$ rpki-client -vvf repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft File: A70723C87D2C27B95BE6227C631E7D85EF89D513.mft (raw, json) Hash identifier: XNm+xUB+Q9Hy48IcFIIpfEbhF/SVyx3K6Vf3Ce51omw= Subject key identifier: 1D:A3:F7:44:67:19:C4:09:94:B9:9F:20:92:E6:BF:06:E6:8D:66:CD Authority key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Certificate issuer: /CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Certificate serial: 294DBC382A95467D7DB04AB95C7C3CF9BCC004AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft Manifest number: 04FC Signing time: Thu 21 Aug 2025 09:20:52 +0000 Manifest this update: Thu 21 Aug 2025 09:15:52 +0000 Manifest next update: Sun 24 Aug 2025 16:13:52 +0000 Files and hashes: 1: A70723C87D2C27B95BE6227C631E7D85EF89D513.crl (hash: m+uiYLoJ8abape71wZoNZSMJ1gnZ4gw5ziDHVG0gBZ0=) 2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: QAI5cYTeOrxvcausPsC1CnYV2kULdBh9ytAc4ZJZoM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4d:bc:38:2a:95:46:7d:7d:b0:4a:b9:5c:7c:3c:f9:bc:c0:04:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Validity Not Before: Aug 21 09:15:52 2025 GMT Not After : Aug 24 16:13:52 2025 GMT Subject: CN=1DA3F7446719C40994B99F2092E6BF06E68D66CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:00:ef:99:a5:8f:32:60:39:27:5f:e0:9b: a7:bc:73:31:a8:b6:84:03:c5:39:d8:5c:7b:fc:cf: e0:50:a2:ba:6e:f1:42:79:22:0c:17:15:84:c7:5a: c9:9b:95:03:e0:f6:2d:9e:e1:d6:52:47:c4:6a:dd: d9:9b:fa:ff:bb:45:66:56:d7:70:86:19:f8:81:d1: 8d:0b:0f:48:65:eb:c1:57:49:db:62:4e:0a:3f:60: c1:da:60:75:fa:c9:8a:25:d1:7a:ec:ad:a5:b2:f6: 64:ec:b4:0d:d1:c4:14:1c:b5:3d:cf:eb:4b:83:bc: 4e:c8:c9:71:98:62:cd:6c:8d:72:f5:c7:8c:9f:e4: 00:10:5c:aa:f9:f7:cc:80:d0:0b:ab:26:f4:16:8f: 1e:84:2f:71:44:c8:45:4d:3b:7b:b4:0d:ba:05:ff: 0e:16:7c:84:d2:9a:95:6c:0f:6d:65:ba:1f:95:59: df:b3:03:48:bd:4d:88:a5:23:0a:67:f6:da:28:28: c8:07:ec:cd:0a:5f:7f:ae:99:27:68:d5:50:dc:87: c8:9c:93:12:39:84:90:f9:f2:5f:65:12:10:6d:fb: 96:cc:24:74:6e:23:87:3e:de:71:ad:fb:50:6c:d3: 5e:1f:5e:bf:3b:7a:ab:df:98:0d:b8:7c:31:0b:7b: 1a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A3:F7:44:67:19:C4:09:94:B9:9F:20:92:E6:BF:06:E6:8D:66:CD X509v3 Authority Key Identifier: keyid:A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:8b:c4:c1:30:a2:46:5a:97:40:5b:12:1a:2f:11:a1:1e:cd: 2d:98:bf:1d:59:7a:d7:69:93:7c:bd:82:4c:e0:73:07:4b:4f: 77:94:98:c4:f5:a6:d3:27:33:0f:76:4b:cc:c4:f3:75:ae:19: 51:9b:9d:45:ae:1c:86:03:21:0b:ea:08:3e:34:02:c6:61:6e: 2f:48:66:44:e6:18:40:fe:6b:22:fe:5b:b1:0b:bd:3b:c6:a6: 80:b5:7c:87:e1:94:0d:61:a1:84:38:95:7f:a1:64:6e:4b:7b: 78:be:a0:b6:84:f4:83:6d:9b:80:be:52:7d:8f:d9:61:23:ae: 57:28:a0:77:20:87:ab:4a:d5:e7:2b:bc:f7:fb:9b:bd:98:ad: 8b:90:64:d4:f9:25:26:79:9f:0d:00:25:ac:22:cf:7e:96:be: eb:25:f9:4f:33:27:72:ec:0e:ff:0e:f6:24:af:a0:b4:f6:b1: 25:00:fb:38:d9:9d:b8:d8:a0:5d:e1:05:e7:bf:fe:ec:66:fd: f5:61:84:92:4c:1c:7a:be:e2:ed:c5:24:37:7b:bb:ca:25:dd: 4c:cf:fa:7e:8c:d8:5e:35:88:ba:a4:9a:9f:2a:45:57:d4:bf: f8:a8:74:c0:13:56:5d:58:93:d3:f7:08:f0:49:bc:dd:e0:e2: 0e:80:9c:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKU28OCqVRn19sEq5XHw8+bzABK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVF Rjg5RDUxMzAeFw0yNTA4MjEwOTE1NTJaFw0yNTA4MjQxNjEzNTJaMDMxMTAvBgNV BAMTKDFEQTNGNzQ0NjcxOUM0MDk5NEI5OUYyMDkyRTZCRjA2RTY4RDY2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TQDvmaWPMmA5J1/gm6e8czGo toQDxTnYXHv8z+BQorpu8UJ5IgwXFYTHWsmblQPg9i2e4dZSR8Rq3dmb+v+7RWZW 13CGGfiB0Y0LD0hl68FXSdtiTgo/YMHaYHX6yYol0XrsraWy9mTstA3RxBQctT3P 60uDvE7IyXGYYs1sjXL1x4yf5AAQXKr598yA0AurJvQWjx6EL3FEyEVNO3u0DboF /w4WfITSmpVsD21luh+VWd+zA0i9TYilIwpn9tooKMgH7M0KX3+umSdo1VDch8ic kxI5hJD58l9lEhBt+5bMJHRuI4c+3nGt+1Bs014fXr87eqvfmA24fDELexrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHaP3RGcZxAmUuZ8gkua/BuaNZs0wHwYDVR0j BBgwFoAUpwcjyH0sJ7lb5iJ8Yx59he+J1RMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMC9BNzA3MjNDODdE MkMyN0I5NUJFNjIyN0M2MzFFN0Q4NUVGODlENTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVFRjg5 RDUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdE ODVFRjg5RDUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmLxMEwokZal0BbEhovEaEezS2Yvx1Zetdp k3y9gkzgcwdLT3eUmMT1ptMnMw92S8zE83WuGVGbnUWuHIYDIQvqCD40AsZhbi9I ZkTmGED+ayL+W7ELvTvGpoC1fIfhlA1hoYQ4lX+hZG5Le3i+oLaE9INtm4C+Un2P 2WEjrlcooHcgh6tK1ecrvPf7m72YrYuQZNT5JSZ5nw0AJawiz36Wvusl+U8zJ3Ls Dv8O9iSvoLT2sSUA+zjZnbjYoF3hBee//uxm/fVhhJJMHHq+4u3FJDd7u8ol3UzP +n6M2F41iLqkmp8qRVfUv/iodMATVl1Yk9P3CPBJvN3g4g6AnNA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:18:17 2025 by rpki-client