$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: KffTXF4lJTGFU3+fzPUAPot9O9z7Vi2FzbNTjjmrQ90= Subject key identifier: 20:3F:5D:27:44:E9:6E:FF:5E:4E:BE:E5:92:C7:EE:0B:ED:FB:67:74 Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 2BFCBB963B35303184742E1A5D77B1E089EAF5DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: FB Signing time: Tue 03 Jun 2025 12:14:02 +0000 Manifest this update: Tue 03 Jun 2025 12:09:02 +0000 Manifest next update: Fri 06 Jun 2025 20:32:02 +0000 Files and hashes: 1: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: xFoVEBixfaV59f5eLoKvzCfI+maBpFsE/LQmHoFGuNo=) 2: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: 49rSTvjErgDXHWuGzyWp9nmRl6ctd/fuAPCeJBWlwpA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:fc:bb:96:3b:35:30:31:84:74:2e:1a:5d:77:b1:e0:89:ea:f5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Jun 3 12:09:02 2025 GMT Not After : Jun 6 20:32:02 2025 GMT Subject: CN=203F5D2744E96EFF5E4EBEE592C7EE0BEDFB6774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:52:17:88:2a:c3:70:c4:d3:06:ba:c6:c9: a2:9c:21:c3:bf:e8:b1:24:ce:e9:3c:94:61:fe:a8: 0d:12:10:0b:3e:81:b3:29:2b:b9:0e:65:6d:7a:3f: f2:cd:47:bd:08:19:b7:7a:4a:68:9c:ad:a8:8a:61: ee:79:ee:8b:a3:f2:55:25:16:b7:a5:bb:f2:5d:f9: fa:a5:75:6d:9f:52:44:10:ba:05:64:24:15:8f:59: ce:00:5e:aa:81:96:95:a5:e7:ff:1e:a5:ac:fb:c9: b5:b3:05:64:e1:5e:85:4b:9b:cb:92:c5:84:56:f8: 68:26:c7:15:a9:26:d9:a4:63:57:da:a9:24:45:26: e7:91:6e:e3:57:c2:6a:e8:2f:ff:e5:53:65:64:06: 43:b2:c0:ba:56:80:ad:91:e7:72:0f:95:53:86:01: 52:7d:ec:7d:86:f6:6f:f4:fc:d2:ad:b1:66:31:28: 78:58:5c:1a:0e:20:fb:54:dc:8a:d5:2e:bc:40:d9: db:97:fe:b5:d3:0c:c5:2e:4c:85:8c:8b:47:5f:55: 4b:32:f7:ed:c3:14:0d:55:ed:ab:6c:69:18:d5:54: c4:cc:1c:22:2a:b2:bd:af:44:2c:22:1f:d0:9b:9d: 25:e8:f1:90:b3:03:a1:51:30:2e:30:0c:09:71:68: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3F:5D:27:44:E9:6E:FF:5E:4E:BE:E5:92:C7:EE:0B:ED:FB:67:74 X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8a:75:54:0c:1c:b8:a6:eb:c3:b8:5d:63:ab:98:01:0d:95: a8:cf:53:1a:f6:b4:58:89:03:45:88:79:ec:57:f4:22:0f:cd: 4b:77:0e:e4:b9:0d:90:0d:b2:12:c0:f2:df:7d:56:07:5c:fe: 45:39:25:6d:89:96:7c:89:c4:73:bc:1c:89:8d:5f:c7:1f:7c: 9a:a7:f4:24:20:de:1f:4d:5f:17:02:a1:11:e8:be:1e:94:bb: 45:c9:a2:27:4e:15:f6:99:7b:84:dc:ad:3c:6f:ab:e1:04:35: 07:a9:e3:40:71:a8:23:a4:62:c9:3b:2a:ef:74:4d:19:c2:02: 21:6d:f0:d4:3e:a9:6b:b1:b5:4f:0d:b4:08:59:a0:45:00:5a: d5:f2:f3:2c:5a:4a:1b:41:87:9a:c8:df:97:c9:b6:d8:30:a2: 1f:a0:fd:c9:fa:c4:3d:4f:a4:e4:e2:50:19:c5:ae:d8:a7:b7: 76:51:53:cb:ee:76:14:64:7c:87:78:2e:5b:51:70:8f:fd:91: 6c:b1:84:22:9e:db:f9:e8:0f:32:73:43:1c:97:ba:ed:de:56: ec:d9:99:62:d3:b0:e0:c6:a8:21:ef:80:fe:93:4b:cb:c2:c0: dc:ca:81:e5:d2:79:29:b1:33:d2:1c:f6:c4:c3:1f:36:45:17: a8:4d:27:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/y7ljs1MDGEdC4aXXex4Inq9d4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNTA2MDMxMjA5MDJaFw0yNTA2MDYyMDMyMDJaMDMxMTAvBgNV BAMTKDIwM0Y1RDI3NDRFOTZFRkY1RTRFQkVFNTkyQzdFRTBCRURGQjY3NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvLFIXiCrDcMTTBrrGyaKcIcO/ 6LEkzuk8lGH+qA0SEAs+gbMpK7kOZW16P/LNR70IGbd6SmicraiKYe557ouj8lUl Frelu/Jd+fqldW2fUkQQugVkJBWPWc4AXqqBlpWl5/8epaz7ybWzBWThXoVLm8uS xYRW+GgmxxWpJtmkY1faqSRFJueRbuNXwmroL//lU2VkBkOywLpWgK2R53IPlVOG AVJ97H2G9m/0/NKtsWYxKHhYXBoOIPtU3IrVLrxA2duX/rXTDMUuTIWMi0dfVUsy 9+3DFA1V7atsaRjVVMTMHCIqsr2vRCwiH9CbnSXo8ZCzA6FRMC4wDAlxaCZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUID9dJ0Tpbv9eTr7lksfuC+37Z3QwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuKdVQMHLim68O4XWOrmAENlajPUxr2tFiJ A0WIeexX9CIPzUt3DuS5DZANshLA8t99Vgdc/kU5JW2JlnyJxHO8HImNX8cffJqn 9CQg3h9NXxcCoRHovh6Uu0XJoidOFfaZe4TcrTxvq+EENQep40BxqCOkYsk7Ku90 TRnCAiFt8NQ+qWuxtU8NtAhZoEUAWtXy8yxaShtBh5rI35fJttgwoh+g/cn6xD1P pOTiUBnFrtint3ZRU8vudhRkfId4LltRcI/9kWyxhCKe2/noDzJzQxyXuu3eVuzZ mWLTsODGqCHvgP6TS8vCwNzKgeXSeSmxM9Ic9sTDHzZFF6hNJ4M= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:12 2025 by rpki-client