$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft File: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json) Hash identifier: L4PjuqSv2xJKGUdLXdfuMUfY0AJDlrgeW7mHPIKdt4o= Subject key identifier: A1:26:0A:37:5E:78:0C:76:94:0F:A9:27:45:9C:F2:81:F6:11:22:ED Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Certificate serial: 7DDAE44A07CD504DCF896D545CC3D2723E2F8BE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft Manifest number: 04B8 Signing time: Mon 20 Oct 2025 19:01:53 +0000 Manifest this update: Mon 20 Oct 2025 18:56:53 +0000 Manifest next update: Thu 23 Oct 2025 19:34:53 +0000 Files and hashes: 1: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: g1R4R0HL0JYE/vPhjpUYgM7RINlnWAGWgeiPUGpO8vk=) 2: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: Ygp8V6ySgNlfzeAzxcG8tV45vBV3m6RFvl0r9jM7VeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:da:e4:4a:07:cd:50:4d:cf:89:6d:54:5c:c3:d2:72:3e:2f:8b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Validity Not Before: Oct 20 18:56:53 2025 GMT Not After : Oct 23 19:34:53 2025 GMT Subject: CN=A1260A375E780C76940FA927459CF281F61122ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:ce:d2:ef:e8:a1:0c:98:2f:38:39:f9:b2: 5d:6c:eb:22:13:37:e3:44:d1:d9:30:83:6a:e1:61: ce:93:bd:1f:73:67:e5:34:6d:75:dd:01:a3:1a:26: fa:33:e6:e5:cd:30:a9:d1:de:56:6b:22:bd:e8:7e: 1f:f0:b4:53:0f:bd:df:75:dc:b7:fa:6e:75:18:86: 8f:43:bf:f8:60:64:0b:5d:ea:7d:a5:16:b1:d5:7a: 2c:47:9d:df:f6:89:b0:7b:a9:12:4e:79:55:d5:93: 62:60:22:b6:b8:60:c5:37:4e:a6:53:b3:53:87:47: a8:4e:5c:c8:ab:ac:1d:45:bb:94:98:77:65:6d:e3: 13:8a:e1:65:1c:0c:4b:d1:b8:16:60:7e:5e:82:b1: 5c:6a:d2:84:33:4a:0a:2f:58:e7:f3:b0:ec:e7:0e: e1:8b:b6:9e:00:5a:d8:47:db:2c:76:a1:18:b6:b6: 6f:bd:f4:75:d1:6c:80:54:26:c3:0c:eb:b3:0b:d0: 40:e3:71:07:a2:61:ec:80:c9:0b:e5:2e:52:4e:4b: 48:3a:53:3e:a9:7c:22:02:01:d5:49:40:cc:29:8e: 37:42:e8:84:1d:56:e0:af:64:6e:22:9a:2a:de:a0: 6d:d2:b7:cf:94:9d:ce:45:2f:93:ba:84:e0:8b:49: ce:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:26:0A:37:5E:78:0C:76:94:0F:A9:27:45:9C:F2:81:F6:11:22:ED X509v3 Authority Key Identifier: keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:74:6a:a4:8a:4b:f8:f0:8b:36:59:65:28:6a:aa:eb:71:cd: e8:43:39:79:bd:c0:52:65:b6:e6:e3:0d:c7:dc:1d:b5:52:ec: 0c:cc:1c:64:66:58:36:84:eb:75:7f:f8:03:cd:50:35:77:57: 9b:6c:8e:f5:b3:f0:c7:75:47:7d:97:5f:00:5b:fd:da:41:cf: 6d:68:56:59:c5:77:59:bc:fa:88:4d:44:1e:67:68:b5:aa:1a: fd:b0:21:f8:cd:1a:08:11:a7:6f:d1:90:9e:dd:de:92:0e:5f: 7b:cd:f3:dc:e9:7e:af:c0:d7:f9:e4:df:84:10:31:b0:aa:56: fe:81:a9:12:64:d2:f1:cc:6f:fd:c3:60:fa:2a:bc:3b:0c:e4: d2:e1:38:0f:fe:0f:97:bf:71:7a:09:50:b2:00:e7:73:a2:66: ad:c8:a7:08:71:b4:59:72:4b:60:9b:c4:8f:46:1a:f9:11:a0: 36:4e:e4:e6:16:d5:d2:c5:75:4d:e4:fb:8d:7a:ff:d9:37:82: 52:62:1e:f6:6e:b8:30:3f:52:32:94:d9:09:30:ee:ff:31:f3: b5:09:e8:7f:59:46:03:68:f9:1d:60:ec:60:5d:b8:84:19:9d: 33:89:ca:fc:eb:4d:63:35:a5:98:ef:74:90:15:1b:98:d5:20: 6f:db:3d:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdrkSgfNUE3PiW1UXMPScj4vi+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0 QzQyQkY4NDAeFw0yNTEwMjAxODU2NTNaFw0yNTEwMjMxOTM0NTNaMDMxMTAvBgNV BAMTKEExMjYwQTM3NUU3ODBDNzY5NDBGQTkyNzQ1OUNGMjgxRjYxMTIyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO3c7S7+ihDJgvODn5sl1s6yIT N+NE0dkwg2rhYc6TvR9zZ+U0bXXdAaMaJvoz5uXNMKnR3lZrIr3ofh/wtFMPvd91 3Lf6bnUYho9Dv/hgZAtd6n2lFrHVeixHnd/2ibB7qRJOeVXVk2JgIra4YMU3TqZT s1OHR6hOXMirrB1Fu5SYd2Vt4xOK4WUcDEvRuBZgfl6CsVxq0oQzSgovWOfzsOzn DuGLtp4AWthH2yx2oRi2tm+99HXRbIBUJsMM67ML0EDjcQeiYeyAyQvlLlJOS0g6 Uz6pfCICAdVJQMwpjjdC6IQdVuCvZG4imireoG3St8+Unc5FL5O6hOCLSc6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoSYKN154DHaUD6knRZzygfYRIu0wHwYDVR0j BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0 OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt0aqSKS/jwizZZZShqqutxzehDOXm9wFJl tubjDcfcHbVS7AzMHGRmWDaE63V/+APNUDV3V5tsjvWz8Md1R32XXwBb/dpBz21o VlnFd1m8+ohNRB5naLWqGv2wIfjNGggRp2/RkJ7d3pIOX3vN89zpfq/A1/nk34QQ MbCqVv6BqRJk0vHMb/3DYPoqvDsM5NLhOA/+D5e/cXoJULIA53OiZq3IpwhxtFly S2CbxI9GGvkRoDZO5OYW1dLFdU3k+416/9k3glJiHvZuuDA/UjKU2Qkw7v8x87UJ 6H9ZRgNo+R1g7GBduIQZnTOJyvzrTWM1pZjvdJAVG5jVIG/bPdA= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:27 2025 by rpki-client