$ rpki-client -vvf repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft File: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft (raw, json) Hash identifier: tVs+TUP7+Dh2LmNvQ+5v9G09KbOLvbtQU9Cr+Of3SUI= Subject key identifier: A5:07:1D:C8:A0:37:4C:AD:4D:E7:9F:34:A3:81:72:FA:85:2A:50:B2 Authority key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C Certificate issuer: /CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Certificate serial: 0A61ED634516B261F8D7EDCDCD1291ACBE330950 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft Manifest number: 0192 Signing time: Mon 30 Jun 2025 20:12:20 +0000 Manifest this update: Mon 30 Jun 2025 20:07:20 +0000 Manifest next update: Fri 04 Jul 2025 07:39:20 +0000 Files and hashes: 1: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl (hash: APuuVebfYLFLsLdOn78BJKjXVXgy3499br1HQ7Kio5o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 05:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:61:ed:63:45:16:b2:61:f8:d7:ed:cd:cd:12:91:ac:be:33:09:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Validity Not Before: Jun 30 20:07:20 2025 GMT Not After : Jul 4 07:39:20 2025 GMT Subject: CN=A5071DC8A0374CAD4DE79F34A38172FA852A50B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2b:0e:fb:dc:1a:ba:b9:81:6b:c3:43:f9:bd: eb:a2:8f:89:a2:ae:a9:8c:b6:ae:8e:a7:4c:57:43: 29:1a:1f:f6:f2:6e:7f:2c:3c:52:25:65:51:64:10: 6e:8e:a0:a5:d0:f1:47:13:ca:f8:b7:cd:76:ef:37: 76:d6:92:c9:12:e0:5c:76:dd:2c:bd:66:16:61:12: 9b:cb:2d:58:90:47:e0:e3:99:74:0a:ba:ee:ec:79: 43:59:4a:85:98:b8:92:b8:da:88:61:ce:3c:bf:79: 98:40:af:34:2e:fb:25:c2:18:03:03:18:56:64:3b: 98:1a:36:bf:2b:2d:0f:50:e2:c8:de:d2:31:e1:b3: 17:8b:2e:00:a0:3f:c2:c2:c6:22:82:60:b2:ed:8a: eb:dd:b9:49:c9:a2:1c:d0:73:ee:95:37:2c:0f:56: 6a:75:38:65:89:67:d8:56:55:58:67:66:1e:79:60: 1a:b1:50:8d:05:3b:6b:df:33:41:14:d5:17:f7:83: fb:c8:f0:a5:60:ba:12:3d:90:f1:52:60:93:e7:98: 2a:55:f0:80:42:8e:a6:c9:44:c5:56:68:bf:78:e0: ec:07:e3:d2:e7:3a:32:b1:97:f7:df:5a:36:ff:b5: ec:52:ad:e9:7a:17:dd:fb:b4:7b:0c:0d:63:42:3f: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:07:1D:C8:A0:37:4C:AD:4D:E7:9F:34:A3:81:72:FA:85:2A:50:B2 X509v3 Authority Key Identifier: keyid:70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f9:e1:9a:28:cc:ba:a7:73:cb:2d:6c:00:32:ed:4c:8c:6d: 56:3d:cd:08:81:02:4f:57:1e:c1:24:b6:19:39:be:eb:8d:b4: 4d:bb:a8:16:18:e9:67:06:50:5a:3c:cc:30:43:72:5a:fc:d1: 3e:83:88:57:e5:a9:6e:05:55:52:2f:eb:1d:42:16:92:40:9f: 06:ea:c1:58:82:bb:33:f6:30:0f:5e:dd:2d:6d:e3:70:d2:ee: f5:85:18:91:e8:67:4b:15:e2:5b:63:e6:b0:2b:ea:af:41:c9: 55:1b:4e:16:88:0b:1c:4c:db:ec:77:d4:02:96:66:0b:27:5f: 1a:2f:38:81:7b:46:34:6b:b7:7c:d5:19:db:ec:96:98:35:01: 19:6c:b4:43:34:3c:39:83:c1:22:4d:8b:26:40:d4:bb:e7:c6: 9f:3b:d8:36:93:31:ab:39:dc:f3:53:b6:fc:b3:b7:ea:6d:4c: 78:25:01:c0:4c:47:7b:83:29:10:0b:fe:98:14:fb:e7:73:bf: 83:15:0d:a7:4d:fc:9f:e8:3d:16:ec:17:6a:1b:1c:89:fa:db: 32:68:b0:18:4c:56:7e:e0:3b:dd:18:f4:10:61:ed:c8:cf:e8: 4a:b2:a9:5f:e4:f0:66:41:6e:a0:94:a4:8e:f0:b1:29:f5:81: 0c:1c:38:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCmHtY0UWsmH41+3NzRKRrL4zCVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4 NjE4OUIwQzAeFw0yNTA2MzAyMDA3MjBaFw0yNTA3MDQwNzM5MjBaMDMxMTAvBgNV BAMTKEE1MDcxREM4QTAzNzRDQUQ0REU3OUYzNEEzODE3MkZBODUyQTUwQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiKw773Bq6uYFrw0P5veuij4mi rqmMtq6Op0xXQykaH/bybn8sPFIlZVFkEG6OoKXQ8UcTyvi3zXbvN3bWkskS4Fx2 3Sy9ZhZhEpvLLViQR+DjmXQKuu7seUNZSoWYuJK42ohhzjy/eZhArzQu+yXCGAMD GFZkO5gaNr8rLQ9Q4sje0jHhsxeLLgCgP8LCxiKCYLLtiuvduUnJohzQc+6VNywP Vmp1OGWJZ9hWVVhnZh55YBqxUI0FO2vfM0EU1Rf3g/vI8KVguhI9kPFSYJPnmCpV 8IBCjqbJRMVWaL944OwH49LnOjKxl/ffWjb/texSrel6F937tHsMDWNCP3JBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpQcdyKA3TK1N5580o4Fy+oUqULIwHwYDVR0j BBgwFoAUcApG8MSOeE6MvLp7J+RHT4YYmwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjhhMzE1ZS0xNmYxLTRmMjEtOWJjMC0yNjlkNWJlNzNkNjAvMC83MDBBNDZGMEM0 OEU3ODRFOENCQ0JBN0IyN0U0NDc0Rjg2MTg5QjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4NjE4 OUIwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY4YTMxNWUtMTZmMS00ZjIxLTli YzAtMjY5ZDViZTczZDYwLzAvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3 NEY4NjE4OUIwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHv54ZoozLqnc8stbAAy7UyMbVY9zQiBAk9X HsEkthk5vuuNtE27qBYY6WcGUFo8zDBDclr80T6DiFflqW4FVVIv6x1CFpJAnwbq wViCuzP2MA9e3S1t43DS7vWFGJHoZ0sV4ltj5rAr6q9ByVUbThaICxxM2+x31AKW ZgsnXxovOIF7RjRrt3zVGdvslpg1ARlstEM0PDmDwSJNiyZA1Lvnxp872DaTMas5 3PNTtvyzt+ptTHglAcBMR3uDKRAL/pgU++dzv4MVDadN/J/oPRbsF2obHIn62zJo sBhMVn7gO90Y9BBh7cjP6EqyqV/k8GZBbqCUpI7wsSn1gQwcOB4= -----END CERTIFICATE-----Generated at Tue Jul 1 05:13:30 2025 by rpki-client