$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: EHq0vKD2xGCHNahUTXt2ZTjFbLHsW/CIoEkL7WAm9fs= Subject key identifier: E1:D5:BB:51:76:91:49:FC:FD:EB:A8:3B:26:BE:72:53:7A:33:D6:20 Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 670542FBE4E0A3E2B5B222A542FF820DCFF2047E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: B3 Signing time: Mon 04 Aug 2025 17:31:48 +0000 Manifest this update: Mon 04 Aug 2025 17:26:48 +0000 Manifest next update: Fri 08 Aug 2025 03:35:48 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: TKXDUHh1t8mtQi4naXyKvXUBHMTJG7N6MALAiE8leAU=) 2: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: ga7n/TEh5H+ok0OBoOcRz8EzNxuxDKcNI/nOkGv3NbU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:05:42:fb:e4:e0:a3:e2:b5:b2:22:a5:42:ff:82:0d:cf:f2:04:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Aug 4 17:26:48 2025 GMT Not After : Aug 8 03:35:48 2025 GMT Subject: CN=E1D5BB51769149FCFDEBA83B26BE72537A33D620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b3:a4:e8:ac:f5:de:c2:d8:83:8d:0d:f4:b5: 78:cd:82:c3:d1:02:db:b3:22:ce:8d:b1:4b:27:92: f2:dc:dc:53:79:ac:62:58:eb:63:bc:53:31:82:3c: ae:7c:30:5c:bf:1e:c9:3a:d1:bf:d0:f4:66:ea:08: 67:59:c7:e8:d8:9c:61:c3:05:ec:2d:91:ab:97:3c: 97:b2:ce:1f:96:48:e3:30:51:d2:f9:65:c1:b4:5d: ff:c6:8e:8e:92:e5:c9:08:ca:a2:52:51:07:5f:fa: 13:f3:f4:b0:83:05:7e:f5:1f:ed:4f:47:0c:88:0d: 4c:90:a8:42:9e:b7:fc:4f:93:40:7e:91:bf:37:49: bf:10:40:7b:f2:f3:f1:68:68:0d:39:07:e7:12:46: ab:78:2b:0e:b1:80:dd:b4:54:57:34:e3:81:28:1c: ea:dd:56:17:34:36:ef:ac:f3:d9:70:3a:b4:66:e8: 6a:f2:f5:2e:32:64:39:9e:cf:9e:92:6e:fa:b7:22: 15:70:fd:76:e3:f4:0a:5d:04:71:cd:0d:bb:32:41: 5f:9d:d1:81:f8:7c:95:e3:73:1f:2b:15:8b:23:19: 51:72:be:07:63:e8:00:75:9d:2f:89:2c:66:b8:00: 9a:88:40:1f:e7:38:8a:ca:91:88:03:c7:03:08:ff: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D5:BB:51:76:91:49:FC:FD:EB:A8:3B:26:BE:72:53:7A:33:D6:20 X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:99:2f:77:e8:a5:ae:f1:07:30:d4:8e:5f:b0:f3:e2:a4:27: fe:b9:ad:b9:ee:25:00:a5:e9:39:91:3f:ae:c9:8b:06:3e:e9: 7a:38:8b:46:db:20:24:2c:16:50:e5:f1:69:7d:c4:fb:15:9e: 3a:04:9e:e8:9d:84:fb:90:ab:41:e1:3d:94:2a:2e:64:29:e0: 34:c1:15:39:00:4d:9c:7e:68:7c:76:ab:ba:53:29:81:b5:13: 9b:3f:65:26:66:61:82:b2:04:3a:4d:3f:f6:75:2a:30:53:ae: cf:0e:9d:a9:1d:d6:ef:4c:dd:c0:d0:cb:0b:ef:f4:53:72:2a: b1:41:93:c4:c3:0c:e7:5d:13:0d:83:fc:f2:a0:ca:37:75:41: a2:c1:6a:11:41:44:68:09:f2:eb:a4:8e:21:00:b3:e7:82:b4: c9:ff:da:e5:72:31:43:cb:f5:0e:87:02:3f:f2:b9:ce:a5:48: f3:3b:3f:1b:d8:8c:eb:b8:fd:a4:d3:03:71:b3:d9:9a:82:71: c4:e8:08:ae:74:99:d7:47:d5:a7:44:0b:1e:5e:14:ae:95:5c: 57:69:8a:ca:4a:2b:c8:fe:cd:0b:31:2c:5d:0f:c6:d6:e5:5a: b5:d8:32:8d:79:61:6e:3f:93:14:2b:f5:c4:73:ab:ef:71:69: 55:5c:40:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwVC++Tgo+K1siKlQv+CDc/yBH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNTA4MDQxNzI2NDhaFw0yNTA4MDgwMzM1NDhaMDMxMTAvBgNV BAMTKEUxRDVCQjUxNzY5MTQ5RkNGREVCQTgzQjI2QkU3MjUzN0EzM0Q2MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDds6TorPXewtiDjQ30tXjNgsPR AtuzIs6NsUsnkvLc3FN5rGJY62O8UzGCPK58MFy/Hsk60b/Q9GbqCGdZx+jYnGHD BewtkauXPJeyzh+WSOMwUdL5ZcG0Xf/Gjo6S5ckIyqJSUQdf+hPz9LCDBX71H+1P RwyIDUyQqEKet/xPk0B+kb83Sb8QQHvy8/FoaA05B+cSRqt4Kw6xgN20VFc044Eo HOrdVhc0Nu+s89lwOrRm6Gry9S4yZDmez56Sbvq3IhVw/Xbj9ApdBHHNDbsyQV+d 0YH4fJXjcx8rFYsjGVFyvgdj6AB1nS+JLGa4AJqIQB/nOIrKkYgDxwMI/30BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4dW7UXaRSfz966g7Jr5yU3oz1iAwHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+ZL3fopa7xBzDUjl+w8+KkJ/65rbnuJQCl 6TmRP67JiwY+6Xo4i0bbICQsFlDl8Wl9xPsVnjoEnuidhPuQq0HhPZQqLmQp4DTB FTkATZx+aHx2q7pTKYG1E5s/ZSZmYYKyBDpNP/Z1KjBTrs8Onakd1u9M3cDQywvv 9FNyKrFBk8TDDOddEw2D/PKgyjd1QaLBahFBRGgJ8uukjiEAs+eCtMn/2uVyMUPL 9Q6HAj/yuc6lSPM7PxvYjOu4/aTTA3Gz2ZqCccToCK50mddH1adECx5eFK6VXFdp ispKK8j+zQsxLF0PxtblWrXYMo15YW4/kxQr9cRzq+9xaVVcQJA= -----END CERTIFICATE-----Generated at Thu Aug 7 04:25:19 2025 by rpki-client