$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: FQqVfgA6MlbhbUupJUL+66A2DdOlnyE84i0jxGsRxWc= Subject key identifier: DF:4B:CD:B5:05:11:15:1B:95:2C:DD:D0:1E:AA:4F:13:C2:95:35:ED Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 7975D8D51019052BBF6B75CD1EFD7FF78980ECB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: BB Signing time: Sat 23 Aug 2025 05:21:47 +0000 Manifest this update: Sat 23 Aug 2025 05:16:47 +0000 Manifest next update: Tue 26 Aug 2025 05:35:47 +0000 Files and hashes: 1: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: ATuSRG9YyWqB7/vZ6kxAweZ+aB++s3gqiEZ2LuBUgNU=) 2: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: TKXDUHh1t8mtQi4naXyKvXUBHMTJG7N6MALAiE8leAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:75:d8:d5:10:19:05:2b:bf:6b:75:cd:1e:fd:7f:f7:89:80:ec:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Aug 23 05:16:47 2025 GMT Not After : Aug 26 05:35:47 2025 GMT Subject: CN=DF4BCDB50511151B952CDDD01EAA4F13C29535ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:07:c6:5d:fa:3f:4c:c7:b9:a8:aa:d2:16: 4c:52:b1:d3:91:7c:88:3a:07:bf:d2:d8:8a:3c:0a: 60:99:a5:8c:4e:f4:cb:17:60:2a:ce:92:f2:fe:77: c6:72:58:e7:bf:f9:52:d1:34:50:39:c6:b5:50:fc: 20:2b:e6:f7:20:3f:da:ab:bc:87:9f:3d:32:1c:b6: 20:7a:87:58:da:58:80:e2:42:3e:31:ff:42:bd:c7: f3:50:39:61:d8:0d:de:84:33:b1:38:05:10:3e:42: 43:c5:20:91:38:00:c6:b4:07:3e:c5:4a:2e:44:e8: 2b:b0:2c:c5:f0:8f:6a:98:60:48:f0:6c:35:5e:79: dc:f6:38:8e:23:61:b7:51:5e:c1:ac:63:3f:f9:4d: 58:b0:e8:85:2b:4d:39:f0:82:fb:00:0a:c9:5b:94: 6c:62:75:f5:47:36:5c:5a:31:ad:42:21:0e:dc:45: 23:9c:5f:a3:5f:fc:58:46:a7:39:fb:f9:85:00:a3: 5a:81:35:30:55:b0:a6:e5:e0:2e:fc:db:ef:59:57: cc:a1:55:3f:a5:02:5d:56:7d:dc:da:90:a3:75:22: 0c:92:de:25:2f:77:95:ba:2b:03:be:e2:54:4e:f2: e5:78:75:af:97:df:46:a7:9e:46:53:de:99:92:64: c3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4B:CD:B5:05:11:15:1B:95:2C:DD:D0:1E:AA:4F:13:C2:95:35:ED X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f2:0a:b6:b2:60:8f:77:ef:1b:38:a3:14:21:01:23:ae:3c: bc:5a:28:93:de:73:da:f0:3b:95:b3:a9:d9:4e:4e:f5:05:28: 32:e7:3a:23:00:7b:10:a0:8e:76:af:e3:3b:97:ba:a0:26:5d: 02:c3:da:de:c0:80:93:1e:96:9e:e6:85:bf:d2:3d:b7:78:23: 91:48:bb:16:15:75:3d:db:8b:5f:18:81:1a:f4:a1:33:d4:33: 48:4d:62:e3:42:58:bd:7c:39:0f:1e:b9:73:21:5d:a0:77:5c: 9e:b5:44:24:6f:52:1c:c7:df:ba:d1:3c:4f:da:ed:99:1c:71: 51:42:6d:41:df:b1:5e:64:83:da:72:d8:8a:ff:e4:80:10:91: 44:f2:95:d4:70:49:d9:ea:ad:62:1e:da:2a:fe:4a:b1:20:8a: c8:f6:09:cc:2d:e3:3f:8d:d7:2c:f5:4a:17:0e:26:e6:05:e3: 4b:e9:02:aa:e5:58:76:30:f3:5c:ea:19:ec:23:03:66:b0:50: e7:20:92:3f:d2:2c:5d:5e:28:5d:e5:b3:30:f2:5b:83:a1:7b: 7b:be:e6:02:45:61:f9:3d:fa:fb:2b:ab:6f:5d:dc:7c:76:08: 47:24:ab:0e:eb:24:f3:db:5a:63:82:ca:0d:3e:ee:73:16:86: 4c:2b:55:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXXY1RAZBSu/a3XNHv1/94mA7LYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNTA4MjMwNTE2NDdaFw0yNTA4MjYwNTM1NDdaMDMxMTAvBgNV BAMTKERGNEJDREI1MDUxMTE1MUI5NTJDREREMDFFQUE0RjEzQzI5NTM1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChKwfGXfo/TMe5qKrSFkxSsdOR fIg6B7/S2Io8CmCZpYxO9MsXYCrOkvL+d8ZyWOe/+VLRNFA5xrVQ/CAr5vcgP9qr vIefPTIctiB6h1jaWIDiQj4x/0K9x/NQOWHYDd6EM7E4BRA+QkPFIJE4AMa0Bz7F Si5E6CuwLMXwj2qYYEjwbDVeedz2OI4jYbdRXsGsYz/5TViw6IUrTTnwgvsACslb lGxidfVHNlxaMa1CIQ7cRSOcX6Nf/FhGpzn7+YUAo1qBNTBVsKbl4C782+9ZV8yh VT+lAl1WfdzakKN1IgyS3iUvd5W6KwO+4lRO8uV4da+X30annkZT3pmSZMMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU30vNtQURFRuVLN3QHqpPE8KVNe0wHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvyCrayYI937xs4oxQhASOuPLxaKJPec9rw O5WzqdlOTvUFKDLnOiMAexCgjnav4zuXuqAmXQLD2t7AgJMelp7mhb/SPbd4I5FI uxYVdT3bi18YgRr0oTPUM0hNYuNCWL18OQ8euXMhXaB3XJ61RCRvUhzH37rRPE/a 7ZkccVFCbUHfsV5kg9py2Ir/5IAQkUTyldRwSdnqrWIe2ir+SrEgisj2Ccwt4z+N 1yz1ShcOJuYF40vpAqrlWHYw81zqGewjA2awUOcgkj/SLF1eKF3lszDyW4Ohe3u+ 5gJFYfk9+vsrq29d3Hx2CEckqw7rJPPbWmOCyg0+7nMWhkwrVdA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:43:14 2025 by rpki-client