$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: Qk8tjSOfbM4Lt+FJPZJMyXT5KrXEzZSvyyEGgTo/Lcc= Subject key identifier: B1:CB:66:C4:A7:FE:F2:A9:FF:05:41:23:80:A8:E6:78:DF:FD:6F:C8 Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 2169CD5D4C69AB80391572D292BB2B533C193CD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 0274 Signing time: Thu 05 Jun 2025 03:01:06 +0000 Manifest this update: Thu 05 Jun 2025 02:56:06 +0000 Manifest next update: Sun 08 Jun 2025 08:42:06 +0000 Files and hashes: 1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=) 2: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: +vy0y1gbU/B8y0LvT4zxo1qj1N1rhGwy6SCc+OC+L0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 08:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:69:cd:5d:4c:69:ab:80:39:15:72:d2:92:bb:2b:53:3c:19:3c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Jun 5 02:56:06 2025 GMT Not After : Jun 8 08:42:06 2025 GMT Subject: CN=B1CB66C4A7FEF2A9FF05412380A8E678DFFD6FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:31:4b:79:77:92:fc:00:ae:fd:87:e0:8c:87: b6:b4:bb:c5:f1:d6:f8:f3:7e:c3:82:dc:5c:3c:cc: 56:12:e8:61:c2:cc:ca:07:cb:a0:6e:55:6b:22:99: 20:4c:85:c2:c1:19:42:a1:64:1f:f3:e4:7f:8d:96: e5:3d:ea:66:69:41:0d:d6:d1:6f:ee:db:f8:5a:cb: 7b:32:ad:3d:22:07:3b:26:d6:3e:38:60:fd:4d:21: 4d:b1:76:ba:84:77:8c:9e:8c:59:16:44:3f:a2:c1: 06:02:98:75:54:90:64:31:4d:44:e2:12:82:db:cb: a5:e6:fd:8b:3c:62:e5:e1:ea:49:63:53:e2:57:5b: a9:65:81:2c:0a:c5:78:38:95:37:7e:97:23:27:b4: c0:89:15:fb:4f:46:05:cd:d5:43:89:74:cb:d9:c6: 32:5c:60:a1:fa:7c:e1:a3:e4:6a:2e:d6:17:25:ef: 78:84:97:81:02:8c:4d:51:51:71:bb:8a:c8:1b:e7: 0b:14:a1:7a:4b:af:64:7e:e8:68:55:da:cf:37:f1: 4b:6e:e9:25:21:5a:f3:51:45:b7:ae:69:fd:a4:da: 3b:73:c1:df:cc:68:91:d8:9a:2f:1c:cb:a7:b3:39: de:02:7a:71:ad:11:07:e8:8f:8b:5c:a2:5b:43:a4: 96:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CB:66:C4:A7:FE:F2:A9:FF:05:41:23:80:A8:E6:78:DF:FD:6F:C8 X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:04:71:3f:9b:dd:a9:9f:47:2d:e4:89:fb:2f:59:60:c2:9f: 99:0f:b6:72:10:89:70:9d:b0:3a:cb:51:67:39:a0:f2:7f:04: 5c:54:e6:1e:26:cc:95:00:00:16:0a:6a:09:d0:5d:99:c4:27: 8d:0b:1f:9e:8a:66:0f:80:bc:82:ed:c9:29:bc:21:f3:94:24: fd:61:ca:00:f1:44:aa:25:81:69:98:10:60:7a:c2:6b:d8:f6: 98:09:17:60:c9:56:e8:74:c9:a6:3e:3e:14:b1:94:2c:d4:13: 8e:3c:e1:d8:5f:9a:7c:b4:70:ff:81:d2:30:dc:59:ad:1f:74: dc:43:c3:b1:d2:a6:bd:c7:1e:fe:db:16:74:04:bc:00:ae:83: 16:37:c2:39:66:39:76:b5:f8:aa:69:10:59:f1:88:9c:a1:95: f8:c5:33:d8:25:da:17:fb:24:fd:59:b5:ac:5c:41:78:5a:f0: 2e:f7:8e:67:8d:e6:c7:6e:f0:74:e0:bd:9b:43:a8:8f:97:a6: 1e:a8:49:4c:f1:b2:9d:b1:8a:dd:20:28:32:30:6d:d1:c0:84: a2:d8:a1:da:a5:5a:fb:6c:ff:0e:ae:9b:41:82:2e:01:e4:06: e1:96:8d:81:15:b6:48:59:77:eb:1b:0d:5d:ad:78:64:4b:be: 95:39:bc:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWnNXUxpq4A5FXLSkrsrUzwZPNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTA2MDUwMjU2MDZaFw0yNTA2MDgwODQyMDZaMDMxMTAvBgNV BAMTKEIxQ0I2NkM0QTdGRUYyQTlGRjA1NDEyMzgwQThFNjc4REZGRDZGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMUt5d5L8AK79h+CMh7a0u8Xx 1vjzfsOC3Fw8zFYS6GHCzMoHy6BuVWsimSBMhcLBGUKhZB/z5H+NluU96mZpQQ3W 0W/u2/hay3syrT0iBzsm1j44YP1NIU2xdrqEd4yejFkWRD+iwQYCmHVUkGQxTUTi EoLby6Xm/Ys8YuXh6kljU+JXW6llgSwKxXg4lTd+lyMntMCJFftPRgXN1UOJdMvZ xjJcYKH6fOGj5Gou1hcl73iEl4ECjE1RUXG7isgb5wsUoXpLr2R+6GhV2s838Utu 6SUhWvNRRbeuaf2k2jtzwd/MaJHYmi8cy6ezOd4CenGtEQfoj4tcoltDpJYhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsctmxKf+8qn/BUEjgKjmeN/9b8gwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8EcT+b3amfRy3kifsvWWDCn5kPtnIQiXCd sDrLUWc5oPJ/BFxU5h4mzJUAABYKagnQXZnEJ40LH56KZg+AvILtySm8IfOUJP1h ygDxRKolgWmYEGB6wmvY9pgJF2DJVuh0yaY+PhSxlCzUE4484dhfmny0cP+B0jDc Wa0fdNxDw7HSpr3HHv7bFnQEvACugxY3wjlmOXa1+KppEFnxiJyhlfjFM9gl2hf7 JP1ZtaxcQXha8C73jmeN5sdu8HTgvZtDqI+Xph6oSUzxsp2xit0gKDIwbdHAhKLY odqlWvts/w6um0GCLgHkBuGWjYEVtkhZd+sbDV2teGRLvpU5vNs= -----END CERTIFICATE-----Generated at Sat Jun 7 03:12:03 2025 by rpki-client