$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft File: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json) Hash identifier: DorMvMvoaZVfDcASFTmm8q7rhkI5OtGj2XTbdWOuTbk= Subject key identifier: 93:8B:00:D3:EC:30:FE:2E:05:F0:13:7B:FC:36:C8:23:59:69:16:4F Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Certificate serial: 0A0B9A5ADE7E626F783BD41A709B93513D6BF26E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft Manifest number: 04A5 Signing time: Sun 07 Sep 2025 10:21:49 +0000 Manifest this update: Sun 07 Sep 2025 10:16:49 +0000 Manifest next update: Wed 10 Sep 2025 13:11:49 +0000 Files and hashes: 1: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: Ygp8V6ySgNlfzeAzxcG8tV45vBV3m6RFvl0r9jM7VeY=) 2: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: jSZzqnXDpqMDYWEVhf4gaNxPe5ezKEmqOwcTLxaaprw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:0b:9a:5a:de:7e:62:6f:78:3b:d4:1a:70:9b:93:51:3d:6b:f2:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Validity Not Before: Sep 7 10:16:49 2025 GMT Not After : Sep 10 13:11:49 2025 GMT Subject: CN=938B00D3EC30FE2E05F0137BFC36C8235969164F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:cf:e4:54:a3:f4:7b:c3:56:dd:9e:1a:89: 5d:c8:35:5e:f0:fb:83:95:07:7c:98:2d:72:1b:2a: a3:b7:2e:97:e3:13:ee:c8:bb:ba:5c:da:dc:fc:0f: 64:eb:e9:06:00:c7:5b:ac:57:96:4d:53:4b:78:00: 61:28:3a:1b:03:ef:d7:30:0e:c0:9e:18:88:9c:0f: b3:0f:1b:92:f3:2e:f4:4d:d0:ed:9f:84:a5:97:49: 3b:78:73:d0:a5:16:51:94:ca:0d:56:1d:91:64:da: d9:ea:ad:e6:cc:a7:9c:e8:f2:82:47:5b:a3:fc:8a: 70:dd:9c:35:ed:a4:3a:6a:14:9e:36:8d:89:a1:0f: 99:3d:4d:f1:8a:1e:66:e5:f5:6f:b3:18:21:31:11: 64:1d:d6:be:5e:ef:dd:5d:72:ac:1d:28:6d:f1:e7: b1:f4:31:ec:c2:ed:83:b2:04:9d:dd:0a:5b:3f:2c: a6:2f:61:c2:4a:07:a6:ee:09:fb:56:b3:26:e0:82: f8:fc:e0:04:0b:1e:0e:f8:71:78:67:21:c8:11:70: e1:39:0d:86:05:99:18:1f:4a:09:ed:60:d7:d2:b3: 39:ec:7f:a9:58:26:eb:82:a2:3d:0f:94:38:85:74: 8a:6d:36:02:4d:71:b6:a6:6e:9d:6f:ed:06:bf:65: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8B:00:D3:EC:30:FE:2E:05:F0:13:7B:FC:36:C8:23:59:69:16:4F X509v3 Authority Key Identifier: keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b2:ef:da:70:51:52:17:36:69:00:ab:56:a1:0b:27:d1:87: b2:87:4b:c2:b4:d7:f3:0b:f9:99:4b:f4:d1:8e:c5:1c:26:42: d6:d4:1b:1e:89:18:7e:0b:2e:5e:76:2d:74:60:0f:e6:51:67: 6d:1c:48:19:85:da:f8:1a:3e:b1:28:c3:f3:62:be:92:a7:4e: 3a:bc:8c:f5:d3:0f:8b:62:9c:ee:3a:fb:da:92:f4:fd:23:05: 66:62:1c:4a:b4:61:f7:35:62:cb:b0:03:27:e9:52:de:26:f5: f5:b3:f1:45:86:fd:e6:1a:22:a2:d5:d4:cc:7d:91:82:e0:f2: cf:f3:d1:ae:88:27:9c:45:97:75:4d:b6:f2:81:22:fe:05:8e: 83:54:51:d0:5e:2b:b0:53:7d:8d:27:38:99:73:36:b0:3a:b8: 13:41:84:cb:b7:90:e7:16:65:6d:9f:8b:6c:47:91:e3:0e:95: 2f:80:c0:c0:26:5a:7a:9f:92:71:b8:ef:4a:e2:54:42:1a:90: 77:ce:02:ec:be:39:3b:9e:af:88:69:4f:60:e7:7f:e4:28:a9: 61:f1:9e:92:f3:26:4e:26:a8:27:2b:8d:c4:c1:5a:98:43:5c: 5b:c9:e9:30:ab:94:2d:95:01:4a:61:a8:9e:68:f9:16:d7:a0: 44:83:fd:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCguaWt5+Ym94O9QacJuTUT1r8m4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0 QzQyQkY4NDAeFw0yNTA5MDcxMDE2NDlaFw0yNTA5MTAxMzExNDlaMDMxMTAvBgNV BAMTKDkzOEIwMEQzRUMzMEZFMkUwNUYwMTM3QkZDMzZDODIzNTk2OTE2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0a8/kVKP0e8NW3Z4aiV3INV7w +4OVB3yYLXIbKqO3LpfjE+7Iu7pc2tz8D2Tr6QYAx1usV5ZNU0t4AGEoOhsD79cw DsCeGIicD7MPG5LzLvRN0O2fhKWXSTt4c9ClFlGUyg1WHZFk2tnqrebMp5zo8oJH W6P8inDdnDXtpDpqFJ42jYmhD5k9TfGKHmbl9W+zGCExEWQd1r5e791dcqwdKG3x 57H0MezC7YOyBJ3dCls/LKYvYcJKB6buCftWsybggvj84AQLHg74cXhnIcgRcOE5 DYYFmRgfSgntYNfSsznsf6lYJuuCoj0PlDiFdIptNgJNcbambp1v7Qa/ZQkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk4sA0+ww/i4F8BN7/DbII1lpFk8wHwYDVR0j BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0 OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABey79pwUVIXNmkAq1ahCyfRh7KHS8K01/ML +ZlL9NGOxRwmQtbUGx6JGH4LLl52LXRgD+ZRZ20cSBmF2vgaPrEow/NivpKnTjq8 jPXTD4tinO46+9qS9P0jBWZiHEq0Yfc1YsuwAyfpUt4m9fWz8UWG/eYaIqLV1Mx9 kYLg8s/z0a6IJ5xFl3VNtvKBIv4FjoNUUdBeK7BTfY0nOJlzNrA6uBNBhMu3kOcW ZW2fi2xHkeMOlS+AwMAmWnqfknG470riVEIakHfOAuy+OTuer4hpT2Dnf+QoqWHx npLzJk4mqCcrjcTBWphDXFvJ6TCrlC2VAUphqJ5o+RbXoESD/f0= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:42 2025 by rpki-client