$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft File: B70932ED6C688D58897E32E1D5C990B20910FF02.mft (raw, json) Hash identifier: JOWk88ZesbC1716ahMcziA/ja+6cS4U/wleFe46IEtI= Subject key identifier: 86:2A:2A:6B:EB:62:AE:79:AF:05:53:DE:B0:3D:C6:D6:C3:7B:94:42 Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 Certificate issuer: /CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Certificate serial: 6FC1C4DE9624E26BE4E8133BE4C560C2FBB28457 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft Manifest number: 01A0 Signing time: Fri 22 Aug 2025 03:43:48 +0000 Manifest this update: Fri 22 Aug 2025 03:38:47 +0000 Manifest next update: Mon 25 Aug 2025 12:36:47 +0000 Files and hashes: 1: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: b+1ENA1CQV0UHypRXPMfHhHTGiVgtOzzvTXY/wFcyPw=) 2: B70932ED6C688D58897E32E1D5C990B20910FF02.crl (hash: OptCUdE8/dlJibOV9qJ6I52zrWvX/QGdaTGMs1Rjgqw=) 3: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: D7YG7GtU8OdbibrqJfPY6iiVpoIqqq1mmvO/Oo1ZWAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c1:c4:de:96:24:e2:6b:e4:e8:13:3b:e4:c5:60:c2:fb:b2:84:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Validity Not Before: Aug 22 03:38:47 2025 GMT Not After : Aug 25 12:36:47 2025 GMT Subject: CN=862A2A6BEB62AE79AF0553DEB03DC6D6C37B9442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a2:04:b5:1a:03:a8:b6:15:ef:20:8a:e4:87: 1a:f2:69:ec:ca:09:07:e1:06:a8:00:3e:84:ff:94: c0:4c:fd:df:21:3f:8d:62:4e:ce:30:e5:72:c6:ae: 3c:da:50:f5:8d:95:9c:13:5f:60:45:d4:b5:47:00: e4:fd:e3:90:94:6e:cc:2c:46:63:c9:53:53:08:b1: af:91:7e:1d:e8:a5:54:cb:9f:54:d3:69:e6:c1:a8: df:f8:4c:6b:13:aa:38:4f:2e:59:60:fa:ff:96:2e: bd:38:5b:6a:a4:7e:73:19:68:4b:64:8f:60:a0:43: be:78:71:06:5f:ff:e7:22:a5:e4:87:07:96:82:3b: b0:e0:84:95:17:91:83:83:c9:a6:8d:0e:96:e5:14: 94:18:8d:f0:7b:3a:cc:1a:9f:b9:44:c7:c0:eb:c5: eb:c1:be:e8:fa:73:91:bc:b1:f5:b4:43:5b:d0:f2: ec:ca:a1:52:48:24:f6:99:92:92:7b:13:54:55:43: 1a:be:a4:61:7e:a8:a2:5f:91:c0:50:43:22:e6:53: 12:ce:db:fd:43:af:a9:2f:71:53:bc:bc:a8:21:36: a0:49:24:6d:2f:f7:73:b3:bc:7a:52:d3:30:a3:be: 47:14:d3:77:fb:fe:ce:e3:0b:a6:07:51:9f:05:d0: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2A:2A:6B:EB:62:AE:79:AF:05:53:DE:B0:3D:C6:D6:C3:7B:94:42 X509v3 Authority Key Identifier: keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:13:0e:81:c3:ac:bd:6c:80:dd:23:18:a3:12:3f:3c:3a:b9: a0:5e:0c:d0:03:9f:7c:cf:49:9e:57:2d:52:57:28:89:a5:3f: c7:09:44:5b:05:7e:e1:31:6f:1b:08:ac:24:4d:3e:0c:4a:76: dd:40:ac:21:5d:a6:dc:e8:7f:84:13:74:92:95:3e:dc:5d:35: 08:88:c0:14:39:cb:f1:18:e0:9e:27:71:b8:b6:3d:73:66:94: 92:24:7d:0e:f5:ba:5c:ab:d9:06:55:e4:ec:4c:80:90:2d:ab: ee:2b:54:55:61:d6:00:b1:1d:5b:a2:53:90:98:02:b9:5f:94: 94:b3:57:8d:34:44:71:a3:01:7c:d1:fb:6b:96:02:2d:88:41: 18:7d:8c:a5:e0:54:4c:46:3d:b5:ed:bc:08:9a:27:48:20:08: d0:9c:8b:29:04:45:43:f1:18:1b:1c:3e:fe:c5:e4:45:e1:d6: 68:51:69:4c:ac:55:78:78:e7:a4:68:85:17:9a:dd:86:be:96: bd:e5:89:d1:fd:57:7f:3e:72:56:74:cc:d7:87:c6:df:b7:c4: b0:ef:c5:55:7e:0e:69:d1:59:60:e1:45:41:45:eb:07:fd:f8: 3a:d3:05:1e:ef:45:60:89:bd:a7:4e:81:ba:35:07:a3:06:cf: 16:b9:89:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb8HE3pYk4mvk6BM75MVgwvuyhFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIw OTEwRkYwMjAeFw0yNTA4MjIwMzM4NDdaFw0yNTA4MjUxMjM2NDdaMDMxMTAvBgNV BAMTKDg2MkEyQTZCRUI2MkFFNzlBRjA1NTNERUIwM0RDNkQ2QzM3Qjk0NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoogS1GgOothXvIIrkhxryaezK CQfhBqgAPoT/lMBM/d8hP41iTs4w5XLGrjzaUPWNlZwTX2BF1LVHAOT945CUbsws RmPJU1MIsa+Rfh3opVTLn1TTaebBqN/4TGsTqjhPLllg+v+WLr04W2qkfnMZaEtk j2CgQ754cQZf/+cipeSHB5aCO7DghJUXkYODyaaNDpblFJQYjfB7Oswan7lEx8Dr xevBvuj6c5G8sfW0Q1vQ8uzKoVJIJPaZkpJ7E1RVQxq+pGF+qKJfkcBQQyLmUxLO 2/1Dr6kvcVO8vKghNqBJJG0v93OzvHpS0zCjvkcU03f7/s7jC6YHUZ8F0AE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhioqa+tirnmvBVPesD3G1sN7lEIwHwYDVR0j BBgwFoAUtwky7WxojViJfjLh1cmQsgkQ/wIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTkwZGE0OS05ODYyLTQxZGUtODMzZS1iMzA0ZjBjMWFlNTcvMC9CNzA5MzJFRDZD Njg4RDU4ODk3RTMyRTFENUM5OTBCMjA5MTBGRjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIwOTEw RkYwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz M2UtYjMwNGYwYzFhZTU3LzAvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkw QjIwOTEwRkYwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwTDoHDrL1sgN0jGKMSPzw6uaBeDNADn3zP SZ5XLVJXKImlP8cJRFsFfuExbxsIrCRNPgxKdt1ArCFdptzof4QTdJKVPtxdNQiI wBQ5y/EY4J4ncbi2PXNmlJIkfQ71ulyr2QZV5OxMgJAtq+4rVFVh1gCxHVuiU5CY ArlflJSzV400RHGjAXzR+2uWAi2IQRh9jKXgVExGPbXtvAiaJ0ggCNCciykERUPx GBscPv7F5EXh1mhRaUysVXh456RohRea3Ya+lr3lidH9V38+clZ0zNeHxt+3xLDv xVV+DmnRWWDhRUFF6wf9+DrTBR7vRWCJvadOgbo1B6MGzxa5ibA= -----END CERTIFICATE-----Generated at Sat Aug 23 21:22:26 2025 by rpki-client