$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json) Hash identifier: 4fjvDa6pF5MOB8VMSj6xsb0Be3KOOnauSF4EelrOXpQ= Subject key identifier: 03:42:15:46:AC:20:15:32:72:3C:64:CA:72:E1:EB:0B:65:F8:F4:42 Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Certificate serial: 699602DC4FFD24BFA198B5E2633AF2E7EFEE9585 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft Manifest number: 87 Signing time: Mon 08 Sep 2025 06:10:02 +0000 Manifest this update: Mon 08 Sep 2025 06:05:02 +0000 Manifest next update: Thu 11 Sep 2025 12:00:02 +0000 Files and hashes: 1: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: 4KyaWuZ5lDFjebH38TgU17IPMZrQ1IGexPvpoC8H8FY=) 2: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: cvyj6LKtTOVBTWTHZighgw+CFWQteArr8dC6m6wOVeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 07:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:96:02:dc:4f:fd:24:bf:a1:98:b5:e2:63:3a:f2:e7:ef:ee:95:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Validity Not Before: Sep 8 06:05:02 2025 GMT Not After : Sep 11 12:00:02 2025 GMT Subject: CN=03421546AC201532723C64CA72E1EB0B65F8F442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:70:d2:9e:47:58:c8:84:19:a9:fd:64:8e:93: bc:a9:53:a0:ad:73:e5:40:1b:5b:3e:7a:cd:d7:99: dc:32:4f:8e:cf:bc:7c:b0:27:e0:65:90:1e:37:44: d4:87:b3:6d:95:70:6d:d7:73:c4:17:30:5d:8b:ff: a6:fe:cf:36:5c:78:90:31:16:f8:3c:c3:f0:76:13: 91:6d:a4:9c:f2:f9:51:a6:3b:d9:9b:30:79:d1:5e: a1:b9:da:0c:d6:99:d0:7b:ff:56:d4:dd:0e:3a:63: d2:a2:60:8f:aa:4b:bf:1b:3c:7a:54:e1:41:11:66: 7c:47:6d:e2:07:af:29:46:ab:a9:33:63:ea:93:34: 7d:11:37:11:34:0c:08:dc:bd:30:d5:be:f5:bd:ca: c7:91:f3:b3:45:25:f0:b2:c7:fc:e3:27:db:98:fd: 7e:8b:ae:23:46:5d:1d:4f:e0:81:1d:e3:83:9c:e2: 70:e6:ec:fe:1f:b6:cc:82:06:47:92:c5:5a:b7:23: 21:86:66:d7:10:0e:fe:fa:79:5c:ec:f7:ad:63:e3: 8a:36:8d:39:47:aa:57:d1:f7:47:c7:75:dd:11:19: 47:ff:e2:d6:02:78:92:5d:ea:ef:c7:8f:37:1c:81: 53:28:dc:42:73:5b:f1:13:ce:08:f3:52:63:65:3c: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:42:15:46:AC:20:15:32:72:3C:64:CA:72:E1:EB:0B:65:F8:F4:42 X509v3 Authority Key Identifier: keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8c:47:a7:03:d0:ad:dc:b2:49:8f:8f:3c:0e:88:f7:ff:f0: 00:fb:af:e6:c1:09:06:dc:68:84:b0:a5:49:96:f9:34:06:7f: 47:58:4d:f5:83:42:69:23:df:2d:80:0a:0f:80:6d:81:28:f9: f5:72:ca:7b:8a:ab:cd:08:de:72:69:9f:a9:12:74:d3:25:d6: 4e:01:13:c8:32:d8:0b:87:72:c0:56:25:29:b5:a9:cd:0c:f8: a8:c9:be:b7:cc:0f:70:32:e5:9c:b1:44:2d:7d:d1:bb:f7:3c: af:bf:8e:ad:0c:12:d0:f1:70:e4:75:24:81:ca:cb:15:5a:57: 48:f1:bd:31:66:f4:d9:96:48:17:bb:ad:15:7d:82:b3:26:85: 07:d3:dc:46:4e:c2:ef:4a:7e:8b:b4:d1:4c:89:d7:a3:1a:22: cf:09:82:d3:f7:3d:42:67:26:1a:21:3d:74:99:00:1f:30:40: 91:12:60:14:4c:c0:7f:30:6e:a7:94:2b:81:24:8b:d3:3b:98: 13:bf:13:90:11:ad:66:46:75:65:43:82:a5:54:79:92:0f:f9: bf:4f:85:4a:f1:35:f2:75:85:6c:31:a0:53:fd:74:83:33:65: d8:c4:84:ba:00:da:7a:ca:9b:2a:cc:89:61:2b:0e:6c:ba:06: c1:15:71:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZYC3E/9JL+hmLXiYzry5+/ulYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJC NEZBMjhGMDAeFw0yNTA5MDgwNjA1MDJaFw0yNTA5MTExMjAwMDJaMDMxMTAvBgNV BAMTKDAzNDIxNTQ2QUMyMDE1MzI3MjNDNjRDQTcyRTFFQjBCNjVGOEY0NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDycNKeR1jIhBmp/WSOk7ypU6Ct c+VAG1s+es3XmdwyT47PvHywJ+BlkB43RNSHs22VcG3Xc8QXMF2L/6b+zzZceJAx Fvg8w/B2E5FtpJzy+VGmO9mbMHnRXqG52gzWmdB7/1bU3Q46Y9KiYI+qS78bPHpU 4UERZnxHbeIHrylGq6kzY+qTNH0RNxE0DAjcvTDVvvW9yseR87NFJfCyx/zjJ9uY /X6LriNGXR1P4IEd44Oc4nDm7P4ftsyCBkeSxVq3IyGGZtcQDv76eVzs961j44o2 jTlHqlfR90fHdd0RGUf/4tYCeJJd6u/HjzccgVMo3EJzW/ETzgjzUmNlPJhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA0IVRqwgFTJyPGTKcuHrC2X49EIwHwYDVR0j BBgwFoAU07Ddu44H/NmKOZyQxbP8MrT6KPAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDlmOThmMy03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC9EM0IwRERCQjhF MDdGQ0Q5OEEzOTlDOTBDNUIzRkMzMkI0RkEyOEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJCNEZB MjhGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q5Zjk4ZjMtNzJmMC00MDA2LWJl OTktYjlhOWU4ZDlkMmJmLzAvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZD MzJCNEZBMjhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGMR6cD0K3cskmPjzwOiPf/8AD7r+bBCQbc aISwpUmW+TQGf0dYTfWDQmkj3y2ACg+AbYEo+fVyynuKq80I3nJpn6kSdNMl1k4B E8gy2AuHcsBWJSm1qc0M+KjJvrfMD3Ay5ZyxRC190bv3PK+/jq0MEtDxcOR1JIHK yxVaV0jxvTFm9NmWSBe7rRV9grMmhQfT3EZOwu9Kfou00UyJ16MaIs8JgtP3PUJn JhohPXSZAB8wQJESYBRMwH8wbqeUK4Eki9M7mBO/E5ARrWZGdWVDgqVUeZIP+b9P hUrxNfJ1hWwxoFP9dIMzZdjEhLoA2nrKmyrMiWErDmy6BsEVccY= -----END CERTIFICATE-----Generated at Mon Sep 8 08:50:19 2025 by rpki-client