$ rpki-client -vvf repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft File: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft (raw, json) Hash identifier: DXomk8SqjUPYrqzKMSJe6fYM0AV5fFe7cpZ7AlG9UEY= Subject key identifier: 02:3C:AC:B1:57:71:1A:12:C3:D2:EC:64:31:B7:6E:31:92:34:C9:6A Authority key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C Certificate issuer: /CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Certificate serial: 4308F70E39AFA0C3E11444963FCF5E000F7941CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft Manifest number: 01A9 Signing time: Fri 22 Aug 2025 04:22:19 +0000 Manifest this update: Fri 22 Aug 2025 04:17:19 +0000 Manifest next update: Mon 25 Aug 2025 04:57:19 +0000 Files and hashes: 1: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl (hash: JmYuBa4RO2VT5okybLYJKyKag/Dh5D2ZyU+t3qNxgqE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:08:f7:0e:39:af:a0:c3:e1:14:44:96:3f:cf:5e:00:0f:79:41:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Validity Not Before: Aug 22 04:17:19 2025 GMT Not After : Aug 25 04:57:19 2025 GMT Subject: CN=023CACB157711A12C3D2EC6431B76E319234C96A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:99:e5:5f:60:57:71:6b:c4:33:c7:26:09: 73:d0:4b:9c:f7:97:55:fd:a0:1f:f1:9d:9f:82:e6: 42:d9:7f:14:af:d4:2d:5c:e2:eb:d1:3f:b9:b3:90: 69:9a:bf:3b:ce:16:44:ed:d2:3c:49:31:c9:53:c3: 53:28:15:50:c5:93:dd:2c:2c:71:19:c4:33:2e:a1: 4a:30:63:bc:ff:38:e3:69:95:ad:b0:f8:ff:c9:6b: 37:03:48:a6:9d:e0:37:8b:90:68:bb:71:98:f3:05: 7e:cc:f7:3b:46:9b:e4:e6:08:8b:bd:69:2e:0a:57: 49:23:7f:d1:ec:b8:86:59:50:16:1d:18:fc:4b:90: b0:33:5c:ea:eb:c0:de:b5:d7:f2:40:54:fd:d4:f3: bb:53:40:0f:b3:08:c2:c3:ef:04:56:9d:e3:26:af: a3:47:7b:b6:46:01:42:75:c2:d9:18:7b:2c:ec:bc: da:1e:ec:d7:07:ce:ee:7b:a7:a2:ce:3d:b9:ab:a1: 61:06:ab:36:28:c6:19:e6:58:65:1f:4e:d1:2e:92: f4:92:3d:fe:a0:03:af:fd:56:0f:05:b0:cc:fc:fc: 09:e9:94:04:39:48:f7:48:fd:68:f6:1f:2e:8e:23: b7:97:e1:06:65:cc:bb:fe:9e:98:62:9f:49:04:d2: c0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3C:AC:B1:57:71:1A:12:C3:D2:EC:64:31:B7:6E:31:92:34:C9:6A X509v3 Authority Key Identifier: keyid:70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:12:dd:02:30:c1:d5:32:41:2d:2a:b6:ac:1d:b8:a8:e8:a1: 18:20:21:82:e1:9c:4f:5e:85:ee:21:17:5c:46:96:a9:21:f8: 33:65:6e:81:73:79:c7:be:3c:57:95:77:50:01:ea:37:d7:82: b1:08:a7:2a:d0:22:d5:4b:e5:10:a8:1a:d4:be:f5:b3:c1:3a: 56:43:9a:2c:50:ec:5d:ca:a3:1b:12:60:95:b9:4f:35:40:46: 41:bd:d4:21:13:e5:d8:39:d5:a3:f5:37:c7:6f:d0:d8:16:d6: aa:d5:77:d1:3b:92:1c:cb:6a:4a:ec:d3:df:ca:98:44:59:f1: 63:96:8d:54:c1:e4:77:db:f5:72:22:e8:f8:bb:3e:5b:09:60: f7:6a:b8:cb:a5:39:6d:a1:f2:5d:1c:c3:f6:e3:6f:ce:84:56: 69:27:eb:1a:ee:1a:27:34:e5:d0:87:ba:24:a6:20:95:e9:9f: ef:68:d0:2c:a5:1b:ea:43:ec:15:06:20:7e:fe:7c:ab:2c:1a: de:f2:10:6d:21:2f:ef:52:65:9b:41:7b:33:7c:9e:30:44:33: 1d:6a:64:90:bd:ea:18:9a:31:55:b1:40:c6:6c:a6:b1:9d:54: ae:25:c0:88:31:da:b6:9d:53:65:25:cf:04:5d:40:6a:61:00: 14:b0:38:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQwj3DjmvoMPhFESWP89eAA95QcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4 NjE4OUIwQzAeFw0yNTA4MjIwNDE3MTlaFw0yNTA4MjUwNDU3MTlaMDMxMTAvBgNV BAMTKDAyM0NBQ0IxNTc3MTFBMTJDM0QyRUM2NDMxQjc2RTMxOTIzNEM5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76pnlX2BXcWvEM8cmCXPQS5z3 l1X9oB/xnZ+C5kLZfxSv1C1c4uvRP7mzkGmavzvOFkTt0jxJMclTw1MoFVDFk90s LHEZxDMuoUowY7z/OONpla2w+P/JazcDSKad4DeLkGi7cZjzBX7M9ztGm+TmCIu9 aS4KV0kjf9HsuIZZUBYdGPxLkLAzXOrrwN611/JAVP3U87tTQA+zCMLD7wRWneMm r6NHe7ZGAUJ1wtkYeyzsvNoe7NcHzu57p6LOPbmroWEGqzYoxhnmWGUfTtEukvSS Pf6gA6/9Vg8FsMz8/AnplAQ5SPdI/Wj2Hy6OI7eX4QZlzLv+nphin0kE0sBnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAjyssVdxGhLD0uxkMbduMZI0yWowHwYDVR0j BBgwFoAUcApG8MSOeE6MvLp7J+RHT4YYmwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjhhMzE1ZS0xNmYxLTRmMjEtOWJjMC0yNjlkNWJlNzNkNjAvMC83MDBBNDZGMEM0 OEU3ODRFOENCQ0JBN0IyN0U0NDc0Rjg2MTg5QjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4NjE4 OUIwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY4YTMxNWUtMTZmMS00ZjIxLTli YzAtMjY5ZDViZTczZDYwLzAvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3 NEY4NjE4OUIwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgS3QIwwdUyQS0qtqwduKjooRggIYLhnE9e he4hF1xGlqkh+DNlboFzece+PFeVd1AB6jfXgrEIpyrQItVL5RCoGtS+9bPBOlZD mixQ7F3KoxsSYJW5TzVARkG91CET5dg51aP1N8dv0NgW1qrVd9E7khzLakrs09/K mERZ8WOWjVTB5Hfb9XIi6Pi7PlsJYPdquMulOW2h8l0cw/bjb86EVmkn6xruGic0 5dCHuiSmIJXpn+9o0CylG+pD7BUGIH7+fKssGt7yEG0hL+9SZZtBezN8njBEMx1q ZJC96hiaMVWxQMZsprGdVK4lwIgx2radU2UlzwRdQGphABSwOHA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:03 2025 by rpki-client