$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft File: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json) Hash identifier: RdS07pcnt0Q/l8GiBq5XYPDGdqWOrzRQ9nBumCkdysI= Subject key identifier: 1F:2C:A5:49:ED:94:1F:74:AE:4B:CB:44:7B:E3:A1:6D:8E:75:09:05 Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Certificate serial: 1D4C688FDDB3A2524194D70842E1EE4079763189 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft Manifest number: 047B Signing time: Thu 05 Jun 2025 22:21:48 +0000 Manifest this update: Thu 05 Jun 2025 22:16:48 +0000 Manifest next update: Mon 09 Jun 2025 08:33:48 +0000 Files and hashes: 1: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: qOliyAbecAgnwnEl2JxoivYUoLSuHIHif/ES8Zdhg8I=) 2: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: xYDP6RF8JGI+JqlVqIgQO43sVql3NqwPCiWJywNojSE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 08:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4c:68:8f:dd:b3:a2:52:41:94:d7:08:42:e1:ee:40:79:76:31:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Validity Not Before: Jun 5 22:16:48 2025 GMT Not After : Jun 9 08:33:48 2025 GMT Subject: CN=1F2CA549ED941F74AE4BCB447BE3A16D8E750905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dd:a7:f5:90:cc:88:d0:79:c4:c6:ad:f6:75: 66:8c:66:6c:64:78:65:0b:dd:a1:95:59:ce:fe:8b: 69:8f:4f:48:f4:2f:b9:55:eb:51:06:66:bf:1a:da: df:90:dd:3d:c3:ed:f0:1e:3b:eb:e6:9c:cd:38:84: 02:d6:cf:56:66:bc:0e:5b:d0:b7:20:5b:58:d5:3d: 0b:ff:8a:e2:f7:d8:a5:1d:fa:c8:ab:93:ad:83:9a: 9f:16:21:63:e4:e6:94:b6:00:81:27:02:80:12:93: b4:06:a7:ac:f5:28:e7:13:a3:c1:fa:69:e7:e5:72: 7d:9c:4b:5a:5a:16:02:14:f8:9c:db:75:62:7e:be: 67:e2:e9:c4:78:be:0a:b6:83:09:bd:c9:64:f5:cc: 8f:40:fb:51:c1:62:db:41:27:e5:c9:2f:a0:b3:2b: 1b:fb:a7:09:1a:e2:dc:b2:88:29:3f:9f:95:ec:09: a7:c6:3c:6b:3b:85:d2:e8:38:62:05:ef:2b:2f:42: af:77:13:9d:07:60:38:68:b1:15:9a:67:39:51:c3: 99:e6:c2:c9:be:9a:21:8e:24:b4:4e:45:d5:58:1e: a2:ea:25:71:d5:aa:40:55:af:da:d4:9a:ff:e2:fc: 0a:51:d6:32:55:f9:12:46:fb:e5:d9:2d:77:95:65: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2C:A5:49:ED:94:1F:74:AE:4B:CB:44:7B:E3:A1:6D:8E:75:09:05 X509v3 Authority Key Identifier: keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e4:11:ad:bd:1d:cd:88:b0:2f:52:d4:9d:81:49:63:63:a7: 8d:8a:aa:b9:01:d1:5b:a0:07:e6:5e:f6:d8:c2:88:51:b8:d4: f2:2e:ed:f5:4b:76:85:e6:4d:04:42:24:95:b0:60:04:d7:5e: 2c:02:0c:07:30:04:8f:63:8e:ad:85:f5:76:09:a7:41:ee:5a: a9:a6:6b:9c:39:f9:19:fa:5e:7a:3b:e0:9e:db:09:ae:46:9f: e3:f6:43:11:54:2d:a3:56:30:d1:0e:42:17:d8:9b:c1:ee:21: 25:ad:69:18:f4:10:09:c4:58:bb:95:5d:0e:30:f5:47:e5:ec: fd:c0:a4:95:f7:50:30:9c:f4:7d:56:47:f8:da:ee:21:ca:5c: b8:9f:21:f9:0e:6d:f5:ce:b4:93:87:9f:d8:77:3e:9e:c8:8e: 72:4e:28:c7:0d:8a:68:b5:25:dd:01:d9:6c:30:5f:52:1f:f0: cb:28:1c:75:54:d6:53:5c:ae:53:c0:11:36:e4:33:94:c1:22: bc:2f:3c:83:f5:3d:4f:b2:3a:f4:c0:b6:35:45:6b:ed:df:89: 1d:9a:2a:6a:04:07:b0:e9:2d:0b:ed:27:3b:71:7b:30:f9:ee: ef:2b:3f:73:0f:ed:c5:61:11:2e:2d:07:7e:46:a8:f0:f3:be: a9:88:ff:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHUxoj92zolJBlNcIQuHuQHl2MYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0 QzQyQkY4NDAeFw0yNTA2MDUyMjE2NDhaFw0yNTA2MDkwODMzNDhaMDMxMTAvBgNV BAMTKDFGMkNBNTQ5RUQ5NDFGNzRBRTRCQ0I0NDdCRTNBMTZEOEU3NTA5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj3af1kMyI0HnExq32dWaMZmxk eGUL3aGVWc7+i2mPT0j0L7lV61EGZr8a2t+Q3T3D7fAeO+vmnM04hALWz1ZmvA5b 0LcgW1jVPQv/iuL32KUd+sirk62Dmp8WIWPk5pS2AIEnAoASk7QGp6z1KOcTo8H6 aeflcn2cS1paFgIU+JzbdWJ+vmfi6cR4vgq2gwm9yWT1zI9A+1HBYttBJ+XJL6Cz Kxv7pwka4tyyiCk/n5XsCafGPGs7hdLoOGIF7ysvQq93E50HYDhosRWaZzlRw5nm wsm+miGOJLRORdVYHqLqJXHVqkBVr9rUmv/i/ApR1jJV+RJG++XZLXeVZb3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHyylSe2UH3SuS8tEe+OhbY51CQUwHwYDVR0j BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0 OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrkEa29Hc2IsC9S1J2BSWNjp42KqrkB0Vug B+Ze9tjCiFG41PIu7fVLdoXmTQRCJJWwYATXXiwCDAcwBI9jjq2F9XYJp0HuWqmm a5w5+Rn6Xno74J7bCa5Gn+P2QxFULaNWMNEOQhfYm8HuISWtaRj0EAnEWLuVXQ4w 9Ufl7P3ApJX3UDCc9H1WR/ja7iHKXLifIfkObfXOtJOHn9h3Pp7IjnJOKMcNimi1 Jd0B2WwwX1If8MsoHHVU1lNcrlPAETbkM5TBIrwvPIP1PU+yOvTAtjVFa+3fiR2a KmoEB7DpLQvtJztxezD57u8rP3MP7cVhES4tB35GqPDzvqmI/88= -----END CERTIFICATE-----Generated at Sun Jun 8 07:00:59 2025 by rpki-client