$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: R48dbkZFXtWHaeB/7V4uJ1THrOXBbH2dAabwHr6HgHU= Subject key identifier: D6:AB:DB:14:0F:3C:41:17:2F:9B:F4:AE:E3:C7:2E:CE:10:29:25:2B Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 766EC47C40659F13B58944E9A8443678C2080B11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: 96 Signing time: Wed 14 May 2025 13:21:55 +0000 Manifest this update: Wed 14 May 2025 13:16:55 +0000 Manifest next update: Sat 17 May 2025 18:00:55 +0000 Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: kApzQJ8C+ov9Kkn18LGvGEB/U5RqkaQ2EY2cS42JGjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6e:c4:7c:40:65:9f:13:b5:89:44:e9:a8:44:36:78:c2:08:0b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: May 14 13:16:55 2025 GMT Not After : May 17 18:00:55 2025 GMT Subject: CN=D6ABDB140F3C41172F9BF4AEE3C72ECE1029252B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:32:f5:16:44:8f:c8:95:65:c5:1f:cd:ad: e0:79:94:84:8e:80:e7:35:22:83:fe:71:dc:7e:d9: 4a:a4:8d:47:00:54:74:0c:42:96:a5:7a:b2:f1:a6: b2:fe:cc:b8:7f:b7:24:5f:aa:68:6c:9f:0f:8d:1c: 96:55:c2:99:46:cf:a1:22:0b:7c:66:1c:50:74:a4: 8e:c8:dd:d3:49:09:c6:05:c0:84:6e:0d:a7:5c:6b: 39:8a:04:81:2d:7b:78:92:9e:a3:bf:34:fe:9b:a0: 4f:b9:c6:e7:ab:e9:36:d1:22:4a:fe:ef:73:b8:8a: a5:8f:30:63:ff:ed:4a:aa:eb:65:e9:0c:9c:1b:fe: 35:47:c6:a8:c3:be:5e:4e:ce:df:d9:17:88:6c:e2: d4:58:be:3b:de:45:fd:38:b6:5e:95:3e:8d:9f:96: 14:dd:29:7e:80:73:6f:a4:e2:50:f4:bd:6d:17:59: 11:cb:f9:6f:53:d7:eb:32:66:39:70:97:9a:b9:32: ed:2c:e4:a6:9e:a7:d4:78:14:7a:23:16:81:36:e4: 95:b8:d2:f7:01:8b:31:a6:9b:fe:e0:91:2d:63:40: 40:c9:69:1c:93:51:66:b5:7f:3b:ad:20:c2:c0:14: ce:c8:bb:f1:b6:3d:10:4f:2b:1a:63:32:32:4d:fe: 20:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AB:DB:14:0F:3C:41:17:2F:9B:F4:AE:E3:C7:2E:CE:10:29:25:2B X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:4e:51:a2:71:ea:37:10:36:f0:d3:df:24:fd:8d:97:4a:4b: 6a:22:63:c9:68:e2:47:d5:ad:4f:6b:c9:46:ed:29:e2:be:af: ad:66:32:0f:c8:50:89:23:9b:33:0d:be:21:e2:f9:04:39:6f: 09:90:64:a9:c0:d7:17:65:63:db:16:7b:bf:30:60:82:c3:72: e4:87:64:c9:77:73:a4:62:48:3d:ae:10:98:09:cc:fa:5e:f9: 6b:43:6d:b7:d5:b4:a7:b3:4e:e2:5b:fd:77:bd:eb:bd:8a:00: d0:27:8c:32:1a:e3:22:5e:96:b0:cd:c2:a3:66:71:19:14:82: fa:9a:02:88:39:01:20:7c:82:59:13:cc:72:58:bc:56:e0:73: d7:4a:e7:ca:f6:25:35:cc:8c:24:88:e9:2b:ac:ea:8d:ee:4a: cb:60:79:bf:43:9f:22:a5:ec:fe:5e:3a:69:86:f0:28:53:7b: c8:70:14:b9:e7:05:45:fa:50:7f:e6:60:fb:47:7f:43:98:d3: 49:be:e2:99:8d:33:e8:e2:91:d0:24:f1:69:70:f5:6d:28:0e: 2d:49:9d:7d:d8:18:11:ff:97:3c:14:75:53:82:8c:2e:0f:01: 10:93:98:9e:c3:d3:d6:1e:8d:bf:62:be:63:44:3c:65:e6:aa: f4:c6:68:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdm7EfEBlnxO1iUTpqEQ2eMIICxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTA1MTQxMzE2NTVaFw0yNTA1MTcxODAwNTVaMDMxMTAvBgNV BAMTKEQ2QUJEQjE0MEYzQzQxMTcyRjlCRjRBRUUzQzcyRUNFMTAyOTI1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNzL1FkSPyJVlxR/NreB5lISO gOc1IoP+cdx+2UqkjUcAVHQMQpalerLxprL+zLh/tyRfqmhsnw+NHJZVwplGz6Ei C3xmHFB0pI7I3dNJCcYFwIRuDadcazmKBIEte3iSnqO/NP6boE+5xuer6TbRIkr+ 73O4iqWPMGP/7Uqq62XpDJwb/jVHxqjDvl5Ozt/ZF4hs4tRYvjveRf04tl6VPo2f lhTdKX6Ac2+k4lD0vW0XWRHL+W9T1+syZjlwl5q5Mu0s5Kaep9R4FHojFoE25JW4 0vcBizGmm/7gkS1jQEDJaRyTUWa1fzutIMLAFM7Iu/G2PRBPKxpjMjJN/iA7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1qvbFA88QRcvm/Su48cuzhApJSswHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJOUaJx6jcQNvDT3yT9jZdKS2oiY8lo4kfV rU9ryUbtKeK+r61mMg/IUIkjmzMNviHi+QQ5bwmQZKnA1xdlY9sWe78wYILDcuSH ZMl3c6RiSD2uEJgJzPpe+WtDbbfVtKezTuJb/Xe9672KANAnjDIa4yJelrDNwqNm cRkUgvqaAog5ASB8glkTzHJYvFbgc9dK58r2JTXMjCSI6Sus6o3uSstgeb9DnyKl 7P5eOmmG8ChTe8hwFLnnBUX6UH/mYPtHf0OY00m+4pmNM+jikdAk8Wlw9W0oDi1J nX3YGBH/lzwUdVOCjC4PARCTmJ7D09Yejb9ivmNEPGXmqvTGaLc= -----END CERTIFICATE-----Generated at Wed May 14 18:31:36 2025 by rpki-client