$ rpki-client -vvf repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft File: A70723C87D2C27B95BE6227C631E7D85EF89D513.mft (raw, json) Hash identifier: 8UtM7i0MnxvlkdfChmMIbZFpg5uId+XGz4OCmuijoHo= Subject key identifier: 96:02:96:A3:FF:B7:B2:39:8E:CD:99:18:8B:94:3B:94:17:7E:F3:04 Authority key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Certificate issuer: /CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Certificate serial: 1BBE10A0BFDBCBB5A4078D2CE70295E658B5B990 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft Manifest number: 04DA Signing time: Fri 06 Jun 2025 05:00:53 +0000 Manifest this update: Fri 06 Jun 2025 04:55:53 +0000 Manifest next update: Mon 09 Jun 2025 11:58:53 +0000 Files and hashes: 1: A70723C87D2C27B95BE6227C631E7D85EF89D513.crl (hash: vgwSsGDie64uvWTvGPoo0pdO3KDuPdpshR7ziAtQwLc=) 2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: QAI5cYTeOrxvcausPsC1CnYV2kULdBh9ytAc4ZJZoM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:be:10:a0:bf:db:cb:b5:a4:07:8d:2c:e7:02:95:e6:58:b5:b9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Validity Not Before: Jun 6 04:55:53 2025 GMT Not After : Jun 9 11:58:53 2025 GMT Subject: CN=960296A3FFB7B2398ECD99188B943B94177EF304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f3:69:32:7a:70:e5:9a:ad:a9:26:0f:53:69: ca:82:ef:c5:7d:5a:3a:a0:bf:aa:a4:84:de:dd:45: 13:e1:ef:4f:61:f3:52:7c:b3:45:75:92:0b:33:7e: e0:52:c0:7c:10:88:92:64:46:f3:c9:85:3c:dc:29: 3b:6d:38:af:23:e2:11:29:e5:9f:95:78:f2:8b:41: 83:49:8e:ab:f7:29:d3:69:b2:6e:d0:87:1d:9f:1b: bf:6a:61:4a:0e:61:84:e2:cd:93:5a:06:fa:d9:b1: 67:a3:b2:2c:15:a8:5d:8e:cb:99:63:86:31:1e:48: d3:4b:06:33:30:db:42:b4:fd:18:5c:fe:5b:93:bd: c0:68:0f:7f:fb:4a:f5:2e:4d:e4:54:37:d2:07:a4: e4:0a:8e:91:f3:33:8e:b3:05:a1:41:72:fb:a8:ef: e3:2d:25:44:5d:f1:12:9a:70:33:d2:bc:4f:26:67: 62:e1:f5:f2:90:33:7f:a3:e8:96:a7:76:db:10:d2: e1:6e:7a:d2:94:f8:1d:f4:70:e8:12:ab:7a:15:5d: ba:e0:90:30:21:cf:15:68:32:bc:7f:5d:2a:c3:67: ea:0d:2f:3d:3f:20:c1:a7:2c:d4:19:d4:14:b1:a9: 63:fe:5b:69:40:b0:7e:36:f3:67:25:b2:a1:e8:4b: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:02:96:A3:FF:B7:B2:39:8E:CD:99:18:8B:94:3B:94:17:7E:F3:04 X509v3 Authority Key Identifier: keyid:A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:13:58:12:2b:82:4e:26:28:58:cc:42:bc:af:5f:16:a8:44: 99:22:49:a0:44:f1:24:f3:86:49:17:06:a1:31:12:c6:39:10: d4:16:42:3e:49:05:14:c3:05:c5:c0:b5:32:76:60:11:52:53: 4c:eb:8e:a0:f9:93:ef:78:e0:48:ab:00:c0:1a:9b:99:55:e6: c9:41:3a:f5:12:ca:78:15:45:19:2e:98:b1:e7:b1:ec:86:68: f8:a6:75:82:f8:f1:d9:2c:e5:b2:40:3d:7a:be:7d:af:1a:cc: ee:6d:e7:3b:e3:9b:f3:a4:c8:10:35:a7:a9:f4:09:e1:45:9f: 38:c2:d6:b1:cd:b6:f9:4f:55:78:e0:6c:68:5c:09:f8:3d:fa: 43:cf:81:d8:59:58:ff:b9:07:8a:a6:8f:74:f8:b8:08:0e:88: db:33:36:8d:fd:f2:84:ab:0e:b3:d1:55:45:75:b2:5a:76:6b: 3f:7e:9a:ff:90:d9:8a:01:0e:c6:0a:45:5b:05:01:69:ce:a5: a7:27:2e:0a:bf:10:17:a0:33:37:9f:96:a1:4a:af:98:81:44: fa:e7:d2:32:29:9c:6f:bf:cd:9e:8c:36:a8:15:47:56:f5:26: 18:73:5e:c9:8d:4c:53:7f:5d:75:45:37:1f:78:96:ca:47:7a: a5:e0:da:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG74QoL/by7WkB40s5wKV5li1uZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVF Rjg5RDUxMzAeFw0yNTA2MDYwNDU1NTNaFw0yNTA2MDkxMTU4NTNaMDMxMTAvBgNV BAMTKDk2MDI5NkEzRkZCN0IyMzk4RUNEOTkxODhCOTQzQjk0MTc3RUYzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD482kyenDlmq2pJg9TacqC78V9 Wjqgv6qkhN7dRRPh709h81J8s0V1kgszfuBSwHwQiJJkRvPJhTzcKTttOK8j4hEp 5Z+VePKLQYNJjqv3KdNpsm7Qhx2fG79qYUoOYYTizZNaBvrZsWejsiwVqF2Oy5lj hjEeSNNLBjMw20K0/Rhc/luTvcBoD3/7SvUuTeRUN9IHpOQKjpHzM46zBaFBcvuo 7+MtJURd8RKacDPSvE8mZ2Lh9fKQM3+j6JandtsQ0uFuetKU+B30cOgSq3oVXbrg kDAhzxVoMrx/XSrDZ+oNLz0/IMGnLNQZ1BSxqWP+W2lAsH4282clsqHoSykTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgKWo/+3sjmOzZkYi5Q7lBd+8wQwHwYDVR0j BBgwFoAUpwcjyH0sJ7lb5iJ8Yx59he+J1RMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMC9BNzA3MjNDODdE MkMyN0I5NUJFNjIyN0M2MzFFN0Q4NUVGODlENTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVFRjg5 RDUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdE ODVFRjg5RDUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwTWBIrgk4mKFjMQryvXxaoRJkiSaBE8STz hkkXBqExEsY5ENQWQj5JBRTDBcXAtTJ2YBFSU0zrjqD5k+944EirAMAam5lV5slB OvUSyngVRRkumLHnseyGaPimdYL48dks5bJAPXq+fa8azO5t5zvjm/OkyBA1p6n0 CeFFnzjC1rHNtvlPVXjgbGhcCfg9+kPPgdhZWP+5B4qmj3T4uAgOiNszNo398oSr DrPRVUV1slp2az9+mv+Q2YoBDsYKRVsFAWnOpacnLgq/EBegMzeflqFKr5iBRPrn 0jIpnG+/zZ6MNqgVR1b1JhhzXsmNTFN/XXVFNx94lspHeqXg2io= -----END CERTIFICATE-----Generated at Sat Jun 7 12:27:28 2025 by rpki-client