$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json) Hash identifier: qsa0UFS2rd+Yeyys0fPq5DOYN1eNgNeD+QeRstnHNDQ= Subject key identifier: 22:DF:68:3B:19:FC:8F:C4:03:CB:AA:6D:F7:AB:E5:0B:08:E7:05:26 Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Certificate serial: 628ACD1484D5D9DFC49C55F158DE8051E9DF4074 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft Manifest number: 70 Signing time: Sat 19 Jul 2025 02:20:02 +0000 Manifest this update: Sat 19 Jul 2025 02:15:02 +0000 Manifest next update: Tue 22 Jul 2025 10:54:02 +0000 Files and hashes: 1: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: i0nI6NEyz3JYrrqjviYbbyyxJi59g1yVyfkVl9Ezr5w=) 2: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: cvyj6LKtTOVBTWTHZighgw+CFWQteArr8dC6m6wOVeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 10:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:8a:cd:14:84:d5:d9:df:c4:9c:55:f1:58:de:80:51:e9:df:40:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Validity Not Before: Jul 19 02:15:02 2025 GMT Not After : Jul 22 10:54:02 2025 GMT Subject: CN=22DF683B19FC8FC403CBAA6DF7ABE50B08E70526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:f3:22:a7:43:a9:11:c9:79:66:fe:e1:20: 22:5c:80:f5:1e:f5:05:41:cf:da:35:82:38:b3:da: ed:ba:c6:15:02:ad:29:a2:a5:e1:b5:f3:f9:52:72: ff:4a:75:5d:a6:c2:ae:5f:03:d6:0a:16:f1:03:3f: ec:e2:bb:51:5a:05:66:3e:17:90:21:86:18:27:38: 02:2f:40:07:b4:04:ce:02:9c:40:90:1f:ee:7f:8f: b3:31:5f:d0:4a:7e:89:32:39:19:07:c0:24:73:6a: b8:e1:bc:61:30:a6:de:39:2b:4b:2e:cd:5a:41:70: c3:68:96:c1:c0:8b:72:17:dd:c7:c6:f3:9d:ce:c5: 1e:e7:de:79:38:40:80:50:13:e0:50:e5:0c:39:5d: d0:7e:54:bc:09:3b:6b:ed:c1:43:08:ab:c3:b6:93: 1a:29:bf:ab:49:dc:8f:91:5d:d2:03:92:35:e6:ce: 90:4b:3b:23:0e:7c:aa:9c:d7:39:07:1e:14:34:c4: 99:63:dc:46:4a:1f:4b:ae:62:ab:b6:cc:47:43:3c: ea:10:b5:40:e1:1b:45:c6:f0:e5:63:74:b9:42:1a: 2e:af:dd:cd:2b:7f:bb:7b:37:8a:d7:14:5d:4e:60: 60:79:e5:3b:4d:72:b8:ce:4b:71:15:e3:bc:dd:ed: 03:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DF:68:3B:19:FC:8F:C4:03:CB:AA:6D:F7:AB:E5:0B:08:E7:05:26 X509v3 Authority Key Identifier: keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:22:ef:a8:1b:bd:e6:f0:b0:8b:df:77:73:4e:15:65:ca:09: 16:30:3f:18:91:3b:06:43:bd:35:34:17:1f:e0:3f:eb:f0:3c: b2:34:f0:fc:b7:cd:1a:aa:cd:f9:fc:b7:57:fb:59:54:c4:85: bb:bb:6a:72:c2:4c:f0:85:46:78:fb:91:83:d2:c1:f7:46:94: 6a:36:f5:b3:10:69:b1:73:7d:ba:87:45:05:fb:5a:be:58:a6: 4b:6d:cc:ba:00:c7:72:30:54:43:42:50:c7:88:c4:95:e7:9a: 64:65:77:37:e1:04:5a:3f:ac:6d:44:18:3e:07:d5:74:7f:2c: 45:f4:e9:c1:c2:e7:25:fb:0f:50:d5:8f:4b:a4:e4:4d:70:a2: 4b:1f:2b:62:8d:6c:04:e6:9a:96:69:81:5f:ba:d2:cf:cf:f5: 4f:8a:20:ea:b2:b6:61:d8:35:40:6c:33:31:03:cb:10:57:5c: 2f:3e:51:0f:76:fc:56:ae:96:a8:17:9e:f4:24:02:ed:63:d3: 49:42:8b:0c:d4:21:52:af:ef:85:8e:1c:bb:cb:88:eb:d4:1d: 48:6a:07:5d:b4:30:ab:81:8a:c1:6c:19:64:db:55:26:9c:b3: 2a:59:70:df:94:d9:14:70:38:ed:0d:d2:34:d8:26:46:92:f3: 3a:b6:d1:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYorNFITV2d/EnFXxWN6AUenfQHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJC NEZBMjhGMDAeFw0yNTA3MTkwMjE1MDJaFw0yNTA3MjIxMDU0MDJaMDMxMTAvBgNV BAMTKDIyREY2ODNCMTlGQzhGQzQwM0NCQUE2REY3QUJFNTBCMDhFNzA1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmi/Mip0OpEcl5Zv7hICJcgPUe 9QVBz9o1gjiz2u26xhUCrSmipeG18/lScv9KdV2mwq5fA9YKFvEDP+ziu1FaBWY+ F5AhhhgnOAIvQAe0BM4CnECQH+5/j7MxX9BKfokyORkHwCRzarjhvGEwpt45K0su zVpBcMNolsHAi3IX3cfG853OxR7n3nk4QIBQE+BQ5Qw5XdB+VLwJO2vtwUMIq8O2 kxopv6tJ3I+RXdIDkjXmzpBLOyMOfKqc1zkHHhQ0xJlj3EZKH0uuYqu2zEdDPOoQ tUDhG0XG8OVjdLlCGi6v3c0rf7t7N4rXFF1OYGB55TtNcrjOS3EV47zd7QORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIt9oOxn8j8QDy6pt96vlCwjnBSYwHwYDVR0j BBgwFoAU07Ddu44H/NmKOZyQxbP8MrT6KPAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDlmOThmMy03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC9EM0IwRERCQjhF MDdGQ0Q5OEEzOTlDOTBDNUIzRkMzMkI0RkEyOEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJCNEZB MjhGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q5Zjk4ZjMtNzJmMC00MDA2LWJl OTktYjlhOWU4ZDlkMmJmLzAvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZD MzJCNEZBMjhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJci76gbvebwsIvfd3NOFWXKCRYwPxiROwZD vTU0Fx/gP+vwPLI08Py3zRqqzfn8t1f7WVTEhbu7anLCTPCFRnj7kYPSwfdGlGo2 9bMQabFzfbqHRQX7Wr5YpkttzLoAx3IwVENCUMeIxJXnmmRldzfhBFo/rG1EGD4H 1XR/LEX06cHC5yX7D1DVj0uk5E1woksfK2KNbATmmpZpgV+60s/P9U+KIOqytmHY NUBsMzEDyxBXXC8+UQ92/FaulqgXnvQkAu1j00lCiwzUIVKv74WOHLvLiOvUHUhq B120MKuBisFsGWTbVSacsypZcN+U2RRwOO0N0jTYJkaS8zq20W0= -----END CERTIFICATE-----Generated at Mon Jul 21 10:36:53 2025 by rpki-client