$ rpki-client -vvf repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft File: B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft (raw, json) Hash identifier: TGbstATl1moZdbOZr9fIyjswlpJ1VwWmShTEwqAGhqk= Subject key identifier: 5B:9B:15:05:E2:15:C2:25:20:25:E8:E9:F5:1E:ED:6D:88:79:B5:BA Authority key identifier: B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 Certificate issuer: /CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Certificate serial: 23732796280D37DB23F7776A35029C24FC414C55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft Manifest number: 013E Signing time: Mon 20 Oct 2025 05:01:27 +0000 Manifest this update: Mon 20 Oct 2025 04:56:27 +0000 Manifest next update: Thu 23 Oct 2025 08:49:27 +0000 Files and hashes: 1: B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl (hash: iMTrlNMZKzn9KuYnmjQuR87Pi4hdBSUneIZRATWQZWc=) 2: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: Lmf9Da9j85YcfNYeEFfKaXIaWC1krFrSr92XELTEqhs=) 3: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: AIJ0j0Aq9CMXFN6w7WVU0mj1+YJAf4nV9FCI3W971zc=) 4: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: 7AeF/hZA331ui0AxYNl+UaJERQ0zt8cfqxeWUU2JfUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:73:27:96:28:0d:37:db:23:f7:77:6a:35:02:9c:24:fc:41:4c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Validity Not Before: Oct 20 04:56:27 2025 GMT Not After : Oct 23 08:49:27 2025 GMT Subject: CN=5B9B1505E215C2252025E8E9F51EED6D8879B5BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:3e:d1:f6:65:74:8d:3d:05:2a:a9:bf:03: b8:ee:6e:55:8c:33:48:22:75:58:17:b0:05:de:5d: 41:65:81:54:a7:2a:ae:6b:21:48:af:bd:ac:8f:03: af:df:0c:90:c1:ce:91:da:27:50:06:c2:c0:72:59: 2b:44:d6:bd:18:76:4d:d4:fc:6c:67:58:20:0b:bf: af:0b:a9:dd:82:a9:c3:75:bd:3c:a6:0d:62:c6:7e: 13:28:13:7b:f2:39:7f:85:3e:f5:d5:52:20:70:50: 97:8f:1d:25:3f:5f:29:29:0b:96:f6:72:9a:73:18: 54:2f:a1:78:4b:12:9f:3c:05:83:f7:f4:29:b3:cc: 31:34:cc:fb:88:11:a4:93:89:10:49:5e:fd:f7:6f: d2:57:ed:5b:1a:c0:6b:f1:26:fc:47:56:03:c6:2e: 23:2a:db:0b:6c:ce:b2:64:7f:e1:70:69:25:36:02: 4f:e5:df:9e:77:40:92:20:f3:28:32:09:00:d0:02: 95:4e:89:41:11:72:8e:98:33:10:62:14:73:d0:c2: 5e:65:ed:0c:5d:ee:e3:8a:cc:3c:06:9a:15:1d:70: 54:ec:65:2e:1f:b3:7d:ad:45:64:92:53:9f:ed:44: 0d:03:24:21:7a:fc:b2:9c:99:0a:a9:cd:57:02:37: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9B:15:05:E2:15:C2:25:20:25:E8:E9:F5:1E:ED:6D:88:79:B5:BA X509v3 Authority Key Identifier: keyid:B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:e5:0c:9e:63:79:bc:22:ae:c6:fe:d8:68:6c:59:a7:f7:da: 3b:5b:5e:0d:ee:28:9a:fb:30:2d:3b:8f:e2:4f:85:1e:bd:fa: a2:83:84:46:46:c1:98:5a:f7:92:fc:46:18:8a:9e:52:df:d4: bb:d1:d8:25:14:1c:98:d0:00:10:bc:d8:1b:38:80:42:9d:79: 6e:8d:d1:28:4e:ae:39:f4:f8:6a:4d:ee:86:9d:1e:7f:70:eb: 62:b6:5e:20:68:b1:51:f9:cb:bd:5b:dc:7b:9e:a9:e0:22:37: fa:c6:a2:c5:11:75:d5:90:e4:de:e4:20:b6:a1:d0:7e:86:af: ca:17:41:1f:7c:3f:b2:e6:e9:a4:32:60:33:5e:ef:1b:e5:5e: 59:95:61:f1:cb:33:91:ca:b2:be:51:94:cc:fb:bb:7a:fe:23: 8c:5c:c4:ed:3f:3d:0a:8b:b8:91:d0:c9:2c:b0:18:6e:52:12: 3c:05:1e:30:e0:51:e6:35:d0:4e:2a:6f:57:43:46:22:af:22: c0:98:b8:7f:c3:c1:5b:c0:b9:0d:df:e7:a3:a2:d5:6f:69:25: 73:73:28:ec:e0:53:47:d5:a9:f4:e6:44:cf:bc:f5:6f:95:7f: 64:6a:50:90:4c:88:db:20:37:be:d7:0c:76:4c:62:35:ed:6b: d0:cf:1c:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3MnligNN9sj93dqNQKcJPxBTFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRD QkFBOTkxMDAeFw0yNTEwMjAwNDU2MjdaFw0yNTEwMjMwODQ5MjdaMDMxMTAvBgNV BAMTKDVCOUIxNTA1RTIxNUMyMjUyMDI1RThFOUY1MUVFRDZEODg3OUI1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtGD7R9mV0jT0FKqm/A7jublWM M0gidVgXsAXeXUFlgVSnKq5rIUivvayPA6/fDJDBzpHaJ1AGwsByWStE1r0Ydk3U /GxnWCALv68Lqd2CqcN1vTymDWLGfhMoE3vyOX+FPvXVUiBwUJePHSU/XykpC5b2 cppzGFQvoXhLEp88BYP39CmzzDE0zPuIEaSTiRBJXv33b9JX7VsawGvxJvxHVgPG LiMq2wtszrJkf+FwaSU2Ak/l3553QJIg8ygyCQDQApVOiUERco6YMxBiFHPQwl5l 7Qxd7uOKzDwGmhUdcFTsZS4fs32tRWSSU5/tRA0DJCF6/LKcmQqpzVcCNzY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW5sVBeIVwiUgJejp9R7tbYh5tbowHwYDVR0j BBgwFoAUtwzWZplYIvMsBOCa/wGy1MuqmRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmQ0Zjg2OS00ZGI2LTRiMGEtYWFiNi1jZGU0N2I0NDdkNzcvMC9CNzBDRDY2Njk5 NTgyMkYzMkMwNEUwOUFGRjAxQjJENENCQUE5OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRDQkFB OTkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIy RDRDQkFBOTkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN/lDJ5jebwirsb+2GhsWaf32jtbXg3uKJr7 MC07j+JPhR69+qKDhEZGwZha95L8RhiKnlLf1LvR2CUUHJjQABC82Bs4gEKdeW6N 0ShOrjn0+GpN7oadHn9w62K2XiBosVH5y71b3HueqeAiN/rGosURddWQ5N7kILah 0H6Gr8oXQR98P7Lm6aQyYDNe7xvlXlmVYfHLM5HKsr5RlMz7u3r+I4xcxO0/PQqL uJHQySywGG5SEjwFHjDgUeY10E4qb1dDRiKvIsCYuH/DwVvAuQ3f56Oi1W9pJXNz KOzgU0fVqfTmRM+89W+Vf2RqUJBMiNsgN77XDHZMYjXta9DPHIs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:14 2025 by rpki-client