$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: YIPrT1/vCIogSjMKlwabyosbuvG9sabAvbIJVWlWYFg= Subject key identifier: 02:C2:4F:49:27:BB:70:49:BB:EC:F6:BB:9B:B7:08:10:09:55:B4:0D Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 757F5508C41CDC455EA8678CCA01B05D2B4BD172 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 029E Signing time: Mon 08 Sep 2025 14:00:38 +0000 Manifest this update: Mon 08 Sep 2025 13:55:38 +0000 Manifest next update: Thu 11 Sep 2025 19:00:38 +0000 Files and hashes: 1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=) 2: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: YStTnDE7BrXNinLfgaKWD31rHC255djJCHUXS3txloI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7f:55:08:c4:1c:dc:45:5e:a8:67:8c:ca:01:b0:5d:2b:4b:d1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Sep 8 13:55:38 2025 GMT Not After : Sep 11 19:00:38 2025 GMT Subject: CN=02C24F4927BB7049BBECF6BB9BB708100955B40D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:ba:84:8f:86:21:76:4c:9a:63:b4:67:3d: b1:47:55:4e:8c:ec:e4:c8:d7:c4:66:24:d8:bf:15: 23:08:e3:c6:54:13:87:b6:f7:0b:5b:8b:65:e9:df: ac:53:f0:38:4a:e5:6d:04:46:ac:63:1a:98:66:6d: a3:c5:9c:ad:90:3d:44:bb:54:d7:d5:04:a5:2e:36: 7e:ce:b0:d1:0d:b4:ec:17:0e:94:dc:6f:dd:ea:95: 1c:86:68:ea:be:53:bf:04:f0:bf:df:a7:05:2e:28: a4:43:07:09:d8:32:09:b7:f0:d8:08:c3:3e:09:5c: b4:6e:63:88:42:dd:c4:03:59:ad:c7:67:4f:8c:a5: 7c:5b:e0:4f:26:a5:7a:f3:d2:c9:4a:db:72:e7:73: 62:d8:5a:75:1c:0d:8a:53:df:61:00:67:65:25:e2: b3:6c:a1:90:6a:ba:a8:93:bf:f0:35:15:c4:29:3e: 1f:a5:23:c7:54:33:d1:44:cc:bc:17:60:f9:01:2f: 92:3b:4b:a9:d2:0d:65:2a:1a:53:72:14:49:0b:ce: 74:9e:aa:1a:b1:cd:f0:d5:42:d1:df:80:17:57:b8: 5f:56:17:19:e7:d1:ba:4f:92:f4:a6:ee:11:e5:4b: ef:df:c3:9d:d2:de:45:af:ca:4b:99:1d:14:d4:47: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C2:4F:49:27:BB:70:49:BB:EC:F6:BB:9B:B7:08:10:09:55:B4:0D X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:dd:62:58:95:05:8a:50:be:80:de:dc:2e:c4:81:f1:89:a1: fe:48:1a:52:b1:28:f0:1a:21:cd:1d:70:10:7e:cc:e3:54:32: 28:85:57:53:ed:15:2a:82:23:6b:e5:42:21:5b:a4:b0:14:5f: 05:90:a0:58:ee:79:96:d7:f8:c8:52:c2:61:62:5a:ad:44:47: e4:53:de:82:da:01:ad:d6:67:c6:c5:4b:78:4f:75:46:9d:19: e2:2e:a7:29:ac:58:c6:28:f5:18:e2:c2:49:a9:e0:46:3c:cd: aa:f4:ec:ee:f8:30:8f:3c:51:8d:1c:95:bf:bc:6d:a6:c3:38: 42:39:ee:a4:eb:b2:61:4e:98:8a:ff:89:d6:1c:c9:78:b2:8e: 5c:40:1e:fc:f4:a2:ca:78:1d:a5:6a:6d:5b:85:f1:73:da:65: 28:77:08:dc:11:71:13:27:01:ad:23:8f:49:d0:a2:f3:e3:bd: 31:83:13:73:b5:6a:cb:ed:03:fa:2e:d6:2c:08:02:15:aa:4e: 7f:4d:f8:ec:62:ca:4d:b4:44:ba:20:57:77:a5:1d:1d:fd:e5: 9d:98:9f:ed:5a:b3:c6:9d:11:02:bc:4b:e4:d2:08:bf:05:ab: b5:d9:bd:06:4c:06:67:9e:26:5e:a7:d1:2b:e3:0e:23:6f:df: 89:01:f6:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdX9VCMQc3EVeqGeMygGwXStL0XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTA5MDgxMzU1MzhaFw0yNTA5MTExOTAwMzhaMDMxMTAvBgNV BAMTKDAyQzI0RjQ5MjdCQjcwNDlCQkVDRjZCQjlCQjcwODEwMDk1NUI0MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYYrqEj4YhdkyaY7RnPbFHVU6M 7OTI18RmJNi/FSMI48ZUE4e29wtbi2Xp36xT8DhK5W0ERqxjGphmbaPFnK2QPUS7 VNfVBKUuNn7OsNENtOwXDpTcb93qlRyGaOq+U78E8L/fpwUuKKRDBwnYMgm38NgI wz4JXLRuY4hC3cQDWa3HZ0+MpXxb4E8mpXrz0slK23Lnc2LYWnUcDYpT32EAZ2Ul 4rNsoZBquqiTv/A1FcQpPh+lI8dUM9FEzLwXYPkBL5I7S6nSDWUqGlNyFEkLznSe qhqxzfDVQtHfgBdXuF9WFxnn0bpPkvSm7hHlS+/fw53S3kWvykuZHRTUR0r9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAsJPSSe7cEm77Pa7m7cIEAlVtA0wHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILdYliVBYpQvoDe3C7EgfGJof5IGlKxKPAa Ic0dcBB+zONUMiiFV1PtFSqCI2vlQiFbpLAUXwWQoFjueZbX+MhSwmFiWq1ER+RT 3oLaAa3WZ8bFS3hPdUadGeIupymsWMYo9Rjiwkmp4EY8zar07O74MI88UY0clb+8 babDOEI57qTrsmFOmIr/idYcyXiyjlxAHvz0osp4HaVqbVuF8XPaZSh3CNwRcRMn Aa0jj0nQovPjvTGDE3O1asvtA/ou1iwIAhWqTn9N+Oxiyk20RLogV3elHR395Z2Y n+1as8adEQK8S+TSCL8Fq7XZvQZMBmeeJl6n0SvjDiNv34kB9vo= -----END CERTIFICATE-----Generated at Mon Sep 8 16:08:48 2025 by rpki-client