$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: 9d/rCu8mrWwrvZFQCJCNsTqIHlQjUYEWDHQwBKcfq3g= Subject key identifier: 13:F6:C8:79:7F:AE:B7:5D:5A:89:28:FA:DD:97:E2:82:DD:1F:B1:D0 Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 17CC0C394ABD174EB9E662CCD06EA03B63ACD668 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 0180 Signing time: Sun 20 Jul 2025 08:40:42 +0000 Manifest this update: Sun 20 Jul 2025 08:35:42 +0000 Manifest next update: Wed 23 Jul 2025 15:56:42 +0000 Files and hashes: 1: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: 0UTf1+BQXj8Ras4zkWL/wgGnY3awXAg7yXF2OUkmNfo=) 2: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: KhpmgD6RkYeJK5jRcg2preS510XqN0JcpiCaJBJYbNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 15:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cc:0c:39:4a:bd:17:4e:b9:e6:62:cc:d0:6e:a0:3b:63:ac:d6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Jul 20 08:35:42 2025 GMT Not After : Jul 23 15:56:42 2025 GMT Subject: CN=13F6C8797FAEB75D5A8928FADD97E282DD1FB1D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:a9:06:75:2c:e6:90:ad:3d:5c:a8:ea:43: 99:ca:ba:52:ec:a8:91:b7:40:d2:66:62:25:9c:7c: 60:44:86:45:d0:1d:bb:fb:f6:8d:34:48:79:4c:69: fc:e1:87:c2:b6:c0:50:80:c8:b8:6e:12:e3:8f:7a: a0:0f:cd:2b:05:f8:80:14:02:bd:53:eb:e2:7f:b5: b3:d5:d6:70:9c:2c:9f:3e:59:51:29:46:bf:80:86: 8c:36:e9:9d:4b:c3:59:18:3f:7a:e6:b1:1b:c4:32: b3:50:f5:04:68:96:7a:a7:5c:29:8c:5d:c2:7a:c0: bd:eb:da:d7:da:47:0e:89:11:b9:e9:84:ec:d1:74: ea:32:2d:54:c5:fa:26:7c:32:c4:64:34:3b:4c:34: d1:45:d1:78:0a:17:8e:bb:72:96:73:a9:80:6a:51: 5a:32:a3:18:06:fd:39:6c:89:b2:d4:36:37:7e:e5: 88:6e:4c:4d:43:42:ed:e9:f4:a1:64:91:32:c2:6e: ee:0f:0f:be:5a:fb:37:9d:5d:61:41:39:ee:79:a9: 16:ab:0f:0b:63:37:cf:c0:51:fd:09:77:86:e0:77: e9:89:0e:b6:74:0d:8f:71:8f:4e:7d:21:04:1a:7f: 66:02:ea:d7:5a:db:fe:af:06:80:93:98:78:26:74: 6f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F6:C8:79:7F:AE:B7:5D:5A:89:28:FA:DD:97:E2:82:DD:1F:B1:D0 X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:96:83:d3:da:7a:1e:44:1c:0e:7c:4d:ae:ed:04:e3:5c:c8: 68:62:91:13:e9:a5:0c:7b:72:9f:fc:e4:4c:11:9e:bc:01:6c: 2a:05:39:06:20:21:ab:a0:4a:82:b5:a1:f5:2b:61:55:39:e8: f8:25:97:cf:bb:e4:37:d1:5e:3e:e3:02:c5:00:04:7b:b6:68: 98:19:98:73:e4:c4:32:fd:06:15:6b:dc:ae:8b:11:d0:9b:23: 76:5a:51:88:73:28:0d:b7:10:4d:f7:11:c1:60:64:e8:d3:30: 3a:f7:bf:56:19:6c:ef:87:d3:ef:3c:43:85:f3:56:28:5f:c0: d7:63:da:fe:c0:98:be:16:f5:72:f8:0b:09:46:b5:81:c0:77: 11:f9:f7:e8:26:57:06:c5:1e:2e:8f:d0:8b:ee:19:ff:86:1a: 3e:2b:80:c6:d7:d6:d0:a5:f2:48:e4:31:0c:a3:b6:68:5c:5a: 68:75:e0:c9:09:ff:45:fc:38:a2:24:ba:1d:a8:fa:d0:4a:26: 9a:68:58:be:41:73:e5:c6:71:61:ec:7b:d9:73:42:08:d8:49: ad:1e:c6:2a:07:4f:78:23:02:8c:71:36:17:a0:ac:f9:5c:b7: 25:d5:29:90:99:3e:9f:fe:05:e8:63:cc:0c:15:9b:61:bb:70: 08:dc:f5:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8wMOUq9F0655mLM0G6gO2Os1mgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNTA3MjAwODM1NDJaFw0yNTA3MjMxNTU2NDJaMDMxMTAvBgNV BAMTKDEzRjZDODc5N0ZBRUI3NUQ1QTg5MjhGQUREOTdFMjgyREQxRkIxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfKkGdSzmkK09XKjqQ5nKulLs qJG3QNJmYiWcfGBEhkXQHbv79o00SHlMafzhh8K2wFCAyLhuEuOPeqAPzSsF+IAU Ar1T6+J/tbPV1nCcLJ8+WVEpRr+Ahow26Z1Lw1kYP3rmsRvEMrNQ9QRolnqnXCmM XcJ6wL3r2tfaRw6JEbnphOzRdOoyLVTF+iZ8MsRkNDtMNNFF0XgKF467cpZzqYBq UVoyoxgG/TlsibLUNjd+5YhuTE1DQu3p9KFkkTLCbu4PD75a+zedXWFBOe55qRar DwtjN8/AUf0Jd4bgd+mJDrZ0DY9xj059IQQaf2YC6tda2/6vBoCTmHgmdG+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE/bIeX+ut11aiSj63Zfigt0fsdAwHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaWg9Paeh5EHA58Ta7tBONcyGhikRPppQx7 cp/85EwRnrwBbCoFOQYgIaugSoK1ofUrYVU56Pgll8+75DfRXj7jAsUABHu2aJgZ mHPkxDL9BhVr3K6LEdCbI3ZaUYhzKA23EE33EcFgZOjTMDr3v1YZbO+H0+88Q4Xz VihfwNdj2v7AmL4W9XL4CwlGtYHAdxH59+gmVwbFHi6P0IvuGf+GGj4rgMbX1tCl 8kjkMQyjtmhcWmh14MkJ/0X8OKIkuh2o+tBKJppoWL5Bc+XGcWHse9lzQgjYSa0e xioHT3gjAoxxNhegrPlctyXVKZCZPp/+BehjzAwVm2G7cAjc9QU= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:20 2025 by rpki-client