$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: TPr28lTQC+WT0B4NDQ2rZGiHPz0ajCYyxsE+QLHmVFU= Subject key identifier: 4D:F7:4D:B3:2A:FD:6E:BF:4D:A7:1C:C2:3E:C2:68:84:A3:50:DA:63 Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 7BAEA4E56716008DF2A7E6C5999D886719B443D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: 010F Signing time: Sat 19 Jul 2025 02:51:00 +0000 Manifest this update: Sat 19 Jul 2025 02:46:00 +0000 Manifest next update: Tue 22 Jul 2025 03:59:00 +0000 Files and hashes: 1: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: pL8MiCoMOBsIF79ZgKINrnTG4TBChWyONR8phyW+eiQ=) 2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: xFoVEBixfaV59f5eLoKvzCfI+maBpFsE/LQmHoFGuNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 03:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ae:a4:e5:67:16:00:8d:f2:a7:e6:c5:99:9d:88:67:19:b4:43:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Jul 19 02:46:00 2025 GMT Not After : Jul 22 03:59:00 2025 GMT Subject: CN=4DF74DB32AFD6EBF4DA71CC23EC26884A350DA63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:38:6a:be:03:38:85:21:7c:85:ed:d8:1b:6e: 4c:83:15:fa:e1:16:f2:ab:ff:95:d3:73:93:f2:88: b5:eb:17:f0:cc:2c:06:4b:1c:b6:34:56:10:60:42: d9:c4:c3:1f:9c:76:ac:a3:06:73:55:b4:d8:e8:e0: 12:a6:a8:ba:fa:ae:c7:ad:89:22:b2:fa:84:e4:83: 3e:d0:ea:ad:fd:b1:9c:24:6e:ee:a1:99:22:b6:93: 42:cc:9f:54:1e:87:76:b2:49:22:b1:7e:85:c5:80: 32:ce:ee:b4:59:d4:b8:f8:f8:e6:5e:39:42:db:46: 1f:2e:26:7f:0f:d4:3d:52:ac:e1:5c:1a:c1:73:68: fd:5f:6e:29:94:1f:bb:2a:97:4d:69:a5:31:33:c6: 76:22:a3:4d:5c:80:d5:3c:f2:71:b3:a9:e2:da:e5: ca:66:1e:2f:d7:ff:92:32:13:78:1f:37:0e:9e:a2: 67:da:54:da:3e:28:89:ca:7e:88:53:08:9c:3c:bb: c3:56:e8:63:c6:4d:3d:48:d9:38:23:6d:4e:75:e0: 3d:36:68:13:26:08:a1:48:0b:2a:d5:be:46:6f:ae: 3c:ba:3a:ec:b7:39:8f:89:fb:02:f8:a6:ca:29:96: 8d:6e:71:20:49:36:9c:80:99:48:e5:26:3a:48:1d: 2e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F7:4D:B3:2A:FD:6E:BF:4D:A7:1C:C2:3E:C2:68:84:A3:50:DA:63 X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7f:65:7f:b9:dc:3e:67:a2:d9:90:7c:7b:de:b4:e1:60:7d: b4:aa:d3:16:f7:98:c5:ce:34:89:de:5e:f8:17:93:99:b4:8e: 2a:2f:0f:9d:35:7c:47:8e:34:8e:4e:0f:fc:72:71:98:49:09: 3a:5a:36:f8:b0:e8:da:9c:ef:16:01:13:da:c8:c4:c2:69:3f: ba:c0:1b:c8:78:17:d9:4e:48:ce:a9:3a:8a:12:72:cd:b7:5f: e4:e8:8d:31:08:15:a8:96:30:63:11:ff:ba:20:59:a6:ce:28: 9b:eb:ac:77:7e:e0:fd:be:97:4b:29:d6:ce:c7:5b:68:36:f4: 69:26:3d:47:2a:4c:53:da:6e:cf:93:29:91:ae:f8:2e:6a:56: fd:8d:71:30:6a:8b:31:ce:70:50:a3:c3:69:0b:6d:55:c8:d4: 43:0e:fe:be:ac:a6:e2:6c:e1:56:65:6d:4a:a1:2c:dc:0a:ac: ff:98:f5:eb:02:d8:7a:5a:11:3b:8f:31:26:1b:6b:7c:50:7c: 46:dd:da:89:5d:1a:88:d6:41:1f:cd:3b:b6:42:c6:8d:84:ac: a8:d4:c6:d0:38:67:3d:a9:cd:3b:48:f8:76:84:64:22:35:8f: 5d:f4:ac:c2:d5:21:51:7e:78:d7:96:bb:2f:90:06:9a:d3:08: 1d:c0:fd:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe66k5WcWAI3yp+bFmZ2IZxm0Q9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNTA3MTkwMjQ2MDBaFw0yNTA3MjIwMzU5MDBaMDMxMTAvBgNV BAMTKDRERjc0REIzMkFGRDZFQkY0REE3MUNDMjNFQzI2ODg0QTM1MERBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOGq+AziFIXyF7dgbbkyDFfrh FvKr/5XTc5PyiLXrF/DMLAZLHLY0VhBgQtnEwx+cdqyjBnNVtNjo4BKmqLr6rset iSKy+oTkgz7Q6q39sZwkbu6hmSK2k0LMn1Qeh3aySSKxfoXFgDLO7rRZ1Lj4+OZe OULbRh8uJn8P1D1SrOFcGsFzaP1fbimUH7sql01ppTEzxnYio01cgNU88nGzqeLa 5cpmHi/X/5IyE3gfNw6eomfaVNo+KInKfohTCJw8u8NW6GPGTT1I2TgjbU514D02 aBMmCKFICyrVvkZvrjy6Ouy3OY+J+wL4psoplo1ucSBJNpyAmUjlJjpIHS55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTfdNsyr9br9NpxzCPsJohKNQ2mMwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAB/ZX+53D5notmQfHvetOFgfbSq0xb3mMXO NIneXvgXk5m0jiovD501fEeONI5OD/xycZhJCTpaNviw6Nqc7xYBE9rIxMJpP7rA G8h4F9lOSM6pOooScs23X+TojTEIFaiWMGMR/7ogWabOKJvrrHd+4P2+l0sp1s7H W2g29GkmPUcqTFPabs+TKZGu+C5qVv2NcTBqizHOcFCjw2kLbVXI1EMO/r6spuJs 4VZlbUqhLNwKrP+Y9esC2HpaETuPMSYba3xQfEbd2oldGojWQR/NO7ZCxo2ErKjU xtA4Zz2pzTtI+HaEZCI1j130rMLVIVF+eNeWuy+QBprTCB3A/Sc= -----END CERTIFICATE-----Generated at Sun Jul 20 23:56:23 2025 by rpki-client