$ rpki-client -vvf repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft File: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft (raw, json) Hash identifier: vHKEoDRRxh9VbkDYrRaJXsrulL51kuWezHG3dUrej98= Subject key identifier: B6:52:73:17:39:DA:A5:96:0C:F3:47:18:55:82:5D:F7:0F:F8:D6:AA Authority key identifier: 70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 Certificate issuer: /CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Certificate serial: 54ED188CA34DCAF252174A14EF99A3882A0205D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft Manifest number: 02ED Signing time: Tue 22 Jul 2025 17:11:43 +0000 Manifest this update: Tue 22 Jul 2025 17:06:43 +0000 Manifest next update: Fri 25 Jul 2025 21:25:43 +0000 Files and hashes: 1: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl (hash: Oy9eVGuSwJW+NTJFeq7HvM4hvE7++3nbuuoqj9O3Y7I=) 2: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: a0lH+PIAmWNcxqLbA+wvO5CoOPbucnjR8xOoW3GXo30=) 3: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: VX/I3/x4BQAW9tojrrpAd/u/hvUEfSW7Ux6uRaa3WGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ed:18:8c:a3:4d:ca:f2:52:17:4a:14:ef:99:a3:88:2a:02:05:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Validity Not Before: Jul 22 17:06:43 2025 GMT Not After : Jul 25 21:25:43 2025 GMT Subject: CN=B652731739DAA5960CF3471855825DF70FF8D6AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:48:f0:be:a1:e4:39:02:b3:5f:45:e1:1e: 77:0f:98:47:d1:13:a8:40:18:5a:2b:9a:87:12:84: 26:eb:3b:b8:f0:9f:53:78:79:3c:b8:03:2a:c0:a5: fd:ca:d0:f8:fc:47:4d:9d:87:ee:f9:49:56:23:31: a1:0c:6f:e7:98:32:38:fe:4a:30:5d:31:fe:67:32: e6:06:bb:7d:83:ef:43:f3:fb:5d:07:d4:e3:36:06: 74:aa:46:69:04:74:dc:e6:b7:af:16:24:c8:f8:e9: 5f:b1:b2:03:5d:8f:1a:b4:6f:6b:d0:e5:61:af:88: ee:e6:2c:f2:7f:28:f9:6d:e6:da:cc:5b:3c:59:3a: f0:d4:9d:6d:4a:86:7e:1a:b0:bc:be:29:8c:29:f5: 9f:e2:0b:33:69:09:27:f9:91:3f:81:91:9a:7e:1f: e6:45:cc:3b:47:a7:11:6c:d9:ad:a4:3b:e8:18:aa: 9b:33:fb:df:93:62:c0:4a:78:3f:90:ed:ee:5c:b1: 93:76:69:ed:b5:15:9a:9a:ca:73:44:cb:a1:1b:1b: 0c:27:ac:0f:47:e8:c1:c2:b3:cb:68:49:36:86:f6: f1:65:f8:f2:98:99:8b:93:94:e3:00:bf:33:d6:b2: 7c:bd:53:0a:19:f5:65:9c:f1:28:40:70:57:27:3a: 25:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:52:73:17:39:DA:A5:96:0C:F3:47:18:55:82:5D:F7:0F:F8:D6:AA X509v3 Authority Key Identifier: keyid:70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:cd:56:47:29:84:1e:5b:19:8c:3b:ca:7f:6e:dc:49:87:fa: 09:d2:58:a3:77:6b:90:4a:e8:42:68:c7:4c:92:bd:4c:ff:a6: 27:93:73:9a:02:70:6b:7e:8a:a9:71:81:c9:d7:0b:ec:d5:83: 25:4d:e5:9b:2f:e5:d6:4f:72:18:89:48:ca:7d:bf:07:52:31: 09:f6:1c:ce:b7:af:50:97:a0:60:8e:42:76:fd:8d:8b:d4:9e: 49:af:e7:d7:39:c8:c9:3f:c4:e4:09:75:a4:13:02:ef:31:98: e9:c9:ab:24:fb:05:4d:11:33:44:de:32:38:56:93:d8:4f:72: 74:34:d6:cc:0d:2a:f3:20:59:85:c7:1e:51:48:e5:12:a4:2f: d2:b9:17:22:a8:2a:32:29:b4:5f:15:ca:f5:00:13:95:6d:ce: 48:2c:a9:4e:be:fd:4e:82:ef:14:a8:ea:66:37:fc:1a:3e:a1: 37:fc:72:32:f7:ff:38:c5:01:3c:7c:21:eb:38:31:27:9d:0b: 89:9c:76:6f:f4:e7:ab:a2:88:6a:ae:96:72:a6:0f:b4:42:59: ee:58:0c:7b:7c:fe:be:19:e5:77:f3:0b:5c:37:b7:50:d4:f1: e5:46:94:7b:03:06:b8:cc:3a:2a:57:e7:32:d0:c8:51:3b:89: 57:33:43:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVO0YjKNNyvJSF0oU75mjiCoCBdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4 NDZBMkQ2NDAeFw0yNTA3MjIxNzA2NDNaFw0yNTA3MjUyMTI1NDNaMDMxMTAvBgNV BAMTKEI2NTI3MzE3MzlEQUE1OTYwQ0YzNDcxODU1ODI1REY3MEZGOEQ2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0EjwvqHkOQKzX0XhHncPmEfR E6hAGFormocShCbrO7jwn1N4eTy4AyrApf3K0Pj8R02dh+75SVYjMaEMb+eYMjj+ SjBdMf5nMuYGu32D70Pz+10H1OM2BnSqRmkEdNzmt68WJMj46V+xsgNdjxq0b2vQ 5WGviO7mLPJ/KPlt5trMWzxZOvDUnW1Khn4asLy+KYwp9Z/iCzNpCSf5kT+BkZp+ H+ZFzDtHpxFs2a2kO+gYqpsz+9+TYsBKeD+Q7e5csZN2ae21FZqaynNEy6EbGwwn rA9H6MHCs8toSTaG9vFl+PKYmYuTlOMAvzPWsny9UwoZ9WWc8ShAcFcnOiVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtlJzFznapZYM80cYVYJd9w/41qowHwYDVR0j BBgwFoAUcAuVh8TPp/Kx2ffJLLCw24RqLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODMyODIzNy03NTBmLTQwMjItYjhiMi1kYmE3M2I2NzEzZWMvMC83MDBCOTU4N0M0 Q0ZBN0YyQjFEOUY3QzkyQ0IwQjBEQjg0NkEyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4NDZB MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIw REI4NDZBMkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXNVkcphB5bGYw7yn9u3EmH+gnSWKN3a5BK 6EJox0ySvUz/pieTc5oCcGt+iqlxgcnXC+zVgyVN5Zsv5dZPchiJSMp9vwdSMQn2 HM63r1CXoGCOQnb9jYvUnkmv59c5yMk/xOQJdaQTAu8xmOnJqyT7BU0RM0TeMjhW k9hPcnQ01swNKvMgWYXHHlFI5RKkL9K5FyKoKjIptF8VyvUAE5VtzkgsqU6+/U6C 7xSo6mY3/Bo+oTf8cjL3/zjFATx8Ies4MSedC4mcdm/056uiiGqulnKmD7RCWe5Y DHt8/r4Z5XfzC1w3t1DU8eVGlHsDBrjMOipX5zLQyFE7iVczQ/Y= -----END CERTIFICATE-----Generated at Wed Jul 23 23:19:32 2025 by rpki-client