$ rpki-client -vvf repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft File: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft (raw, json) Hash identifier: tlvpp+R9aGMn3jlgicCQxJHc+2dlgSnqDB8U5SfqqTw= Subject key identifier: 24:FA:A4:D5:8F:F1:06:09:22:A4:D2:89:76:B5:4F:66:35:FA:03:B8 Authority key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C Certificate issuer: /CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Certificate serial: 7548F466765B5DAA140412F1D080CE03FC40B919 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft Manifest number: 01AF Signing time: Thu 04 Sep 2025 14:42:19 +0000 Manifest this update: Thu 04 Sep 2025 14:37:19 +0000 Manifest next update: Sun 07 Sep 2025 19:21:19 +0000 Files and hashes: 1: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl (hash: mcq6Jf/UHvbQYoOw5jADlAZfMj0xNqV5eETCph/zZ5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 19:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:48:f4:66:76:5b:5d:aa:14:04:12:f1:d0:80:ce:03:fc:40:b9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Validity Not Before: Sep 4 14:37:19 2025 GMT Not After : Sep 7 19:21:19 2025 GMT Subject: CN=24FAA4D58FF1060922A4D28976B54F6635FA03B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:a9:e9:2c:fb:a6:03:0a:a0:91:61:cc:06: 66:4b:9f:63:ac:b0:83:00:22:fa:52:8a:4e:30:eb: f8:54:77:15:8b:fb:dc:ff:b1:34:d5:86:79:ee:ef: da:c5:ed:14:1c:cb:55:0e:1a:69:99:7e:51:e7:85: 58:97:21:e3:1e:de:c9:4f:1a:bf:0d:4c:28:10:80: d7:a1:9b:3e:fd:5a:8b:75:16:d1:2e:25:12:8c:2d: a4:9a:e1:7d:30:47:87:cd:47:9a:14:9f:47:42:bd: f7:b8:20:d4:d7:0f:28:7d:4e:d3:4d:94:50:cd:45: a7:ec:47:ab:be:c8:1a:ad:c1:67:b0:9d:5b:64:09: b9:5d:97:ab:31:91:f2:ce:4d:a1:8a:d6:f4:f4:24: fd:77:23:08:1e:8a:09:29:5e:84:3a:62:56:2d:da: 86:d7:0e:a9:e1:1b:28:25:86:e7:35:1e:ee:cc:55: 6c:5f:48:7b:4a:4f:5b:2e:43:cc:de:ff:06:51:c0: 06:b7:58:56:a2:7d:11:24:e0:be:45:a1:60:06:d5: ca:fb:91:a4:2d:96:4d:d7:a2:91:0d:11:93:89:23: f2:b4:85:b6:ea:20:79:07:77:82:d9:bb:23:ff:c0: 4f:1f:e9:23:7e:49:fa:cc:1f:5a:9f:3a:55:57:33: 06:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FA:A4:D5:8F:F1:06:09:22:A4:D2:89:76:B5:4F:66:35:FA:03:B8 X509v3 Authority Key Identifier: keyid:70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2c:8f:8d:de:a3:37:2e:52:64:69:2a:f7:1d:de:7d:f9:ed: d8:29:e9:d4:5d:e9:c7:23:59:13:84:61:24:57:dd:e1:c4:65: 2d:7f:86:68:7a:8a:0b:d3:85:7c:e5:f6:4b:16:32:3f:47:e7: d0:8a:13:c1:a8:1a:f9:0e:18:7a:48:3c:f0:10:06:e5:7a:55: 2b:18:30:87:a2:fe:94:1b:c3:08:8e:e0:be:eb:b3:8e:8f:4e: 33:39:e6:2d:78:4a:a5:b4:2d:0b:fe:fd:50:aa:e1:bf:68:41: 34:23:6c:d0:2d:a1:e5:cb:91:ee:2a:b2:16:38:f5:bc:e9:84: 3e:5a:d6:8f:8a:8c:95:c6:b1:59:f0:96:0a:76:f0:7e:85:81: e1:70:9a:dc:08:5b:eb:bb:f6:58:08:d6:9c:17:3d:83:bd:91: 9a:2d:e7:0f:95:eb:93:64:6f:32:80:3f:b2:c4:fa:9c:04:f2: 38:c9:16:e0:92:49:0e:1c:88:0e:50:a3:d7:e4:d0:83:72:70: 07:dd:3a:5e:e7:65:9d:2f:78:8b:bb:e4:be:a2:90:61:ea:46: 3c:0a:27:6b:e7:3c:63:87:1d:97:0c:ef:e2:e2:fc:cf:d0:eb: da:89:2c:e6:44:74:7b:45:a0:bf:03:e1:b4:32:8f:7c:bb:43: a1:58:ee:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdUj0ZnZbXaoUBBLx0IDOA/xAuRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4 NjE4OUIwQzAeFw0yNTA5MDQxNDM3MTlaFw0yNTA5MDcxOTIxMTlaMDMxMTAvBgNV BAMTKDI0RkFBNEQ1OEZGMTA2MDkyMkE0RDI4OTc2QjU0RjY2MzVGQTAzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHf6npLPumAwqgkWHMBmZLn2Os sIMAIvpSik4w6/hUdxWL+9z/sTTVhnnu79rF7RQcy1UOGmmZflHnhViXIeMe3slP Gr8NTCgQgNehmz79Wot1FtEuJRKMLaSa4X0wR4fNR5oUn0dCvfe4INTXDyh9TtNN lFDNRafsR6u+yBqtwWewnVtkCbldl6sxkfLOTaGK1vT0JP13IwgeigkpXoQ6YlYt 2obXDqnhGyglhuc1Hu7MVWxfSHtKT1suQ8ze/wZRwAa3WFaifREk4L5FoWAG1cr7 kaQtlk3XopENEZOJI/K0hbbqIHkHd4LZuyP/wE8f6SN+SfrMH1qfOlVXMwYRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJPqk1Y/xBgkipNKJdrVPZjX6A7gwHwYDVR0j BBgwFoAUcApG8MSOeE6MvLp7J+RHT4YYmwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjhhMzE1ZS0xNmYxLTRmMjEtOWJjMC0yNjlkNWJlNzNkNjAvMC83MDBBNDZGMEM0 OEU3ODRFOENCQ0JBN0IyN0U0NDc0Rjg2MTg5QjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4NjE4 OUIwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY4YTMxNWUtMTZmMS00ZjIxLTli YzAtMjY5ZDViZTczZDYwLzAvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3 NEY4NjE4OUIwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQsj43eozcuUmRpKvcd3n357dgp6dRd6ccj WROEYSRX3eHEZS1/hmh6igvThXzl9ksWMj9H59CKE8GoGvkOGHpIPPAQBuV6VSsY MIei/pQbwwiO4L7rs46PTjM55i14SqW0LQv+/VCq4b9oQTQjbNAtoeXLke4qshY4 9bzphD5a1o+KjJXGsVnwlgp28H6FgeFwmtwIW+u79lgI1pwXPYO9kZot5w+V65Nk bzKAP7LE+pwE8jjJFuCSSQ4ciA5Qo9fk0INycAfdOl7nZZ0veIu75L6ikGHqRjwK J2vnPGOHHZcM7+Li/M/Q69qJLOZEdHtFoL8D4bQyj3y7Q6FY7mQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:35 2025 by rpki-client