$ rpki-client -vvf repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft File: A70723C87D2C27B95BE6227C631E7D85EF89D513.mft (raw, json) Hash identifier: rDi5KC2f+RPwlVwEwslDwEyig4uyFYlkv3+TulZ1LPs= Subject key identifier: 52:7E:86:80:23:54:F8:6D:9A:B3:CD:E2:F0:45:F7:29:13:B2:01:70 Authority key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Certificate issuer: /CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Certificate serial: 2D43FCEC962A6D92BD7240C258E2A38A13270E5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft Manifest number: 0502 Signing time: Wed 03 Sep 2025 16:50:52 +0000 Manifest this update: Wed 03 Sep 2025 16:45:52 +0000 Manifest next update: Sat 06 Sep 2025 18:58:52 +0000 Files and hashes: 1: A70723C87D2C27B95BE6227C631E7D85EF89D513.crl (hash: CyeFWIo71B4keSPZAuIybSMZ72tucfQSDnNSx1AINJQ=) 2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: QAI5cYTeOrxvcausPsC1CnYV2kULdBh9ytAc4ZJZoM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:43:fc:ec:96:2a:6d:92:bd:72:40:c2:58:e2:a3:8a:13:27:0e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Validity Not Before: Sep 3 16:45:52 2025 GMT Not After : Sep 6 18:58:52 2025 GMT Subject: CN=527E86802354F86D9AB3CDE2F045F72913B20170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ea:fa:57:52:7d:5c:4d:da:ec:1f:21:e8:83: ec:86:50:c0:28:59:b5:06:1c:2a:55:b8:2d:76:ff: d9:37:f1:a8:01:38:b4:1f:ed:4d:e3:52:91:2d:a8: 4e:f6:bc:62:21:24:09:18:02:75:ad:ba:90:4a:e5: 9f:ee:89:66:3f:74:8a:f4:13:d6:6d:e6:c8:75:61: c8:65:bd:8a:56:79:01:bc:87:73:62:6b:f3:22:51: 36:f3:4c:7c:58:f1:99:b2:8e:a1:0a:bf:39:f1:37: 04:9d:f1:39:f7:5d:ed:62:30:bd:f7:c9:fb:94:7a: dd:74:13:2d:e8:37:62:7a:d2:e5:80:db:db:1d:96: af:d6:9a:47:f3:d7:25:ca:9f:bd:68:b8:68:18:a7: 36:7d:11:71:27:16:51:f4:cd:97:c4:ea:31:0d:28: 18:bf:4f:9a:8a:8f:c0:02:82:d9:d1:a5:4f:9b:d0: 76:82:ae:6a:07:1a:00:e3:d3:63:cd:63:f5:4e:f9: 84:ab:7d:10:93:7f:0b:c2:10:4e:f5:8d:58:dd:19: da:9c:90:7c:9f:e4:36:c9:8b:c6:82:40:1b:63:d2: 1b:44:a0:fb:ed:8c:ba:02:ab:64:d4:2c:8f:96:b1: 31:69:eb:39:ac:ec:a5:b6:44:3b:96:91:9c:e1:00: b3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7E:86:80:23:54:F8:6D:9A:B3:CD:E2:F0:45:F7:29:13:B2:01:70 X509v3 Authority Key Identifier: keyid:A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b2:63:06:d9:01:fd:c6:6b:db:db:ed:d5:b8:cd:74:e3:54: 3d:b2:a6:ea:7f:91:b5:b4:59:a2:ed:4e:25:d6:c8:29:2f:fc: dd:3c:45:f0:81:0b:b9:2c:e0:c6:f2:d7:36:02:11:38:0e:32: 88:9e:f0:2e:e2:23:83:c7:c1:2c:af:01:c7:a2:55:b4:21:8f: 37:32:96:cf:35:00:4c:88:ad:f1:44:b4:73:e7:28:1f:33:ea: f4:aa:0f:17:c6:75:d2:dc:f1:1e:22:1e:67:18:ae:54:22:3c: 7e:dc:77:fd:60:2b:d8:a1:62:78:6e:71:8a:c4:ed:fa:16:03: 01:53:b4:59:17:f3:30:f9:1b:c8:8a:86:fd:bb:f6:b4:d3:ba: 78:72:4e:01:a4:cb:47:bc:02:97:1d:59:c6:eb:d1:1a:ea:9d: 53:e6:4c:f5:6e:a0:f9:72:c9:34:e1:87:30:d0:0a:7f:e5:83: 50:f8:4b:91:45:f6:51:cf:2e:a7:a0:99:19:72:70:f6:07:06: 1d:63:c1:12:e2:50:40:70:13:90:be:6c:f5:3c:3d:54:6e:eb: 90:76:b8:d6:4a:a4:ac:2f:9a:41:88:a3:28:22:8c:71:18:aa: c8:4f:b0:27:ef:84:52:c9:e5:ff:55:41:af:1b:1a:40:c3:66: a9:6f:3c:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUP87JYqbZK9ckDCWOKjihMnDlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVF Rjg5RDUxMzAeFw0yNTA5MDMxNjQ1NTJaFw0yNTA5MDYxODU4NTJaMDMxMTAvBgNV BAMTKDUyN0U4NjgwMjM1NEY4NkQ5QUIzQ0RFMkYwNDVGNzI5MTNCMjAxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS6vpXUn1cTdrsHyHog+yGUMAo WbUGHCpVuC12/9k38agBOLQf7U3jUpEtqE72vGIhJAkYAnWtupBK5Z/uiWY/dIr0 E9Zt5sh1YchlvYpWeQG8h3Nia/MiUTbzTHxY8ZmyjqEKvznxNwSd8Tn3Xe1iML33 yfuUet10Ey3oN2J60uWA29sdlq/Wmkfz1yXKn71ouGgYpzZ9EXEnFlH0zZfE6jEN KBi/T5qKj8ACgtnRpU+b0HaCrmoHGgDj02PNY/VO+YSrfRCTfwvCEE71jVjdGdqc kHyf5DbJi8aCQBtj0htEoPvtjLoCq2TULI+WsTFp6zms7KW2RDuWkZzhALMrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUn6GgCNU+G2as83i8EX3KROyAXAwHwYDVR0j BBgwFoAUpwcjyH0sJ7lb5iJ8Yx59he+J1RMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMC9BNzA3MjNDODdE MkMyN0I5NUJFNjIyN0M2MzFFN0Q4NUVGODlENTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVFRjg5 RDUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdE ODVFRjg5RDUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyyYwbZAf3Ga9vb7dW4zXTjVD2ypup/kbW0 WaLtTiXWyCkv/N08RfCBC7ks4Mby1zYCETgOMoie8C7iI4PHwSyvAceiVbQhjzcy ls81AEyIrfFEtHPnKB8z6vSqDxfGddLc8R4iHmcYrlQiPH7cd/1gK9ihYnhucYrE 7foWAwFTtFkX8zD5G8iKhv279rTTunhyTgGky0e8ApcdWcbr0RrqnVPmTPVuoPly yTThhzDQCn/lg1D4S5FF9lHPLqegmRlycPYHBh1jwRLiUEBwE5C+bPU8PVRu65B2 uNZKpKwvmkGIoygijHEYqshPsCfvhFLJ5f9VQa8bGkDDZqlvPMo= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:15 2025 by rpki-client