$ rpki-client -vvf repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft File: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft (raw, json) Hash identifier: E5f9NPYfF6z/6LcFwLLBIxMiy0pjg+ZYqBgAQeKci5w= Subject key identifier: 94:19:62:E3:51:42:26:9A:55:D4:AE:82:82:81:33:F5:9A:BF:A1:2E Authority key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C Certificate issuer: /CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Certificate serial: 3F97B1895EA37744CF60088E819CC5D424ADC81E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft Manifest number: 019A Signing time: Sat 19 Jul 2025 05:32:17 +0000 Manifest this update: Sat 19 Jul 2025 05:27:17 +0000 Manifest next update: Tue 22 Jul 2025 17:27:17 +0000 Files and hashes: 1: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl (hash: a35htqDSVCvwRYi+gYKlk/PgxUCqEnzT1rhdHZYukyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 17:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:97:b1:89:5e:a3:77:44:cf:60:08:8e:81:9c:c5:d4:24:ad:c8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Validity Not Before: Jul 19 05:27:17 2025 GMT Not After : Jul 22 17:27:17 2025 GMT Subject: CN=941962E35142269A55D4AE82828133F59ABFA12E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:df:d0:f9:ad:3a:5d:ae:43:9b:3a:f4:c7: 7b:7c:37:bd:9d:83:fc:91:8c:b1:ac:c7:74:c3:b1: 96:56:39:9e:9a:f2:68:9f:e3:8f:58:5c:e2:ce:ce: 88:7f:fb:4b:ad:0c:05:5a:d1:a9:e2:c4:84:ae:96: dd:53:89:58:7e:23:57:f4:c6:d2:ad:78:1d:84:27: 99:11:ef:fb:da:24:9d:8d:8d:c1:c6:34:02:87:66: 9c:79:d3:e4:10:0e:22:2c:24:5e:54:25:46:e9:d8: 48:77:56:0a:f4:6a:d0:15:ab:6d:43:25:ed:46:48: 49:7f:b2:f7:f6:d2:90:b3:d0:07:17:26:9f:ca:c6: 77:c8:52:48:79:27:8e:dd:2b:1c:df:c3:4a:79:76: 71:aa:d6:2c:0d:75:ed:d8:9b:33:a3:53:2f:9b:c9: 20:df:00:76:26:c1:80:83:57:88:da:c2:65:93:84: 1e:1d:62:04:e1:c8:97:52:17:e8:04:fe:6d:99:b7: db:4c:ae:49:d5:2a:89:ae:0b:b9:e0:b2:3a:00:11: 3e:35:38:ee:26:7c:9c:a4:ad:cf:83:37:00:56:ec: 3b:8a:5a:43:58:e7:a9:8e:e0:64:35:01:41:25:ad: 76:42:e4:e3:0b:39:00:3a:c6:2e:af:32:f5:d2:24: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:19:62:E3:51:42:26:9A:55:D4:AE:82:82:81:33:F5:9A:BF:A1:2E X509v3 Authority Key Identifier: keyid:70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:67:a8:d9:18:4f:26:2b:dc:6d:8a:87:f1:72:59:39:79:e6: 07:85:4d:d3:c4:e4:f6:d4:53:9a:ef:e5:02:de:60:7b:c1:68: 70:3c:62:9a:2c:43:43:9a:68:77:b0:19:a2:95:d4:d7:20:b9: 71:e2:c2:92:6b:3f:19:7c:b6:1f:66:a2:56:9d:cc:81:6b:ac: 6a:92:66:af:25:64:82:0a:1b:75:d6:43:11:46:dd:68:1a:ea: c7:76:59:85:3e:3b:88:42:34:ee:4c:11:61:77:0c:d1:03:16: d1:f2:7a:01:40:04:d9:0b:55:8e:a0:c8:a3:ad:ed:46:21:10: 02:a9:65:86:82:46:5f:53:a1:9b:39:4b:77:ce:1c:df:2b:a8: b9:8b:4b:c6:74:6c:13:12:08:2b:d7:59:17:44:be:94:e2:75: f8:57:76:08:3c:33:fc:1a:ba:fa:8f:40:1a:e4:ee:cd:41:d6: 3c:15:3a:7f:f0:92:16:cb:70:3c:ed:bd:ad:11:fc:66:72:96: aa:0a:0f:d7:18:3d:00:84:22:8a:09:96:63:47:47:55:04:b9: 48:85:f7:e7:f8:73:ba:6e:9e:53:52:af:21:9c:43:e8:f7:63: d5:2e:8e:d4:44:af:df:07:57:8a:ee:63:f6:e8:70:5f:27:aa: f4:b6:10:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5exiV6jd0TPYAiOgZzF1CStyB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4 NjE4OUIwQzAeFw0yNTA3MTkwNTI3MTdaFw0yNTA3MjIxNzI3MTdaMDMxMTAvBgNV BAMTKDk0MTk2MkUzNTE0MjI2OUE1NUQ0QUU4MjgyODEzM0Y1OUFCRkExMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGt/Q+a06Xa5Dmzr0x3t8N72d g/yRjLGsx3TDsZZWOZ6a8mif449YXOLOzoh/+0utDAVa0anixISult1TiVh+I1f0 xtKteB2EJ5kR7/vaJJ2NjcHGNAKHZpx50+QQDiIsJF5UJUbp2Eh3Vgr0atAVq21D Je1GSEl/svf20pCz0AcXJp/KxnfIUkh5J47dKxzfw0p5dnGq1iwNde3YmzOjUy+b ySDfAHYmwYCDV4jawmWThB4dYgThyJdSF+gE/m2Zt9tMrknVKomuC7ngsjoAET41 OO4mfJykrc+DNwBW7DuKWkNY56mO4GQ1AUElrXZC5OMLOQA6xi6vMvXSJEqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlBli41FCJppV1K6CgoEz9Zq/oS4wHwYDVR0j BBgwFoAUcApG8MSOeE6MvLp7J+RHT4YYmwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjhhMzE1ZS0xNmYxLTRmMjEtOWJjMC0yNjlkNWJlNzNkNjAvMC83MDBBNDZGMEM0 OEU3ODRFOENCQ0JBN0IyN0U0NDc0Rjg2MTg5QjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4NjE4 OUIwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY4YTMxNWUtMTZmMS00ZjIxLTli YzAtMjY5ZDViZTczZDYwLzAvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3 NEY4NjE4OUIwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtnqNkYTyYr3G2Kh/FyWTl55geFTdPE5PbU U5rv5QLeYHvBaHA8YposQ0OaaHewGaKV1NcguXHiwpJrPxl8th9moladzIFrrGqS Zq8lZIIKG3XWQxFG3Wga6sd2WYU+O4hCNO5MEWF3DNEDFtHyegFABNkLVY6gyKOt 7UYhEAKpZYaCRl9ToZs5S3fOHN8rqLmLS8Z0bBMSCCvXWRdEvpTidfhXdgg8M/wa uvqPQBrk7s1B1jwVOn/wkhbLcDztva0R/GZylqoKD9cYPQCEIooJlmNHR1UEuUiF 9+f4c7punlNSryGcQ+j3Y9UujtREr98HV4ruY/bocF8nqvS2ECM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:28 2025 by rpki-client