$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft File: 70FE5658A7C2993DC505F75545A128384472227E.mft (raw, json) Hash identifier: y1uytEokPjuFQ1Kf3dlSkd/Cvam5qg3WmpVgpbzYNr4= Subject key identifier: 30:04:F5:91:45:80:E0:4B:F5:33:9E:9B:47:DC:6C:EA:97:AC:16:B5 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 0C1A5F6AE11762CD1AD40D25BBB4C86AF7427E83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft Manifest number: 0239 Signing time: Thu 05 Jun 2025 23:51:13 +0000 Manifest this update: Thu 05 Jun 2025 23:46:13 +0000 Manifest next update: Mon 09 Jun 2025 08:30:13 +0000 Files and hashes: 1: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: gLStYnptht5TyqoGXBL5Rk0CVBS4ZoGmnO4HsnZPkL0=) 2: 70FE5658A7C2993DC505F75545A128384472227E.crl (hash: sT8ZqvQylbDd7Oklp28vk16XfM2tV6kCiOL4PW1XE6E=) 3: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Q5pvwdFKL1lgBG6fYcr2yl0tesQth6vA5guIwHg8TXM=) 4: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: VpIKxGpnGG5kY+TxgaFm5MAMJ5OPwOweNd+seLyS58Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 08:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1a:5f:6a:e1:17:62:cd:1a:d4:0d:25:bb:b4:c8:6a:f7:42:7e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Jun 5 23:46:13 2025 GMT Not After : Jun 9 08:30:13 2025 GMT Subject: CN=3004F5914580E04BF5339E9B47DC6CEA97AC16B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:4d:90:99:c9:9b:a8:99:ef:62:3d:70:13: ce:5b:fb:5c:0a:0b:b9:07:c3:e0:29:7e:e7:26:35: bd:6f:d8:86:94:0f:ea:1b:cb:fd:31:80:12:1b:f4: 0c:9c:eb:d1:5d:68:d8:0f:86:10:1f:94:47:a2:25: 20:2b:23:3b:f8:15:68:e1:de:7c:01:13:43:79:72: 1e:ad:1b:be:df:db:42:c5:75:e3:03:00:3d:67:87: 21:37:d4:85:ce:c3:6a:2d:88:81:47:fa:d0:74:58: 30:3b:91:7e:0c:6c:e5:ed:84:a9:50:b7:6e:d6:e7: db:d7:bb:0e:53:6d:a3:f9:3e:5b:77:5f:c1:3c:76: 2b:1f:00:03:de:ed:cd:ab:89:68:93:5f:d9:2f:7b: 00:66:30:20:aa:1c:72:b5:f3:05:44:d1:ae:6c:e5: ed:cc:c5:cf:a1:41:69:ec:52:0a:3a:2f:2c:50:04: 99:56:62:0f:fc:b1:5d:f6:99:a9:af:57:cf:8c:b4: 26:a0:33:be:30:50:52:0b:07:5d:73:1c:0a:74:d9: 51:3f:00:bb:6b:69:92:8e:24:14:df:ff:fc:b0:f8: 31:b4:ea:9e:c3:80:f2:04:e8:3c:45:ad:7a:f0:bf: 5d:0a:d0:99:ca:cd:72:34:4c:bb:49:ba:5a:c5:06: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:04:F5:91:45:80:E0:4B:F5:33:9E:9B:47:DC:6C:EA:97:AC:16:B5 X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d6:ce:9f:88:bf:5f:f7:f9:44:f1:47:d9:a4:1e:82:d0:42: 61:31:46:9e:91:27:55:82:8d:c3:61:6e:8a:8a:8f:0c:c8:a3: ca:49:a2:ac:77:ba:19:52:ce:c0:b3:a1:e4:5e:d1:9f:bd:99: 3d:b8:ee:b7:5e:e2:6d:59:5a:31:0b:8a:6a:b7:4d:d7:04:c8: dd:62:fd:24:78:d8:72:bd:eb:53:a0:1f:30:24:a9:45:7c:db: 02:60:d2:e8:ed:29:27:fb:51:35:d1:e8:d9:a7:89:a6:fa:d3: 24:6e:4f:72:ae:fa:e1:cb:b9:e3:93:50:fd:40:ce:3e:bc:ca: 95:fb:24:34:42:50:15:57:2e:ae:1a:ef:29:3e:16:6a:a2:12: d4:87:5e:43:e3:36:4f:27:fa:04:b9:89:f6:18:c6:8f:8a:69: 1e:96:3f:48:e4:0f:b2:2a:8e:51:7f:15:30:c1:19:ad:7f:e8: f0:2a:cb:94:d1:ff:cc:0e:df:74:1d:db:07:9c:7e:a0:69:18: fa:12:3a:c8:f9:b0:f7:45:f6:84:a2:c7:c3:68:f9:fe:f9:21: 01:bd:86:86:ca:8f:12:23:78:d4:60:55:32:b3:8b:66:c3:25: b4:e5:4b:4d:e7:12:cb:05:05:78:e5:e8:f6:fc:d2:ac:f3:e2: 11:95:ba:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBpfauEXYs0a1A0lu7TIavdCfoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNTA2MDUyMzQ2MTNaFw0yNTA2MDkwODMwMTNaMDMxMTAvBgNV BAMTKDMwMDRGNTkxNDU4MEUwNEJGNTMzOUU5QjQ3REM2Q0VBOTdBQzE2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb1E2QmcmbqJnvYj1wE85b+1wK C7kHw+ApfucmNb1v2IaUD+oby/0xgBIb9Ayc69FdaNgPhhAflEeiJSArIzv4FWjh 3nwBE0N5ch6tG77f20LFdeMDAD1nhyE31IXOw2otiIFH+tB0WDA7kX4MbOXthKlQ t27W59vXuw5TbaP5Plt3X8E8disfAAPe7c2riWiTX9kvewBmMCCqHHK18wVE0a5s 5e3Mxc+hQWnsUgo6LyxQBJlWYg/8sV32mamvV8+MtCagM74wUFILB11zHAp02VE/ ALtraZKOJBTf//yw+DG06p7DgPIE6DxFrXrwv10K0JnKzXI0TLtJulrFBhWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMAT1kUWA4Ev1M56bR9xs6pesFrUwHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4 Mzg0NDcyMjI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvWzp+Iv1/3+UTxR9mkHoLQQmExRp6RJ1WC jcNhboqKjwzIo8pJoqx3uhlSzsCzoeRe0Z+9mT247rde4m1ZWjELimq3TdcEyN1i /SR42HK961OgHzAkqUV82wJg0ujtKSf7UTXR6Nmniab60yRuT3Ku+uHLueOTUP1A zj68ypX7JDRCUBVXLq4a7yk+FmqiEtSHXkPjNk8n+gS5ifYYxo+KaR6WP0jkD7Iq jlF/FTDBGa1/6PAqy5TR/8wO33Qd2wecfqBpGPoSOsj5sPdF9oSix8No+f75IQG9 hobKjxIjeNRgVTKzi2bDJbTlS03nEssFBXjl6Pb80qzz4hGVunI= -----END CERTIFICATE-----Generated at Fri Jun 6 16:34:17 2025 by rpki-client