$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json) Hash identifier: HVaxZ7ScSCddMwsvNF9qF2QIMSQTDwL5/ns88siiAeQ= Subject key identifier: E5:54:21:79:41:39:85:C6:B9:1A:6B:30:86:B1:9D:36:1F:48:78:90 Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Certificate serial: 6704C8F630937872BA78CBE208DA46EB40321560 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft Manifest number: A0 Signing time: Mon 03 Nov 2025 06:50:02 +0000 Manifest this update: Mon 03 Nov 2025 06:45:02 +0000 Manifest next update: Thu 06 Nov 2025 08:13:02 +0000 Files and hashes: 1: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: gLTUZb6JgE71IaF0uaffTifWIfVzi0ei8b+pTH8rGUU=) 2: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: hp0FWXodRjkZ1xCt3tnFlPQ3FclJlDZduoZ/rI+jC6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:04:c8:f6:30:93:78:72:ba:78:cb:e2:08:da:46:eb:40:32:15:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Validity Not Before: Nov 3 06:45:02 2025 GMT Not After : Nov 6 08:13:02 2025 GMT Subject: CN=E5542179413985C6B91A6B3086B19D361F487890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:fc:36:f3:99:40:27:95:bd:f2:98:a6:fd: dc:44:4a:c1:a9:a1:fa:b8:53:f0:4e:c7:2c:e2:de: 75:18:da:95:a5:84:82:d5:9f:08:53:e8:3c:04:8a: df:96:a2:d9:d2:8b:c8:61:a5:4a:4d:19:b8:fd:fd: 23:23:a6:11:cf:66:5b:27:4a:8a:3a:e2:45:17:0c: a4:7d:37:67:ce:b2:8a:56:8f:17:32:2e:89:04:4d: 1d:98:4c:00:2d:a7:91:fe:e3:df:e8:0b:27:f6:54: c6:45:83:0f:bb:07:28:b2:c1:b9:87:ae:21:6d:81: fc:71:29:31:2a:5a:a3:8e:24:87:50:e4:11:38:5f: 98:7f:b9:48:ba:b6:04:ef:33:e6:89:37:00:a4:5a: d5:b2:b5:54:c7:24:89:de:d7:b6:3e:f0:bf:d1:8d: f4:5d:34:3e:a4:c4:63:a1:4e:9f:6d:f3:bf:ad:c6: 4a:0d:41:20:88:3b:ed:ac:a5:db:0b:69:d2:10:b2: 00:91:9e:f7:74:2c:cf:4a:41:79:7a:f3:d8:fa:1d: 7e:d0:36:1e:35:82:e5:5a:97:1a:43:8b:43:46:37: 2c:30:ef:01:c0:29:c0:3f:1c:88:e6:0e:04:88:82: 55:f3:23:5d:b5:dc:43:18:29:24:86:0b:c9:04:b2: 7a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:54:21:79:41:39:85:C6:B9:1A:6B:30:86:B1:9D:36:1F:48:78:90 X509v3 Authority Key Identifier: keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:bf:a2:ab:59:8a:70:97:4f:1c:a4:bb:48:d2:0c:40:50:47: 16:b4:f5:53:97:ae:ba:77:39:ff:92:0f:10:87:ac:ef:08:6b: 7d:55:7f:ac:61:99:02:25:d3:41:68:aa:47:3e:aa:d4:48:94: 35:b4:11:dd:c6:79:06:20:cb:a7:d8:0b:78:1a:e4:d0:e6:b0: 3a:85:c1:c1:19:44:e7:a9:9a:d9:c2:2f:18:e2:38:d2:ea:62: 5b:55:69:f9:4b:5a:08:ec:27:b2:54:8c:af:c5:cd:72:cb:ee: c2:7c:53:1a:f0:f1:2e:82:f9:47:28:46:7e:cc:fe:60:5d:37: 1f:ad:c5:37:f0:9f:ee:24:46:8d:2a:a6:56:a0:c7:1c:7c:e5: 5c:ed:16:ba:48:1f:e2:e1:ab:dc:a2:ac:de:24:6a:49:92:67: 89:7b:57:7a:f0:88:fb:68:f6:21:ca:0e:90:56:c9:77:02:8e: 99:8a:da:b0:f6:6f:8d:e3:27:11:63:04:6a:45:bb:37:38:b6: 56:d4:92:8c:fd:35:11:6f:55:bb:5a:93:0a:1a:15:e7:20:cc: 27:6c:f8:ab:3f:16:2e:28:b5:b2:d5:e7:f4:ca:43:1e:be:7a: 90:42:29:e3:11:1a:c5:cf:ac:84:cd:3c:14:eb:c8:51:ab:06: b1:9c:97:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwTI9jCTeHK6eMviCNpG60AyFWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJC NEZBMjhGMDAeFw0yNTExMDMwNjQ1MDJaFw0yNTExMDYwODEzMDJaMDMxMTAvBgNV BAMTKEU1NTQyMTc5NDEzOTg1QzZCOTFBNkIzMDg2QjE5RDM2MUY0ODc4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9d/w285lAJ5W98pim/dxESsGp ofq4U/BOxyzi3nUY2pWlhILVnwhT6DwEit+WotnSi8hhpUpNGbj9/SMjphHPZlsn Soo64kUXDKR9N2fOsopWjxcyLokETR2YTAAtp5H+49/oCyf2VMZFgw+7ByiywbmH riFtgfxxKTEqWqOOJIdQ5BE4X5h/uUi6tgTvM+aJNwCkWtWytVTHJIne17Y+8L/R jfRdND6kxGOhTp9t87+txkoNQSCIO+2spdsLadIQsgCRnvd0LM9KQXl689j6HX7Q Nh41guValxpDi0NGNyww7wHAKcA/HIjmDgSIglXzI1213EMYKSSGC8kEsnqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5VQheUE5hca5GmswhrGdNh9IeJAwHwYDVR0j BBgwFoAU07Ddu44H/NmKOZyQxbP8MrT6KPAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDlmOThmMy03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC9EM0IwRERCQjhF MDdGQ0Q5OEEzOTlDOTBDNUIzRkMzMkI0RkEyOEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJCNEZB MjhGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q5Zjk4ZjMtNzJmMC00MDA2LWJl OTktYjlhOWU4ZDlkMmJmLzAvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZD MzJCNEZBMjhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJG/oqtZinCXTxyku0jSDEBQRxa09VOXrrp3 Of+SDxCHrO8Ia31Vf6xhmQIl00Foqkc+qtRIlDW0Ed3GeQYgy6fYC3ga5NDmsDqF wcEZROepmtnCLxjiONLqYltVaflLWgjsJ7JUjK/FzXLL7sJ8Uxrw8S6C+UcoRn7M /mBdNx+txTfwn+4kRo0qplagxxx85VztFrpIH+Lhq9yirN4kakmSZ4l7V3rwiPto 9iHKDpBWyXcCjpmK2rD2b43jJxFjBGpFuzc4tlbUkoz9NRFvVbtakwoaFecgzCds +Ks/Fi4otbLV5/TKQx6+epBCKeMRGsXPrITNPBTryFGrBrGclys= -----END CERTIFICATE-----Generated at Tue Nov 4 23:13:55 2025 by rpki-client