$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft File: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft (raw, json) Hash identifier: 4RwqChLMZykvJOFE9lV0ZpPxCfgj2CTJFxznOet/RHc= Subject key identifier: 81:74:DB:B3:77:35:4A:31:7C:59:69:65:F7:8F:9F:97:A8:73:F8:48 Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Certificate serial: 7155AB4A02781A88D5213403307A46D5EE17B3D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft Manifest number: 015B Signing time: Thu 17 Apr 2025 21:00:34 +0000 Manifest this update: Thu 17 Apr 2025 20:55:34 +0000 Manifest next update: Sun 20 Apr 2025 23:21:34 +0000 Files and hashes: 1: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl (hash: 6DvShbXCjnKzq7SZ9tsMOuJpVyBgPvgaN42MwXSNLnI=) 2: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: viVk0fd1IGRahaA9QHSNJwt9tQb5HRy/oD87hvRQStY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 23:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:55:ab:4a:02:78:1a:88:d5:21:34:03:30:7a:46:d5:ee:17:b3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Validity Not Before: Apr 17 20:55:34 2025 GMT Not After : Apr 20 23:21:34 2025 GMT Subject: CN=8174DBB377354A317C596965F78F9F97A873F848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9d:c9:2a:42:b9:17:6e:b4:b1:d1:68:e0:5f: 9a:ec:0e:d4:6f:c1:86:e5:07:23:26:ca:9c:9b:86: 87:0b:aa:98:e6:f2:0e:51:76:41:17:f6:a6:3b:ca: 8a:14:5c:98:71:80:a2:e8:06:a2:54:18:34:50:17: 58:eb:59:7e:7e:98:46:24:7a:0d:fa:bd:77:93:b4: 4d:ee:31:a2:78:98:1a:10:b2:25:60:61:f5:8c:9f: 87:82:51:36:1b:f2:37:a2:e4:b0:2c:3c:40:d1:88: 46:e5:bd:6e:43:7c:6c:8b:76:a0:4f:a3:98:07:21: 8d:a8:6e:ff:73:0d:51:26:d0:ff:0a:44:7d:f1:68: 8f:28:f6:36:21:f6:c2:8e:68:9a:95:53:98:2a:9e: 7a:a1:e4:d1:7e:55:16:88:79:d8:b4:49:11:f5:b3: c2:21:1c:11:74:e6:ba:59:9a:9c:fb:b2:22:00:14: a3:14:df:a8:3f:17:a2:f9:56:08:79:af:ce:20:7a: c2:26:34:3b:ca:bb:27:02:0f:68:55:6a:7f:9a:d9: 92:46:be:6f:d3:3a:db:2b:a2:59:6e:b9:c2:79:fd: 55:4a:53:f5:d6:be:e6:0b:56:f5:48:ae:0b:e2:18: ff:79:57:85:14:69:1e:47:24:cd:2f:2c:14:1b:ec: 76:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:74:DB:B3:77:35:4A:31:7C:59:69:65:F7:8F:9F:97:A8:73:F8:48 X509v3 Authority Key Identifier: keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d2:97:d5:5c:2a:88:ac:1f:68:c4:d4:14:11:c5:87:ec:e7: ce:9e:17:95:64:44:57:34:e0:c0:51:72:23:99:f4:c0:19:a6: 79:01:1b:26:60:21:3f:84:8a:5f:ec:c5:03:d9:4d:54:82:17: 43:0f:40:4d:e6:5f:46:6f:ba:96:84:ae:94:53:68:af:ef:2a: d6:9e:ed:e4:9f:d1:26:a5:a9:e6:a1:8e:dc:0f:fc:77:63:66: 2c:97:a1:73:f4:39:96:3a:2f:7f:29:4e:32:c8:ff:06:bd:2e: c7:98:e4:9d:86:81:4d:4a:4d:af:1f:cd:d1:82:e0:81:7f:cb: 14:52:df:e6:f5:f9:51:4d:2f:bc:a2:7f:07:b6:af:1d:c6:e1: e7:34:67:10:0c:24:1f:47:ec:ec:59:56:4d:1a:f8:a8:a5:1d: fa:9f:1b:2d:26:17:28:77:71:cd:73:90:94:9a:05:bf:f1:27: c2:7f:36:0b:0d:8a:61:7f:56:a8:98:ff:a5:90:cd:42:80:df: a6:ac:d0:e0:c2:12:73:63:98:3b:72:99:fe:37:38:72:f9:57: a9:b0:43:ce:35:8e:69:9f:4d:58:ae:d2:2a:6e:68:e8:2d:50: 07:cd:b0:b5:b2:72:93:33:52:5e:26:fc:a9:d1:c6:57:4b:fe: 2c:f6:5b:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcVWrSgJ4GojVITQDMHpG1e4Xs9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2 OThCRERENDAeFw0yNTA0MTcyMDU1MzRaFw0yNTA0MjAyMzIxMzRaMDMxMTAvBgNV BAMTKDgxNzREQkIzNzczNTRBMzE3QzU5Njk2NUY3OEY5Rjk3QTg3M0Y4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCenckqQrkXbrSx0WjgX5rsDtRv wYblByMmypybhocLqpjm8g5RdkEX9qY7yooUXJhxgKLoBqJUGDRQF1jrWX5+mEYk eg36vXeTtE3uMaJ4mBoQsiVgYfWMn4eCUTYb8jei5LAsPEDRiEblvW5DfGyLdqBP o5gHIY2obv9zDVEm0P8KRH3xaI8o9jYh9sKOaJqVU5gqnnqh5NF+VRaIedi0SRH1 s8IhHBF05rpZmpz7siIAFKMU36g/F6L5Vgh5r84gesImNDvKuycCD2hVan+a2ZJG vm/TOtsrolluucJ5/VVKU/XWvuYLVvVIrgviGP95V4UUaR5HJM0vLBQb7HbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgXTbs3c1SjF8WWll94+fl6hz+EgwHwYDVR0j BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1 ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC RERENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3 OGUtMGE4NTRhOWNmZjRmLzAvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlF M0E2OThCRERENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/Sl9VcKoisH2jE1BQRxYfs586eF5VkRFc0 4MBRciOZ9MAZpnkBGyZgIT+Eil/sxQPZTVSCF0MPQE3mX0ZvupaErpRTaK/vKtae 7eSf0SalqeahjtwP/HdjZiyXoXP0OZY6L38pTjLI/wa9LseY5J2GgU1KTa8fzdGC 4IF/yxRS3+b1+VFNL7yifwe2rx3G4ec0ZxAMJB9H7OxZVk0a+KilHfqfGy0mFyh3 cc1zkJSaBb/xJ8J/NgsNimF/VqiY/6WQzUKA36as0ODCEnNjmDtymf43OHL5V6mw Q841jmmfTViu0ipuaOgtUAfNsLWycpMzUl4m/KnRxldL/iz2W7Q= -----END CERTIFICATE-----Generated at Sun Apr 20 00:13:53 2025 by rpki-client