$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft File: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json) Hash identifier: WsQ9FyY0KwZTjqpJzCewlB8ZWJsoWbuiQeGtYbDmc/c= Subject key identifier: 5F:AB:2F:6C:AA:49:0C:94:1D:8F:43:1D:CE:A8:20:AF:4E:DE:AA:8D Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Certificate serial: 2EA4B50ECCCAA5448D586D05A8FFE6C1CCDA87B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft Manifest number: 0485 Signing time: Sat 28 Jun 2025 16:51:49 +0000 Manifest this update: Sat 28 Jun 2025 16:46:49 +0000 Manifest next update: Wed 02 Jul 2025 01:46:49 +0000 Files and hashes: 1: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: oMUkXmYTNnlwhbOJ6sYF4HZ1EMonQBbcSnBH3FcrIb8=) 2: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: qOliyAbecAgnwnEl2JxoivYUoLSuHIHif/ES8Zdhg8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a4:b5:0e:cc:ca:a5:44:8d:58:6d:05:a8:ff:e6:c1:cc:da:87:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Validity Not Before: Jun 28 16:46:49 2025 GMT Not After : Jul 2 01:46:49 2025 GMT Subject: CN=5FAB2F6CAA490C941D8F431DCEA820AF4EDEAA8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f0:90:20:f6:0e:b0:2b:5d:f5:08:79:8e:01: 94:b3:89:01:74:68:ed:a2:3d:de:e3:04:b5:2c:98: 6a:55:66:5f:85:8a:ad:4a:4c:37:2f:37:78:30:c7: 91:2d:39:7d:e2:93:94:04:4f:ba:ea:4f:45:50:01: f5:4c:b4:b8:d8:12:ed:29:43:c4:7b:cd:5d:07:68: 6b:9e:1a:9c:cc:7b:6e:94:c3:0d:7f:60:b0:b5:03: cf:f3:ff:fd:70:b1:99:9d:ff:85:09:59:a0:d8:25: fb:e9:82:a8:b7:3d:82:e9:0f:9a:44:36:b6:95:e9: 58:43:4e:6d:9d:18:a0:a6:ee:18:93:07:f6:29:f1: a9:ff:ee:1f:0d:52:00:56:f4:67:d2:e4:62:f7:0b: 78:5c:54:81:5e:49:c3:85:25:53:ec:c6:2e:12:b5: 90:b8:09:bf:51:bb:62:92:fb:a4:7e:eb:ff:72:6c: d5:d4:75:28:b9:60:17:16:5d:3d:be:d9:1a:c0:f5: e3:3e:b3:54:1b:b0:cb:b5:56:c6:e0:33:bb:83:1f: 8e:b3:2f:15:df:33:7a:2e:14:b4:3b:a2:88:8a:96: 23:5e:5f:35:17:24:cc:4e:59:ff:78:3f:69:59:ba: bd:a2:31:57:0d:83:5d:51:9d:14:e9:8f:1e:23:bd: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AB:2F:6C:AA:49:0C:94:1D:8F:43:1D:CE:A8:20:AF:4E:DE:AA:8D X509v3 Authority Key Identifier: keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:32:ba:3b:d7:36:aa:dd:5b:c0:9a:45:4c:91:01:9c:17:df: 56:b9:92:b0:59:7b:08:a1:13:cb:3f:75:99:86:34:c9:75:67: 08:96:c9:e1:e8:a9:e7:da:73:8e:af:f6:bf:c2:e3:82:43:4f: c3:4c:84:e4:f3:32:db:8c:5e:45:34:29:8c:b1:18:0b:44:dd: 4b:77:20:28:20:5f:9e:32:ed:e3:d3:65:43:ec:e4:1a:4f:25: c0:4e:03:41:e8:39:6d:db:5c:88:93:7b:37:c3:f6:0e:45:75: 0b:c6:6a:97:d4:4b:f4:50:ee:94:5e:6b:62:6f:40:8a:83:50: 7a:63:d7:1c:ac:d0:90:ec:d2:d3:4e:10:73:8f:73:9e:9e:e7: f7:74:c1:24:3b:0a:55:d6:f3:34:2e:05:77:b3:17:37:e4:5a: 90:23:30:a0:29:dd:7e:47:ad:f2:bf:b8:1f:65:90:0e:15:23: e5:94:42:b9:7f:69:be:eb:36:42:f5:ac:4e:38:10:39:a9:97: f3:5a:10:a9:40:46:c6:ca:a3:44:47:b2:67:0d:08:5f:4b:32: 52:29:7b:9b:28:86:ad:dc:d9:f6:8f:ee:61:07:8b:a3:d9:b9: a8:3f:09:ed:88:37:9d:96:09:9d:c5:21:16:7e:ac:92:40:8c: d9:d5:aa:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULqS1DszKpUSNWG0FqP/mwczah7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0 QzQyQkY4NDAeFw0yNTA2MjgxNjQ2NDlaFw0yNTA3MDIwMTQ2NDlaMDMxMTAvBgNV BAMTKDVGQUIyRjZDQUE0OTBDOTQxRDhGNDMxRENFQTgyMEFGNEVERUFBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp8JAg9g6wK131CHmOAZSziQF0 aO2iPd7jBLUsmGpVZl+Fiq1KTDcvN3gwx5EtOX3ik5QET7rqT0VQAfVMtLjYEu0p Q8R7zV0HaGueGpzMe26Uww1/YLC1A8/z//1wsZmd/4UJWaDYJfvpgqi3PYLpD5pE NraV6VhDTm2dGKCm7hiTB/Yp8an/7h8NUgBW9GfS5GL3C3hcVIFeScOFJVPsxi4S tZC4Cb9Ru2KS+6R+6/9ybNXUdSi5YBcWXT2+2RrA9eM+s1QbsMu1VsbgM7uDH46z LxXfM3ouFLQ7ooiKliNeXzUXJMxOWf94P2lZur2iMVcNg11RnRTpjx4jvVzpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX6svbKpJDJQdj0Mdzqggr07eqo0wHwYDVR0j BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0 OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIyujvXNqrdW8CaRUyRAZwX31a5krBZewih E8s/dZmGNMl1ZwiWyeHoqefac46v9r/C44JDT8NMhOTzMtuMXkU0KYyxGAtE3Ut3 ICggX54y7ePTZUPs5BpPJcBOA0HoOW3bXIiTezfD9g5FdQvGapfUS/RQ7pRea2Jv QIqDUHpj1xys0JDs0tNOEHOPc56e5/d0wSQ7ClXW8zQuBXezFzfkWpAjMKAp3X5H rfK/uB9lkA4VI+WUQrl/ab7rNkL1rE44EDmpl/NaEKlARsbKo0RHsmcNCF9LMlIp e5sohq3c2faP7mEHi6PZuag/Ce2IN52WCZ3FIRZ+rJJAjNnVqss= -----END CERTIFICATE-----Generated at Mon Jun 30 16:31:18 2025 by rpki-client