$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json) Hash identifier: E0YEzpApT7MmS0iNCUuemr37tmksK+RHPs/JM4ykX4g= Subject key identifier: 55:DA:AA:8C:74:6E:A2:EB:ED:B5:35:F0:11:DA:65:7D:13:46:A3:7C Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Certificate serial: 192D1B641DA9F8A2F22720A55E86D91290EC0DE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft Manifest number: 5D Signing time: Fri 06 Jun 2025 00:00:02 +0000 Manifest this update: Thu 05 Jun 2025 23:55:02 +0000 Manifest next update: Mon 09 Jun 2025 03:12:02 +0000 Files and hashes: 1: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: Z7X2Ey660/aBvbleSpdg444N4Pc33yrCnnDhkfAkQbg=) 2: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: cvyj6LKtTOVBTWTHZighgw+CFWQteArr8dC6m6wOVeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 01:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2d:1b:64:1d:a9:f8:a2:f2:27:20:a5:5e:86:d9:12:90:ec:0d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Validity Not Before: Jun 5 23:55:02 2025 GMT Not After : Jun 9 03:12:02 2025 GMT Subject: CN=55DAAA8C746EA2EBEDB535F011DA657D1346A37C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:6f:88:6b:5f:7f:cd:2b:2f:df:1a:ce:13: 68:38:d2:c7:3e:11:10:b3:82:56:21:16:87:da:31: a5:06:c4:cb:c7:e9:f5:55:64:01:5b:a7:7e:1a:0b: 63:ca:59:16:c1:86:d0:1d:32:31:59:98:32:0a:c1: bb:b4:20:b0:02:33:2f:a8:42:2f:61:9e:08:c7:74: 29:32:0c:e2:fd:ba:17:75:d0:2d:d3:c1:69:bc:59: b8:91:a6:24:22:2c:12:ad:76:06:93:9d:ad:78:3a: 59:4c:ef:c4:56:27:9f:1c:95:59:a2:36:07:6f:27: 00:db:7b:55:d7:5f:e6:47:5b:41:ae:3a:48:dd:d8: 66:76:66:48:75:56:a9:46:bb:d1:72:8b:d0:ee:15: 62:83:f6:c7:21:e5:62:2c:74:30:fe:c7:dc:cb:97: e8:c7:43:6e:b9:7b:36:38:78:f2:9d:8a:a2:ab:f4: df:87:23:d2:3e:b7:d9:21:32:9c:a8:10:7c:6b:68: f9:5f:1c:3d:c6:27:88:68:7d:90:89:ba:29:ff:57: 52:28:06:81:c3:43:10:52:bd:08:20:34:d2:45:6f: 0a:ef:7d:8a:2c:75:77:aa:dc:a8:f7:1b:bf:a8:6b: b1:b7:58:70:61:54:32:b5:e3:1e:70:18:7c:86:1e: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DA:AA:8C:74:6E:A2:EB:ED:B5:35:F0:11:DA:65:7D:13:46:A3:7C X509v3 Authority Key Identifier: keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7f:9b:bd:16:6a:d5:c4:42:34:2b:31:8a:a0:59:2e:24:68: f0:46:53:c6:dd:34:38:f9:d4:ef:02:c1:91:61:ff:e2:fd:35: ba:8d:cc:10:c9:61:0e:1f:02:17:7e:de:e3:4b:29:29:0f:a4: 9c:48:20:61:fa:b0:b0:00:4f:3e:22:ba:de:a8:4a:57:d6:72: 1d:44:7f:03:55:ce:83:9e:8b:f0:f6:b3:f1:41:6f:83:ad:65: 88:63:bd:d6:28:ab:32:30:82:b8:89:36:9d:07:68:63:57:1f: cf:ec:31:03:98:a2:81:8c:3b:87:f9:12:26:9b:23:49:c6:8a: 11:cd:10:31:60:a0:69:c0:55:d2:10:4c:67:f8:b7:1c:db:47: e2:d6:7e:ea:51:ff:f4:65:9c:95:14:97:f5:b8:2b:7e:12:0b: 58:ed:23:f3:ec:72:9b:06:10:aa:a8:5f:87:11:d8:d8:b3:47: 4f:bc:d2:c2:14:3a:35:52:4b:33:af:6f:57:7f:dc:55:45:06: 0c:fd:99:00:1e:5b:d0:78:b6:e8:5d:cd:7d:af:f6:7d:5e:26: e3:fd:4e:2d:19:45:f7:8a:f8:fc:bc:94:66:13:77:11:05:9d: 7a:21:69:46:eb:c8:23:23:52:4f:f8:9d:fe:76:55:91:9c:2b: d7:69:ad:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGS0bZB2p+KLyJyClXobZEpDsDeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJC NEZBMjhGMDAeFw0yNTA2MDUyMzU1MDJaFw0yNTA2MDkwMzEyMDJaMDMxMTAvBgNV BAMTKDU1REFBQThDNzQ2RUEyRUJFREI1MzVGMDExREE2NTdEMTM0NkEzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PW+Ia19/zSsv3xrOE2g40sc+ ERCzglYhFofaMaUGxMvH6fVVZAFbp34aC2PKWRbBhtAdMjFZmDIKwbu0ILACMy+o Qi9hngjHdCkyDOL9uhd10C3TwWm8WbiRpiQiLBKtdgaTna14OllM78RWJ58clVmi NgdvJwDbe1XXX+ZHW0GuOkjd2GZ2Zkh1VqlGu9Fyi9DuFWKD9sch5WIsdDD+x9zL l+jHQ265ezY4ePKdiqKr9N+HI9I+t9khMpyoEHxraPlfHD3GJ4hofZCJuin/V1Io BoHDQxBSvQggNNJFbwrvfYosdXeq3Kj3G7+oa7G3WHBhVDK14x5wGHyGHkTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVdqqjHRuouvttTXwEdplfRNGo3wwHwYDVR0j BBgwFoAU07Ddu44H/NmKOZyQxbP8MrT6KPAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDlmOThmMy03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC9EM0IwRERCQjhF MDdGQ0Q5OEEzOTlDOTBDNUIzRkMzMkI0RkEyOEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJCNEZB MjhGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q5Zjk4ZjMtNzJmMC00MDA2LWJl OTktYjlhOWU4ZDlkMmJmLzAvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZD MzJCNEZBMjhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5/m70WatXEQjQrMYqgWS4kaPBGU8bdNDj5 1O8CwZFh/+L9NbqNzBDJYQ4fAhd+3uNLKSkPpJxIIGH6sLAATz4iut6oSlfWch1E fwNVzoOei/D2s/FBb4OtZYhjvdYoqzIwgriJNp0HaGNXH8/sMQOYooGMO4f5Eiab I0nGihHNEDFgoGnAVdIQTGf4txzbR+LWfupR//RlnJUUl/W4K34SC1jtI/PscpsG EKqoX4cR2NizR0+80sIUOjVSSzOvb1d/3FVFBgz9mQAeW9B4tuhdzX2v9n1eJuP9 Ti0ZRfeK+Py8lGYTdxEFnXohaUbryCMjUk/4nf52VZGcK9dprcs= -----END CERTIFICATE-----Generated at Fri Jun 6 05:06:08 2025 by rpki-client