$ rpki-client -vvf repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft File: B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft (raw, json) Hash identifier: wpr5gOf4+vOUkUnDlrH1W9UH+AUrrTfuQcdlsgTjdkA= Subject key identifier: 1C:16:72:A0:3F:BE:F5:B0:45:6C:4F:4E:A4:C6:78:78:17:35:D7:8C Authority key identifier: B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 Certificate issuer: /CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Certificate serial: 3368E09F1FE7D340BB0365D267751D25E1122FBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft Manifest number: 0101 Signing time: Thu 05 Jun 2025 07:01:25 +0000 Manifest this update: Thu 05 Jun 2025 06:56:25 +0000 Manifest next update: Sun 08 Jun 2025 10:02:25 +0000 Files and hashes: 1: B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl (hash: iN3ZqCCbUjD1ukJG6A33BjoVtICpNQ7GG4bi5Goummg=) 2: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: 8PZn2glxpjPzMwOpViBPOITwulhHCfAKIDoTjo8rwUo=) 3: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: WLfKscMyGMc40boEWdbQdnlHjNZj/oBFnEX9yWncEQQ=) 4: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: H5xER1Wp8wcvslhwKx1y276SpMDNAtMvuxWBaQWWyCY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 10:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:68:e0:9f:1f:e7:d3:40:bb:03:65:d2:67:75:1d:25:e1:12:2f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Validity Not Before: Jun 5 06:56:25 2025 GMT Not After : Jun 8 10:02:25 2025 GMT Subject: CN=1C1672A03FBEF5B0456C4F4EA4C678781735D78C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:7d:05:7c:48:9e:d7:5f:3e:91:26:5b:6e: 40:38:8e:e3:38:95:34:4f:93:84:2c:ed:41:00:dc: 46:1a:98:e3:c0:7a:46:fe:83:3a:10:3b:e3:da:4f: fa:75:6f:70:2a:94:72:8f:04:19:72:e3:eb:27:50: 4b:e6:b0:f3:40:ee:36:59:8c:fc:36:99:95:00:ab: 3f:e5:8b:b7:e6:87:5b:7c:20:23:22:d8:05:51:5f: ec:8b:10:d6:a5:78:d8:2f:97:07:96:93:c1:5c:9e: 88:4f:87:5a:52:e8:bc:a7:67:83:cc:ff:7e:b2:49: 22:5b:04:35:3a:d3:e1:f1:bb:51:31:32:b7:0e:7c: 6a:b3:d3:d9:1c:6c:02:c6:57:ac:e1:45:91:55:00: 8d:a6:d8:4f:b4:10:6d:9e:7a:fd:d0:4e:0f:83:1e: d0:09:65:48:de:a3:42:a7:53:9b:f0:7a:ab:49:ea: 17:29:e1:40:5d:65:30:3e:7f:97:49:2e:96:94:18: 81:70:00:2b:b8:9f:67:51:4f:eb:e9:0f:be:31:f8: a5:9c:a5:d6:2f:3b:18:b1:95:16:8e:19:46:db:be: 67:f6:53:ae:ac:13:1b:7b:5f:d5:a0:5f:20:e0:17: 08:85:e6:ab:34:a3:a9:1f:18:eb:3d:79:6b:3b:c0: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:16:72:A0:3F:BE:F5:B0:45:6C:4F:4E:A4:C6:78:78:17:35:D7:8C X509v3 Authority Key Identifier: keyid:B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6d:b5:3f:bf:60:c5:6b:a8:7e:5b:eb:0d:1e:94:1a:86:2f: f2:1b:6d:ca:f3:a3:b9:c2:30:af:7e:f9:4b:45:a3:93:4d:71: 81:e5:90:c2:44:c9:f6:27:81:6a:b0:cb:66:dd:fb:a0:40:af: 11:dd:68:ec:5e:52:5d:2f:dd:19:98:d0:59:13:f9:87:a9:0e: 45:50:9f:df:91:e3:78:1a:de:9b:e0:c2:23:48:c4:49:d2:79: 08:40:b1:71:43:75:9f:26:7b:70:04:49:40:04:78:37:96:f8: 40:a9:20:08:02:5b:e3:8a:77:07:94:08:b8:4b:f1:a0:ae:4a: b1:11:e1:83:a4:54:42:2d:43:20:f8:f3:f7:96:ab:52:04:f8: 7d:32:92:4d:1e:8b:f0:bc:3a:14:c9:d3:5c:39:76:06:9a:73: 36:a8:b1:1b:15:c2:47:ba:6f:a5:bd:47:ea:6e:47:bd:aa:b8: 59:4e:84:20:3c:36:a6:eb:0c:34:d4:6f:01:b2:55:9c:24:4e: 5f:8b:dd:1f:9b:d9:a1:eb:72:20:09:de:3c:78:94:44:4c:00: e7:52:e3:36:b5:b0:ff:dc:a2:a4:72:06:8a:0a:51:47:d2:6f: 93:07:3a:56:37:c9:66:83:b1:9b:c0:0a:f7:b3:fc:2f:6c:05: e8:45:30:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM2jgnx/n00C7A2XSZ3UdJeESL74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRD QkFBOTkxMDAeFw0yNTA2MDUwNjU2MjVaFw0yNTA2MDgxMDAyMjVaMDMxMTAvBgNV BAMTKDFDMTY3MkEwM0ZCRUY1QjA0NTZDNEY0RUE0QzY3ODc4MTczNUQ3OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dn0FfEie118+kSZbbkA4juM4 lTRPk4Qs7UEA3EYamOPAekb+gzoQO+PaT/p1b3AqlHKPBBly4+snUEvmsPNA7jZZ jPw2mZUAqz/li7fmh1t8ICMi2AVRX+yLENaleNgvlweWk8FcnohPh1pS6LynZ4PM /36ySSJbBDU60+Hxu1ExMrcOfGqz09kcbALGV6zhRZFVAI2m2E+0EG2eev3QTg+D HtAJZUjeo0KnU5vweqtJ6hcp4UBdZTA+f5dJLpaUGIFwACu4n2dRT+vpD74x+KWc pdYvOxixlRaOGUbbvmf2U66sExt7X9WgXyDgFwiF5qs0o6kfGOs9eWs7wGY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHBZyoD++9bBFbE9OpMZ4eBc114wwHwYDVR0j BBgwFoAUtwzWZplYIvMsBOCa/wGy1MuqmRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmQ0Zjg2OS00ZGI2LTRiMGEtYWFiNi1jZGU0N2I0NDdkNzcvMC9CNzBDRDY2Njk5 NTgyMkYzMkMwNEUwOUFGRjAxQjJENENCQUE5OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRDQkFB OTkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIy RDRDQkFBOTkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9ttT+/YMVrqH5b6w0elBqGL/Ibbcrzo7nC MK9++UtFo5NNcYHlkMJEyfYngWqwy2bd+6BArxHdaOxeUl0v3RmY0FkT+YepDkVQ n9+R43ga3pvgwiNIxEnSeQhAsXFDdZ8me3AESUAEeDeW+ECpIAgCW+OKdweUCLhL 8aCuSrER4YOkVEItQyD48/eWq1IE+H0ykk0ei/C8OhTJ01w5dgaaczaosRsVwke6 b6W9R+puR72quFlOhCA8NqbrDDTUbwGyVZwkTl+L3R+b2aHrciAJ3jx4lERMAOdS 4za1sP/coqRyBooKUUfSb5MHOlY3yWaDsZvACvez/C9sBehFMNA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:58 2025 by rpki-client