$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft File: C70A343932991281F91796DB87B011987603BBF4.mft (raw, json) Hash identifier: sItlPgm8KEtcSt4yzpI55ILf1zgbqHc/nUnyb4NmX2g= Subject key identifier: 51:3B:E0:A2:6D:81:5D:97:93:13:2C:BA:97:05:6E:76:A9:4E:4F:1C Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4 Certificate serial: 18ED4A0F9844D4E0B08847E6D9B7DA876C0B9C17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft Manifest number: 01FC Signing time: Sun 01 Jun 2025 13:51:32 +0000 Manifest this update: Sun 01 Jun 2025 13:46:32 +0000 Manifest next update: Wed 04 Jun 2025 22:46:32 +0000 Files and hashes: 1: C70A343932991281F91796DB87B011987603BBF4.crl (hash: jfKa+4+Q+ZpK+N98HeAUXSJZb7NCdxPksGOV6R7u61Y=) 2: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: TB7U9GvlAmHnGk0/8JpxDBGjqTq2O6M0WEaScBuoS/g=) 3: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 7CE9BXOCk+npQ95V1OHYui5nCFjD3JZ2DBCvcvu4/Kk=) 4: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: K/te+OOqq38HfLYFBM6maqhYABgY51ViE5jJN8jRKPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 22:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ed:4a:0f:98:44:d4:e0:b0:88:47:e6:d9:b7:da:87:6c:0b:9c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70A343932991281F91796DB87B011987603BBF4 Validity Not Before: Jun 1 13:46:32 2025 GMT Not After : Jun 4 22:46:32 2025 GMT Subject: CN=513BE0A26D815D9793132CBA97056E76A94E4F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:98:3e:56:79:4e:70:65:a4:c9:fb:50:f1: 68:67:43:12:e6:e6:1d:9c:b6:76:17:46:6b:b1:a6: 45:09:4b:3c:c1:3c:8b:34:19:47:cd:c4:8f:15:3e: 7d:8a:e6:2f:1b:7c:ce:32:7a:27:b1:70:11:6b:ba: 06:b5:31:b2:de:b8:bc:85:c7:ef:be:19:d7:8a:e5: 6d:c0:14:1f:7b:cd:e1:97:2f:6c:28:24:d3:d8:43: d4:9d:65:68:b0:bc:7f:7c:fb:48:f5:f7:ae:f5:65: b9:6e:69:fa:25:5d:49:2c:56:0b:80:39:88:ec:b3: 82:b0:08:e9:e0:f3:ad:ce:14:e0:c4:c4:2d:5f:95: af:ea:c8:c0:81:91:9c:b0:b5:92:f4:a2:66:d8:da: b8:00:9d:99:f6:c8:ff:bb:3a:65:b4:e0:ec:39:34: b8:28:f9:9c:f0:a9:1c:9c:b1:c2:c6:2e:40:78:46: 1b:32:9d:3d:0c:c6:32:91:79:9d:d4:3e:79:71:c9: 05:83:7b:a7:5d:3a:f0:01:4e:f4:6a:bc:7a:1f:fb: fa:91:02:b1:4f:c8:51:f6:a8:23:15:00:a8:9d:17: bf:5f:eb:ea:87:1d:7f:45:fa:da:0b:ba:55:58:5d: a7:93:e4:ed:9c:ec:10:91:d9:8a:8f:0d:c7:6e:09: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3B:E0:A2:6D:81:5D:97:93:13:2C:BA:97:05:6E:76:A9:4E:4F:1C X509v3 Authority Key Identifier: keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:37:1c:c1:f2:e4:e2:01:00:80:40:df:e9:84:cb:53:9e:68: fc:27:cb:b5:30:50:e6:d9:9e:24:59:5a:8b:70:16:44:f0:82: 6e:4c:5c:9a:30:c5:f6:5a:d4:44:7b:73:4f:9a:92:e6:f4:8d: b2:63:5f:9a:3d:8b:a7:f1:11:2f:1d:0a:a9:88:3d:5e:1b:78: 5b:00:a3:54:f0:02:92:dc:96:5f:c1:8a:23:42:d8:35:81:5d: b1:86:99:f5:21:46:da:75:4b:0d:7d:b3:95:86:f7:64:cc:fc: d5:e8:5e:fe:58:68:b0:28:7e:9e:b1:6f:89:ff:2f:bf:97:e6: 06:e1:5b:79:c4:d7:17:ef:55:23:8a:ea:94:fa:3a:a0:1f:19: 54:d3:91:b3:f9:e1:79:f9:6c:59:77:f9:15:85:91:ff:c4:63: b6:98:90:bf:ce:bc:68:90:9f:69:19:d9:07:8c:f0:66:a2:cd: 0e:94:85:ad:a9:98:39:17:c5:68:14:14:0e:ea:a2:4e:8c:fc: 6f:f1:90:12:27:bf:ef:6c:aa:43:29:ae:2a:ef:16:92:a5:3e: 5d:98:34:12:b8:0a:b8:53:2c:ac:19:62:46:c3:cb:7c:58:fe: 2f:ee:51:91:2a:a0:bb:17:0e:08:d9:47:2b:1a:38:d6:e9:54: 9a:65:81:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGO1KD5hE1OCwiEfm2bfah2wLnBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3 NjAzQkJGNDAeFw0yNTA2MDExMzQ2MzJaFw0yNTA2MDQyMjQ2MzJaMDMxMTAvBgNV BAMTKDUxM0JFMEEyNkQ4MTVEOTc5MzEzMkNCQTk3MDU2RTc2QTk0RTRGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiaJg+VnlOcGWkyftQ8WhnQxLm 5h2ctnYXRmuxpkUJSzzBPIs0GUfNxI8VPn2K5i8bfM4yeiexcBFruga1MbLeuLyF x+++GdeK5W3AFB97zeGXL2woJNPYQ9SdZWiwvH98+0j19671ZbluafolXUksVguA OYjss4KwCOng863OFODExC1fla/qyMCBkZywtZL0ombY2rgAnZn2yP+7OmW04Ow5 NLgo+ZzwqRycscLGLkB4RhsynT0MxjKReZ3UPnlxyQWDe6ddOvABTvRqvHof+/qR ArFPyFH2qCMVAKidF79f6+qHHX9F+toLulVYXaeT5O2c7BCR2YqPDcduCR5BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUTvgom2BXZeTEyy6lwVudqlOTxwwHwYDVR0j BBgwFoAUxwo0OTKZEoH5F5bbh7ARmHYDu/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmMxN2NjMi1mNGEyLTQxNWUtOGVhMi1mOWM0N2Y3NWM0Y2EvMC9DNzBBMzQzOTMy OTkxMjgxRjkxNzk2REI4N0IwMTE5ODc2MDNCQkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3NjAz QkJGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDEx OTg3NjAzQkJGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF03HMHy5OIBAIBA3+mEy1OeaPwny7UwUObZ niRZWotwFkTwgm5MXJowxfZa1ER7c0+akub0jbJjX5o9i6fxES8dCqmIPV4beFsA o1TwApLcll/BiiNC2DWBXbGGmfUhRtp1Sw19s5WG92TM/NXoXv5YaLAofp6xb4n/ L7+X5gbhW3nE1xfvVSOK6pT6OqAfGVTTkbP54Xn5bFl3+RWFkf/EY7aYkL/OvGiQ n2kZ2QeM8GaizQ6Uha2pmDkXxWgUFA7qok6M/G/xkBInv+9sqkMprirvFpKlPl2Y NBK4CrhTLKwZYkbDy3xY/i/uUZEqoLsXDgjZRysaONbpVJplgeA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:27:52 2025 by rpki-client