$ rpki-client -vvf repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft File: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft (raw, json) Hash identifier: gx+ylGYzNsEEZHWrKdE/HcMJKEXQkTHa3qSfeb6ZHso= Subject key identifier: 62:B8:76:E6:D3:2C:BB:DA:57:3C:5D:2E:59:78:6A:11:8D:1A:44:35 Authority key identifier: 70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 Certificate issuer: /CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Certificate serial: 3FDD1E33319B6031291CB8DA34358DC62D9CCF9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft Manifest number: 0315 Signing time: Sat 18 Oct 2025 14:31:45 +0000 Manifest this update: Sat 18 Oct 2025 14:26:45 +0000 Manifest next update: Tue 21 Oct 2025 15:51:45 +0000 Files and hashes: 1: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: HkdEC8K8+4wdSCshXjogdBtnn9p7RHZgPqc+KEcGBcE=) 2: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl (hash: sF+Hcqou5Max4pStjcTp11EqD481TpWji5JzpYZ1gZE=) 3: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: pDYNyQPy9+qJb0nXEhgW9usosth8XXlKTG8zEx7l7ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:dd:1e:33:31:9b:60:31:29:1c:b8:da:34:35:8d:c6:2d:9c:cf:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Validity Not Before: Oct 18 14:26:45 2025 GMT Not After : Oct 21 15:51:45 2025 GMT Subject: CN=62B876E6D32CBBDA573C5D2E59786A118D1A4435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:33:a4:73:92:fb:23:c2:a0:d2:a1:a3:bd:ac: 90:1b:77:e4:f1:b0:07:0c:0c:fc:af:53:10:69:df: b1:59:75:3c:bf:46:6b:1d:7e:d7:18:71:ad:9c:f5: 0b:53:25:2e:e1:b6:9a:60:4c:0d:7a:7d:c4:eb:a1: 20:78:06:b6:be:1f:ac:f5:25:a3:0d:ef:a1:03:d8: 57:31:65:d9:90:0d:e0:34:e1:08:35:fa:d1:ac:d9: 15:d7:a9:19:77:66:ee:5e:90:f5:10:1b:0a:6e:67: 33:11:f5:d4:56:f1:c0:91:c1:1a:5b:02:ac:e4:ab: 7b:6d:7f:29:fa:1f:9d:b6:5e:1e:a3:e3:ae:52:82: 52:46:e2:f2:ee:4b:a0:6d:6d:79:72:c4:5c:2f:2d: 7a:29:46:90:d4:cf:f8:8c:cc:70:d3:06:1c:0a:d0: 3c:12:f7:67:c7:81:56:39:53:5c:55:26:36:bc:ed: 95:52:5b:5c:9b:e3:e8:b7:8c:14:af:b5:56:0a:ef: 5c:fc:f9:eb:97:a6:c8:ef:4e:60:70:42:e8:5a:15: 9a:e4:13:9e:d6:56:c8:e7:cd:4e:0b:57:f2:7c:07: 50:7f:14:06:b7:e4:93:b2:4e:38:5b:55:5a:c5:94: 84:65:2a:1b:ef:56:53:f4:b7:88:0b:e9:ab:25:f5: 3b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B8:76:E6:D3:2C:BB:DA:57:3C:5D:2E:59:78:6A:11:8D:1A:44:35 X509v3 Authority Key Identifier: keyid:70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ff:fd:4c:b6:0e:30:6c:9b:ab:83:f3:b2:fc:4c:85:e9:bf: 28:a0:44:20:ca:35:08:d7:e8:9f:23:83:2c:c0:50:49:64:4b: 2e:cb:b0:1f:a0:98:82:5f:be:fd:21:6a:fb:3e:99:7f:14:8a: 2b:38:d7:13:42:65:4f:f9:46:54:84:0f:b6:eb:9d:3b:af:1e: f7:73:8d:fc:09:b6:8b:22:97:73:c3:05:66:f3:57:c7:12:d5: 79:d8:cf:43:5d:67:3f:cc:41:1c:d1:19:b8:34:05:59:e2:ad: be:2a:3e:44:72:3f:3a:07:db:77:24:ac:e9:29:6d:2e:0b:9c: 8b:bf:7d:a4:9b:b6:ee:1c:7f:da:ab:ab:e1:97:83:e8:64:45: 3f:e7:26:ab:9f:c6:7b:b6:c3:80:fe:02:05:2c:a4:4d:75:0c: a1:07:b5:cf:ef:ee:fa:f6:9c:ff:cb:8d:84:8a:ed:dc:b2:57: 97:0f:c3:5c:78:0b:cb:d2:a7:df:73:59:43:31:15:4e:1d:b6: ad:ac:4c:6e:90:20:e8:09:26:70:2e:1d:fa:5d:e0:27:2e:30: 54:c3:fc:44:7e:20:0f:fb:53:c5:cb:6d:d7:1a:25:86:6f:ee: db:35:d3:3a:d0:99:c8:74:54:b3:d8:2c:99:54:09:9e:73:7e: 89:6f:d8:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP90eMzGbYDEpHLjaNDWNxi2cz50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4 NDZBMkQ2NDAeFw0yNTEwMTgxNDI2NDVaFw0yNTEwMjExNTUxNDVaMDMxMTAvBgNV BAMTKDYyQjg3NkU2RDMyQ0JCREE1NzNDNUQyRTU5Nzg2QTExOEQxQTQ0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXM6RzkvsjwqDSoaO9rJAbd+Tx sAcMDPyvUxBp37FZdTy/RmsdftcYca2c9QtTJS7htppgTA16fcTroSB4Bra+H6z1 JaMN76ED2FcxZdmQDeA04Qg1+tGs2RXXqRl3Zu5ekPUQGwpuZzMR9dRW8cCRwRpb Aqzkq3ttfyn6H522Xh6j465SglJG4vLuS6BtbXlyxFwvLXopRpDUz/iMzHDTBhwK 0DwS92fHgVY5U1xVJja87ZVSW1yb4+i3jBSvtVYK71z8+euXpsjvTmBwQuhaFZrk E57WVsjnzU4LV/J8B1B/FAa35JOyTjhbVVrFlIRlKhvvVlP0t4gL6asl9TsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYrh25tMsu9pXPF0uWXhqEY0aRDUwHwYDVR0j BBgwFoAUcAuVh8TPp/Kx2ffJLLCw24RqLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODMyODIzNy03NTBmLTQwMjItYjhiMi1kYmE3M2I2NzEzZWMvMC83MDBCOTU4N0M0 Q0ZBN0YyQjFEOUY3QzkyQ0IwQjBEQjg0NkEyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4NDZB MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIw REI4NDZBMkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABv//Uy2DjBsm6uD87L8TIXpvyigRCDKNQjX 6J8jgyzAUElkSy7LsB+gmIJfvv0havs+mX8Uiis41xNCZU/5RlSED7brnTuvHvdz jfwJtosil3PDBWbzV8cS1XnYz0NdZz/MQRzRGbg0BVnirb4qPkRyPzoH23ckrOkp bS4LnIu/faSbtu4cf9qrq+GXg+hkRT/nJqufxnu2w4D+AgUspE11DKEHtc/v7vr2 nP/LjYSK7dyyV5cPw1x4C8vSp99zWUMxFU4dtq2sTG6QIOgJJnAuHfpd4CcuMFTD /ER+IA/7U8XLbdcaJYZv7ts10zrQmch0VLPYLJlUCZ5zfolv2Gc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:48 2025 by rpki-client