$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft File: B70932ED6C688D58897E32E1D5C990B20910FF02.mft (raw, json) Hash identifier: UNTJLOHn0qq+GuT+prxTiqdd9HSiEPyLaD7YvLRYp2M= Subject key identifier: 69:FE:E1:6E:23:98:E1:D8:F2:BB:4B:68:33:42:5D:EE:6C:A6:FF:F2 Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 Certificate issuer: /CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Certificate serial: 61F9BBF5D6FBE9C59D80CE0474E12F183FE8E8F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft Manifest number: 0191 Signing time: Sat 19 Jul 2025 12:22:12 +0000 Manifest this update: Sat 19 Jul 2025 12:17:12 +0000 Manifest next update: Tue 22 Jul 2025 21:12:12 +0000 Files and hashes: 1: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: b+1ENA1CQV0UHypRXPMfHhHTGiVgtOzzvTXY/wFcyPw=) 2: B70932ED6C688D58897E32E1D5C990B20910FF02.crl (hash: 6Bd9DYHkQKOfJpI8HSBKS5h8PlayUCrWXhWv3icjT50=) 3: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: D7YG7GtU8OdbibrqJfPY6iiVpoIqqq1mmvO/Oo1ZWAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f9:bb:f5:d6:fb:e9:c5:9d:80:ce:04:74:e1:2f:18:3f:e8:e8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Validity Not Before: Jul 19 12:17:12 2025 GMT Not After : Jul 22 21:12:12 2025 GMT Subject: CN=69FEE16E2398E1D8F2BB4B6833425DEE6CA6FFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:75:77:ea:0f:18:c2:3b:aa:8e:14:04:fc: 74:82:1b:df:58:d3:3e:89:07:b6:01:4b:fc:a3:60: 4a:4f:27:53:7b:1f:f3:2a:ed:de:07:aa:73:a7:f6: 88:cc:9f:f0:12:01:ea:cf:64:28:5c:c1:72:0d:e3: b0:5c:e3:d5:6a:87:6e:d8:91:68:a7:fc:0c:31:8a: 4b:43:7e:db:f1:b2:cd:a0:27:da:08:3a:f7:3e:eb: 28:d8:c5:3c:bd:a3:c9:8c:de:55:6e:27:8a:a4:9d: 8e:6b:c6:9d:c6:92:37:78:82:79:73:f2:9c:0d:bf: b7:39:93:65:10:16:15:d5:cf:51:f0:96:6a:35:e9: 4f:84:2d:a2:bf:7a:e2:92:65:75:8f:4e:4e:b7:c4: 34:35:c9:b3:47:62:09:6a:82:d7:fe:e8:e2:90:dd: 4d:56:5f:4d:b5:e3:62:f7:ec:72:8d:63:d3:49:58: 34:c6:b1:ee:b1:f5:ab:9c:8a:78:0b:83:b3:ed:91: 1b:96:6d:8f:0a:bf:54:ce:e7:22:62:bb:f2:4c:23: f9:8b:08:fe:d5:27:04:b4:ed:bd:aa:2a:ee:da:59: 77:e8:28:a3:36:85:fa:8b:4d:30:ca:86:8b:f1:df: eb:62:48:81:6e:e3:4c:f4:70:ca:6f:83:0f:b2:50: 6b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FE:E1:6E:23:98:E1:D8:F2:BB:4B:68:33:42:5D:EE:6C:A6:FF:F2 X509v3 Authority Key Identifier: keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:f5:66:aa:f6:d4:4c:55:5f:0c:1c:79:b4:db:49:53:83:5c: 0d:0d:b1:99:2a:08:75:5d:d8:27:77:1f:aa:76:d9:0c:4a:3f: ee:b9:2e:a8:3b:1e:9e:ef:ff:45:73:2d:80:86:4f:6b:6f:38: 36:b7:64:e6:df:9b:0c:8b:15:49:b3:27:d0:c1:78:7d:79:6a: a3:d3:da:86:19:b1:d9:86:9c:8d:63:30:c9:60:b6:7d:8b:94: 87:2a:11:4a:e1:14:b3:ea:f1:fe:bf:6e:1b:fb:de:0b:d1:14: e0:54:3c:2f:ea:ac:73:33:c7:bc:46:7b:ce:8c:a4:01:eb:96: e9:b6:47:e2:a5:1c:47:77:a3:61:65:c5:f2:84:28:73:9b:f1: a3:3f:02:0a:37:8f:e8:28:1a:17:53:30:20:22:32:e5:1b:c9: e8:05:94:81:b9:85:66:5e:f7:cc:88:c9:dd:30:30:86:66:55: 15:37:c9:f5:b7:f0:c5:57:1f:28:70:42:7d:3d:43:8e:51:7d: 9d:db:d4:01:b9:d0:da:a8:36:06:52:a0:b5:83:15:ec:74:fd: d4:72:71:e2:fc:89:27:12:31:d4:32:ce:58:10:4e:31:73:94: ba:64:f8:84:91:f1:3e:4e:9e:82:21:4c:36:67:9d:80:b3:68: b6:c5:7e:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfm79db76cWdgM4EdOEvGD/o6PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIw OTEwRkYwMjAeFw0yNTA3MTkxMjE3MTJaFw0yNTA3MjIyMTEyMTJaMDMxMTAvBgNV BAMTKDY5RkVFMTZFMjM5OEUxRDhGMkJCNEI2ODMzNDI1REVFNkNBNkZGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMEHV36g8YwjuqjhQE/HSCG99Y 0z6JB7YBS/yjYEpPJ1N7H/Mq7d4HqnOn9ojMn/ASAerPZChcwXIN47Bc49Vqh27Y kWin/AwxiktDftvxss2gJ9oIOvc+6yjYxTy9o8mM3lVuJ4qknY5rxp3Gkjd4gnlz 8pwNv7c5k2UQFhXVz1Hwlmo16U+ELaK/euKSZXWPTk63xDQ1ybNHYglqgtf+6OKQ 3U1WX02142L37HKNY9NJWDTGse6x9aucingLg7PtkRuWbY8Kv1TO5yJiu/JMI/mL CP7VJwS07b2qKu7aWXfoKKM2hfqLTTDKhovx3+tiSIFu40z0cMpvgw+yUGvtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaf7hbiOY4djyu0toM0Jd7mym//IwHwYDVR0j BBgwFoAUtwky7WxojViJfjLh1cmQsgkQ/wIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTkwZGE0OS05ODYyLTQxZGUtODMzZS1iMzA0ZjBjMWFlNTcvMC9CNzA5MzJFRDZD Njg4RDU4ODk3RTMyRTFENUM5OTBCMjA5MTBGRjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIwOTEw RkYwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz M2UtYjMwNGYwYzFhZTU3LzAvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkw QjIwOTEwRkYwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALb1Zqr21ExVXwwcebTbSVODXA0NsZkqCHVd 2Cd3H6p22QxKP+65Lqg7Hp7v/0VzLYCGT2tvODa3ZObfmwyLFUmzJ9DBeH15aqPT 2oYZsdmGnI1jMMlgtn2LlIcqEUrhFLPq8f6/bhv73gvRFOBUPC/qrHMzx7xGe86M pAHrlum2R+KlHEd3o2FlxfKEKHOb8aM/Ago3j+goGhdTMCAiMuUbyegFlIG5hWZe 98yIyd0wMIZmVRU3yfW38MVXHyhwQn09Q45RfZ3b1AG50NqoNgZSoLWDFex0/dRy ceL8iScSMdQyzlgQTjFzlLpk+ISR8T5OnoIhTDZnnYCzaLbFfgs= -----END CERTIFICATE-----Generated at Mon Jul 21 12:39:11 2025 by rpki-client