$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: lhcK4qRTTw91+w1A/axGoV58Z2+PpppnqTyD1R2HsoE= Subject key identifier: CE:71:B8:5A:43:E6:AC:B4:58:50:92:1C:93:7D:06:36:AC:69:FB:21 Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 2270E327C960C8A179D7E62E5EAA572C763D0110 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 02B0 Signing time: Sun 19 Oct 2025 12:40:37 +0000 Manifest this update: Sun 19 Oct 2025 12:35:37 +0000 Manifest next update: Wed 22 Oct 2025 14:22:37 +0000 Files and hashes: 1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=) 2: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: ERvbjov21MkC7Jmg0JoHDpHxEDBpbz+27SojcBmorgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:70:e3:27:c9:60:c8:a1:79:d7:e6:2e:5e:aa:57:2c:76:3d:01:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Oct 19 12:35:37 2025 GMT Not After : Oct 22 14:22:37 2025 GMT Subject: CN=CE71B85A43E6ACB45850921C937D0636AC69FB21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d6:33:bb:48:78:26:2e:ea:1a:30:ae:35:06: 1d:1e:39:23:58:4c:fc:e9:68:90:86:aa:9f:e2:be: 3f:97:20:90:84:78:ec:4b:e1:1e:93:c5:1d:2e:0a: 52:ff:93:71:b3:70:61:5b:17:5a:74:9e:bc:b7:c6: 5a:1b:2a:b6:50:dc:38:0f:ed:7f:b2:8c:eb:89:94: 65:fa:ef:5d:80:30:2a:b2:22:a2:e7:05:95:e9:ce: ac:5f:8c:c8:e0:55:62:df:2b:d1:bf:fe:fd:35:0d: 57:ca:26:77:9a:db:62:26:8d:88:67:d8:13:2f:32: ec:b2:69:34:62:b9:12:d7:88:52:da:4b:10:dc:83: 81:2d:fc:b7:d6:fd:0a:5d:97:4a:e6:92:79:06:d8: 5e:8e:f6:6b:60:a4:13:44:ac:f3:50:e1:3d:2c:e3: 5b:73:7e:a6:b5:bf:d7:46:c4:0b:fd:06:96:28:72: 9f:8d:7b:6b:1b:74:39:c5:54:0a:ee:db:75:e8:db: 16:5f:71:95:c9:02:d2:07:65:4b:23:a6:f6:ba:06: 2d:24:4d:1c:e0:1f:af:f7:5b:6b:8f:0c:5c:f5:c8: e2:c1:ca:71:a2:fb:73:1b:d4:1c:cd:c4:09:26:5a: d1:ea:fe:6e:8c:71:8d:b4:82:32:ff:89:2b:8e:5e: df:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:71:B8:5A:43:E6:AC:B4:58:50:92:1C:93:7D:06:36:AC:69:FB:21 X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2a:a0:17:26:fb:bf:64:d7:57:f5:34:35:97:ab:cd:77:ef: 86:0b:f5:b3:4f:2c:02:e4:41:9e:24:b0:2f:30:86:89:96:5b: 76:08:9d:3f:79:98:d6:e7:c9:c8:70:95:5c:4a:5d:9e:10:22: 0b:39:66:19:7a:61:9d:48:44:de:4e:80:b0:23:62:cd:88:56: a6:6f:5b:bc:3b:16:3d:80:de:b7:ca:42:23:61:20:71:e2:01: 6f:b0:2f:f6:22:37:83:03:7a:c1:46:36:9d:72:68:ae:66:4c: ad:18:43:29:26:78:61:9d:2d:ae:bc:17:87:07:d7:6e:68:f2: fb:2f:fd:9e:71:e7:b7:b3:bd:7e:38:9d:86:13:c7:e3:f1:f1: a0:30:e8:25:cc:4b:7b:0d:f8:25:52:36:9b:66:70:7e:90:17: 02:5f:54:c0:f2:27:e2:22:c1:12:ad:3d:30:61:a4:dc:e1:3a: fc:bb:f7:c0:1c:8a:51:da:35:4f:45:a0:6a:a9:73:c3:35:1e: 9e:aa:14:4c:98:80:45:08:bf:07:44:e3:9f:d8:40:b5:61:89: b4:75:27:b8:27:3d:10:ee:31:78:16:e4:00:cb:dd:f6:ca:cd: d9:b4:3b:45:31:ba:e7:c2:45:89:8d:dc:00:25:96:db:24:22: 5c:c1:dc:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInDjJ8lgyKF51+YuXqpXLHY9ARAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTEwMTkxMjM1MzdaFw0yNTEwMjIxNDIyMzdaMDMxMTAvBgNV BAMTKENFNzFCODVBNDNFNkFDQjQ1ODUwOTIxQzkzN0QwNjM2QUM2OUZCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs1jO7SHgmLuoaMK41Bh0eOSNY TPzpaJCGqp/ivj+XIJCEeOxL4R6TxR0uClL/k3GzcGFbF1p0nry3xlobKrZQ3DgP 7X+yjOuJlGX6712AMCqyIqLnBZXpzqxfjMjgVWLfK9G//v01DVfKJnea22ImjYhn 2BMvMuyyaTRiuRLXiFLaSxDcg4Et/LfW/Qpdl0rmknkG2F6O9mtgpBNErPNQ4T0s 41tzfqa1v9dGxAv9BpYocp+Ne2sbdDnFVAru23Xo2xZfcZXJAtIHZUsjpva6Bi0k TRzgH6/3W2uPDFz1yOLBynGi+3Mb1BzNxAkmWtHq/m6McY20gjL/iSuOXt/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUznG4WkPmrLRYUJIck30GNqxp+yEwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0qoBcm+79k11f1NDWXq81374YL9bNPLALk QZ4ksC8whomWW3YInT95mNbnychwlVxKXZ4QIgs5Zhl6YZ1IRN5OgLAjYs2IVqZv W7w7Fj2A3rfKQiNhIHHiAW+wL/YiN4MDesFGNp1yaK5mTK0YQykmeGGdLa68F4cH 125o8vsv/Z5x57ezvX44nYYTx+Px8aAw6CXMS3sN+CVSNptmcH6QFwJfVMDyJ+Ii wRKtPTBhpNzhOvy798AcilHaNU9FoGqpc8M1Hp6qFEyYgEUIvwdE45/YQLVhibR1 J7gnPRDuMXgW5ADL3fbKzdm0O0UxuufCRYmN3AAlltskIlzB3PM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:31:24 2025 by rpki-client