$ rpki-client -vvf repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft File: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft (raw, json) Hash identifier: c3iNuH8SuR9lNRUo4R6+mPp5YDHdyMpci/M8/9/L1yw= Subject key identifier: CD:63:CF:2D:10:7A:0F:EE:2C:2F:AC:95:AB:89:36:2F:F4:EE:AE:7F Authority key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C Certificate issuer: /CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Certificate serial: 060F77E05C4C694E2A9D818FDF655334235C3108 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft Manifest number: 01C3 Signing time: Sun 19 Oct 2025 19:32:23 +0000 Manifest this update: Sun 19 Oct 2025 19:27:23 +0000 Manifest next update: Wed 22 Oct 2025 23:14:23 +0000 Files and hashes: 1: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl (hash: Kl66uQqEzMwClCV5zFO7wX7/SQFTog35+gFJriKs8yA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0f:77:e0:5c:4c:69:4e:2a:9d:81:8f:df:65:53:34:23:5c:31:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Validity Not Before: Oct 19 19:27:23 2025 GMT Not After : Oct 22 23:14:23 2025 GMT Subject: CN=CD63CF2D107A0FEE2C2FAC95AB89362FF4EEAE7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:05:58:da:72:4c:92:4f:a7:57:8e:e7:6f:73: 1b:f1:99:a0:91:f0:dd:9c:86:07:e2:49:97:1a:1a: dc:ca:88:cf:ef:c7:21:2e:ec:6a:05:89:7b:1e:96: 3b:60:cc:90:4d:89:ca:90:03:d1:81:00:e0:7e:01: b0:d5:08:7d:c2:08:7f:40:94:cb:03:5d:04:c2:b2: c2:22:21:b1:ac:ab:91:95:80:af:a8:a3:7c:0f:59: 13:9a:12:11:88:d8:29:da:c8:c2:9c:50:9f:dd:e9: b3:1b:9c:47:ef:3f:66:c7:5f:5b:e8:d2:97:49:03: 56:b8:5f:29:b8:cc:ec:03:e7:41:12:17:be:37:21: 66:3e:83:16:da:c0:47:bc:6b:21:2e:c9:0f:b0:e3: bb:21:2a:af:2c:29:60:25:17:0e:f5:54:2f:8e:99: ad:a6:a1:f3:2d:79:0f:e8:66:47:e8:33:16:21:c6: 66:b7:a8:59:24:07:5b:52:39:7e:91:bd:ce:84:b8: 63:8a:43:86:88:1a:0c:56:bb:e8:22:86:f7:f8:fc: 3f:ad:0d:56:6a:b4:17:14:93:79:87:77:9b:8f:c3: e2:b7:c9:a7:a3:29:af:ff:ca:3c:95:08:67:80:64: 28:0e:f3:e7:29:6b:54:ef:37:45:ab:38:9c:cc:09: 40:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:63:CF:2D:10:7A:0F:EE:2C:2F:AC:95:AB:89:36:2F:F4:EE:AE:7F X509v3 Authority Key Identifier: keyid:70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fc:e9:ac:69:9b:cf:65:e6:3f:7f:f8:b3:de:40:e3:e1:5c: 0b:30:0f:44:a1:21:df:8c:23:53:a2:16:ab:5b:ae:83:2d:ad: d0:8a:34:95:c3:16:9c:f5:a9:42:aa:df:40:b9:07:c3:39:7f: 33:74:a1:19:8f:b0:c4:fe:99:c2:c0:91:74:47:5d:b5:6c:3d: d6:ca:44:0a:ac:8c:e7:b6:5c:08:01:ef:01:e1:3a:a2:77:ef: fb:e0:ec:ba:8a:9d:eb:e9:6c:80:0b:1f:f9:ba:97:1c:6f:bd: f7:f7:d8:c2:03:b3:f6:2a:e0:4e:bf:a1:0e:31:2a:05:0a:4a: 99:e0:b7:9e:bb:52:c7:05:62:f0:18:40:f0:85:60:f6:31:8f: db:f5:d4:56:1e:b0:de:47:5a:7f:7d:c5:7b:65:fe:c9:b2:1c: eb:68:a0:94:47:82:46:8c:64:aa:66:cb:f7:26:3d:9c:75:43: ce:f9:31:88:18:a3:11:99:35:cc:06:6d:ac:40:13:19:f5:7d: ea:f0:b6:5e:d3:78:3a:52:62:5f:5c:fe:b1:eb:45:24:e2:8b: ce:29:ee:04:5c:d8:e9:8d:f3:01:b8:35:cf:e5:39:9d:ad:ca: cb:43:1c:57:2c:34:31:88:1f:82:d0:b2:f9:a9:81:3b:a0:1b: 28:2e:a4:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBg934FxMaU4qnYGP32VTNCNcMQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4 NjE4OUIwQzAeFw0yNTEwMTkxOTI3MjNaFw0yNTEwMjIyMzE0MjNaMDMxMTAvBgNV BAMTKENENjNDRjJEMTA3QTBGRUUyQzJGQUM5NUFCODkzNjJGRjRFRUFFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsBVjackyST6dXjudvcxvxmaCR 8N2chgfiSZcaGtzKiM/vxyEu7GoFiXseljtgzJBNicqQA9GBAOB+AbDVCH3CCH9A lMsDXQTCssIiIbGsq5GVgK+oo3wPWROaEhGI2CnayMKcUJ/d6bMbnEfvP2bHX1vo 0pdJA1a4Xym4zOwD50ESF743IWY+gxbawEe8ayEuyQ+w47shKq8sKWAlFw71VC+O ma2mofMteQ/oZkfoMxYhxma3qFkkB1tSOX6Rvc6EuGOKQ4aIGgxWu+gihvf4/D+t DVZqtBcUk3mHd5uPw+K3yaejKa//yjyVCGeAZCgO8+cpa1TvN0WrOJzMCUAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzWPPLRB6D+4sL6yVq4k2L/Turn8wHwYDVR0j BBgwFoAUcApG8MSOeE6MvLp7J+RHT4YYmwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjhhMzE1ZS0xNmYxLTRmMjEtOWJjMC0yNjlkNWJlNzNkNjAvMC83MDBBNDZGMEM0 OEU3ODRFOENCQ0JBN0IyN0U0NDc0Rjg2MTg5QjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4NjE4 OUIwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY4YTMxNWUtMTZmMS00ZjIxLTli YzAtMjY5ZDViZTczZDYwLzAvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3 NEY4NjE4OUIwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGv86axpm89l5j9/+LPeQOPhXAswD0ShId+M I1OiFqtbroMtrdCKNJXDFpz1qUKq30C5B8M5fzN0oRmPsMT+mcLAkXRHXbVsPdbK RAqsjOe2XAgB7wHhOqJ37/vg7LqKnevpbIALH/m6lxxvvff32MIDs/Yq4E6/oQ4x KgUKSpngt567UscFYvAYQPCFYPYxj9v11FYesN5HWn99xXtl/smyHOtooJRHgkaM ZKpmy/cmPZx1Q875MYgYoxGZNcwGbaxAExn1ferwtl7TeDpSYl9c/rHrRSTii84p 7gRc2OmN8wG4Nc/lOZ2tystDHFcsNDGIH4LQsvmpgTugGygupKI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:07 2025 by rpki-client