$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: kBveq+L2eQmbNWssEhEAYS+lpMAVuw75c8X19x9VNOM= Subject key identifier: 25:B1:5C:03:CF:CE:BD:FA:02:89:36:C0:01:A4:49:8D:49:6A:E5:E2 Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 0A14A159D730C8982B5922049647439B22EFAA18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: AC Signing time: Wed 02 Jul 2025 10:31:53 +0000 Manifest this update: Wed 02 Jul 2025 10:26:53 +0000 Manifest next update: Sat 05 Jul 2025 20:51:53 +0000 Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: qEun76s7AZpLBDN9fCDStiDMVPzQxGVRkyuzDVSoKVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:14:a1:59:d7:30:c8:98:2b:59:22:04:96:47:43:9b:22:ef:aa:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Jul 2 10:26:53 2025 GMT Not After : Jul 5 20:51:53 2025 GMT Subject: CN=25B15C03CFCEBDFA028936C001A4498D496AE5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:cf:70:19:5d:72:e3:1f:25:65:33:10:6c: 51:b8:5f:8e:14:3f:9d:74:d4:f6:c7:df:a1:e3:ce: 25:05:e4:4e:b0:bd:d2:26:60:f6:d7:75:af:58:15: cd:d1:99:50:d5:ae:dc:8a:40:fb:94:63:dc:48:29: ed:64:61:86:a5:5e:86:45:43:72:ed:d7:2d:f9:8b: d1:15:b0:c7:5d:76:0c:fc:ba:97:2e:3c:86:ec:22: 74:a8:32:b9:ce:f5:a8:9c:4a:bf:74:f9:52:a0:53: 50:69:a6:a5:8b:1d:bd:3a:93:b9:ec:27:d6:52:b0: 0b:74:29:f7:90:fe:7d:8e:7f:4b:2d:df:f1:02:22: 89:82:0e:de:95:0a:f5:dc:40:37:35:3f:cf:5b:4a: 68:73:f3:d7:af:a4:be:b8:e8:9c:82:52:c6:6f:ff: a3:f6:30:ad:4b:fe:79:df:02:71:1c:df:60:81:77: 6e:d5:70:21:1c:4f:3c:43:25:11:da:8b:35:b0:c7: 23:98:92:cc:d0:85:0e:58:a7:c0:a2:78:24:ed:da: 27:42:8c:32:25:ea:7d:fa:31:f8:aa:f7:b4:cd:a5: 66:6b:ef:04:87:d3:47:b3:62:3c:e3:0a:36:fe:ed: 21:7f:9d:bf:f3:b6:1a:08:01:b3:cd:18:46:27:4b: 6b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B1:5C:03:CF:CE:BD:FA:02:89:36:C0:01:A4:49:8D:49:6A:E5:E2 X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ce:3b:b0:e5:59:05:64:f8:18:ab:5a:be:a1:09:ed:2d:59: 77:41:95:9a:93:73:68:cb:21:12:c4:68:12:91:54:aa:69:87: 43:9c:a2:c5:00:2f:d7:b8:ce:2e:fe:e9:41:db:8c:f0:a9:ea: e3:a0:c2:09:80:06:82:24:59:07:cd:07:ee:f6:cb:55:96:62: 71:2a:ac:05:23:99:ac:73:93:99:52:dc:56:59:70:d9:30:5e: 09:21:39:be:9e:eb:8d:ba:e6:f9:76:a0:51:33:ed:d1:2e:b3: 38:f0:f0:70:52:17:04:6a:37:a1:aa:5c:c9:7c:c8:18:b0:69: 9f:f3:56:a3:08:8d:16:9d:a5:91:bd:ed:69:af:9a:25:06:92: 3a:61:0d:2a:f5:7a:ce:f6:06:6e:09:84:d6:b4:1f:8e:c0:bd: e3:b3:b8:76:03:80:30:a2:23:1f:d6:42:52:28:18:c2:d3:60: c0:6e:6f:c9:7c:6b:5c:1f:26:91:ed:e5:3c:a2:75:a5:68:06: 1f:91:b9:85:3e:0f:cb:28:7d:55:27:ec:52:36:5f:d2:90:1c: b7:c1:66:5c:a6:fb:a9:cd:eb:b2:f2:a8:d5:07:4a:5e:13:a5: 6a:a1:40:a7:13:0e:85:9d:ad:c4:30:45:9c:2a:85:0d:2e:50: 29:f3:26:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUChShWdcwyJgrWSIElkdDmyLvqhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTA3MDIxMDI2NTNaFw0yNTA3MDUyMDUxNTNaMDMxMTAvBgNV BAMTKDI1QjE1QzAzQ0ZDRUJERkEwMjg5MzZDMDAxQTQ0OThENDk2QUU1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5M9wGV1y4x8lZTMQbFG4X44U P5101PbH36HjziUF5E6wvdImYPbXda9YFc3RmVDVrtyKQPuUY9xIKe1kYYalXoZF Q3Lt1y35i9EVsMdddgz8upcuPIbsInSoMrnO9aicSr90+VKgU1BppqWLHb06k7ns J9ZSsAt0KfeQ/n2Of0st3/ECIomCDt6VCvXcQDc1P89bSmhz89evpL646JyCUsZv /6P2MK1L/nnfAnEc32CBd27VcCEcTzxDJRHaizWwxyOYkszQhQ5Yp8CieCTt2idC jDIl6n36Mfiq97TNpWZr7wSH00ezYjzjCjb+7SF/nb/zthoIAbPNGEYnS2vlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJbFcA8/OvfoCiTbAAaRJjUlq5eIwHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrOO7DlWQVk+BirWr6hCe0tWXdBlZqTc2jL IRLEaBKRVKpph0OcosUAL9e4zi7+6UHbjPCp6uOgwgmABoIkWQfNB+72y1WWYnEq rAUjmaxzk5lS3FZZcNkwXgkhOb6e64265vl2oFEz7dEuszjw8HBSFwRqN6GqXMl8 yBiwaZ/zVqMIjRadpZG97WmvmiUGkjphDSr1es72Bm4JhNa0H47AveOzuHYDgDCi Ix/WQlIoGMLTYMBub8l8a1wfJpHt5TyidaVoBh+RuYU+D8sofVUn7FI2X9KQHLfB Zlym+6nN67LyqNUHSl4TpWqhQKcTDoWdrcQwRZwqhQ0uUCnzJiw= -----END CERTIFICATE-----Generated at Thu Jul 3 06:04:31 2025 by rpki-client