$ rpki-client -vvf repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft File: A70723C87D2C27B95BE6227C631E7D85EF89D513.mft (raw, json) Hash identifier: OTXTuUfuiLpBHzCAh4IY7RHdlfz0lb9B17VkuxNQbws= Subject key identifier: DB:FE:99:A8:51:45:C2:DC:B6:C8:D7:BA:A6:F6:CB:43:1E:81:72:35 Authority key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Certificate issuer: /CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Certificate serial: 2825ED062AB5BB26D3376B644F50A1365A44CBFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft Manifest number: 04F7 Signing time: Sun 10 Aug 2025 12:40:53 +0000 Manifest this update: Sun 10 Aug 2025 12:35:53 +0000 Manifest next update: Wed 13 Aug 2025 21:00:53 +0000 Files and hashes: 1: A70723C87D2C27B95BE6227C631E7D85EF89D513.crl (hash: TFRvP8UcEyxGizR1JFvs7KayrGBF1Nee5KW6WM4sSDc=) 2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: QAI5cYTeOrxvcausPsC1CnYV2kULdBh9ytAc4ZJZoM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:25:ed:06:2a:b5:bb:26:d3:37:6b:64:4f:50:a1:36:5a:44:cb:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Validity Not Before: Aug 10 12:35:53 2025 GMT Not After : Aug 13 21:00:53 2025 GMT Subject: CN=DBFE99A85145C2DCB6C8D7BAA6F6CB431E817235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:3d:a5:33:db:af:4e:1d:fd:70:f4:6c:1e: 36:33:95:21:79:6b:7a:70:93:f5:00:3e:48:88:47: 2a:e0:95:44:9d:2d:e4:96:16:f9:a7:55:46:2b:78: 05:f9:43:f1:15:80:e3:3f:e0:e8:3d:0e:38:6f:33: 9e:41:c0:25:3a:e8:6c:12:a3:87:60:6a:fa:07:5c: 87:40:77:4a:0f:7f:f8:bb:88:c4:8e:fa:fc:51:ef: 23:f3:ea:03:cf:f1:67:91:c1:43:24:2e:63:40:64: 92:65:95:14:d4:0c:8f:88:5b:eb:74:2e:d9:41:52: 38:83:e8:9a:13:3f:9f:e8:50:e4:92:8e:af:c3:5d: 54:4a:18:82:5e:39:34:93:aa:cd:fe:cc:5d:23:73: aa:bf:d3:b3:6d:ba:70:c9:8c:13:00:ab:51:26:e0: df:d8:26:db:0f:b6:73:06:1c:4b:e0:89:db:f2:5e: 36:81:ff:41:b8:57:59:72:67:9f:06:82:6b:fe:8d: e9:c3:02:73:e5:53:c3:57:2f:3f:cf:d4:cf:6a:ef: 5d:4e:8f:27:68:10:ff:e1:64:5a:2c:76:e7:ba:ef: 68:da:ce:a1:3d:91:27:61:8e:a7:74:06:82:dc:a7: 3f:73:31:c8:fe:1c:4a:83:d9:b9:f8:71:f9:6a:71: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FE:99:A8:51:45:C2:DC:B6:C8:D7:BA:A6:F6:CB:43:1E:81:72:35 X509v3 Authority Key Identifier: keyid:A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5f:d2:e0:4b:b8:5b:9b:0a:ce:66:3f:e9:02:3c:ad:16:da: 3d:3f:98:10:1c:a2:7b:8e:6c:4a:a0:98:2c:ed:16:58:19:5d: 2d:9e:22:f9:09:86:c9:26:4c:ee:49:e5:8d:28:1d:4a:ee:3d: 9a:67:71:a1:88:e0:fa:57:3b:a5:cd:8a:bf:9d:f8:33:6e:bf: 52:5c:1c:ab:fe:1e:27:ed:c9:de:7b:be:af:2f:85:65:97:e6: f7:7b:3c:a6:cc:24:b0:72:7a:e7:0d:a1:04:db:3f:ab:45:40: 7c:0b:82:77:1e:d2:72:0e:e6:e2:9f:a9:e9:1c:57:8e:91:7c: 84:09:97:d4:77:0d:29:15:d8:f8:84:2d:8d:39:3f:b3:d9:16: d4:70:e6:ac:ef:4e:8d:20:6c:61:93:4d:fe:d8:94:a3:5f:89: 43:53:a0:a6:59:b3:4f:4a:04:12:55:02:0e:31:37:08:a5:57: 44:00:7b:7f:3b:d9:52:e5:6b:42:6c:01:ba:89:33:17:25:6e: 58:3c:0e:d5:7b:8d:2c:a7:b1:8f:03:fc:97:c3:c1:f9:e5:93: 49:c8:10:88:5d:3d:0c:46:a1:7d:c5:31:af:1c:53:70:60:e8: d1:17:0d:7c:31:bb:69:0c:5c:47:6f:ef:97:e8:11:15:a9:06: 44:0f:2c:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCXtBiq1uybTN2tkT1ChNlpEy/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVF Rjg5RDUxMzAeFw0yNTA4MTAxMjM1NTNaFw0yNTA4MTMyMTAwNTNaMDMxMTAvBgNV BAMTKERCRkU5OUE4NTE0NUMyRENCNkM4RDdCQUE2RjZDQjQzMUU4MTcyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbPz2lM9uvTh39cPRsHjYzlSF5 a3pwk/UAPkiIRyrglUSdLeSWFvmnVUYreAX5Q/EVgOM/4Og9DjhvM55BwCU66GwS o4dgavoHXIdAd0oPf/i7iMSO+vxR7yPz6gPP8WeRwUMkLmNAZJJllRTUDI+IW+t0 LtlBUjiD6JoTP5/oUOSSjq/DXVRKGIJeOTSTqs3+zF0jc6q/07NtunDJjBMAq1Em 4N/YJtsPtnMGHEvgidvyXjaB/0G4V1lyZ58Ggmv+jenDAnPlU8NXLz/P1M9q711O jydoEP/hZFosdue672jazqE9kSdhjqd0BoLcpz9zMcj+HEqD2bn4cflqcaFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2/6ZqFFFwty2yNe6pvbLQx6BcjUwHwYDVR0j BBgwFoAUpwcjyH0sJ7lb5iJ8Yx59he+J1RMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMC9BNzA3MjNDODdE MkMyN0I5NUJFNjIyN0M2MzFFN0Q4NUVGODlENTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVFRjg5 RDUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdE ODVFRjg5RDUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpf0uBLuFubCs5mP+kCPK0W2j0/mBAconuO bEqgmCztFlgZXS2eIvkJhskmTO5J5Y0oHUruPZpncaGI4PpXO6XNir+d+DNuv1Jc HKv+Hiftyd57vq8vhWWX5vd7PKbMJLByeucNoQTbP6tFQHwLgnce0nIO5uKfqekc V46RfIQJl9R3DSkV2PiELY05P7PZFtRw5qzvTo0gbGGTTf7YlKNfiUNToKZZs09K BBJVAg4xNwilV0QAe3872VLla0JsAbqJMxclblg8DtV7jSynsY8D/JfDwfnlk0nI EIhdPQxGoX3FMa8cU3Bg6NEXDXwxu2kMXEdv75foERWpBkQPLAs= -----END CERTIFICATE-----Generated at Tue Aug 12 18:54:00 2025 by rpki-client