$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: 4ArCdPI/fHD59QLyvxyjfs2r+KWF3Kl9PZ5hUWD7f50= Subject key identifier: B2:7B:63:90:E9:AF:AB:9B:3D:63:99:50:9F:6B:CF:00:C9:FD:6D:A4 Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 1D7A16D7F96E6CF62180CCEA44B2A3D2750CA583 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 0297 Signing time: Sat 23 Aug 2025 05:51:09 +0000 Manifest this update: Sat 23 Aug 2025 05:46:09 +0000 Manifest next update: Tue 26 Aug 2025 11:31:09 +0000 Files and hashes: 1: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: 3Ul/vwgi+okSJx2rgOPJI2f3uuv+F9whdr8wrsRHKEE=) 2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7a:16:d7:f9:6e:6c:f6:21:80:cc:ea:44:b2:a3:d2:75:0c:a5:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Aug 23 05:46:09 2025 GMT Not After : Aug 26 11:31:09 2025 GMT Subject: CN=B27B6390E9AFAB9B3D6399509F6BCF00C9FD6DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cb:20:3a:25:b1:23:49:0e:4c:e6:33:95:ec: 82:11:e8:72:01:34:4b:a1:b4:39:eb:7d:bf:0a:d6: 48:43:95:56:40:6b:e5:48:aa:d3:71:db:bc:28:40: 5f:58:83:5b:d9:95:ce:d0:50:ac:b2:39:b4:2e:55: bb:56:39:a3:2c:bf:eb:d5:b3:9e:38:79:39:61:0e: 13:19:63:e0:d3:75:f0:8c:3a:ec:7a:b0:a2:6c:41: a3:68:40:40:09:b2:59:5b:d8:f6:98:dd:2a:2f:70: 80:66:d8:0c:7b:e0:7e:a6:2c:25:22:2b:b8:2a:60: d1:c1:d8:84:06:03:04:74:75:72:a9:f7:02:d3:b5: 2d:a3:24:4f:c3:6e:ec:66:92:d2:b0:4d:45:39:9f: 1a:9e:0e:63:40:16:e6:69:76:48:b2:1f:4c:b3:29: ba:dc:1c:19:0f:62:bf:c9:e6:3a:a8:46:d6:a3:74: 09:f9:9d:71:49:3c:da:ca:cf:40:f2:d5:3a:1a:53: 2c:5a:19:76:16:45:85:4d:8c:55:8f:cd:aa:69:8e: ae:d0:e6:b6:24:42:92:a0:c2:6d:e0:83:11:38:66: 7b:94:44:6d:6d:10:ac:1e:0a:25:56:b1:f9:0f:2b: ca:90:d8:8b:57:6d:20:91:ec:7b:02:82:b2:c4:e5: 51:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7B:63:90:E9:AF:AB:9B:3D:63:99:50:9F:6B:CF:00:C9:FD:6D:A4 X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:db:4f:4a:2a:a9:09:fe:41:02:2a:6c:cf:79:1c:f0:ca:60: 02:48:19:e4:22:1d:1b:11:b9:a3:86:77:01:f4:88:1f:22:e4: 5b:ae:4d:bb:d9:fc:dd:f6:d0:11:93:07:e3:d2:98:ca:9c:40: e2:d1:cb:a6:f5:f6:5c:df:1a:f2:c6:b9:c6:e9:f9:8f:c8:45: af:f2:45:43:b8:96:b1:b0:0d:57:82:a9:4c:5a:c8:28:d9:64: 4a:25:01:49:88:ce:3d:96:64:c3:67:b9:0f:23:3e:0e:59:dc: 88:fd:33:84:36:0f:03:12:04:1d:b4:03:92:85:84:d9:d4:a5: 3d:72:58:e2:50:70:3f:84:c1:4f:a0:48:c2:f1:fe:9c:ea:cc: 9a:89:47:b5:c3:d8:f1:9c:90:fd:50:66:f9:02:99:78:2e:f8: e8:0d:56:de:c0:7c:b3:92:97:df:37:79:29:a3:29:9a:1b:83: 25:24:7e:fb:9b:ff:16:43:89:f7:11:74:47:8a:f1:c9:af:cf: 40:9f:a6:40:04:64:e7:26:a5:24:93:d2:44:7c:8a:fc:3f:d2: b6:ce:e9:44:97:d6:53:f8:fd:28:70:1b:a2:56:db:e9:54:4e: 43:97:c5:1a:8c:b9:d4:b3:e0:37:90:a0:ef:dc:c3:54:24:8a: 59:be:30:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXoW1/lubPYhgMzqRLKj0nUMpYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTA4MjMwNTQ2MDlaFw0yNTA4MjYxMTMxMDlaMDMxMTAvBgNV BAMTKEIyN0I2MzkwRTlBRkFCOUIzRDYzOTk1MDlGNkJDRjAwQzlGRDZEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeyyA6JbEjSQ5M5jOV7IIR6HIB NEuhtDnrfb8K1khDlVZAa+VIqtNx27woQF9Yg1vZlc7QUKyyObQuVbtWOaMsv+vV s544eTlhDhMZY+DTdfCMOux6sKJsQaNoQEAJsllb2PaY3SovcIBm2Ax74H6mLCUi K7gqYNHB2IQGAwR0dXKp9wLTtS2jJE/DbuxmktKwTUU5nxqeDmNAFuZpdkiyH0yz KbrcHBkPYr/J5jqoRtajdAn5nXFJPNrKz0Dy1ToaUyxaGXYWRYVNjFWPzappjq7Q 5rYkQpKgwm3ggxE4ZnuURG1tEKweCiVWsfkPK8qQ2ItXbSCR7HsCgrLE5VG9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsntjkOmvq5s9Y5lQn2vPAMn9baQwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILbT0oqqQn+QQIqbM95HPDKYAJIGeQiHRsR uaOGdwH0iB8i5FuuTbvZ/N320BGTB+PSmMqcQOLRy6b19lzfGvLGucbp+Y/IRa/y RUO4lrGwDVeCqUxayCjZZEolAUmIzj2WZMNnuQ8jPg5Z3Ij9M4Q2DwMSBB20A5KF hNnUpT1yWOJQcD+EwU+gSMLx/pzqzJqJR7XD2PGckP1QZvkCmXgu+OgNVt7AfLOS l983eSmjKZobgyUkfvub/xZDifcRdEeK8cmvz0CfpkAEZOcmpSST0kR8ivw/0rbO 6USX1lP4/ShwG6JW2+lUTkOXxRqMudSz4DeQoO/cw1Qkilm+MHo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:05:56 2025 by rpki-client