0f:a8:f0:ea:67:d4:25:34:a3:6a:fa:7b: ae:09:bf:ff:83:1b:be:97:a5:79:14:a1:3e:36:15: 28:64:cf:45:3f:e6:e5:56:45:0e:a9:4a:17:50:f1: 2a:96:95:e4:da:f3:39:62:3e:d4:74:cf:44:9d:03: 79:76:96:38:d2:41:68:34:ab:e0:24:73:76:5e:69: b0:ba:d8:23:1a:4b:8d:e3:d9:3c:8b:37:07:f5:1b: dd:e1:a7:0d:64:e3:44:a2:e6:3d:91:b2:fd:d6:3d: 26:8b:93:61:35:94:f1:df:a8:b4:d3:d5:d8:03:0a: 1f:b9:b1:7b:26:75:49:7b:f8:32:00:bf:8c:1e:8e: 28:20:7a:4f:14:56:d6:09:b8:2d:e6:12:f0:96:3f: 2b:1f:af:82:de:a7:6a:ab:b0:b4:c0:e2:8c:9d:6e: 2c:51:83:47:cc:da:e6:c5:bd:5a:7b:b7:26:30:7c: c8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:75:1B:9C:A6:D8:7E:A5:BC:EE:B5:C9:9B:71:7B:CC:AE:82:88:9E X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e4:8f:ac:b6:dd:6b:5e:9b:92:57:46:51:10:d6:46:c2:32: 8e:dc:cc:53:ef:73:11:26:8f:c5:23:be:74:03:11:fa:05:33: 20:8b:ee:3e:98:ad:f2:83:55:da:03:b9:bf:de:3a:25:12:4d: 76:dd:d8:64:3b:20:b0:96:74:95:99:a9:6e:57:2b:a6:08:6d: bd:19:94:78:86:bf:69:d8:fc:27:6f:d6:53:9e:99:38:f4:13: 18:4a:2d:81:82:35:d4:48:79:8f:75:74:89:6b:c2:b0:7a:6f: 6b:34:cb:9a:b8:a7:ae:69:8d:81:7d:21:1d:e7:3f:ef:b8:04: d6:6d:64:2f:3d:2d:d6:67:03:97:98:48:c2:3c:5c:2d:56:49: 1f:b8:a2:ee:de:e3:69:91:b9:84:b3:94:a1:b3:c2:fa:c8:40: 58:1b:58:6b:a5:24:34:88:19:5d:9d:55:8e:f8:d1:8b:c1:f8: f6:81:e2:7e:ed:87:7b:a9:28:25:cb:53:e1:54:96:e2:a9:30: 87:d0:a8:cb:05:08:a4:18:52:e5:da:87:3c:33:4c:48:6a:84: 5a:16:43:08:d1:13:1a:bb:85:bf:2e:ad:a6:ee:b1:f5:a2:84: 7b:41:6a:e0:23:65:7a:08:dd:23:2a:ab:0b:c1:b3:0a:a9:20: be:fc:f9:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEfwcXxMT2wnyAsjOEWE/UdA26yEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTA4MDcyMzE2MTBaFw0yNTA4MTEwNTMwMTBaMDMxMTAvBgNV BAMTKEY1NzUxQjlDQTZEODdFQTVCQ0VFQjVDOTlCNzE3QkNDQUU4Mjg4OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQgrIHl9NgBizKFDjH8s2nBWa 5kqxkS1gkVqPMKQmmCmzoEGPl0zzrzW/G6JQXVmdWGqI1rrF6XU4SJMZ0lLuSajX OVdJCcgX9G2QkA+o8Opn1CU0o2r6e64Jv/+DG76XpXkUoT42FShkz0U/5uVWRQ6p ShdQ8SqWleTa8zliPtR0z0SdA3l2ljjSQWg0q+Akc3ZeabC62CMaS43j2TyLNwf1 G93hpw1k40Si5j2Rsv3WPSaLk2E1lPHfqLTT1dgDCh+5sXsmdUl7+DIAv4wejigg ek8UVtYJuC3mEvCWPysfr4Lep2qrsLTA4oydbixRg0fM2ubFvVp7tyYwfMjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9XUbnKbYfqW87rXJm3F7zK6CiJ4wHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrkj6y23Wtem5JXRlEQ1kbCMo7czFPvcxEm j8UjvnQDEfoFMyCL7j6YrfKDVdoDub/eOiUSTXbd2GQ7ILCWdJWZqW5XK6YIbb0Z lHiGv2nY/Cdv1lOemTj0ExhKLYGCNdRIeY91dIlrwrB6b2s0y5q4p65pjYF9IR3n P++4BNZtZC89LdZnA5eYSMI8XC1WSR+4ou7e42mRuYSzlKGzwvrIQFgbWGulJDSI GV2dVY740YvB+PaB4n7th3upKCXLU+FUluKpMIfQqMsFCKQYUuXahzwzTEhqhFoW QwjRExq7hb8urabusfWihHtBauAjZXoI3SMqqwvBswqpIL78+U8= -----END CERTIFICATE-----Generated at Sat Aug 9 20:32:44 2025 by rpki-client