$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft File: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json) Hash identifier: Qx7CDa/McoUgbhmOJ6UGfGUvBoyilXSGP4ZHZIwFdM8= Subject key identifier: 9D:06:59:FC:9D:CE:09:A1:7A:8F:1E:F9:04:F4:31:B1:90:AE:7C:10 Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Certificate serial: 0701763AC39E469B0F9AD26B5BF372D3F5FF1914 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft Manifest number: 0466 Signing time: Sat 19 Apr 2025 10:21:46 +0000 Manifest this update: Sat 19 Apr 2025 10:16:46 +0000 Manifest next update: Tue 22 Apr 2025 21:22:46 +0000 Files and hashes: 1: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: qOliyAbecAgnwnEl2JxoivYUoLSuHIHif/ES8Zdhg8I=) 2: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: v9LtpwpQ35J+as0SUaqcmSSZePcKABUOmES2L8JBM50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 21:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:01:76:3a:c3:9e:46:9b:0f:9a:d2:6b:5b:f3:72:d3:f5:ff:19:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Validity Not Before: Apr 19 10:16:46 2025 GMT Not After : Apr 22 21:22:46 2025 GMT Subject: CN=9D0659FC9DCE09A17A8F1EF904F431B190AE7C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:5f:0b:47:aa:76:bb:f6:8e:ac:00:91:c9: 54:17:87:f6:dd:61:f8:c3:26:d5:b4:64:26:0e:9d: bb:61:1c:a1:fb:47:d0:5e:91:a7:7d:c9:61:6a:09: 9f:25:fe:01:c8:b9:f1:c4:50:3d:27:02:17:51:63: d4:91:10:82:14:e6:b4:65:17:b2:d4:77:2f:84:1e: a9:28:b5:7c:dc:dd:11:99:51:66:8a:40:8e:77:27: 5f:c4:53:61:63:df:23:18:b5:ff:e8:16:49:b0:e2: 81:6b:f3:b1:c0:22:d1:c7:9f:bc:38:18:dc:5d:91: ac:12:df:cd:aa:77:47:b9:ba:a0:6a:5a:82:79:49: c5:04:60:ae:92:7f:8f:25:ab:d6:00:a2:2a:4c:63: 35:16:3b:c1:41:b1:3e:ea:62:58:cf:38:55:6b:d0: ef:f0:c7:86:20:c2:c4:66:ab:c3:13:76:f0:be:e6: cc:a2:fd:86:98:f4:69:80:74:57:3e:a9:75:d9:5c: 6f:6a:07:59:1e:b0:3a:69:06:1c:e3:d9:ce:7e:a7: 20:cd:c6:03:79:7d:87:96:40:d8:ec:9c:49:3b:91: d8:d4:ed:69:43:30:3e:fc:c6:45:ef:61:08:4b:1d: b2:2d:f2:28:a3:2c:d1:bf:0f:34:64:2c:39:83:36: 58:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:06:59:FC:9D:CE:09:A1:7A:8F:1E:F9:04:F4:31:B1:90:AE:7C:10 X509v3 Authority Key Identifier: keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e6:ec:9b:73:f8:14:00:c5:a1:8b:11:0e:e5:e7:fb:0d:62: 7f:b6:b6:09:88:c0:a2:85:36:3e:a6:6e:ee:50:c8:46:39:2c: 84:9b:f2:f4:5f:85:3f:88:ea:6d:0c:60:2f:f4:e9:d2:79:c8: a3:18:60:a7:e2:14:70:3b:50:d0:4b:4b:5e:ed:f1:a2:f2:99: 45:9b:1c:29:86:2e:d3:b6:59:c0:5c:1f:c1:48:96:45:52:26: 0c:14:8b:14:a1:49:3d:18:d2:4e:1d:dd:0a:40:0a:e1:3d:33: f6:5f:59:e0:51:1f:ed:94:89:d0:f5:ed:15:b8:cc:fe:30:0b: 57:ef:51:3f:ad:20:4c:e4:14:b4:fb:6a:82:bf:0b:e1:71:e4: a0:f4:25:29:0e:f0:01:ec:17:8a:de:e9:45:69:14:4e:0c:7d: 54:42:30:7b:ac:da:03:74:26:bb:71:52:20:ec:ef:b6:87:37: f3:37:a9:bd:fb:1b:24:50:36:6b:2b:14:80:e7:0a:8c:c0:60: 58:47:78:2f:d1:64:db:8a:e7:6a:5c:b6:60:dd:d2:bb:57:6a: 5d:fa:1b:dd:fd:97:d3:13:45:7d:f1:fd:b8:6c:4c:c8:23:49: 1b:cb:46:45:fc:9f:16:b5:5b:da:3d:f0:a8:a9:5c:7f:7f:ab: 3d:ee:58:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwF2OsOeRpsPmtJrW/Ny0/X/GRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0 QzQyQkY4NDAeFw0yNTA0MTkxMDE2NDZaFw0yNTA0MjIyMTIyNDZaMDMxMTAvBgNV BAMTKDlEMDY1OUZDOURDRTA5QTE3QThGMUVGOTA0RjQzMUIxOTBBRTdDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAv18LR6p2u/aOrACRyVQXh/bd YfjDJtW0ZCYOnbthHKH7R9Bekad9yWFqCZ8l/gHIufHEUD0nAhdRY9SREIIU5rRl F7LUdy+EHqkotXzc3RGZUWaKQI53J1/EU2Fj3yMYtf/oFkmw4oFr87HAItHHn7w4 GNxdkawS382qd0e5uqBqWoJ5ScUEYK6Sf48lq9YAoipMYzUWO8FBsT7qYljPOFVr 0O/wx4YgwsRmq8MTdvC+5syi/YaY9GmAdFc+qXXZXG9qB1kesDppBhzj2c5+pyDN xgN5fYeWQNjsnEk7kdjU7WlDMD78xkXvYQhLHbIt8iijLNG/DzRkLDmDNlhzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnQZZ/J3OCaF6jx75BPQxsZCufBAwHwYDVR0j BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0 OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLm7Jtz+BQAxaGLEQ7l5/sNYn+2tgmIwKKF Nj6mbu5QyEY5LISb8vRfhT+I6m0MYC/06dJ5yKMYYKfiFHA7UNBLS17t8aLymUWb HCmGLtO2WcBcH8FIlkVSJgwUixShST0Y0k4d3QpACuE9M/ZfWeBRH+2UidD17RW4 zP4wC1fvUT+tIEzkFLT7aoK/C+Fx5KD0JSkO8AHsF4re6UVpFE4MfVRCMHus2gN0 JrtxUiDs77aHN/M3qb37GyRQNmsrFIDnCozAYFhHeC/RZNuK52pctmDd0rtXal36 G939l9MTRX3x/bhsTMgjSRvLRkX8nxa1W9o98KipXH9/qz3uWDo= -----END CERTIFICATE-----Generated at Sun Apr 20 00:35:11 2025 by rpki-client