$ rpki-client -vvf repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft File: B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft (raw, json) Hash identifier: 9H3i8JaVl2Ccx6GFA+hL97HxaEyd1R7IQCkLJztQ+zg= Subject key identifier: 33:85:25:F2:E9:53:55:C5:25:CB:AB:0F:D6:7C:DD:55:43:83:D4:50 Authority key identifier: B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 Certificate issuer: /CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Certificate serial: 33E0D13039E3DC710B7DAD09FEE56EF56A60769D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft Manifest number: 0115 Signing time: Sun 20 Jul 2025 06:21:23 +0000 Manifest this update: Sun 20 Jul 2025 06:16:23 +0000 Manifest next update: Wed 23 Jul 2025 15:18:23 +0000 Files and hashes: 1: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: 8PZn2glxpjPzMwOpViBPOITwulhHCfAKIDoTjo8rwUo=) 2: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: WLfKscMyGMc40boEWdbQdnlHjNZj/oBFnEX9yWncEQQ=) 3: B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl (hash: P01QDEUree28htkaKK8MK33vdCJVm0upNKzomhY5gOg=) 4: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: H5xER1Wp8wcvslhwKx1y276SpMDNAtMvuxWBaQWWyCY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 15:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e0:d1:30:39:e3:dc:71:0b:7d:ad:09:fe:e5:6e:f5:6a:60:76:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Validity Not Before: Jul 20 06:16:23 2025 GMT Not After : Jul 23 15:18:23 2025 GMT Subject: CN=338525F2E95355C525CBAB0FD67CDD554383D450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3b:4b:39:c4:e5:d6:4d:31:65:e0:93:c9:21: be:58:2d:7d:b8:f2:46:6e:de:04:29:43:d1:67:2d: f2:c5:ad:b1:2d:48:91:83:6f:f6:a1:f3:5c:9c:ca: a9:46:b5:af:16:45:e3:8d:32:fe:75:6a:54:ee:5e: 81:bf:67:f3:a5:5c:9b:d5:2c:34:70:33:73:c2:0f: 6c:d3:5c:d8:32:db:01:7c:18:93:ce:92:d9:6a:97: 19:e7:29:68:05:2a:70:62:ef:f2:0b:ac:85:27:9b: e3:78:a6:6f:a0:53:2c:47:59:3b:46:2f:00:a1:33: 89:3c:96:b6:95:4b:00:b6:85:d3:59:30:dc:9e:33: 15:fb:3b:8c:13:fa:c7:61:10:fe:b3:1f:ee:4d:88: 20:6b:f5:e6:04:ab:e4:3a:35:e1:bb:b8:c4:0e:d5: 4b:c5:96:3a:83:b0:cb:a5:f5:96:af:43:65:5a:6f: 76:25:b9:d5:42:3e:ac:a7:cf:58:fc:73:fd:db:45: 9d:20:23:36:c8:49:28:ac:41:1c:2d:d3:44:20:e7: 04:aa:b8:6e:89:98:3f:c4:ae:4d:41:74:c7:8b:72: c5:ff:81:30:6b:1e:a2:20:2d:16:5d:02:0a:a5:5d: af:0e:19:1b:6f:c4:94:92:1f:84:1a:2e:ce:03:a9: 00:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:25:F2:E9:53:55:C5:25:CB:AB:0F:D6:7C:DD:55:43:83:D4:50 X509v3 Authority Key Identifier: keyid:B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:15:dd:b0:35:55:fe:cb:d9:70:a1:14:a8:72:c8:05:c8:a8: 4e:70:33:e0:26:a9:6b:9a:87:36:29:82:66:6f:4a:6d:31:ba: 2f:49:04:69:bc:d9:f8:00:b7:4e:fc:82:e7:79:38:4d:39:f4: 43:d0:46:ff:09:1a:45:e1:50:2a:77:63:36:4e:22:51:94:a1: c9:4a:34:12:c2:49:6e:4d:c5:42:ec:7d:43:e6:74:23:6f:91: ab:e2:6a:7f:f4:5a:20:39:2c:7a:56:08:05:32:8f:fd:42:a0: 7e:9c:97:ca:c3:fe:89:b4:13:89:37:5d:62:4b:61:78:94:9d: b1:7d:b3:39:c8:c2:5e:5e:91:15:bb:8f:79:c9:0d:b6:c1:3e: 83:dc:98:28:71:33:fd:b5:a0:3a:b0:a6:86:a6:51:cc:ea:17: 12:76:8a:db:85:2d:6c:ce:59:0b:83:2a:7e:0c:88:db:96:4d: 00:3e:fc:9a:70:12:db:03:19:12:26:b7:dd:df:1e:5a:88:25: 9b:a7:37:dc:ec:c9:75:18:f0:b6:65:ea:a4:db:ba:ea:7d:2e: 09:8e:c6:af:02:f1:53:1e:67:38:8b:7d:8d:ba:9c:83:ba:c4: 1f:ad:8f:98:9d:82:9d:f8:88:09:48:ac:41:b7:f1:8b:d9:a3: d7:7e:6b:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+DRMDnj3HELfa0J/uVu9Wpgdp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRD QkFBOTkxMDAeFw0yNTA3MjAwNjE2MjNaFw0yNTA3MjMxNTE4MjNaMDMxMTAvBgNV BAMTKDMzODUyNUYyRTk1MzU1QzUyNUNCQUIwRkQ2N0NERDU1NDM4M0Q0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSO0s5xOXWTTFl4JPJIb5YLX24 8kZu3gQpQ9FnLfLFrbEtSJGDb/ah81ycyqlGta8WReONMv51alTuXoG/Z/OlXJvV LDRwM3PCD2zTXNgy2wF8GJPOktlqlxnnKWgFKnBi7/ILrIUnm+N4pm+gUyxHWTtG LwChM4k8lraVSwC2hdNZMNyeMxX7O4wT+sdhEP6zH+5NiCBr9eYEq+Q6NeG7uMQO 1UvFljqDsMul9ZavQ2Vab3YludVCPqynz1j8c/3bRZ0gIzbISSisQRwt00Qg5wSq uG6JmD/Erk1BdMeLcsX/gTBrHqIgLRZdAgqlXa8OGRtvxJSSH4QaLs4DqQDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM4Ul8ulTVcUly6sP1nzdVUOD1FAwHwYDVR0j BBgwFoAUtwzWZplYIvMsBOCa/wGy1MuqmRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmQ0Zjg2OS00ZGI2LTRiMGEtYWFiNi1jZGU0N2I0NDdkNzcvMC9CNzBDRDY2Njk5 NTgyMkYzMkMwNEUwOUFGRjAxQjJENENCQUE5OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRDQkFB OTkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIy RDRDQkFBOTkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYV3bA1Vf7L2XChFKhyyAXIqE5wM+AmqWua hzYpgmZvSm0xui9JBGm82fgAt078gud5OE059EPQRv8JGkXhUCp3YzZOIlGUoclK NBLCSW5NxULsfUPmdCNvkavian/0WiA5LHpWCAUyj/1CoH6cl8rD/om0E4k3XWJL YXiUnbF9sznIwl5ekRW7j3nJDbbBPoPcmChxM/21oDqwpoamUczqFxJ2ituFLWzO WQuDKn4MiNuWTQA+/JpwEtsDGRImt93fHlqIJZunN9zsyXUY8LZl6qTbuup9LgmO xq8C8VMeZziLfY26nIO6xB+tj5idgp34iAlIrEG38YvZo9d+a7Q= -----END CERTIFICATE-----Generated at Sun Jul 20 21:24:24 2025 by rpki-client