$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft File: B70932ED6C688D58897E32E1D5C990B20910FF02.mft (raw, json) Hash identifier: dqKj05Bc9YzZm2hpkrB1LR5VWqW09wFnxJBiux1/98o= Subject key identifier: 3A:1B:E1:CC:06:50:9F:8F:4E:72:B2:F2:39:E2:AC:4A:2D:5F:FF:94 Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 Certificate issuer: /CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Certificate serial: 07536877F2DAF8496EEC468857B7360438D603AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft Manifest number: 0173 Signing time: Sun 11 May 2025 14:42:11 +0000 Manifest this update: Sun 11 May 2025 14:37:11 +0000 Manifest next update: Wed 14 May 2025 16:41:11 +0000 Files and hashes: 1: B70932ED6C688D58897E32E1D5C990B20910FF02.crl (hash: Zd1+aqrCv3yqJ2WfJcHk/VfyxlzMJ6VHTzm/Nv9Vy6E=) 2: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: b+1ENA1CQV0UHypRXPMfHhHTGiVgtOzzvTXY/wFcyPw=) 3: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: D7YG7GtU8OdbibrqJfPY6iiVpoIqqq1mmvO/Oo1ZWAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 16:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:53:68:77:f2:da:f8:49:6e:ec:46:88:57:b7:36:04:38:d6:03:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Validity Not Before: May 11 14:37:11 2025 GMT Not After : May 14 16:41:11 2025 GMT Subject: CN=3A1BE1CC06509F8F4E72B2F239E2AC4A2D5FFF94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f4:e7:39:5c:87:9b:6c:d0:8b:e6:5f:4b:90: 81:a9:47:d0:e1:c3:eb:34:27:59:b7:63:6b:bc:c9: a3:37:28:21:89:9f:da:47:48:08:8d:07:6b:78:b5: 8b:02:a0:92:54:1f:c1:ba:65:31:2d:b6:c9:ba:26: 4c:e6:74:dd:81:e0:19:7c:a5:b1:c9:82:a4:54:49: 19:01:c4:e6:5c:ed:59:2a:38:9b:5b:ca:dd:9c:77: f9:ea:22:f4:a9:69:9f:77:a9:5b:a8:bb:7f:a6:55: 92:5e:d1:9c:da:1b:3e:f4:80:3f:40:10:f6:1b:4b: 39:ae:6f:70:82:f5:1e:1e:dc:7d:b5:0d:0e:33:4f: 2b:4d:be:a8:4f:92:0a:ce:4b:1f:40:42:cd:7e:92: cd:55:c0:9e:68:8b:f6:fa:69:6e:1f:30:fe:57:9c: 72:7e:e2:45:84:63:2a:e3:50:ef:77:4a:64:2a:2b: a2:50:ed:fc:fd:fa:61:39:8b:99:4a:2f:bb:c1:ef: c9:a8:c6:d6:8d:c4:a0:6b:85:9b:2f:5f:f9:74:7e: cb:79:13:1e:ce:46:6a:c8:04:d0:c3:b7:ac:9e:ff: 68:8a:a5:94:a6:35:ac:47:47:d5:d8:3c:c3:94:39: ab:31:9a:3d:2a:91:23:82:e3:87:d3:58:fb:ae:63: fd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1B:E1:CC:06:50:9F:8F:4E:72:B2:F2:39:E2:AC:4A:2D:5F:FF:94 X509v3 Authority Key Identifier: keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0f:c5:29:53:b9:28:9c:b5:68:0e:69:48:5e:4a:e2:51:41: a1:58:73:07:0c:fc:1b:4d:36:90:8f:81:9d:03:75:a6:ac:6b: 26:b5:7a:da:70:25:cd:e3:f7:f6:f5:33:44:ff:be:b2:d5:a8: e5:40:3c:92:1a:f2:e6:90:90:80:52:d8:54:89:2f:5a:03:7c: a4:c8:83:d5:4c:e5:0e:e5:54:42:53:fb:fd:51:97:00:b6:21: f7:32:0c:d8:73:ac:df:29:0d:ff:ea:46:1c:7a:3c:09:e8:65: 59:da:13:ad:60:96:c6:a2:7c:a1:94:c3:20:f0:2e:b1:c5:ee: 44:7f:94:37:8a:4a:fc:54:a8:20:a4:d5:47:82:c8:ce:57:45: ab:9c:d2:85:95:0f:b5:e8:bb:d3:6a:05:7f:e4:e8:03:d6:f9: d7:04:27:21:90:b3:62:19:78:52:94:e4:bc:c4:c0:cc:81:21: 3c:e8:f3:54:15:36:a4:77:72:d6:ba:c0:1c:c9:1e:b6:46:99: 8f:87:b4:e1:71:5e:12:f0:1d:49:d3:51:d8:d0:7f:23:9b:9a: 68:76:46:49:2f:3d:12:58:b3:26:e1:4f:82:82:1d:ad:f2:4f: 8c:21:82:2d:21:03:41:ea:76:00:71:06:6c:36:a6:10:e2:23: 15:d4:45:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB1Nod/La+Elu7EaIV7c2BDjWA60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIw OTEwRkYwMjAeFw0yNTA1MTExNDM3MTFaFw0yNTA1MTQxNjQxMTFaMDMxMTAvBgNV BAMTKDNBMUJFMUNDMDY1MDlGOEY0RTcyQjJGMjM5RTJBQzRBMkQ1RkZGOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU9Oc5XIebbNCL5l9LkIGpR9Dh w+s0J1m3Y2u8yaM3KCGJn9pHSAiNB2t4tYsCoJJUH8G6ZTEttsm6JkzmdN2B4Bl8 pbHJgqRUSRkBxOZc7VkqOJtbyt2cd/nqIvSpaZ93qVuou3+mVZJe0ZzaGz70gD9A EPYbSzmub3CC9R4e3H21DQ4zTytNvqhPkgrOSx9AQs1+ks1VwJ5oi/b6aW4fMP5X nHJ+4kWEYyrjUO93SmQqK6JQ7fz9+mE5i5lKL7vB78moxtaNxKBrhZsvX/l0fst5 Ex7ORmrIBNDDt6ye/2iKpZSmNaxHR9XYPMOUOasxmj0qkSOC44fTWPuuY/37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhvhzAZQn49OcrLyOeKsSi1f/5QwHwYDVR0j BBgwFoAUtwky7WxojViJfjLh1cmQsgkQ/wIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTkwZGE0OS05ODYyLTQxZGUtODMzZS1iMzA0ZjBjMWFlNTcvMC9CNzA5MzJFRDZD Njg4RDU4ODk3RTMyRTFENUM5OTBCMjA5MTBGRjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIwOTEw RkYwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz M2UtYjMwNGYwYzFhZTU3LzAvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkw QjIwOTEwRkYwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0PxSlTuSictWgOaUheSuJRQaFYcwcM/BtN NpCPgZ0Ddaasaya1etpwJc3j9/b1M0T/vrLVqOVAPJIa8uaQkIBS2FSJL1oDfKTI g9VM5Q7lVEJT+/1RlwC2IfcyDNhzrN8pDf/qRhx6PAnoZVnaE61glsaifKGUwyDw LrHF7kR/lDeKSvxUqCCk1UeCyM5XRauc0oWVD7Xou9NqBX/k6APW+dcEJyGQs2IZ eFKU5LzEwMyBITzo81QVNqR3cta6wBzJHrZGmY+HtOFxXhLwHUnTUdjQfyObmmh2 RkkvPRJYsybhT4KCHa3yT4whgi0hA0HqdgBxBmw2phDiIxXURWU= -----END CERTIFICATE-----Generated at Sun May 11 22:54:17 2025 by rpki-client