$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft File: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft (raw, json) Hash identifier: zVGJB9VwbXG8i1xGNhfTNMJ78jnWin85FJWIbI330IQ= Subject key identifier: F9:15:20:0D:23:C7:FF:39:74:6A:34:FB:BB:65:5C:EF:C4:5D:3C:D4 Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Certificate serial: 793E8AEA1B632D7B0650FE878BF0D0D9F50A4082 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft Manifest number: 0171 Signing time: Fri 06 Jun 2025 12:10:35 +0000 Manifest this update: Fri 06 Jun 2025 12:05:35 +0000 Manifest next update: Mon 09 Jun 2025 22:12:35 +0000 Files and hashes: 1: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl (hash: Rwle3N8eL7loeS26UoGWZ96iNAac1f0Rlm+13eLOqhc=) 2: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: viVk0fd1IGRahaA9QHSNJwt9tQb5HRy/oD87hvRQStY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:3e:8a:ea:1b:63:2d:7b:06:50:fe:87:8b:f0:d0:d9:f5:0a:40:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Validity Not Before: Jun 6 12:05:35 2025 GMT Not After : Jun 9 22:12:35 2025 GMT Subject: CN=F915200D23C7FF39746A34FBBB655CEFC45D3CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:71:d3:05:3c:73:1b:c2:26:03:98:da:69: ce:1e:4d:8e:e4:01:40:ad:ec:e5:d0:0c:9e:f1:28: c8:de:3e:0b:70:70:cc:20:ab:34:13:e6:5c:e2:6e: 02:75:c4:7c:92:2a:09:b8:b3:cb:62:d8:0b:1c:cc: eb:42:d5:2a:92:7f:2c:5a:4e:ed:f8:51:49:c3:0d: fe:a5:fb:74:2c:dd:73:79:a7:e6:67:45:f0:3e:cc: 10:4b:2c:71:9f:dd:b9:31:80:c1:07:d2:0f:0a:8b: d6:72:2e:7e:a3:db:e5:3f:80:62:65:de:69:9e:aa: 4a:b5:b8:b2:2f:63:24:2d:7c:d0:5f:90:b2:c0:60: 03:21:03:0f:a0:60:81:23:73:cf:0e:4d:59:e3:b1: 1f:f1:7c:42:d5:ad:83:d8:af:db:d8:56:cd:de:63: 94:ed:70:72:f6:18:ba:93:a4:5c:24:76:89:80:a7: 12:ac:68:77:28:bc:3b:f7:2f:0c:fc:6d:dc:90:f8: 50:a7:3c:e6:ed:00:30:d1:5c:02:a2:8f:15:a2:6b: f4:da:76:52:46:e7:7e:44:87:f3:6a:4a:af:e0:6b: 7d:fc:5d:29:41:20:2f:3d:68:02:b2:07:5c:c3:64: d1:8d:c1:ae:15:79:60:15:3a:6a:4f:ad:0f:e8:72: 1f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:15:20:0D:23:C7:FF:39:74:6A:34:FB:BB:65:5C:EF:C4:5D:3C:D4 X509v3 Authority Key Identifier: keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c7:1e:b0:41:f9:85:5b:0e:c4:3f:bb:08:a0:57:db:18:90: 8d:7c:cb:a9:d9:59:3e:53:bb:71:bb:de:99:39:e5:dd:16:bf: 23:65:6c:4f:f2:d6:83:d5:0f:14:b2:a3:2b:6d:97:49:33:04: d2:58:fc:4a:01:96:3b:9b:47:41:b3:00:49:58:45:5d:27:ef: 95:fd:fa:1a:5f:f2:e4:f1:06:b2:36:60:81:8a:88:e0:ac:e7: a4:ef:d2:80:6e:72:e8:ec:8c:2a:0d:cf:6e:08:6c:99:12:f5: db:14:4e:31:9f:02:89:36:a8:95:85:5c:63:e2:db:bd:da:07: 1b:4d:3d:e1:6b:4d:fb:31:cb:a7:b4:76:9f:c9:cb:43:74:08: cc:c6:ee:48:fb:9d:5c:93:37:0e:70:2e:d1:69:b0:75:dd:d8: 62:36:a3:52:7c:82:80:0b:fa:95:0c:18:52:21:66:6f:08:af: c1:ea:99:c2:ae:2d:c9:96:a2:b9:aa:04:8e:3f:ed:e0:47:d6: 02:aa:4f:7e:bb:43:3b:88:8b:3c:cf:13:62:e8:52:2a:e1:74: d3:4f:dd:20:30:b1:a8:1f:1d:89:b5:03:b4:2e:de:69:1c:7c: 44:6a:63:01:59:4f:b0:72:b7:6e:7b:34:6b:b8:6b:18:d7:78: a2:f0:50:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeT6K6htjLXsGUP6Hi/DQ2fUKQIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2 OThCRERENDAeFw0yNTA2MDYxMjA1MzVaFw0yNTA2MDkyMjEyMzVaMDMxMTAvBgNV BAMTKEY5MTUyMDBEMjNDN0ZGMzk3NDZBMzRGQkJCNjU1Q0VGQzQ1RDNDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrp3HTBTxzG8ImA5jaac4eTY7k AUCt7OXQDJ7xKMjePgtwcMwgqzQT5lzibgJ1xHySKgm4s8ti2AsczOtC1SqSfyxa Tu34UUnDDf6l+3Qs3XN5p+ZnRfA+zBBLLHGf3bkxgMEH0g8Ki9ZyLn6j2+U/gGJl 3mmeqkq1uLIvYyQtfNBfkLLAYAMhAw+gYIEjc88OTVnjsR/xfELVrYPYr9vYVs3e Y5TtcHL2GLqTpFwkdomApxKsaHcovDv3Lwz8bdyQ+FCnPObtADDRXAKijxWia/Ta dlJG535Eh/NqSq/ga338XSlBIC89aAKyB1zDZNGNwa4VeWAVOmpPrQ/och/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+RUgDSPH/zl0ajT7u2Vc78RdPNQwHwYDVR0j BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1 ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC RERENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3 OGUtMGE4NTRhOWNmZjRmLzAvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlF M0E2OThCRERENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjHHrBB+YVbDsQ/uwigV9sYkI18y6nZWT5T u3G73pk55d0WvyNlbE/y1oPVDxSyoyttl0kzBNJY/EoBljubR0GzAElYRV0n75X9 +hpf8uTxBrI2YIGKiOCs56Tv0oBucujsjCoNz24IbJkS9dsUTjGfAok2qJWFXGPi 273aBxtNPeFrTfsxy6e0dp/Jy0N0CMzG7kj7nVyTNw5wLtFpsHXd2GI2o1J8goAL +pUMGFIhZm8Ir8HqmcKuLcmWormqBI4/7eBH1gKqT367QzuIizzPE2LoUirhdNNP 3SAwsagfHYm1A7Qu3mkcfERqYwFZT7Byt257NGu4axjXeKLwUIM= -----END CERTIFICATE-----Generated at Sat Jun 7 03:59:01 2025 by rpki-client