$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: 6GWRIQtH0dqP196egcMfvPpjAeduYk9aJjQxI4jy0Wc= Subject key identifier: 80:12:7E:B3:EE:D3:6B:D6:ED:71:9C:FC:D2:95:76:38:7F:92:45:BB Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 29975F7906A41EC0D47A3E620B9B6EC762D5DB6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: 0139 Signing time: Mon 20 Oct 2025 08:41:01 +0000 Manifest this update: Mon 20 Oct 2025 08:36:01 +0000 Manifest next update: Thu 23 Oct 2025 10:15:01 +0000 Files and hashes: 1: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: bN7z+Nqt7KEmOyVhqL8yliEjZZUgubJX1kalLK9lEUw=) 2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: k4r6WzhxzBcS3VSCnW5AcBSPgRuHkdZqCOJR8VV2Nyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:97:5f:79:06:a4:1e:c0:d4:7a:3e:62:0b:9b:6e:c7:62:d5:db:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Oct 20 08:36:01 2025 GMT Not After : Oct 23 10:15:01 2025 GMT Subject: CN=80127EB3EED36BD6ED719CFCD29576387F9245BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:21:7e:55:bb:ff:47:c9:fd:28:97:ca:65:68: 15:0c:f8:fa:5c:ea:50:98:bc:e5:b0:5d:f6:8e:e1: a7:45:3f:76:f2:c0:f7:2f:09:95:02:26:66:7a:39: cb:85:73:a6:81:09:b2:13:4a:48:1a:e3:8a:9a:a2: a0:2b:d2:b8:7f:b4:c7:a9:ce:cc:e2:99:12:6a:db: bc:02:6e:b9:25:6a:82:ca:56:7b:f0:fe:ab:e7:1b: 82:4d:64:3f:2a:49:fd:2f:dc:fd:43:a3:82:ba:31: 53:81:de:87:81:85:ac:29:aa:d5:19:d6:2e:56:d5: d7:bb:68:21:30:b1:ec:4a:06:eb:13:03:7a:b0:ab: 94:b0:9b:c0:36:be:17:20:c6:2c:5d:16:a5:a4:59: b6:e3:37:b0:cf:d3:0c:bf:3f:d5:00:48:6e:5e:0a: fa:47:5b:60:74:4b:a4:1b:a4:49:fa:de:84:d7:b9: 1a:ea:d0:d6:3b:47:5c:bd:96:cf:ca:95:e8:ea:2a: c3:94:0a:05:af:1d:fc:02:80:b5:ca:13:f7:94:29: 4a:2b:f5:d8:a3:95:48:00:2e:2d:35:22:e9:70:cc: b1:b3:78:2c:48:09:d4:43:a9:8e:1e:35:c2:a1:50: 03:2e:8b:2a:77:51:b5:cd:ae:54:b1:a7:5b:bd:9e: 47:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:12:7E:B3:EE:D3:6B:D6:ED:71:9C:FC:D2:95:76:38:7F:92:45:BB X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:91:45:c5:11:98:c0:e7:d2:2b:24:62:f9:4e:48:58:af:7a: a9:98:65:2f:eb:bb:66:cc:8c:59:3f:43:7f:46:fa:d9:a9:70: 5b:5c:60:6a:a4:86:7b:e1:0c:54:d8:c9:7f:c3:73:0c:ef:b5: 5e:b5:45:8e:f6:70:0e:c3:51:30:a1:79:ea:c0:81:cf:e9:ce: d2:79:da:0b:2e:62:2b:a7:f6:89:e0:75:16:d1:28:3f:d5:5a: 22:04:5f:95:77:99:a2:e6:22:a0:7b:ff:2e:c8:96:2a:c5:19: 59:43:0b:72:66:a3:5b:05:e0:0a:21:9e:5d:cb:de:f5:32:f6: 27:3e:60:de:2c:fd:7b:3d:21:fd:f0:17:c0:a1:c8:ed:a4:72: dd:00:3a:68:d7:20:9a:a6:87:c9:9d:c3:75:19:0d:97:46:ca: e1:a6:82:da:97:f8:c5:99:be:36:b7:d5:cb:c1:ad:55:ae:d4: 4e:15:c9:31:9f:29:97:24:a3:f7:75:77:57:9a:04:7c:35:a0: 7a:81:bb:56:43:07:3b:eb:f0:31:9e:90:fa:77:e3:7b:4f:68: 0e:7d:9b:8b:a7:10:af:df:c7:32:82:ff:30:9c:6a:0e:a9:39: 41:51:40:d2:f1:6e:fe:f3:03:ba:33:09:57:4a:97:f2:3f:f3: 91:f9:db:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZdfeQakHsDUej5iC5tux2LV220wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNTEwMjAwODM2MDFaFw0yNTEwMjMxMDE1MDFaMDMxMTAvBgNV BAMTKDgwMTI3RUIzRUVEMzZCRDZFRDcxOUNGQ0QyOTU3NjM4N0Y5MjQ1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYIX5Vu/9Hyf0ol8plaBUM+Ppc 6lCYvOWwXfaO4adFP3bywPcvCZUCJmZ6OcuFc6aBCbITSkga44qaoqAr0rh/tMep zszimRJq27wCbrklaoLKVnvw/qvnG4JNZD8qSf0v3P1Do4K6MVOB3oeBhawpqtUZ 1i5W1de7aCEwsexKBusTA3qwq5Swm8A2vhcgxixdFqWkWbbjN7DP0wy/P9UASG5e CvpHW2B0S6QbpEn63oTXuRrq0NY7R1y9ls/KlejqKsOUCgWvHfwCgLXKE/eUKUor 9dijlUgALi01IulwzLGzeCxICdRDqY4eNcKhUAMuiyp3UbXNrlSxp1u9nkcrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgBJ+s+7Ta9btcZz80pV2OH+SRbswHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2RRcURmMDn0iskYvlOSFiveqmYZS/ru2bM jFk/Q39G+tmpcFtcYGqkhnvhDFTYyX/DcwzvtV61RY72cA7DUTCheerAgc/pztJ5 2gsuYiun9ongdRbRKD/VWiIEX5V3maLmIqB7/y7IlirFGVlDC3Jmo1sF4Aohnl3L 3vUy9ic+YN4s/Xs9If3wF8ChyO2kct0AOmjXIJqmh8mdw3UZDZdGyuGmgtqX+MWZ vja31cvBrVWu1E4VyTGfKZcko/d1d1eaBHw1oHqBu1ZDBzvr8DGekPp343tPaA59 m4unEK/fxzKC/zCcag6pOUFRQNLxbv7zA7ozCVdKl/I/85H525s= -----END CERTIFICATE-----Generated at Mon Oct 20 14:42:57 2025 by rpki-client