$ rpki-client -vvf repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft File: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft (raw, json) Hash identifier: KSvrKwX6XzhWawQS/gjGzyoVtlTox+a9iZw+tNjTl7w= Subject key identifier: 55:94:FE:61:4E:95:2A:F1:B0:74:89:F5:7C:B5:B9:3C:97:1A:E3:F9 Authority key identifier: 70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 Certificate issuer: /CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Certificate serial: 26621C7C5D7B161E95D77D5E9F7B996A61B0215A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft Manifest number: 02FB Signing time: Fri 22 Aug 2025 16:41:49 +0000 Manifest this update: Fri 22 Aug 2025 16:36:49 +0000 Manifest next update: Mon 25 Aug 2025 20:46:49 +0000 Files and hashes: 1: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: VX/I3/x4BQAW9tojrrpAd/u/hvUEfSW7Ux6uRaa3WGI=) 2: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: a0lH+PIAmWNcxqLbA+wvO5CoOPbucnjR8xOoW3GXo30=) 3: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl (hash: Vh5Z6EGN7/JKfFYYEU2bTp8KUHnr4lvg/I3zTDoGxnI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:62:1c:7c:5d:7b:16:1e:95:d7:7d:5e:9f:7b:99:6a:61:b0:21:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Validity Not Before: Aug 22 16:36:49 2025 GMT Not After : Aug 25 20:46:49 2025 GMT Subject: CN=5594FE614E952AF1B07489F57CB5B93C971AE3F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:ec:d9:10:fe:6c:f6:9d:78:f3:1b:3f:a8: a6:b8:c0:24:59:e4:f9:ed:e5:69:d5:61:b7:3c:13: 97:7c:4b:09:06:ff:48:fa:54:94:4d:71:ba:68:ba: 7b:da:ff:9e:c4:6b:80:ab:9a:5d:d7:da:e2:a7:42: 38:ae:ac:f9:34:b5:86:69:98:3f:9b:25:38:ff:ee: 0c:17:da:61:d1:f6:37:a7:ad:fb:d7:b1:2e:c1:1f: a9:09:76:6a:53:ec:4d:d2:e9:42:fc:19:14:22:00: 3b:e1:4b:13:c9:ad:3c:26:f3:6d:58:22:4f:0e:0a: d2:80:fc:43:4c:7b:65:eb:47:72:cd:48:0b:50:06: 00:e5:fe:3c:76:b0:9f:05:ad:46:a7:ab:51:5e:bc: 86:e0:a3:11:66:19:6b:74:c3:aa:df:d0:65:30:c2: b4:f3:56:e1:71:40:d1:6c:73:15:0b:c8:4c:c5:bd: 09:f4:ca:fc:91:c4:28:c4:ef:fc:e7:a7:59:00:43: 99:40:66:48:e7:cb:da:a3:b5:0c:db:a4:32:33:f1: d8:7f:d0:5d:5a:7f:fa:3c:7c:94:cb:29:85:26:50: 0c:6e:b7:bd:11:ac:cb:0e:be:fe:a1:17:44:a4:29: 67:f9:62:2e:6e:82:f0:d8:4f:e0:fa:7d:a7:64:4e: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:94:FE:61:4E:95:2A:F1:B0:74:89:F5:7C:B5:B9:3C:97:1A:E3:F9 X509v3 Authority Key Identifier: keyid:70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:da:e9:9e:56:07:33:ef:f9:f7:24:b3:1f:a9:2e:78:7c:76: 89:ea:a7:16:b4:51:33:5c:d4:1d:0f:d3:66:d4:50:cc:04:ac: 42:ba:0e:05:aa:53:b6:40:dc:0d:e1:fd:c2:cf:60:b0:c2:de: 62:d5:67:c9:64:d9:46:05:9c:b4:a5:74:45:66:d6:f7:41:88: 6e:c2:cd:ad:af:84:25:59:4d:28:ac:b6:88:20:d7:2b:cb:c6: 54:e7:db:aa:78:e6:0e:09:d1:b0:30:ed:df:a9:e1:ec:3b:08: 78:84:ed:82:cb:8c:c2:e8:00:cb:d2:f0:2c:7e:d7:3f:d2:e3: e1:45:82:8c:29:de:7c:78:36:13:dc:01:f3:0f:8c:67:be:c1: ee:d5:32:d4:08:c9:e2:c4:2f:9e:23:2d:7f:d6:cc:d6:77:e3: 20:74:91:7a:4c:f4:35:63:27:ef:2d:e0:1f:f9:9a:07:b4:f1: df:34:dc:a5:2b:33:7a:dc:ce:1d:05:a2:ec:4b:c8:c6:3c:63: ec:a3:60:a3:af:04:52:3b:27:a9:34:cf:e6:0c:d6:28:5c:57: 1e:77:36:d4:70:a0:52:5d:ac:a8:2a:45:bd:b0:91:0a:ac:79: b9:df:5f:00:b7:1a:42:76:70:f9:fb:dd:48:85:f2:83:1a:70: 9a:04:46:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmIcfF17Fh6V131en3uZamGwIVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4 NDZBMkQ2NDAeFw0yNTA4MjIxNjM2NDlaFw0yNTA4MjUyMDQ2NDlaMDMxMTAvBgNV BAMTKDU1OTRGRTYxNEU5NTJBRjFCMDc0ODlGNTdDQjVCOTNDOTcxQUUzRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/t+zZEP5s9p148xs/qKa4wCRZ 5Pnt5WnVYbc8E5d8SwkG/0j6VJRNcbpounva/57Ea4Crml3X2uKnQjiurPk0tYZp mD+bJTj/7gwX2mHR9jenrfvXsS7BH6kJdmpT7E3S6UL8GRQiADvhSxPJrTwm821Y Ik8OCtKA/ENMe2XrR3LNSAtQBgDl/jx2sJ8FrUanq1FevIbgoxFmGWt0w6rf0GUw wrTzVuFxQNFscxULyEzFvQn0yvyRxCjE7/znp1kAQ5lAZkjny9qjtQzbpDIz8dh/ 0F1af/o8fJTLKYUmUAxut70RrMsOvv6hF0SkKWf5Yi5ugvDYT+D6fadkTjuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVZT+YU6VKvGwdIn1fLW5PJca4/kwHwYDVR0j BBgwFoAUcAuVh8TPp/Kx2ffJLLCw24RqLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODMyODIzNy03NTBmLTQwMjItYjhiMi1kYmE3M2I2NzEzZWMvMC83MDBCOTU4N0M0 Q0ZBN0YyQjFEOUY3QzkyQ0IwQjBEQjg0NkEyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4NDZB MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIw REI4NDZBMkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKva6Z5WBzPv+fcksx+pLnh8donqpxa0UTNc 1B0P02bUUMwErEK6DgWqU7ZA3A3h/cLPYLDC3mLVZ8lk2UYFnLSldEVm1vdBiG7C za2vhCVZTSistogg1yvLxlTn26p45g4J0bAw7d+p4ew7CHiE7YLLjMLoAMvS8Cx+ 1z/S4+FFgowp3nx4NhPcAfMPjGe+we7VMtQIyeLEL54jLX/WzNZ34yB0kXpM9DVj J+8t4B/5mge08d803KUrM3rczh0FouxLyMY8Y+yjYKOvBFI7J6k0z+YM1ihcVx53 NtRwoFJdrKgqRb2wkQqsebnfXwC3GkJ2cPn73UiF8oMacJoERsQ= -----END CERTIFICATE-----Generated at Sun Aug 24 00:23:40 2025 by rpki-client