$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: G5Tjhwfk0LEkqKgs+XDEBQ4Ntd3OIYuuOS0Mcx92G98= Subject key identifier: D5:BA:0C:E2:AD:C5:40:39:E6:97:45:58:D2:93:44:A7:8A:71:2D:A4 Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 5593DB7D385AFBCEB80695E24C6F8F8441331AA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: 011E Signing time: Thu 21 Aug 2025 12:01:03 +0000 Manifest this update: Thu 21 Aug 2025 11:56:03 +0000 Manifest next update: Sun 24 Aug 2025 16:03:03 +0000 Files and hashes: 1: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: 7EuHO4To7g68FwO9+BWIrBAqgwkq9bDWYMNGsT6Mvmk=) 2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: xFoVEBixfaV59f5eLoKvzCfI+maBpFsE/LQmHoFGuNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:93:db:7d:38:5a:fb:ce:b8:06:95:e2:4c:6f:8f:84:41:33:1a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Aug 21 11:56:03 2025 GMT Not After : Aug 24 16:03:03 2025 GMT Subject: CN=D5BA0CE2ADC54039E6974558D29344A78A712DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:ee:b1:eb:ef:c5:30:7d:ce:fc:8f:f7:e6: 08:73:59:76:18:98:a8:49:62:bc:58:58:2b:a5:f2: ae:b6:f1:19:63:09:6e:88:47:fb:81:5f:8f:c7:31: e7:c2:99:6a:d0:96:d8:7a:3d:91:38:21:b6:e2:24: e6:19:2f:b0:8d:be:ed:2e:b1:0a:82:92:db:dc:07: 49:ab:e4:c1:9d:48:ee:e1:27:66:f4:ab:38:a7:45: a7:b1:6b:1e:cf:f8:95:e5:b1:ee:12:aa:c6:4a:21: 99:b6:a9:eb:ac:ad:30:b7:9a:65:10:a7:53:1e:f4: f7:96:2a:79:6e:50:2d:1b:57:f8:b4:e2:9b:6a:15: 94:43:6f:80:1b:64:08:0f:d8:67:d1:89:1b:6b:2b: 8a:91:b8:a0:37:9b:0e:96:09:50:df:10:df:3f:c5: 44:7e:df:84:fa:52:68:3a:d4:dc:d8:a8:d4:80:de: 90:22:88:d2:6d:4e:79:73:68:db:30:41:dd:84:42: c5:86:2f:84:37:0c:f6:e0:05:82:c6:26:7d:6c:b4: 1c:8f:53:44:e4:ee:a2:fd:fd:5a:57:bd:db:6e:d9: 54:aa:d1:0d:07:f9:b0:93:cd:91:2d:ca:c9:bf:18: 0a:d5:51:c4:f0:44:f2:5e:e2:46:7c:8b:48:5f:a5: ec:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BA:0C:E2:AD:C5:40:39:E6:97:45:58:D2:93:44:A7:8A:71:2D:A4 X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ba:92:de:74:41:d9:67:13:3e:e5:96:7f:dc:d8:06:b7:6b: 01:6d:26:a2:68:1c:50:33:c8:76:a2:cd:e2:1f:5c:f7:60:20: 67:8e:2b:7f:84:f5:62:9f:e0:d1:2e:64:c4:f0:bf:ad:09:88: 1a:71:3f:c8:89:45:38:b2:ee:a0:7e:6a:89:d4:76:a7:81:21: cf:e0:53:0f:e8:d5:d6:15:81:c1:27:f2:ab:e9:6a:87:46:a3: c9:21:9b:d2:de:a0:d9:47:b8:1b:b6:25:56:30:a6:71:e8:97: 3c:08:b8:60:b1:c8:d1:26:fd:70:20:c5:31:7a:a5:bc:f5:12: 55:28:ea:db:3d:fa:09:1c:ae:b3:2b:bd:e0:2d:71:33:61:f7: 33:51:cb:50:19:9e:27:6f:12:98:c5:0d:76:82:72:09:41:eb: 8b:86:0f:d7:03:c2:8a:1f:4f:38:47:ff:45:c7:31:1b:98:75: f7:ef:2c:be:99:b8:ed:04:85:38:18:0a:35:d2:aa:e1:9c:b6: 7f:fc:3b:fb:39:84:70:83:5a:e7:fc:a4:3e:e0:5a:e7:57:6e: 9c:89:98:d3:b9:0f:0a:5c:35:b7:44:7c:64:b9:3d:a3:05:b5: c6:1f:9a:96:ef:8d:d9:2a:06:da:d6:ae:7d:1b:13:51:ca:9a: c3:5b:f9:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZPbfTha+864BpXiTG+PhEEzGqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNTA4MjExMTU2MDNaFw0yNTA4MjQxNjAzMDNaMDMxMTAvBgNV BAMTKEQ1QkEwQ0UyQURDNTQwMzlFNjk3NDU1OEQyOTM0NEE3OEE3MTJEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNe6x6+/FMH3O/I/35ghzWXYY mKhJYrxYWCul8q628RljCW6IR/uBX4/HMefCmWrQlth6PZE4IbbiJOYZL7CNvu0u sQqCktvcB0mr5MGdSO7hJ2b0qzinRaexax7P+JXlse4SqsZKIZm2qeusrTC3mmUQ p1Me9PeWKnluUC0bV/i04ptqFZRDb4AbZAgP2GfRiRtrK4qRuKA3mw6WCVDfEN8/ xUR+34T6Umg61NzYqNSA3pAiiNJtTnlzaNswQd2EQsWGL4Q3DPbgBYLGJn1stByP U0Tk7qL9/VpXvdtu2VSq0Q0H+bCTzZEtysm/GArVUcTwRPJe4kZ8i0hfpeyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1boM4q3FQDnml0VY0pNEp4pxLaQwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGm6kt50QdlnEz7lln/c2Aa3awFtJqJoHFAz yHaizeIfXPdgIGeOK3+E9WKf4NEuZMTwv60JiBpxP8iJRTiy7qB+aonUdqeBIc/g Uw/o1dYVgcEn8qvpaodGo8khm9LeoNlHuBu2JVYwpnHolzwIuGCxyNEm/XAgxTF6 pbz1ElUo6ts9+gkcrrMrveAtcTNh9zNRy1AZnidvEpjFDXaCcglB64uGD9cDwoof TzhH/0XHMRuYdffvLL6ZuO0EhTgYCjXSquGctn/8O/s5hHCDWuf8pD7gWudXbpyJ mNO5DwpcNbdEfGS5PaMFtcYfmpbvjdkqBtrWrn0bE1HKmsNb+cw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:25:36 2025 by rpki-client