$ rpki-client -vvf repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft File: B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft (raw, json) Hash identifier: gliKC1TMt37uxgU55Cqa/8DYWPiW+sFgRP2kaxukdLU= Subject key identifier: 2D:9F:57:59:85:36:70:B1:19:98:E3:85:1A:4F:0F:5E:97:B4:5A:C6 Authority key identifier: B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 Certificate issuer: /CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Certificate serial: 21FFBA9231998BE9C88F991CF44E6FD666D0C889 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft Manifest number: 0124 Signing time: Sat 23 Aug 2025 05:21:25 +0000 Manifest this update: Sat 23 Aug 2025 05:16:25 +0000 Manifest next update: Tue 26 Aug 2025 13:03:25 +0000 Files and hashes: 1: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: 8PZn2glxpjPzMwOpViBPOITwulhHCfAKIDoTjo8rwUo=) 2: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: WLfKscMyGMc40boEWdbQdnlHjNZj/oBFnEX9yWncEQQ=) 3: B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl (hash: P5n5Fel+2jqXSOQjsnEOgNNWJpACuuo5Vm/ybZDf9fw=) 4: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: H5xER1Wp8wcvslhwKx1y276SpMDNAtMvuxWBaQWWyCY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ff:ba:92:31:99:8b:e9:c8:8f:99:1c:f4:4e:6f:d6:66:d0:c8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Validity Not Before: Aug 23 05:16:25 2025 GMT Not After : Aug 26 13:03:25 2025 GMT Subject: CN=2D9F5759853670B11998E3851A4F0F5E97B45AC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:ee:11:b6:82:b6:61:69:01:fb:6e:1c:fd: 92:1d:cd:75:17:80:69:22:5e:f0:5c:16:f9:1d:e6: 41:23:59:5c:a7:c7:58:c3:6f:a9:83:72:66:84:d2: 6b:44:00:d7:c7:16:2c:af:a5:87:e0:8b:f3:51:b9: 89:43:f8:2c:81:34:36:d5:80:4f:32:12:bc:5c:0f: ce:e9:17:a2:5a:f7:84:16:4c:f7:d1:ee:19:47:b0: 8e:2b:28:f0:c7:0c:eb:7a:53:8f:66:e0:e9:e7:57: 60:5c:f9:14:01:c6:a6:8a:e3:1b:ad:fc:fb:ca:fb: 94:13:8f:70:e4:52:ba:e7:6d:80:ad:9f:4d:14:ae: 59:57:99:9e:0a:dc:27:74:39:a8:8f:7a:c7:20:11: 55:10:8a:66:ac:7d:f0:c3:a0:cd:0a:76:69:af:40: eb:9f:f3:14:c5:64:0d:6b:85:b8:aa:e7:2e:b8:84: 13:93:73:d1:06:18:25:01:4a:c2:2c:9c:70:04:1b: 44:bb:b6:2d:f6:5d:37:44:bf:52:76:9b:cf:60:a5: ba:09:c7:fa:66:c9:21:36:72:78:70:f1:e3:a1:74: c7:bc:e2:fc:f6:0f:a8:49:db:33:b4:07:2c:fc:25: d5:be:8a:58:fc:d4:3f:07:6b:53:06:c4:56:da:36: 5f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9F:57:59:85:36:70:B1:19:98:E3:85:1A:4F:0F:5E:97:B4:5A:C6 X509v3 Authority Key Identifier: keyid:B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:cf:6c:3e:14:37:35:c3:38:9f:b7:db:00:f7:28:50:5d:17: bf:1a:fa:0e:cf:bd:60:85:eb:ad:32:03:d2:18:97:60:e0:55: 4a:91:5c:ee:ba:f0:b1:07:9a:db:e9:f5:84:c7:21:7a:33:21: d3:d4:b4:90:c5:0f:e7:d5:19:a4:a1:61:ce:8f:54:49:2f:f5: 85:70:14:db:c1:dc:fe:5f:32:85:a8:c3:f2:86:d9:09:ec:94: c9:27:77:ba:f0:ea:2d:0e:f9:44:12:1f:6f:03:50:05:a5:d0: c5:b7:e6:93:1b:6f:e1:30:b1:7a:3d:62:5c:29:8c:09:b8:56: d0:d1:6d:c9:14:2c:b7:40:95:26:e8:9a:3e:e4:d4:6f:30:7f: f6:48:ea:60:f4:df:95:ff:01:53:01:6b:28:d7:ae:a3:2f:ad: c4:00:84:51:48:56:b1:45:25:e2:dd:91:5b:5b:82:15:f0:89: 9b:ae:76:de:a7:dd:39:aa:ad:07:10:21:55:fe:74:96:bf:26: 18:24:04:cb:80:8e:15:4e:8a:77:6c:03:95:49:c6:e4:db:c4: e8:ad:ef:9e:52:a9:af:1e:a6:05:63:a3:43:56:e0:9a:c6:11: cb:02:05:42:16:74:9d:b4:04:51:7f:0c:6d:80:38:7a:45:9f: 97:9e:0e:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIf+6kjGZi+nIj5kc9E5v1mbQyIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRD QkFBOTkxMDAeFw0yNTA4MjMwNTE2MjVaFw0yNTA4MjYxMzAzMjVaMDMxMTAvBgNV BAMTKDJEOUY1NzU5ODUzNjcwQjExOTk4RTM4NTFBNEYwRjVFOTdCNDVBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCO4RtoK2YWkB+24c/ZIdzXUX gGkiXvBcFvkd5kEjWVynx1jDb6mDcmaE0mtEANfHFiyvpYfgi/NRuYlD+CyBNDbV gE8yErxcD87pF6Ja94QWTPfR7hlHsI4rKPDHDOt6U49m4OnnV2Bc+RQBxqaK4xut /PvK+5QTj3DkUrrnbYCtn00UrllXmZ4K3Cd0OaiPescgEVUQimasffDDoM0Kdmmv QOuf8xTFZA1rhbiq5y64hBOTc9EGGCUBSsIsnHAEG0S7ti32XTdEv1J2m89gpboJ x/pmySE2cnhw8eOhdMe84vz2D6hJ2zO0Byz8JdW+ilj81D8Ha1MGxFbaNl8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULZ9XWYU2cLEZmOOFGk8PXpe0WsYwHwYDVR0j BBgwFoAUtwzWZplYIvMsBOCa/wGy1MuqmRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmQ0Zjg2OS00ZGI2LTRiMGEtYWFiNi1jZGU0N2I0NDdkNzcvMC9CNzBDRDY2Njk5 NTgyMkYzMkMwNEUwOUFGRjAxQjJENENCQUE5OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRDQkFB OTkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIy RDRDQkFBOTkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPPbD4UNzXDOJ+32wD3KFBdF78a+g7PvWCF 660yA9IYl2DgVUqRXO668LEHmtvp9YTHIXozIdPUtJDFD+fVGaShYc6PVEkv9YVw FNvB3P5fMoWow/KG2QnslMknd7rw6i0O+UQSH28DUAWl0MW35pMbb+EwsXo9Ylwp jAm4VtDRbckULLdAlSbomj7k1G8wf/ZI6mD035X/AVMBayjXrqMvrcQAhFFIVrFF JeLdkVtbghXwiZuudt6n3TmqrQcQIVX+dJa/JhgkBMuAjhVOindsA5VJxuTbxOit 755Sqa8epgVjo0NW4JrGEcsCBUIWdJ20BFF/DG2AOHpFn5eeDvE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:24:34 2025 by rpki-client