$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft File: C70A343932991281F91796DB87B011987603BBF4.mft (raw, json) Hash identifier: CHXJd/3TXkhP9qrHgs1XTdlQc1EazKAo0em986uJJJ8= Subject key identifier: B2:F6:36:83:CB:67:96:B0:99:65:D3:4A:13:A8:7F:B3:5B:3C:C9:CE Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4 Certificate serial: 0E0F4F993B2D2B093AA9BFDE903962124FBEEB79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft Manifest number: 0211 Signing time: Sat 19 Jul 2025 10:51:32 +0000 Manifest this update: Sat 19 Jul 2025 10:46:32 +0000 Manifest next update: Tue 22 Jul 2025 15:33:32 +0000 Files and hashes: 1: C70A343932991281F91796DB87B011987603BBF4.crl (hash: E4w8qUycMJK/OLuaZNdJYEXjQ0Nfd7ZhdpJy3wOdzY4=) 2: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: K/te+OOqq38HfLYFBM6maqhYABgY51ViE5jJN8jRKPY=) 3: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: TB7U9GvlAmHnGk0/8JpxDBGjqTq2O6M0WEaScBuoS/g=) 4: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 7CE9BXOCk+npQ95V1OHYui5nCFjD3JZ2DBCvcvu4/Kk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 15:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0f:4f:99:3b:2d:2b:09:3a:a9:bf:de:90:39:62:12:4f:be:eb:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70A343932991281F91796DB87B011987603BBF4 Validity Not Before: Jul 19 10:46:32 2025 GMT Not After : Jul 22 15:33:32 2025 GMT Subject: CN=B2F63683CB6796B09965D34A13A87FB35B3CC9CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9b:b1:5c:d5:ef:98:61:ba:05:38:98:f6:ca: 3e:81:0e:1a:4e:dc:49:3a:83:5a:36:14:58:c4:7f: 0a:60:3f:c2:38:25:70:35:8e:f0:72:ba:1d:1c:43: f8:bf:4d:d6:1f:f4:51:22:5e:29:3f:cd:7c:15:f0: a8:44:0e:e3:30:23:31:62:58:8f:f4:16:32:8f:34: 44:db:03:55:d3:6d:07:31:1b:8e:57:21:01:42:9b: ee:96:d1:4a:0a:f1:d9:d3:90:7b:01:91:3b:b4:97: 0e:28:4e:04:a8:b2:40:cc:82:74:97:8a:62:1a:d4: 12:98:ba:de:2f:81:b0:ad:59:a4:ba:bb:0f:84:f3: 1b:af:cf:75:16:91:6a:7f:2d:31:18:33:69:07:0e: 20:c8:e0:7c:8d:b5:fc:a8:7b:c1:36:6f:af:5f:8d: ec:bb:89:35:4c:17:c3:2e:0b:31:92:21:fb:75:5d: 2d:48:71:cb:42:34:38:57:92:8a:70:e3:af:08:38: 7e:c3:0a:56:0b:b8:fb:be:eb:2b:9a:f0:1a:3c:02: f6:9b:fe:d0:82:59:a6:97:61:c2:37:72:bc:9c:84: c0:3c:d3:07:47:8e:c3:23:a6:58:7d:63:34:d5:cf: 83:55:a7:83:e2:e5:9d:ea:86:71:24:db:01:80:07: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F6:36:83:CB:67:96:B0:99:65:D3:4A:13:A8:7F:B3:5B:3C:C9:CE X509v3 Authority Key Identifier: keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ba:e6:1f:37:76:f3:d7:63:b8:6c:a2:78:68:29:94:f5:17: da:0a:2a:26:ef:40:7d:96:d0:91:22:65:78:ac:95:ad:f2:d2: c1:f1:34:d1:65:41:79:fe:d7:d8:2d:03:79:0a:8a:14:bb:89: fc:ca:5b:35:4e:39:08:91:f3:8a:1c:cf:a5:98:74:ad:65:83: 13:87:b2:e1:15:f5:1b:45:26:52:eb:26:40:9f:64:c1:96:c0: 3d:44:0d:26:bd:5b:d9:b5:d5:57:e9:98:c2:9d:7d:25:11:50: ba:5d:98:b4:ad:f9:6d:72:04:91:39:ea:ac:e9:80:cc:69:61: 57:db:80:50:50:63:03:61:50:6e:11:55:19:36:29:03:24:d0: da:0d:34:f4:c2:0c:c3:94:de:7c:65:4f:d2:89:63:02:85:10: c7:0f:26:9f:23:d5:94:62:b2:8d:e9:a1:a0:a6:e2:f9:aa:56: f1:0e:a3:ee:28:e3:c5:6c:47:0e:3b:3b:0d:78:e2:80:5d:5e: 1a:14:c0:70:1d:0c:b6:7b:da:f9:6e:e8:6e:60:b8:4a:52:79: 55:22:ed:1f:9f:db:46:9d:b8:b4:b9:86:f0:8d:da:4a:b6:2c: 80:42:31:5a:35:ec:60:fc:d6:93:9c:09:1c:88:4a:16:17:23: 28:4c:a5:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDg9PmTstKwk6qb/ekDliEk++63kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3 NjAzQkJGNDAeFw0yNTA3MTkxMDQ2MzJaFw0yNTA3MjIxNTMzMzJaMDMxMTAvBgNV BAMTKEIyRjYzNjgzQ0I2Nzk2QjA5OTY1RDM0QTEzQTg3RkIzNUIzQ0M5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDom7Fc1e+YYboFOJj2yj6BDhpO 3Ek6g1o2FFjEfwpgP8I4JXA1jvByuh0cQ/i/TdYf9FEiXik/zXwV8KhEDuMwIzFi WI/0FjKPNETbA1XTbQcxG45XIQFCm+6W0UoK8dnTkHsBkTu0lw4oTgSoskDMgnSX imIa1BKYut4vgbCtWaS6uw+E8xuvz3UWkWp/LTEYM2kHDiDI4HyNtfyoe8E2b69f jey7iTVMF8MuCzGSIft1XS1IcctCNDhXkopw468IOH7DClYLuPu+6yua8Bo8Avab /tCCWaaXYcI3crychMA80wdHjsMjplh9YzTVz4NVp4Pi5Z3qhnEk2wGAB2svAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsvY2g8tnlrCZZdNKE6h/s1s8yc4wHwYDVR0j BBgwFoAUxwo0OTKZEoH5F5bbh7ARmHYDu/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmMxN2NjMi1mNGEyLTQxNWUtOGVhMi1mOWM0N2Y3NWM0Y2EvMC9DNzBBMzQzOTMy OTkxMjgxRjkxNzk2REI4N0IwMTE5ODc2MDNCQkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3NjAz QkJGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDEx OTg3NjAzQkJGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA665h83dvPXY7hsonhoKZT1F9oKKibvQH2W 0JEiZXisla3y0sHxNNFlQXn+19gtA3kKihS7ifzKWzVOOQiR84ocz6WYdK1lgxOH suEV9RtFJlLrJkCfZMGWwD1EDSa9W9m11VfpmMKdfSURULpdmLSt+W1yBJE56qzp gMxpYVfbgFBQYwNhUG4RVRk2KQMk0NoNNPTCDMOU3nxlT9KJYwKFEMcPJp8j1ZRi so3poaCm4vmqVvEOo+4o48VsRw47Ow144oBdXhoUwHAdDLZ72vlu6G5guEpSeVUi 7R+f20aduLS5hvCN2kq2LIBCMVo17GD81pOcCRyIShYXIyhMpWw= -----END CERTIFICATE-----Generated at Mon Jul 21 08:34:01 2025 by rpki-client