$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft File: C70A343932991281F91796DB87B011987603BBF4.mft (raw, json) Hash identifier: SpV3jSUf5/Jl/fpmjQix38TIjXNHVQYvNY/vmXwL3U8= Subject key identifier: BC:74:5B:D7:2D:CE:02:F1:C5:60:17:13:DE:A4:19:4B:34:80:07:D0 Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4 Certificate serial: 10ED53D8AA336DC1D0D116D2D717351D767A0291 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft Manifest number: 0226 Signing time: Fri 05 Sep 2025 00:41:34 +0000 Manifest this update: Fri 05 Sep 2025 00:36:34 +0000 Manifest next update: Mon 08 Sep 2025 04:12:34 +0000 Files and hashes: 1: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 7CE9BXOCk+npQ95V1OHYui5nCFjD3JZ2DBCvcvu4/Kk=) 2: C70A343932991281F91796DB87B011987603BBF4.crl (hash: KKla9SBEXjnSwNLgIe0w65wJI5QOIGNuSH6uMaWy3sc=) 3: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: K/te+OOqq38HfLYFBM6maqhYABgY51ViE5jJN8jRKPY=) 4: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: TB7U9GvlAmHnGk0/8JpxDBGjqTq2O6M0WEaScBuoS/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 04:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ed:53:d8:aa:33:6d:c1:d0:d1:16:d2:d7:17:35:1d:76:7a:02:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70A343932991281F91796DB87B011987603BBF4 Validity Not Before: Sep 5 00:36:34 2025 GMT Not After : Sep 8 04:12:34 2025 GMT Subject: CN=BC745BD72DCE02F1C5601713DEA4194B348007D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:d7:01:61:11:53:35:fa:10:c5:23:1e:75: d6:f5:c4:72:93:a5:9b:27:c1:00:46:b4:28:a6:3a: 82:7d:28:b0:b9:0d:6c:d5:d3:a4:8b:77:57:1e:a8: 86:75:9d:ca:c7:a4:07:bf:e2:48:c5:9c:f3:b5:d9: 3c:f6:7b:79:7a:91:bb:16:32:93:a6:5c:57:a4:50: 5d:ae:dd:cc:0c:74:f1:2f:82:ad:bc:93:72:3f:f9: f0:f7:b2:02:29:81:3d:0c:9f:b4:10:19:ce:7a:ec: 90:b7:4f:d9:d0:45:08:26:56:b7:ab:0a:60:f4:5f: 3a:82:a0:d5:0c:fd:8b:46:11:fe:dd:66:56:d1:9f: a0:6e:d4:19:b1:75:95:42:b1:b4:ae:be:86:1f:45: a9:08:50:5a:3c:8e:bb:fb:30:eb:e3:c3:48:f5:4b: 75:4f:7e:5b:c3:60:1b:1d:7b:b5:26:cf:03:01:dd: 35:cd:0d:e9:3d:b9:d3:02:2d:26:65:fc:42:d2:e6: 65:3e:4a:fa:74:9a:f5:33:14:c7:4d:09:bd:2a:e7: 94:ea:25:f9:b8:cc:44:c7:38:78:67:f5:d5:e2:b1: fb:f2:c1:72:1e:f3:89:9f:c5:7c:bd:d0:77:a2:9c: 70:51:59:be:42:b8:44:8d:b9:99:a2:e3:f4:48:bd: a2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:74:5B:D7:2D:CE:02:F1:C5:60:17:13:DE:A4:19:4B:34:80:07:D0 X509v3 Authority Key Identifier: keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ce:87:f7:e7:84:85:da:2b:d3:9b:c7:dc:c6:1b:ea:0f:62: cf:86:60:1c:73:c7:16:2c:69:6e:db:09:61:c8:92:3f:93:15: 71:f2:d7:ea:06:fa:2b:ac:87:e9:cc:98:b8:85:7f:12:9b:68: 2f:95:2b:06:2c:a4:54:8b:64:5e:96:33:6d:33:12:73:3d:dd: 8c:13:57:a9:ab:80:37:a0:c4:6c:bb:99:43:c8:86:10:fc:b5: f3:91:a1:45:14:a7:07:0d:66:13:75:0f:2e:fb:1f:0c:4a:f0: 6d:ff:5a:61:0b:3f:04:24:cf:24:93:77:61:6b:10:6a:13:8b: e4:24:10:a3:9d:6d:20:a0:b7:01:44:ab:6c:ac:8a:09:c5:64: c7:69:bd:a5:c9:63:8c:35:8b:4e:ea:db:cf:88:54:8a:50:2c: 78:a5:95:23:f8:96:1c:a6:95:d1:27:4b:37:13:e6:df:de:cd: e1:9c:c3:10:c6:7f:34:65:a3:8c:12:5f:ca:ca:cc:a1:49:80: 6d:08:72:d9:a4:6a:af:57:f0:f3:3b:53:cc:c3:76:f8:4e:7f: 09:6d:eb:07:25:a4:33:16:58:0a:09:06:36:ae:18:d4:c4:b0: 2d:63:51:2d:a7:ac:9e:50:b1:5a:d1:32:73:4f:c1:81:53:f7: a2:b0:5c:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEO1T2KozbcHQ0RbS1xc1HXZ6ApEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3 NjAzQkJGNDAeFw0yNTA5MDUwMDM2MzRaFw0yNTA5MDgwNDEyMzRaMDMxMTAvBgNV BAMTKEJDNzQ1QkQ3MkRDRTAyRjFDNTYwMTcxM0RFQTQxOTRCMzQ4MDA3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaPtcBYRFTNfoQxSMeddb1xHKT pZsnwQBGtCimOoJ9KLC5DWzV06SLd1ceqIZ1ncrHpAe/4kjFnPO12Tz2e3l6kbsW MpOmXFekUF2u3cwMdPEvgq28k3I/+fD3sgIpgT0Mn7QQGc567JC3T9nQRQgmVrer CmD0XzqCoNUM/YtGEf7dZlbRn6Bu1BmxdZVCsbSuvoYfRakIUFo8jrv7MOvjw0j1 S3VPflvDYBsde7UmzwMB3TXNDek9udMCLSZl/ELS5mU+Svp0mvUzFMdNCb0q55Tq Jfm4zETHOHhn9dXisfvywXIe84mfxXy90HeinHBRWb5CuESNuZmi4/RIvaIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvHRb1y3OAvHFYBcT3qQZSzSAB9AwHwYDVR0j BBgwFoAUxwo0OTKZEoH5F5bbh7ARmHYDu/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmMxN2NjMi1mNGEyLTQxNWUtOGVhMi1mOWM0N2Y3NWM0Y2EvMC9DNzBBMzQzOTMy OTkxMjgxRjkxNzk2REI4N0IwMTE5ODc2MDNCQkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3NjAz QkJGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDEx OTg3NjAzQkJGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzOh/fnhIXaK9Obx9zGG+oPYs+GYBxzxxYs aW7bCWHIkj+TFXHy1+oG+iush+nMmLiFfxKbaC+VKwYspFSLZF6WM20zEnM93YwT V6mrgDegxGy7mUPIhhD8tfORoUUUpwcNZhN1Dy77HwxK8G3/WmELPwQkzySTd2Fr EGoTi+QkEKOdbSCgtwFEq2ysignFZMdpvaXJY4w1i07q28+IVIpQLHillSP4lhym ldEnSzcT5t/ezeGcwxDGfzRlo4wSX8rKzKFJgG0Ictmkaq9X8PM7U8zDdvhOfwlt 6wclpDMWWAoJBjauGNTEsC1jUS2nrJ5QsVrRMnNPwYFT96KwXGg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:15 2025 by rpki-client