$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft File: 70FE5658A7C2993DC505F75545A128384472227E.mft (raw, json) Hash identifier: b7G9TgiVUzMaM1XsPNLOoOHos3f2xRcHqeF50EMImBw= Subject key identifier: 07:87:3A:21:08:AE:EC:12:46:E0:C2:20:03:99:26:5E:94:19:C3:56 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 0DF1FA6551B365ABE01117ED25C91C0A0718DF17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft Manifest number: 0262 Signing time: Mon 08 Sep 2025 11:01:14 +0000 Manifest this update: Mon 08 Sep 2025 10:56:14 +0000 Manifest next update: Thu 11 Sep 2025 12:45:14 +0000 Files and hashes: 1: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: VpIKxGpnGG5kY+TxgaFm5MAMJ5OPwOweNd+seLyS58Q=) 2: 70FE5658A7C2993DC505F75545A128384472227E.crl (hash: 48FWd/+vqpT296XsyMfnb0BvpZRpoyi4AmrPfDBMhxU=) 3: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: gLStYnptht5TyqoGXBL5Rk0CVBS4ZoGmnO4HsnZPkL0=) 4: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Q5pvwdFKL1lgBG6fYcr2yl0tesQth6vA5guIwHg8TXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 12:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f1:fa:65:51:b3:65:ab:e0:11:17:ed:25:c9:1c:0a:07:18:df:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Sep 8 10:56:14 2025 GMT Not After : Sep 11 12:45:14 2025 GMT Subject: CN=07873A2108AEEC1246E0C2200399265E9419C356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:48:dc:3e:b2:13:22:20:82:b9:9c:7d:a0: 78:95:df:1c:4d:67:ee:2f:51:35:bf:9b:ea:41:8f: 4d:26:85:b9:ae:41:72:f5:07:87:50:39:e1:2b:83: a9:44:72:4c:98:20:96:41:f6:97:37:05:25:bb:ae: 23:40:17:e8:d8:5d:da:00:5b:a4:ba:72:75:98:6b: c2:9f:69:71:0c:82:20:3b:e1:bf:99:c9:84:b1:a2: 02:d0:83:64:af:89:a9:22:3d:74:e8:a7:45:f6:84: 36:aa:d2:b4:a5:a9:8e:8f:b4:85:89:a6:7a:3a:c7: 4b:46:76:df:da:9c:60:93:28:22:46:15:c4:ac:66: 5e:5d:30:15:37:af:c2:10:15:17:a6:a0:96:1b:ab: ab:ae:d2:f3:65:f4:39:69:37:24:03:42:76:b3:06: ba:e3:1f:78:85:d5:c7:16:86:f9:b8:c0:5d:58:5c: 6c:2f:6f:c6:40:00:e0:55:30:61:d4:55:72:bb:03: 2f:a5:1c:e6:e2:92:cb:26:10:fc:1a:dd:ba:93:78: 03:e2:4f:8c:10:e4:d3:2c:f0:07:c7:2f:44:35:e6: 50:93:9d:76:b8:3d:0e:8c:49:01:46:de:67:1d:6b: 62:6c:63:86:95:85:07:47:a3:7d:bc:9d:97:bc:8a: 63:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:87:3A:21:08:AE:EC:12:46:E0:C2:20:03:99:26:5E:94:19:C3:56 X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:5c:dc:76:f3:6a:93:5d:6b:c3:c7:f0:4f:d7:49:59:62:d7: ed:8f:02:f9:48:f0:92:9d:11:7d:18:58:55:93:7e:00:59:10: bb:d5:25:e0:ee:2c:bd:88:97:bb:5a:96:fd:70:8e:ee:ec:54: 26:5b:d8:45:b3:d8:4e:55:0d:11:6b:4e:9f:2f:81:3d:0f:cb: 7b:ee:68:4d:52:cd:61:92:a8:7d:cd:8f:f3:b8:ed:9b:fb:c6: 21:35:e3:e0:93:b6:01:b5:b8:ee:aa:ae:a8:10:56:24:dc:c8: 33:fb:92:d7:84:e0:a9:fb:79:49:d8:39:f0:a8:a4:1a:33:17: 2d:c3:e0:b9:a3:b3:5a:58:44:22:fe:39:e2:b1:d0:ce:00:32: 78:08:78:a8:4f:1d:15:e7:0e:48:45:a5:9e:ac:31:34:52:05: 00:9a:f4:ce:8d:23:5a:d2:06:3c:fc:be:22:21:76:d1:23:c6: 66:77:18:ea:22:d9:c6:0f:93:63:4a:dd:95:d2:e8:1e:1c:26: 6f:68:5b:16:6b:61:87:bf:21:91:bd:3b:12:02:f7:0f:7b:98: ee:a4:ad:b5:ab:3a:45:4a:62:0b:92:8b:d0:4b:7f:33:8e:cd: 82:e8:d0:63:9f:83:d2:98:98:d0:6e:92:f5:2b:10:24:44:c6: bc:bc:ed:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfH6ZVGzZavgERftJckcCgcY3xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNTA5MDgxMDU2MTRaFw0yNTA5MTExMjQ1MTRaMDMxMTAvBgNV BAMTKDA3ODczQTIxMDhBRUVDMTI0NkUwQzIyMDAzOTkyNjVFOTQxOUMzNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy1UjcPrITIiCCuZx9oHiV3xxN Z+4vUTW/m+pBj00mhbmuQXL1B4dQOeErg6lEckyYIJZB9pc3BSW7riNAF+jYXdoA W6S6cnWYa8KfaXEMgiA74b+ZyYSxogLQg2SviakiPXTop0X2hDaq0rSlqY6PtIWJ pno6x0tGdt/anGCTKCJGFcSsZl5dMBU3r8IQFRemoJYbq6uu0vNl9DlpNyQDQnaz BrrjH3iF1ccWhvm4wF1YXGwvb8ZAAOBVMGHUVXK7Ay+lHObikssmEPwa3bqTeAPi T4wQ5NMs8AfHL0Q15lCTnXa4PQ6MSQFG3mcda2JsY4aVhQdHo328nZe8imPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB4c6IQiu7BJG4MIgA5kmXpQZw1YwHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4 Mzg0NDcyMjI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANc3HbzapNda8PH8E/XSVli1+2PAvlI8JKd EX0YWFWTfgBZELvVJeDuLL2Il7talv1wju7sVCZb2EWz2E5VDRFrTp8vgT0Py3vu aE1SzWGSqH3Nj/O47Zv7xiE14+CTtgG1uO6qrqgQViTcyDP7kteE4Kn7eUnYOfCo pBozFy3D4Lmjs1pYRCL+OeKx0M4AMngIeKhPHRXnDkhFpZ6sMTRSBQCa9M6NI1rS Bjz8viIhdtEjxmZ3GOoi2cYPk2NK3ZXS6B4cJm9oWxZrYYe/IZG9OxIC9w97mO6k rbWrOkVKYguSi9BLfzOOzYLo0GOfg9KYmNBukvUrECRExry87dM= -----END CERTIFICATE-----Generated at Tue Sep 9 01:20:51 2025 by rpki-client