$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: +xCM4ImDgH8O6KaARvu39i1w0KMptS67yVE8ZPbkkw4= Subject key identifier: 4E:DD:A2:E3:B1:94:52:51:06:79:A9:4F:92:35:7E:A4:01:FB:15:36 Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 3D12EDFBD869E2C8CC62D54A7B315358B483186C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 0259 Signing time: Sun 06 Apr 2025 18:20:36 +0000 Manifest this update: Sun 06 Apr 2025 18:15:36 +0000 Manifest next update: Wed 09 Apr 2025 18:46:36 +0000 Files and hashes: 1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: NZfGU8yt/4FgZolHeyqRZ4fGy523dk2yAV0gQzO6ODk=) 2: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: qU7Nn/bbhWsNHfQT0BMVfLP2sa7SoNjD+uR6G/CRisA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 18:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:12:ed:fb:d8:69:e2:c8:cc:62:d5:4a:7b:31:53:58:b4:83:18:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Apr 6 18:15:36 2025 GMT Not After : Apr 9 18:46:36 2025 GMT Subject: CN=4EDDA2E3B19452510679A94F92357EA401FB1536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d8:37:b0:c7:b6:17:f6:fd:32:3c:b7:2c:9a: d1:b8:ac:e6:87:54:4d:15:06:19:17:3e:e8:b5:85: 7e:96:1f:a9:37:7a:30:5f:ca:c2:5f:ef:29:6e:06: 3e:a4:92:c8:68:e5:a4:16:be:c0:4c:62:de:24:36: c1:af:24:6e:1a:8b:69:dd:db:bc:76:e9:10:32:68: c1:1c:ee:b8:0d:90:b4:8d:8c:f2:e9:e9:9b:67:b6: 5c:10:96:7c:e7:b1:85:6e:c0:8f:65:e5:e5:6b:1b: 5b:98:a3:c1:f9:9b:de:83:e4:27:df:b7:a3:5a:b6: 6f:34:fe:af:47:de:05:0a:a7:a2:8b:26:d4:ea:02: ba:c1:45:dc:99:44:9e:53:bd:cc:d0:9f:cf:33:71: 62:1a:ac:51:36:46:c3:3e:88:00:35:e8:b0:32:14: 4d:4d:fa:57:95:3a:b9:13:19:b8:54:a9:ff:7f:aa: 18:9f:e4:eb:71:8a:fc:fa:69:0f:ec:57:6e:fb:c0: eb:09:10:02:fb:39:20:60:0b:4c:d6:e3:30:7d:b4: de:ab:3d:8f:3b:e8:b0:e1:fc:9f:9c:c4:98:fd:43: 79:f1:15:45:48:1b:c7:6f:a7:9e:dc:01:e3:c2:27: 6d:39:4c:b6:6a:8d:d6:e1:12:9c:87:7b:8e:ad:f5: 20:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DD:A2:E3:B1:94:52:51:06:79:A9:4F:92:35:7E:A4:01:FB:15:36 X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:8a:97:bc:72:e7:2a:c5:ef:60:40:21:52:2a:fd:a1:c9:50: 31:3a:92:93:bd:6a:5c:d5:fe:52:f7:95:48:49:1d:52:53:4d: 04:7e:62:a6:a3:8c:c0:bc:73:78:2e:c2:5a:47:30:c3:9e:4d: ef:be:e1:62:31:8e:2f:4a:e0:4f:05:bc:69:bc:fb:40:1b:ca: cc:4f:b7:80:d7:20:86:f0:e0:c0:21:a8:32:cc:a5:06:31:0c: 31:88:50:eb:7b:c3:db:33:29:ab:0b:e9:a3:17:3b:b8:c3:f0: a7:0f:48:03:13:a3:42:60:a4:81:98:f9:c8:7f:c5:e7:ea:09: ea:16:93:c0:2f:1b:37:e7:d3:2d:38:67:9e:f2:0e:25:d2:da: 49:4a:dd:32:36:b3:d0:5a:8d:4b:ba:65:00:81:48:89:56:63: 21:5b:55:a7:b2:21:8c:91:ba:3f:0c:0d:4a:2e:5c:60:b3:a2: 99:3f:3e:a5:a8:0c:71:02:e3:a6:4d:22:08:ff:4b:18:68:c0: ce:cf:da:d4:b8:72:71:49:f0:5d:41:f0:38:3d:af:5c:e0:85: f5:64:39:60:5a:b6:8d:71:ba:3d:c4:5c:55:95:b8:dd:ed:ce: 1f:4b:8e:39:9c:78:75:a7:19:39:2c:2b:45:57:3d:30:4e:8f: b4:e3:b1:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRLt+9hp4sjMYtVKezFTWLSDGGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTA0MDYxODE1MzZaFw0yNTA0MDkxODQ2MzZaMDMxMTAvBgNV BAMTKDRFRERBMkUzQjE5NDUyNTEwNjc5QTk0RjkyMzU3RUE0MDFGQjE1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs2Dewx7YX9v0yPLcsmtG4rOaH VE0VBhkXPui1hX6WH6k3ejBfysJf7yluBj6kksho5aQWvsBMYt4kNsGvJG4ai2nd 27x26RAyaMEc7rgNkLSNjPLp6ZtntlwQlnznsYVuwI9l5eVrG1uYo8H5m96D5Cff t6Natm80/q9H3gUKp6KLJtTqArrBRdyZRJ5TvczQn88zcWIarFE2RsM+iAA16LAy FE1N+leVOrkTGbhUqf9/qhif5Otxivz6aQ/sV277wOsJEAL7OSBgC0zW4zB9tN6r PY876LDh/J+cxJj9Q3nxFUVIG8dvp57cAePCJ205TLZqjdbhEpyHe46t9SAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTt2i47GUUlEGealPkjV+pAH7FTYwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKKl7xy5yrF72BAIVIq/aHJUDE6kpO9alzV /lL3lUhJHVJTTQR+YqajjMC8c3guwlpHMMOeTe++4WIxji9K4E8FvGm8+0AbysxP t4DXIIbw4MAhqDLMpQYxDDGIUOt7w9szKasL6aMXO7jD8KcPSAMTo0JgpIGY+ch/ xefqCeoWk8AvGzfn0y04Z57yDiXS2klK3TI2s9BajUu6ZQCBSIlWYyFbVaeyIYyR uj8MDUouXGCzopk/PqWoDHEC46ZNIgj/SxhowM7P2tS4cnFJ8F1B8Dg9r1zghfVk OWBato1xuj3EXFWVuN3tzh9LjjmceHWnGTksK0VXPTBOj7Tjsf4= -----END CERTIFICATE-----Generated at Mon Apr 7 06:23:59 2025 by rpki-client