$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: wc4UHtVVOGrNnN0pkBdJOTzuPFpQXJh+SwreS05vmAg= Subject key identifier: A3:7A:55:EE:A8:61:ED:22:2B:A4:F1:94:21:4A:C4:C3:D0:1E:AA:92 Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 0A11F9DA0B93C89125B5FF9482DA4E8E6EF4FA38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: C3 Signing time: Sat 23 Aug 2025 07:02:00 +0000 Manifest this update: Sat 23 Aug 2025 06:57:00 +0000 Manifest next update: Tue 26 Aug 2025 13:56:00 +0000 Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: jlyxgcY6BwuLc3VVodoRV4Sl5WrpDOZYGuidN1t8pOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:11:f9:da:0b:93:c8:91:25:b5:ff:94:82:da:4e:8e:6e:f4:fa:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Aug 23 06:57:00 2025 GMT Not After : Aug 26 13:56:00 2025 GMT Subject: CN=A37A55EEA861ED222BA4F194214AC4C3D01EAA92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:b8:0e:05:e4:d2:e5:3b:1c:32:3f:87:dc: fd:3d:50:82:b2:42:8d:53:3c:07:3c:63:d5:64:02: 90:6b:ab:f2:d8:d6:b5:e9:1f:2c:09:1b:49:58:e5: a8:d7:0a:26:e6:56:d0:3f:74:58:89:6e:eb:a4:38: 6b:42:8e:8d:ac:76:40:29:fc:2d:ce:71:27:de:48: 53:dd:68:ea:c4:99:08:7c:6d:91:94:88:75:79:39: 68:4a:36:d8:01:ab:90:f4:9b:03:45:51:05:19:e7: ba:e5:67:2a:7f:32:70:da:45:78:7a:ec:f7:20:9e: d4:79:ac:6f:d0:92:f8:52:44:d7:5d:e2:1d:06:59: a7:a9:9a:2f:6d:34:53:39:ab:82:03:fd:aa:79:c4: 59:bf:a0:1f:62:fe:f6:0f:66:d2:b1:04:6a:c8:92: 38:cd:08:36:ec:d7:27:37:87:32:e7:38:15:35:d7: 2a:e4:0e:f0:4f:0e:69:5f:61:ae:d3:cf:d7:30:82: d4:9f:f3:51:f3:f8:05:01:ce:24:77:29:41:18:8f: fd:8e:58:1b:4b:41:c1:0d:53:a9:f2:ce:01:bb:b4: 8a:da:5e:24:96:f8:3b:41:5c:67:8c:aa:aa:7a:dd: 6a:08:96:2a:ee:89:c7:e7:df:0a:07:3e:bf:93:80: b0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7A:55:EE:A8:61:ED:22:2B:A4:F1:94:21:4A:C4:C3:D0:1E:AA:92 X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5b:2b:2a:29:86:e1:1a:55:68:c3:ed:71:03:a8:aa:25:21: 5a:ae:53:4f:7d:f8:48:03:08:40:a5:b1:a4:4b:bf:a3:c4:08: 99:c6:c8:23:0f:3e:21:25:3a:2e:6a:fb:0a:ae:a7:7b:2a:9e: fd:c7:56:0f:aa:fc:d0:40:76:0e:f2:8d:01:8e:f5:5f:08:48: 0f:21:c7:73:9f:97:72:3c:7d:72:52:80:6d:47:36:59:c3:3a: 2b:7c:ab:28:e6:02:a3:a8:b8:be:1e:9f:11:21:ab:4a:8d:a3: 24:49:2e:63:d4:70:b3:5f:52:49:b3:9b:69:cc:40:56:1d:d5: 20:eb:38:4d:e4:24:c6:d2:55:9f:3a:47:54:76:24:f8:a0:69: a7:d4:a4:cc:30:b3:79:76:c3:3e:4d:63:bc:10:1c:d5:44:05: 78:6e:db:c9:3c:25:2a:5e:d7:0f:ea:b2:8c:32:79:28:98:89: 9b:15:17:f2:73:29:35:bc:d7:93:6b:a4:a8:a2:76:4b:1e:71: fa:60:00:0a:85:e0:e0:fa:43:85:e6:21:bc:f0:0a:d9:89:25: fb:d3:f7:be:b5:8b:05:93:6e:fe:7c:46:0a:d0:c5:25:41:c0: 73:d1:a9:27:42:36:5c:4a:8d:10:46:1c:6d:e7:0c:74:d0:d6: cf:cc:93:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUChH52guTyJEltf+UgtpOjm70+jgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTA4MjMwNjU3MDBaFw0yNTA4MjYxMzU2MDBaMDMxMTAvBgNV BAMTKEEzN0E1NUVFQTg2MUVEMjIyQkE0RjE5NDIxNEFDNEMzRDAxRUFBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXybgOBeTS5TscMj+H3P09UIKy Qo1TPAc8Y9VkApBrq/LY1rXpHywJG0lY5ajXCibmVtA/dFiJbuukOGtCjo2sdkAp /C3OcSfeSFPdaOrEmQh8bZGUiHV5OWhKNtgBq5D0mwNFUQUZ57rlZyp/MnDaRXh6 7PcgntR5rG/QkvhSRNdd4h0GWaepmi9tNFM5q4ID/ap5xFm/oB9i/vYPZtKxBGrI kjjNCDbs1yc3hzLnOBU11yrkDvBPDmlfYa7Tz9cwgtSf81Hz+AUBziR3KUEYj/2O WBtLQcENU6nyzgG7tIraXiSW+DtBXGeMqqp63WoIliruicfn3woHPr+TgLB1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo3pV7qhh7SIrpPGUIUrEw9AeqpIwHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZbKyophuEaVWjD7XEDqKolIVquU099+EgD CEClsaRLv6PECJnGyCMPPiElOi5q+wqup3sqnv3HVg+q/NBAdg7yjQGO9V8ISA8h x3Ofl3I8fXJSgG1HNlnDOit8qyjmAqOouL4enxEhq0qNoyRJLmPUcLNfUkmzm2nM QFYd1SDrOE3kJMbSVZ86R1R2JPigaafUpMwws3l2wz5NY7wQHNVEBXhu28k8JSpe 1w/qsowyeSiYiZsVF/JzKTW815NrpKiidksecfpgAAqF4OD6Q4XmIbzwCtmJJfvT 9761iwWTbv58RgrQxSVBwHPRqSdCNlxKjRBGHG3nDHTQ1s/Mk/4= -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:45 2025 by rpki-client