$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: ytiVxIsQnPBssFMT6Ho/sByUiOPRY2X8/PeAu9e98LY= Subject key identifier: 8F:5B:1A:13:CA:0C:DE:1B:00:DD:94:BF:38:EC:03:45:9E:58:82:53 Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 0CA1CD384E147F5DCD98E0A3AE4765A0C8A27E5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 027F Signing time: Sun 29 Jun 2025 19:20:40 +0000 Manifest this update: Sun 29 Jun 2025 19:15:40 +0000 Manifest next update: Thu 03 Jul 2025 00:49:40 +0000 Files and hashes: 1: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: 7LqnEj7BHMv+hqmXm9qaLwzHwJlMblB55lif88vrV8k=) 2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a1:cd:38:4e:14:7f:5d:cd:98:e0:a3:ae:47:65:a0:c8:a2:7e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Jun 29 19:15:40 2025 GMT Not After : Jul 3 00:49:40 2025 GMT Subject: CN=8F5B1A13CA0CDE1B00DD94BF38EC03459E588253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d6:b7:8e:91:af:89:41:6b:e7:d2:77:ab:3e: 29:e0:05:be:fa:1d:84:14:f0:d2:a2:90:17:8a:f8: 67:d5:03:3e:27:19:88:bc:1c:75:e9:0f:4f:10:30: 4b:03:90:46:97:6f:10:c5:80:cc:78:62:ab:d0:14: 38:51:eb:30:7b:8c:72:41:d7:10:d0:87:17:b0:b6: 40:d0:38:70:4a:20:21:3a:61:85:21:de:6f:7f:c6: f8:cf:73:2e:70:75:10:22:b2:60:88:fe:ec:ee:66: 93:d4:42:34:97:67:7c:a5:85:e3:23:0e:79:d6:e0: 0d:f6:42:ac:57:d9:e8:4e:39:ac:8c:d8:c9:76:d1: b5:01:f9:3d:18:e8:49:a6:c3:91:39:d5:78:d8:3f: 4e:fc:60:91:2b:0e:42:66:57:b5:8d:09:e2:ef:53: 33:b9:cf:4b:de:82:8f:89:1e:2f:0a:dd:44:d4:c5: 17:b6:3d:2c:45:ec:cb:58:10:12:60:ca:e5:fa:fb: d1:8b:79:51:24:9d:fa:f1:7c:52:65:c6:08:8f:54: 5d:fe:90:6b:87:69:97:a6:e7:6a:6b:2f:16:58:4d: 3e:63:67:54:ee:3d:92:8e:4e:2e:f6:49:70:da:e0: 66:e1:58:0a:2c:58:29:0c:39:60:be:3c:c5:c3:ee: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5B:1A:13:CA:0C:DE:1B:00:DD:94:BF:38:EC:03:45:9E:58:82:53 X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:7d:c4:a3:ca:53:ea:72:6f:fb:67:ef:6b:74:a9:ab:f9:fe: b3:b2:c5:d2:73:b1:b1:cd:76:96:03:0b:d1:f7:56:ef:64:b1: de:0f:86:3c:bc:a2:49:20:26:09:f4:c9:6c:ff:ae:63:af:0e: 6e:5e:dd:50:84:38:d1:94:8c:4e:00:55:b7:96:76:b0:14:02: 7d:ca:4c:e4:e8:46:61:1b:e8:5a:11:c9:0a:3e:cd:4d:5c:9e: 61:c8:00:f4:65:f1:72:48:e5:4b:82:58:db:0f:0f:04:79:21: b3:ac:8c:e7:35:01:ad:5f:bb:bc:80:68:cf:e3:19:35:bd:44: 62:17:52:d3:b6:24:b2:cd:be:66:01:02:5b:8f:f1:52:08:ea: 67:a5:db:ee:5e:7b:28:90:1b:a1:67:cc:1c:16:99:95:6c:03: 31:1b:7c:76:15:b1:57:39:34:12:52:fa:7e:65:17:40:d6:89: 41:4b:4c:1e:ac:67:18:74:11:93:6a:18:b9:6d:e6:3d:76:93: 2c:74:ad:66:72:e6:45:1b:a3:34:78:e4:7c:b3:de:cc:31:8a: a4:88:9b:26:29:a9:8f:f5:8f:b8:55:aa:d4:d9:df:8f:0a:a1: c8:a0:c4:ca:b3:45:e7:d8:11:dd:9d:dd:27:a8:2e:45:db:19: 1b:d0:d1:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDKHNOE4Uf13NmOCjrkdloMiiflowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTA2MjkxOTE1NDBaFw0yNTA3MDMwMDQ5NDBaMDMxMTAvBgNV BAMTKDhGNUIxQTEzQ0EwQ0RFMUIwMEREOTRCRjM4RUMwMzQ1OUU1ODgyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs1reOka+JQWvn0nerPingBb76 HYQU8NKikBeK+GfVAz4nGYi8HHXpD08QMEsDkEaXbxDFgMx4YqvQFDhR6zB7jHJB 1xDQhxewtkDQOHBKICE6YYUh3m9/xvjPcy5wdRAismCI/uzuZpPUQjSXZ3ylheMj DnnW4A32QqxX2ehOOayM2Ml20bUB+T0Y6Emmw5E51XjYP078YJErDkJmV7WNCeLv UzO5z0vego+JHi8K3UTUxRe2PSxF7MtYEBJgyuX6+9GLeVEknfrxfFJlxgiPVF3+ kGuHaZem52prLxZYTT5jZ1TuPZKOTi72SXDa4GbhWAosWCkMOWC+PMXD7sjtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj1saE8oM3hsA3ZS/OOwDRZ5YglMwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKx9xKPKU+pyb/tn72t0qav5/rOyxdJzsbHN dpYDC9H3Vu9ksd4Phjy8okkgJgn0yWz/rmOvDm5e3VCEONGUjE4AVbeWdrAUAn3K TOToRmEb6FoRyQo+zU1cnmHIAPRl8XJI5UuCWNsPDwR5IbOsjOc1Aa1fu7yAaM/j GTW9RGIXUtO2JLLNvmYBAluP8VII6mel2+5eeyiQG6FnzBwWmZVsAzEbfHYVsVc5 NBJS+n5lF0DWiUFLTB6sZxh0EZNqGLlt5j12kyx0rWZy5kUbozR45Hyz3swxiqSI myYpqY/1j7hVqtTZ348KocigxMqzRefYEd2d3SeoLkXbGRvQ0b0= -----END CERTIFICATE-----Generated at Mon Jun 30 19:08:16 2025 by rpki-client