$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: iILlWemShpRc09RdkotMTdsvbEZkDwIWUSbucPUYy3E= Subject key identifier: 57:58:B5:C8:8C:93:9B:48:69:37:EF:27:25:05:5F:42:FA:36:95:87 Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 1476926191F2F5ED254D602AB4BD723D498F3FA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: B5 Signing time: Tue 22 Jul 2025 21:21:58 +0000 Manifest this update: Tue 22 Jul 2025 21:16:58 +0000 Manifest next update: Sat 26 Jul 2025 08:16:58 +0000 Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: yd82004/Hhixt6o4DcmZImnDks8nLuLqPN9Q7/Bz2XQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:76:92:61:91:f2:f5:ed:25:4d:60:2a:b4:bd:72:3d:49:8f:3f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Jul 22 21:16:58 2025 GMT Not After : Jul 26 08:16:58 2025 GMT Subject: CN=5758B5C88C939B486937EF2725055F42FA369587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:75:00:bc:e7:b9:20:05:ac:61:00:10:73: 5f:be:4f:eb:b5:ca:6a:36:b2:2a:32:b9:40:e5:aa: 3a:f9:76:2c:df:71:51:7d:b9:8f:c2:a8:4b:0d:68: db:48:17:b4:ce:c0:8c:ef:de:fe:b5:15:ef:d4:16: 65:c2:f5:9b:ee:dd:34:07:6e:bd:be:77:72:34:77: 34:b2:ed:4f:72:0d:78:27:4f:41:c6:7c:06:03:fc: 4b:8c:05:fb:2e:f3:52:77:43:e8:a2:9d:5c:78:55: 8a:f0:a1:dc:1b:55:45:7c:aa:fb:e7:e0:e3:e3:c1: 0c:d7:0c:d5:ef:7e:0a:56:7f:4d:e5:dc:74:a9:25: 2d:eb:91:57:4a:3d:52:ac:ce:4e:f6:04:52:bd:da: f7:9a:1f:54:c4:24:30:19:f0:6a:32:10:b6:2d:6b: 69:db:f7:73:e6:b9:98:3f:4e:97:d4:38:ff:68:3b: c8:c8:67:32:be:61:09:50:de:f5:89:af:ed:15:f4: e4:d7:ae:6f:06:e1:57:fd:ce:bb:ac:9a:4f:00:d5: ac:bf:18:b3:d6:2c:02:73:97:68:c4:5c:9c:b5:16: ac:e2:a5:31:60:94:30:6e:9d:28:04:df:58:dc:93: 3c:a0:68:62:a9:b1:83:0c:d5:26:10:eb:ce:f6:c8: 32:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:58:B5:C8:8C:93:9B:48:69:37:EF:27:25:05:5F:42:FA:36:95:87 X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:91:17:72:9d:2c:35:04:df:4f:20:82:96:e8:d4:4d:d2:e8: 97:6e:08:6d:e9:c3:ac:34:2c:25:0c:54:ab:99:62:70:fc:50: b2:ef:11:1f:09:48:25:e9:15:d2:48:e8:ee:f4:cb:a9:8c:19: ca:47:5c:a2:c5:44:44:ee:cb:89:63:90:e3:36:31:db:da:ef: 22:b3:93:a2:20:37:d7:8e:2f:5b:e3:db:57:50:ca:09:d5:89: 71:9b:1c:db:3b:f1:f7:d5:f3:27:83:87:11:d9:77:52:ec:1d: c2:8b:67:72:e7:48:26:20:88:e9:3c:5b:82:36:5d:ef:91:ab: 49:32:ff:d7:40:5d:b0:7b:13:06:87:95:3e:4a:29:50:ae:26: 16:46:c9:55:47:87:03:54:98:84:b0:68:73:34:72:54:cb:79: 8e:38:4c:7a:51:0c:cd:00:a9:41:87:bb:fd:b5:50:04:46:9d: e5:a7:7b:b7:e3:b8:51:27:9f:37:1c:ff:1f:9b:80:59:b4:b2: 59:90:fd:9a:87:b9:36:53:34:62:25:8e:51:a7:30:eb:c9:ec: c2:12:6a:53:9a:08:55:ce:e4:63:33:5f:9d:ab:2b:23:8f:3e: 0d:cb:42:7b:f9:67:98:25:07:eb:88:2b:f4:79:f7:62:5a:35: e4:aa:87:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHaSYZHy9e0lTWAqtL1yPUmPP6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTA3MjIyMTE2NThaFw0yNTA3MjYwODE2NThaMDMxMTAvBgNV BAMTKDU3NThCNUM4OEM5MzlCNDg2OTM3RUYyNzI1MDU1RjQyRkEzNjk1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBinUAvOe5IAWsYQAQc1++T+u1 ymo2sioyuUDlqjr5dizfcVF9uY/CqEsNaNtIF7TOwIzv3v61Fe/UFmXC9Zvu3TQH br2+d3I0dzSy7U9yDXgnT0HGfAYD/EuMBfsu81J3Q+iinVx4VYrwodwbVUV8qvvn 4OPjwQzXDNXvfgpWf03l3HSpJS3rkVdKPVKszk72BFK92veaH1TEJDAZ8GoyELYt a2nb93PmuZg/TpfUOP9oO8jIZzK+YQlQ3vWJr+0V9OTXrm8G4Vf9zrusmk8A1ay/ GLPWLAJzl2jEXJy1FqzipTFglDBunSgE31jckzygaGKpsYMM1SYQ6872yDJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV1i1yIyTm0hpN+8nJQVfQvo2lYcwHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqRF3KdLDUE308ggpbo1E3S6JduCG3pw6w0 LCUMVKuZYnD8ULLvER8JSCXpFdJI6O70y6mMGcpHXKLFRETuy4ljkOM2Mdva7yKz k6IgN9eOL1vj21dQygnViXGbHNs78ffV8yeDhxHZd1LsHcKLZ3LnSCYgiOk8W4I2 Xe+Rq0ky/9dAXbB7EwaHlT5KKVCuJhZGyVVHhwNUmISwaHM0clTLeY44THpRDM0A qUGHu/21UARGneWne7fjuFEnnzcc/x+bgFm0slmQ/ZqHuTZTNGIljlGnMOvJ7MIS alOaCFXO5GMzX52rKyOPPg3LQnv5Z5glB+uIK/R592JaNeSqhzk= -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:43 2025 by rpki-client