$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json) Hash identifier: v413BC53rOTaxKCtNpt4B/eIVGSG98oz1uiQrBUIF44= Subject key identifier: 34:58:3A:1D:D1:5C:86:EA:DF:0B:D0:0A:7F:CB:83:A0:E2:75:E3:89 Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Certificate serial: 0C17E9931E80A10C22343371C932B6B4EB4A94B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft Manifest number: 78 Signing time: Wed 06 Aug 2025 11:50:02 +0000 Manifest this update: Wed 06 Aug 2025 11:45:02 +0000 Manifest next update: Sat 09 Aug 2025 13:53:02 +0000 Files and hashes: 1: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: 9K+uxTdKqDq5EWYUbdzGbSolV+FYMJ9WzO5ZstpYAOs=) 2: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: cvyj6LKtTOVBTWTHZighgw+CFWQteArr8dC6m6wOVeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:17:e9:93:1e:80:a1:0c:22:34:33:71:c9:32:b6:b4:eb:4a:94:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Validity Not Before: Aug 6 11:45:02 2025 GMT Not After : Aug 9 13:53:02 2025 GMT Subject: CN=34583A1DD15C86EADF0BD00A7FCB83A0E275E389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:48:36:bd:02:f1:7e:56:3e:19:c5:ea:f5:a6: 2e:ed:ee:da:94:7f:ca:99:5f:1b:bf:df:a6:03:9b: 79:f5:eb:a7:9a:4e:aa:7c:d4:48:87:0b:cf:d8:b2: ae:49:da:f3:7d:1b:6b:69:82:77:85:85:9e:7b:32: 21:1d:08:2f:af:17:b3:91:0a:7c:65:6f:cd:29:5e: 95:75:79:7b:00:41:1f:5e:63:4d:48:d4:ae:a6:15: 60:5f:fd:22:e6:09:3a:0b:39:6c:7d:6b:0a:7e:f7: 7b:c0:46:87:96:d9:e2:5d:aa:1f:52:b9:69:2f:74: 66:4c:5d:3e:90:4d:24:83:c5:d8:ad:f0:b1:72:69: 05:78:8d:43:74:65:18:03:13:38:47:66:b0:18:bc: c1:c6:5b:50:f0:f0:69:d2:70:cf:16:74:e8:27:75: 67:42:f5:17:8b:45:28:ce:7d:e2:5b:6b:c5:ef:35: 6f:a6:b6:2a:78:23:b1:b4:94:e6:0f:eb:b3:8f:0e: 91:a4:2b:af:78:97:b3:d1:f9:35:f4:32:1d:41:7d: 0b:c8:13:91:e5:51:a3:b7:a8:d2:d7:48:4d:eb:04: 01:0a:a8:1c:4e:f2:22:cc:1a:be:f4:dd:67:4e:f3: 25:2f:82:34:9e:f1:41:89:db:ef:f0:3e:a7:b0:9a: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:58:3A:1D:D1:5C:86:EA:DF:0B:D0:0A:7F:CB:83:A0:E2:75:E3:89 X509v3 Authority Key Identifier: keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:77:d2:6e:71:b6:62:04:87:e3:a2:df:ba:6f:3c:59:13:9e: 86:c4:cf:d2:6d:62:e3:b4:e2:bc:22:79:26:9c:8f:ac:dd:12: cb:80:85:d8:96:f8:b1:01:2c:0e:f2:86:e7:93:22:e0:99:4c: ab:81:8d:31:09:9e:c3:1b:cc:1f:37:60:d2:18:dd:e1:c6:0b: 56:2d:a3:8e:b7:cf:49:b4:93:13:fe:ec:ac:f0:77:69:17:bc: e7:9c:f0:53:5b:97:ad:6b:2b:63:8b:d2:bf:9a:2f:02:ac:f8: 00:8b:1b:e0:26:12:af:e4:7b:2b:84:b5:9d:fb:ba:94:06:4e: 54:63:ec:66:4d:dd:f4:ba:e6:a3:8a:58:e0:6c:7f:ea:dc:b6: bf:a3:de:c2:da:0d:86:79:7d:2d:b3:b6:0b:53:c4:2d:fe:3d: 28:e1:28:33:dd:71:52:ce:82:1e:0e:65:c8:64:dd:d5:20:6f: 48:26:5e:e6:18:2e:b8:66:08:20:6e:e6:c8:da:2f:4d:c5:ea: 10:c6:4d:3b:03:1f:c7:48:b6:da:08:da:a7:72:c8:6f:ee:ae: c5:df:4a:e8:d4:09:d9:5a:22:1e:77:43:20:2e:2e:39:da:e5: 84:83:c9:29:0a:65:7a:65:4d:e9:7f:36:7e:41:f9:ee:fe:e5: 39:c1:dd:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBfpkx6AoQwiNDNxyTK2tOtKlLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJC NEZBMjhGMDAeFw0yNTA4MDYxMTQ1MDJaFw0yNTA4MDkxMzUzMDJaMDMxMTAvBgNV BAMTKDM0NTgzQTFERDE1Qzg2RUFERjBCRDAwQTdGQ0I4M0EwRTI3NUUzODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhSDa9AvF+Vj4Zxer1pi7t7tqU f8qZXxu/36YDm3n166eaTqp81EiHC8/Ysq5J2vN9G2tpgneFhZ57MiEdCC+vF7OR Cnxlb80pXpV1eXsAQR9eY01I1K6mFWBf/SLmCToLOWx9awp+93vARoeW2eJdqh9S uWkvdGZMXT6QTSSDxdit8LFyaQV4jUN0ZRgDEzhHZrAYvMHGW1Dw8GnScM8WdOgn dWdC9ReLRSjOfeJba8XvNW+mtip4I7G0lOYP67OPDpGkK694l7PR+TX0Mh1BfQvI E5HlUaO3qNLXSE3rBAEKqBxO8iLMGr703WdO8yUvgjSe8UGJ2+/wPqewmtnlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNFg6HdFchurfC9AKf8uDoOJ144kwHwYDVR0j BBgwFoAU07Ddu44H/NmKOZyQxbP8MrT6KPAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDlmOThmMy03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC9EM0IwRERCQjhF MDdGQ0Q5OEEzOTlDOTBDNUIzRkMzMkI0RkEyOEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJCNEZB MjhGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q5Zjk4ZjMtNzJmMC00MDA2LWJl OTktYjlhOWU4ZDlkMmJmLzAvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZD MzJCNEZBMjhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADh30m5xtmIEh+Oi37pvPFkTnobEz9JtYuO0 4rwieSacj6zdEsuAhdiW+LEBLA7yhueTIuCZTKuBjTEJnsMbzB83YNIY3eHGC1Yt o463z0m0kxP+7Kzwd2kXvOec8FNbl61rK2OL0r+aLwKs+ACLG+AmEq/keyuEtZ37 upQGTlRj7GZN3fS65qOKWOBsf+rctr+j3sLaDYZ5fS2ztgtTxC3+PSjhKDPdcVLO gh4OZchk3dUgb0gmXuYYLrhmCCBu5sjaL03F6hDGTTsDH8dIttoI2qdyyG/ursXf SujUCdlaIh53QyAuLjna5YSDySkKZXplTel/Nn5B+e7+5TnB3Qw= -----END CERTIFICATE-----Generated at Thu Aug 7 11:14:22 2025 by rpki-client