$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: 74GZGq3gINcSfXc6TyxzejZRD2QsdChK+YS215VKvz0= Subject key identifier: C7:C8:1C:42:BC:E0:25:AB:9E:23:78:E5:5B:C6:AB:02:7C:CA:4D:83 Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 4E1FD1B0BFA023E058B81A67A919954F15B3D323 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 0289 Signing time: Tue 22 Jul 2025 17:20:37 +0000 Manifest this update: Tue 22 Jul 2025 17:15:37 +0000 Manifest next update: Fri 25 Jul 2025 18:43:37 +0000 Files and hashes: 1: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: pl7RlgtsUOKAEh7w0vp24kzJ4YULed7KT/zKxnA/GCs=) 2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1f:d1:b0:bf:a0:23:e0:58:b8:1a:67:a9:19:95:4f:15:b3:d3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Jul 22 17:15:37 2025 GMT Not After : Jul 25 18:43:37 2025 GMT Subject: CN=C7C81C42BCE025AB9E2378E55BC6AB027CCA4D83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:73:4b:94:76:58:2e:b5:e2:9d:ef:00:a4: 33:61:fe:be:55:8c:2a:c7:d8:a9:47:99:0d:19:4c: b1:f6:9a:28:ae:08:6d:88:90:b0:f6:4c:a1:94:f8: 72:3e:89:88:ef:cc:c7:7e:94:71:91:49:9c:ea:fa: 68:b3:be:a8:cb:bf:01:52:54:18:47:8c:8f:49:ec: 18:e5:33:7c:2d:d5:f6:4d:1c:78:0d:52:27:e4:c5: 8e:2f:a5:62:43:62:09:6c:d7:7d:ae:b6:72:05:27: 52:98:73:e8:e4:35:a1:fd:a5:72:d3:f8:13:8d:1f: bf:21:5e:bc:bc:8a:6f:f7:90:72:a6:16:af:50:44: d1:2e:88:30:cf:49:c3:72:da:79:65:16:a0:96:02: 42:94:22:9b:7a:4c:24:5f:61:35:c8:d9:3b:8b:a4: 04:0d:a5:e5:d7:59:4b:54:02:ec:cb:97:2a:bc:ac: 07:b4:58:69:10:5c:8e:43:7f:1e:71:54:22:43:57: e4:c9:ad:04:13:dd:30:9d:42:12:34:f7:ed:b7:62: 93:bd:08:1c:e1:47:b3:90:0d:44:9d:6c:5c:b1:e8: 62:04:09:72:df:2b:69:6f:5c:35:f2:45:78:7e:7a: df:99:22:d0:97:a6:00:67:1a:d9:ce:c1:05:e9:ce: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C8:1C:42:BC:E0:25:AB:9E:23:78:E5:5B:C6:AB:02:7C:CA:4D:83 X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:76:f8:e1:12:32:9c:ee:56:1b:43:f5:d3:3f:b4:1e:89:aa: 78:02:2e:05:28:21:35:4c:37:18:33:c3:d6:c4:eb:60:ab:bf: 45:89:cd:7d:57:7f:f7:6d:b3:30:e5:7a:42:d1:1f:99:ac:7a: 8f:2e:84:52:7e:7b:89:08:80:03:43:8b:c2:be:19:77:96:56: 97:5d:ac:fd:78:ab:f8:63:ce:f5:6f:a9:79:f2:0c:17:3c:b2: 77:f5:57:70:bf:51:ea:9e:0a:04:e3:79:ab:0b:86:fd:99:88: 5e:51:8f:eb:4f:d8:2b:af:73:f7:2d:92:b3:fd:90:35:3a:48: 94:ef:22:02:86:1d:73:05:da:a9:c1:01:b6:a9:e1:db:11:af: c4:03:3b:86:d9:72:d4:3f:28:21:ed:98:62:b0:50:3c:f2:ae: 40:95:14:a1:19:1d:85:dd:66:c6:e1:37:48:8e:86:f0:e0:66: 38:ce:68:19:09:05:0b:cc:c7:63:3e:5c:b0:85:89:8c:cd:e8: cc:fd:67:2f:f4:05:54:cc:60:d4:eb:36:1e:85:8a:d5:f6:93: ba:59:79:32:be:48:b9:95:08:7a:24:49:e3:47:f6:49:d1:07: bd:f1:9d:13:44:bd:0c:79:7a:63:e3:fa:67:05:e9:42:75:be: 64:5d:b4:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTh/RsL+gI+BYuBpnqRmVTxWz0yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTA3MjIxNzE1MzdaFw0yNTA3MjUxODQzMzdaMDMxMTAvBgNV BAMTKEM3QzgxQzQyQkNFMDI1QUI5RTIzNzhFNTVCQzZBQjAyN0NDQTREODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+p3NLlHZYLrXine8ApDNh/r5V jCrH2KlHmQ0ZTLH2miiuCG2IkLD2TKGU+HI+iYjvzMd+lHGRSZzq+mizvqjLvwFS VBhHjI9J7BjlM3wt1fZNHHgNUifkxY4vpWJDYgls132utnIFJ1KYc+jkNaH9pXLT +BONH78hXry8im/3kHKmFq9QRNEuiDDPScNy2nllFqCWAkKUIpt6TCRfYTXI2TuL pAQNpeXXWUtUAuzLlyq8rAe0WGkQXI5Dfx5xVCJDV+TJrQQT3TCdQhI09+23YpO9 CBzhR7OQDUSdbFyx6GIECXLfK2lvXDXyRXh+et+ZItCXpgBnGtnOwQXpziAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx8gcQrzgJaueI3jlW8arAnzKTYMwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx2+OESMpzuVhtD9dM/tB6JqngCLgUoITVM Nxgzw9bE62Crv0WJzX1Xf/dtszDlekLRH5mseo8uhFJ+e4kIgANDi8K+GXeWVpdd rP14q/hjzvVvqXnyDBc8snf1V3C/UeqeCgTjeasLhv2ZiF5Rj+tP2Cuvc/ctkrP9 kDU6SJTvIgKGHXMF2qnBAbap4dsRr8QDO4bZctQ/KCHtmGKwUDzyrkCVFKEZHYXd ZsbhN0iOhvDgZjjOaBkJBQvMx2M+XLCFiYzN6Mz9Zy/0BVTMYNTrNh6FitX2k7pZ eTK+SLmVCHokSeNH9knRB73xnRNEvQx5emPj+mcF6UJ1vmRdtAs= -----END CERTIFICATE-----Generated at Wed Jul 23 02:15:50 2025 by rpki-client