$ rpki-client -vvf repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft File: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft (raw, json) Hash identifier: fckb0TdQmsi/m7+FFREzJgQGZrz4XqXeLOTV9N+hFhg= Subject key identifier: 23:F0:7C:01:C8:53:07:C9:5E:EF:5E:0E:5E:82:E5:96:C2:47:5C:4A Authority key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C Certificate issuer: /CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Certificate serial: 3CFD021B609C929429F501E1DF0D79F988936D03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft Manifest number: 017A Signing time: Wed 07 May 2025 18:52:25 +0000 Manifest this update: Wed 07 May 2025 18:47:25 +0000 Manifest next update: Sun 11 May 2025 02:40:25 +0000 Files and hashes: 1: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl (hash: vQX2CEnPYXEHteus/fH1BuqVjvwJmxnqC6sahIo8Y7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 02:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fd:02:1b:60:9c:92:94:29:f5:01:e1:df:0d:79:f9:88:93:6d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Validity Not Before: May 7 18:47:25 2025 GMT Not After : May 11 02:40:25 2025 GMT Subject: CN=23F07C01C85307C95EEF5E0E5E82E596C2475C4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:ef:b3:8f:d2:5e:e0:0b:74:28:5d:c1:50: 61:c1:bb:8d:2b:80:04:85:73:4f:e2:6b:b7:65:06: 09:64:34:b8:fc:d4:30:77:d3:af:3e:0a:0e:34:65: 87:cb:46:34:0f:d2:6d:61:c8:9a:6e:76:7b:04:5d: 88:0f:0a:0d:69:a7:c7:93:91:d6:5e:8b:d6:07:de: 32:e8:91:40:8f:59:fb:7f:49:f0:d0:57:78:c3:d1: a4:aa:70:54:78:02:00:53:30:55:80:07:5b:6e:f6: 42:8f:5e:e9:cc:47:f5:45:02:b3:db:87:01:4f:17: e8:a7:75:f2:de:f4:8d:10:81:43:08:1c:72:b2:ff: 7d:81:d0:a8:15:55:94:b0:1f:67:98:1e:92:ed:68: 30:ed:05:99:0a:57:45:92:76:61:78:c6:8c:66:fd: 27:90:ed:41:1b:7d:87:5e:b4:02:41:d7:cd:07:8a: 85:39:6d:47:e5:bf:6b:fd:15:33:d1:d9:4f:90:56: 29:7d:6b:ad:da:6d:01:c1:31:74:9e:93:08:2e:6c: 9b:ff:82:ed:2c:d4:74:4c:a3:14:6f:f3:e7:3e:e7: 1c:0f:c2:f3:1e:86:f5:de:61:4c:ed:7a:1c:d4:e2: b4:7d:ee:4b:15:44:13:ee:30:b8:ee:ef:ee:68:2d: d3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F0:7C:01:C8:53:07:C9:5E:EF:5E:0E:5E:82:E5:96:C2:47:5C:4A X509v3 Authority Key Identifier: keyid:70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ba:8e:11:d6:da:10:58:b0:c6:f9:5c:c2:1e:c3:fc:54:a3: 22:50:a7:e4:34:af:0b:67:ca:55:6f:de:ef:28:a4:c5:cc:d0: 5c:d9:6b:d4:be:25:e9:8d:53:be:59:17:70:d0:b9:48:f0:e2: ac:83:54:dd:89:a0:80:64:82:ea:77:3e:45:cd:5b:4f:c5:ca: 92:38:b5:ff:7d:47:ad:6e:90:70:6c:bf:31:fb:85:7c:63:1e: 25:82:32:34:95:ab:bb:98:2a:c1:4d:35:36:3b:e9:46:0f:6e: 16:00:e0:4c:f5:5f:82:a4:a4:99:4d:4f:66:46:66:c6:60:a7: f2:dd:62:89:54:02:71:71:4d:2f:a2:e3:dd:60:f1:2f:22:0c: 3c:5e:08:bd:2c:dd:29:2a:56:cb:32:9a:36:c5:f7:4b:05:59: e9:37:0f:3a:e6:d3:0e:42:e4:b2:6d:80:ac:fe:d2:9a:53:ff: 49:88:37:89:cc:d4:2e:23:22:eb:f8:1d:23:db:ad:4b:a1:d8: 6e:2f:2f:14:3f:6b:4d:05:e5:50:de:85:fd:c3:67:d6:95:1a: 45:03:08:75:8e:ef:67:93:81:20:a5:8e:a8:69:e1:04:a6:a5: 16:ce:e8:2a:c7:17:a8:06:2d:67:92:cb:da:e1:5a:ea:21:ef: 98:fe:f7:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPP0CG2CckpQp9QHh3w15+YiTbQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4 NjE4OUIwQzAeFw0yNTA1MDcxODQ3MjVaFw0yNTA1MTEwMjQwMjVaMDMxMTAvBgNV BAMTKDIzRjA3QzAxQzg1MzA3Qzk1RUVGNUUwRTVFODJFNTk2QzI0NzVDNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeA++zj9Je4At0KF3BUGHBu40r gASFc0/ia7dlBglkNLj81DB3068+Cg40ZYfLRjQP0m1hyJpudnsEXYgPCg1pp8eT kdZei9YH3jLokUCPWft/SfDQV3jD0aSqcFR4AgBTMFWAB1tu9kKPXunMR/VFArPb hwFPF+indfLe9I0QgUMIHHKy/32B0KgVVZSwH2eYHpLtaDDtBZkKV0WSdmF4xoxm /SeQ7UEbfYdetAJB180HioU5bUflv2v9FTPR2U+QVil9a63abQHBMXSekwgubJv/ gu0s1HRMoxRv8+c+5xwPwvMehvXeYUztehzU4rR97ksVRBPuMLju7+5oLdMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI/B8AchTB8le714OXoLllsJHXEowHwYDVR0j BBgwFoAUcApG8MSOeE6MvLp7J+RHT4YYmwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjhhMzE1ZS0xNmYxLTRmMjEtOWJjMC0yNjlkNWJlNzNkNjAvMC83MDBBNDZGMEM0 OEU3ODRFOENCQ0JBN0IyN0U0NDc0Rjg2MTg5QjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4NjE4 OUIwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY4YTMxNWUtMTZmMS00ZjIxLTli YzAtMjY5ZDViZTczZDYwLzAvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3 NEY4NjE4OUIwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEK6jhHW2hBYsMb5XMIew/xUoyJQp+Q0rwtn ylVv3u8opMXM0FzZa9S+JemNU75ZF3DQuUjw4qyDVN2JoIBkgup3PkXNW0/FypI4 tf99R61ukHBsvzH7hXxjHiWCMjSVq7uYKsFNNTY76UYPbhYA4Ez1X4KkpJlNT2ZG ZsZgp/LdYolUAnFxTS+i491g8S8iDDxeCL0s3SkqVssymjbF90sFWek3Dzrm0w5C 5LJtgKz+0ppT/0mIN4nM1C4jIuv4HSPbrUuh2G4vLxQ/a00F5VDehf3DZ9aVGkUD CHWO72eTgSCljqhp4QSmpRbO6CrHF6gGLWeSy9rhWuoh75j+9zg= -----END CERTIFICATE-----Generated at Thu May 8 19:03:59 2025 by rpki-client