$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft File: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft (raw, json) Hash identifier: 31WrJLx9bqgQ9+4clbne1SeYl5+DaAigXJpbyeqj3OQ= Subject key identifier: 95:79:A8:49:49:7E:29:04:73:77:2E:67:FB:9C:F8:34:8E:9B:DD:37 Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Certificate serial: 63488A063F463FACA6056CDE0436064969FBBE04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft Manifest number: 0193 Signing time: Thu 21 Aug 2025 14:10:36 +0000 Manifest this update: Thu 21 Aug 2025 14:05:36 +0000 Manifest next update: Sun 24 Aug 2025 19:58:36 +0000 Files and hashes: 1: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl (hash: 4y0kAq23VivLZlgAR2X5nw2t3iVHHfZGFwb+YZNGTaM=) 2: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: viVk0fd1IGRahaA9QHSNJwt9tQb5HRy/oD87hvRQStY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:48:8a:06:3f:46:3f:ac:a6:05:6c:de:04:36:06:49:69:fb:be:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Validity Not Before: Aug 21 14:05:36 2025 GMT Not After : Aug 24 19:58:36 2025 GMT Subject: CN=9579A849497E290473772E67FB9CF8348E9BDD37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b0:27:2d:9e:98:6f:60:86:3b:1f:96:35:f0: 04:ce:cb:b6:c9:e4:7d:f7:1d:ce:8b:fe:44:20:85: 28:eb:ba:44:ed:89:93:11:3e:fb:8b:e5:51:5c:e9: bb:48:86:16:59:ea:1e:1b:17:9e:1c:ba:19:2a:11: 7d:d0:69:f6:7c:f4:c4:8e:08:24:e8:dc:d7:2a:2d: 49:c8:4e:82:ec:05:2b:54:2e:ef:36:a2:20:0d:32: 62:30:6a:72:2f:30:70:62:a7:11:be:fd:29:fd:92: ae:ec:5f:75:98:be:eb:18:b3:27:8e:9d:9c:ba:36: fb:ce:83:cf:9f:ea:4e:cd:44:2b:2a:46:23:b7:92: 36:03:87:1c:3b:d3:49:39:ee:46:db:0e:cc:3c:f8: 9d:a0:b2:29:32:de:38:17:c8:34:69:2d:94:59:7d: fc:97:e3:d8:fa:75:f2:b4:e7:8e:31:dd:82:5d:76: ce:ee:63:b8:bc:ab:67:ed:de:45:ce:1a:d6:c6:1d: db:b6:49:b3:d2:e6:91:22:d7:de:5a:ff:6b:c6:5a: 31:d7:67:82:64:88:5e:98:ff:70:e2:47:2d:5e:e6: 72:11:14:d1:8f:9f:9e:f9:94:14:2d:16:8f:43:b0: 5c:2a:02:b2:ee:df:81:39:c3:99:7c:14:24:b7:13: 9a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:79:A8:49:49:7E:29:04:73:77:2E:67:FB:9C:F8:34:8E:9B:DD:37 X509v3 Authority Key Identifier: keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:3a:2f:12:d0:f6:09:85:b1:db:4a:a8:f6:bd:f1:2c:e5:a8: d8:e7:a6:d0:fd:67:52:07:ab:d7:75:2f:be:94:f7:96:75:32: 4b:d9:8d:f7:4f:11:4a:c3:5a:e9:2b:70:4f:74:1c:dc:9d:eb: a5:30:04:ac:cb:67:76:e5:05:bc:57:b4:18:9c:5c:0e:56:2d: 94:ae:e0:c6:28:26:d6:02:1b:e7:b6:47:16:92:11:e7:ee:04: 54:bf:23:3a:50:a2:66:f2:84:9e:08:11:2d:68:fb:5c:50:59: 4d:a7:17:f1:7e:0c:6b:76:2d:ce:3f:ff:2d:2b:fe:fd:25:ea: b4:e9:39:9d:c1:fa:73:b6:3c:24:8f:67:83:75:c8:66:c2:4c: 06:35:96:fd:2f:af:76:f8:e6:cf:84:9a:a9:96:ce:54:05:09: 8b:59:9e:47:ec:34:56:0b:53:92:11:ae:3e:bf:84:61:e1:1b: af:25:a3:a5:22:93:87:f8:83:d2:3c:33:56:c6:c9:7c:bc:06: 2c:18:2a:43:e1:52:c2:92:8a:8e:f7:3f:46:1f:ca:71:d6:b9: 03:01:25:8e:3f:19:af:a2:89:92:8d:ee:2f:b9:9f:d7:9a:f1: e7:44:7f:39:c4:f5:cd:12:33:2a:22:7a:90:06:9b:7f:96:29: 23:29:9d:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0iKBj9GP6ymBWzeBDYGSWn7vgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2 OThCRERENDAeFw0yNTA4MjExNDA1MzZaFw0yNTA4MjQxOTU4MzZaMDMxMTAvBgNV BAMTKDk1NzlBODQ5NDk3RTI5MDQ3Mzc3MkU2N0ZCOUNGODM0OEU5QkREMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbsCctnphvYIY7H5Y18ATOy7bJ 5H33Hc6L/kQghSjrukTtiZMRPvuL5VFc6btIhhZZ6h4bF54cuhkqEX3QafZ89MSO CCTo3NcqLUnIToLsBStULu82oiANMmIwanIvMHBipxG+/Sn9kq7sX3WYvusYsyeO nZy6NvvOg8+f6k7NRCsqRiO3kjYDhxw700k57kbbDsw8+J2gsiky3jgXyDRpLZRZ ffyX49j6dfK0544x3YJdds7uY7i8q2ft3kXOGtbGHdu2SbPS5pEi195a/2vGWjHX Z4JkiF6Y/3DiRy1e5nIRFNGPn575lBQtFo9DsFwqArLu34E5w5l8FCS3E5rbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlXmoSUl+KQRzdy5n+5z4NI6b3TcwHwYDVR0j BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1 ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC RERENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3 OGUtMGE4NTRhOWNmZjRmLzAvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlF M0E2OThCRERENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADk6LxLQ9gmFsdtKqPa98SzlqNjnptD9Z1IH q9d1L76U95Z1MkvZjfdPEUrDWukrcE90HNyd66UwBKzLZ3blBbxXtBicXA5WLZSu 4MYoJtYCG+e2RxaSEefuBFS/IzpQombyhJ4IES1o+1xQWU2nF/F+DGt2Lc4//y0r /v0l6rTpOZ3B+nO2PCSPZ4N1yGbCTAY1lv0vr3b45s+EmqmWzlQFCYtZnkfsNFYL U5IRrj6/hGHhG68lo6Uik4f4g9I8M1bGyXy8BiwYKkPhUsKSio73P0YfynHWuQMB JY4/Ga+iiZKN7i+5n9ea8edEfznE9c0SMyoiepAGm3+WKSMpnRM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:01 2025 by rpki-client