$ rpki-client -vvf repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft File: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft (raw, json) Hash identifier: IJL5yryHt4/b7adcDfB31mbnrWVhekWlm6O+EZb3CJ0= Subject key identifier: 80:A7:A4:4D:61:38:BC:45:01:5D:DE:40:11:E5:EB:B0:45:0F:DD:DD Authority key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C Certificate issuer: /CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Certificate serial: 06C4757405E73CD76C5AD1D299FE7E6F543A8E9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft Manifest number: 0186 Signing time: Tue 03 Jun 2025 10:43:07 +0000 Manifest this update: Tue 03 Jun 2025 10:38:07 +0000 Manifest next update: Fri 06 Jun 2025 19:37:07 +0000 Files and hashes: 1: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl (hash: BcO74CDd6JlLahrjG4nlVGc/c4q2zRMdeHZwENGHcek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c4:75:74:05:e7:3c:d7:6c:5a:d1:d2:99:fe:7e:6f:54:3a:8e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Validity Not Before: Jun 3 10:38:07 2025 GMT Not After : Jun 6 19:37:07 2025 GMT Subject: CN=80A7A44D6138BC45015DDE4011E5EBB0450FDDDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3e:98:c3:df:07:95:be:3f:93:07:75:e3:c4: 77:12:84:a3:97:e5:d0:35:73:c1:35:78:3d:5c:72: 37:e2:64:84:1d:7b:c2:c9:9c:34:f1:24:28:d0:49: fb:6c:0b:4e:1c:e0:94:0e:64:f0:1f:16:fb:b3:33: 29:8f:97:42:0b:59:a2:dc:b6:46:07:ea:9a:54:6c: ca:c5:77:d7:50:92:8f:a2:db:d6:f0:db:b2:d5:57: 7e:2f:2c:c9:06:d2:4c:1e:1e:88:92:7f:3d:90:67: 42:16:48:a5:13:b3:b1:c6:61:fb:b0:67:e1:43:3c: d0:b0:3b:01:88:2c:9d:8b:95:17:0a:97:8b:2e:a3: 89:50:4b:27:d7:6a:a8:1e:bc:2c:47:82:e0:44:9d: 32:ed:42:01:8e:a8:c0:24:ba:8e:37:76:2f:33:f9: b1:1e:ab:1b:03:65:ad:71:d3:46:c4:a9:d4:80:ea: 62:74:c0:fe:36:c6:1e:e8:d7:a7:42:24:fb:c9:a1: 41:f4:6c:3f:54:2e:2d:3b:ca:a5:3c:17:7b:24:63: 1d:e6:63:39:08:77:a3:1c:0b:a8:24:5c:5f:24:4f: 10:cb:c2:5e:4a:38:02:65:5a:d7:1a:eb:69:ee:84: c8:d0:3e:83:0f:0e:37:09:15:d2:36:f1:04:63:26: 1e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A7:A4:4D:61:38:BC:45:01:5D:DE:40:11:E5:EB:B0:45:0F:DD:DD X509v3 Authority Key Identifier: keyid:70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:b3:30:82:c9:28:d5:74:a3:10:3c:35:85:05:7f:c1:ae:b2: 55:f1:6a:27:67:08:47:9e:18:c6:c2:67:e6:fe:5b:e1:b9:09: 13:ab:ed:f8:a4:cf:12:83:e4:b6:9e:01:aa:98:05:8c:4d:a8: b4:6a:d1:43:4e:3d:b8:92:2d:64:41:c7:6e:c4:cc:19:d4:80: 73:50:d9:21:8b:9b:5f:5c:36:ad:92:47:9c:25:16:ee:8a:95: fa:54:6c:a6:84:f0:68:87:54:13:fc:6e:e5:61:60:08:d6:74: 3c:23:80:22:c0:31:1d:58:25:57:fe:ef:46:be:dd:87:fb:a9: 28:39:1f:f5:84:a6:83:a3:0c:b4:85:50:d2:91:06:5e:fc:6f: 1c:22:1d:1f:ce:85:df:4e:0c:51:5a:6e:8b:2b:d7:d1:03:d4: d3:c1:e3:c2:48:30:09:52:78:ca:3a:9f:9f:f2:34:bc:86:b8: d2:2f:36:c2:3c:f7:c6:32:71:68:a5:45:96:eb:41:0b:0f:9a: f9:26:ab:6b:5b:59:2f:3f:22:0c:71:05:55:fe:27:ab:24:63: 52:a3:c2:78:92:c8:4b:a5:82:df:40:28:b6:88:4a:f2:2c:71: fd:95:00:ba:f4:e4:78:91:a3:63:e0:d9:28:ec:02:72:5a:0e: 70:89:5a:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsR1dAXnPNdsWtHSmf5+b1Q6jp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4 NjE4OUIwQzAeFw0yNTA2MDMxMDM4MDdaFw0yNTA2MDYxOTM3MDdaMDMxMTAvBgNV BAMTKDgwQTdBNDRENjEzOEJDNDUwMTVEREU0MDExRTVFQkIwNDUwRkREREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzPpjD3weVvj+TB3XjxHcShKOX 5dA1c8E1eD1ccjfiZIQde8LJnDTxJCjQSftsC04c4JQOZPAfFvuzMymPl0ILWaLc tkYH6ppUbMrFd9dQko+i29bw27LVV34vLMkG0kweHoiSfz2QZ0IWSKUTs7HGYfuw Z+FDPNCwOwGILJ2LlRcKl4suo4lQSyfXaqgevCxHguBEnTLtQgGOqMAkuo43di8z +bEeqxsDZa1x00bEqdSA6mJ0wP42xh7o16dCJPvJoUH0bD9ULi07yqU8F3skYx3m YzkId6McC6gkXF8kTxDLwl5KOAJlWtca62nuhMjQPoMPDjcJFdI28QRjJh5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgKekTWE4vEUBXd5AEeXrsEUP3d0wHwYDVR0j BBgwFoAUcApG8MSOeE6MvLp7J+RHT4YYmwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjhhMzE1ZS0xNmYxLTRmMjEtOWJjMC0yNjlkNWJlNzNkNjAvMC83MDBBNDZGMEM0 OEU3ODRFOENCQ0JBN0IyN0U0NDc0Rjg2MTg5QjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4NjE4 OUIwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY4YTMxNWUtMTZmMS00ZjIxLTli YzAtMjY5ZDViZTczZDYwLzAvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3 NEY4NjE4OUIwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqzMILJKNV0oxA8NYUFf8GuslXxaidnCEee GMbCZ+b+W+G5CROr7fikzxKD5LaeAaqYBYxNqLRq0UNOPbiSLWRBx27EzBnUgHNQ 2SGLm19cNq2SR5wlFu6KlfpUbKaE8GiHVBP8buVhYAjWdDwjgCLAMR1YJVf+70a+ 3Yf7qSg5H/WEpoOjDLSFUNKRBl78bxwiHR/Ohd9ODFFabosr19ED1NPB48JIMAlS eMo6n5/yNLyGuNIvNsI898YycWilRZbrQQsPmvkmq2tbWS8/IgxxBVX+J6skY1Kj wniSyEulgt9AKLaISvIscf2VALr05HiRo2Pg2SjsAnJaDnCJWuo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:03 2025 by rpki-client