$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft File: 70FE5658A7C2993DC505F75545A128384472227E.mft (raw, json) Hash identifier: Z0/ZQcAzJ4GQD0XPjvZ4fW8BuVbuOHEX+UwH2NoiFbE= Subject key identifier: 8E:E2:1A:2F:F6:72:54:2D:C4:89:5B:F9:28:BD:99:AA:AA:46:76:D3 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 67D73AAC4EC4894825BE4B793568FDC26DF5A587 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft Manifest number: 0213 Signing time: Wed 12 Mar 2025 01:41:10 +0000 Manifest this update: Wed 12 Mar 2025 01:36:10 +0000 Manifest next update: Sat 15 Mar 2025 03:09:10 +0000 Files and hashes: 1: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: VpIKxGpnGG5kY+TxgaFm5MAMJ5OPwOweNd+seLyS58Q=) 2: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: gLStYnptht5TyqoGXBL5Rk0CVBS4ZoGmnO4HsnZPkL0=) 3: 70FE5658A7C2993DC505F75545A128384472227E.crl (hash: IspED7SjJQBTPQWS5+UZSAc9TlNDuDS9qBo6yrPpuhU=) 4: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Q5pvwdFKL1lgBG6fYcr2yl0tesQth6vA5guIwHg8TXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 03:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d7:3a:ac:4e:c4:89:48:25:be:4b:79:35:68:fd:c2:6d:f5:a5:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Mar 12 01:36:10 2025 GMT Not After : Mar 15 03:09:10 2025 GMT Subject: CN=8EE21A2FF672542DC4895BF928BD99AAAA4676D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:b0:45:98:1a:db:22:47:32:16:06:0c:87: c1:0a:6f:ac:d6:2d:70:b1:f2:5d:d6:b1:83:9c:68: d4:f0:d3:eb:9b:54:cb:1c:da:c8:10:dd:ee:c4:5d: af:fe:a4:ef:48:5d:19:66:ad:24:f6:be:4b:04:3e: 25:8b:b1:35:22:3f:ff:5b:3e:e1:35:ec:2f:c1:ad: 31:d0:49:78:d5:8e:92:15:ad:8a:8d:67:6f:0f:c7: 36:9d:b1:bf:e8:9f:67:6d:d9:da:ca:f6:6b:ce:01: 88:28:13:54:5f:94:22:94:e3:d9:ce:d3:20:62:0b: 2a:97:e4:b7:95:ab:d9:d0:7a:96:4c:21:03:b6:cf: e1:48:71:80:ca:bd:04:64:07:2a:61:47:de:b3:d7: bf:a1:ca:55:c0:b5:59:c1:6f:98:c0:10:62:e4:4c: 15:14:96:76:82:ae:04:ed:92:47:99:d2:0e:fd:2a: 11:81:13:0d:8a:6c:7e:cb:9f:f2:49:c4:55:68:07: 26:91:c3:8d:17:a3:e4:cd:67:42:3f:f0:e9:88:2a: 2f:31:f0:dc:0c:f6:34:01:21:e9:de:20:4d:85:a8: 9e:6e:02:93:2e:ab:6f:e4:e8:c2:a0:2f:a1:22:f7: 83:e1:16:34:0f:26:b7:f8:f7:c6:68:ce:c7:be:77: c3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E2:1A:2F:F6:72:54:2D:C4:89:5B:F9:28:BD:99:AA:AA:46:76:D3 X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:eb:f3:df:ee:67:b2:82:67:80:9e:73:df:67:04:39:10:0b: f6:a5:bc:63:74:6c:7d:a7:de:03:dc:cc:5a:c4:4a:39:39:e2: d0:ed:d5:ea:2b:28:39:e6:aa:91:96:73:00:62:6c:aa:41:2b: e5:6f:5a:4a:30:08:bd:e1:56:80:55:95:31:bb:d4:5c:07:01: a7:40:80:58:da:d8:3f:3f:f0:01:1e:01:62:16:f5:c1:a2:f0: eb:ca:e2:4f:d2:7e:28:3d:5a:39:4b:c2:b3:01:d0:f9:ba:6e: 77:81:da:cb:24:ad:16:1f:00:6e:ae:14:5f:cd:21:f4:d8:f0: e8:38:bf:a5:82:03:c3:c3:63:93:e9:c4:ba:a2:67:43:95:a1: 36:e8:8e:f8:b2:c7:36:a9:e5:95:33:05:ad:15:ec:5d:ba:65: 46:de:60:03:96:f5:51:93:08:eb:60:15:09:a6:dc:9d:0e:33: d5:83:c0:18:52:6c:79:e4:1a:37:34:41:58:cd:cd:59:fa:61: cf:ed:d3:fa:82:1a:73:99:9a:e0:ab:e7:4d:b3:0c:2b:a8:fa: be:4f:83:53:6f:3e:7d:80:5a:34:3d:85:b4:fe:f7:a5:71:56: f2:ff:b7:a2:0f:64:f9:d8:fd:0a:b8:c8:48:0d:e9:54:d3:19: 3e:40:50:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ9c6rE7EiUglvkt5NWj9wm31pYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNTAzMTIwMTM2MTBaFw0yNTAzMTUwMzA5MTBaMDMxMTAvBgNV BAMTKDhFRTIxQTJGRjY3MjU0MkRDNDg5NUJGOTI4QkQ5OUFBQUE0Njc2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHuLBFmBrbIkcyFgYMh8EKb6zW LXCx8l3WsYOcaNTw0+ubVMsc2sgQ3e7EXa/+pO9IXRlmrST2vksEPiWLsTUiP/9b PuE17C/BrTHQSXjVjpIVrYqNZ28Pxzadsb/on2dt2drK9mvOAYgoE1RflCKU49nO 0yBiCyqX5LeVq9nQepZMIQO2z+FIcYDKvQRkByphR96z17+hylXAtVnBb5jAEGLk TBUUlnaCrgTtkkeZ0g79KhGBEw2KbH7Ln/JJxFVoByaRw40Xo+TNZ0I/8OmIKi8x 8NwM9jQBIeneIE2FqJ5uApMuq2/k6MKgL6Ei94PhFjQPJrf498Zozse+d8PXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjuIaL/ZyVC3EiVv5KL2ZqqpGdtMwHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4 Mzg0NDcyMjI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTr89/uZ7KCZ4Cec99nBDkQC/alvGN0bH2n 3gPczFrESjk54tDt1eorKDnmqpGWcwBibKpBK+VvWkowCL3hVoBVlTG71FwHAadA gFja2D8/8AEeAWIW9cGi8OvK4k/Sfig9WjlLwrMB0Pm6bneB2sskrRYfAG6uFF/N IfTY8Og4v6WCA8PDY5PpxLqiZ0OVoTbojviyxzap5ZUzBa0V7F26ZUbeYAOW9VGT COtgFQmm3J0OM9WDwBhSbHnkGjc0QVjNzVn6Yc/t0/qCGnOZmuCr502zDCuo+r5P g1NvPn2AWjQ9hbT+96VxVvL/t6IPZPnY/Qq4yEgN6VTTGT5AUIU= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:40 2025 by rpki-client