$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft File: 70FE5658A7C2993DC505F75545A128384472227E.mft (raw, json) Hash identifier: MvQegvsmBRxAwuluohZgAaOZimaAIjM331kMQUxXHxg= Subject key identifier: D2:14:8F:1F:06:8E:FC:E7:DA:9F:CE:35:45:DC:13:92:E5:3F:CE:B9 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 3542309330D66106BF06677CCDCA05AB8FDB523D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft Manifest number: 0227 Signing time: Fri 25 Apr 2025 20:11:12 +0000 Manifest this update: Fri 25 Apr 2025 20:06:12 +0000 Manifest next update: Tue 29 Apr 2025 04:50:12 +0000 Files and hashes: 1: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: VpIKxGpnGG5kY+TxgaFm5MAMJ5OPwOweNd+seLyS58Q=) 2: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Q5pvwdFKL1lgBG6fYcr2yl0tesQth6vA5guIwHg8TXM=) 3: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: gLStYnptht5TyqoGXBL5Rk0CVBS4ZoGmnO4HsnZPkL0=) 4: 70FE5658A7C2993DC505F75545A128384472227E.crl (hash: 7J0128IjA5r/l9Oe8BxXzK2RiFoL74OauJZbSRL0nHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 04:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:42:30:93:30:d6:61:06:bf:06:67:7c:cd:ca:05:ab:8f:db:52:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Apr 25 20:06:12 2025 GMT Not After : Apr 29 04:50:12 2025 GMT Subject: CN=D2148F1F068EFCE7DA9FCE3545DC1392E53FCEB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:f5:13:bf:b7:21:24:6f:3e:b9:53:39:52: 66:bd:52:72:97:a1:c3:a5:bf:0a:72:7c:bf:fe:a0: 0b:f4:45:b1:59:50:a2:8b:f0:b2:11:20:d9:cf:e9: 4c:fc:7f:b6:1a:83:7e:39:3e:b7:9a:83:15:a8:7b: d3:53:bd:28:45:88:e6:5a:b3:89:e2:80:5c:f9:b8: 54:92:1a:52:53:24:05:4f:40:82:e5:db:bb:a6:4e: 31:c9:22:21:d8:40:d8:da:5c:fa:c2:0e:31:9a:f8: 46:00:6e:7e:d3:9b:b8:69:0c:c0:6f:f4:d7:81:c8: d4:9f:6c:1e:c0:06:fd:98:3b:6d:28:2b:52:28:84: 8c:f6:0c:19:1e:bb:06:50:25:ab:db:c8:f2:c2:e2: 68:c8:3d:37:33:b6:cb:7a:37:b0:11:72:52:7b:52: 2b:7f:bc:aa:23:07:9b:da:0f:ad:40:da:63:b1:ba: cf:65:a9:fe:76:27:5a:f4:4e:38:f6:de:f0:03:42: 87:dd:b3:d8:62:08:f7:1f:96:de:e2:53:84:8d:60: 68:4e:00:26:ff:41:dd:46:10:ab:e7:92:c9:b5:2f: 01:de:0b:d4:e5:e7:06:c6:31:74:42:8b:bd:d8:b7: 5a:69:d0:3c:13:77:4a:b4:c3:1b:0b:bb:90:45:53: e3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:14:8F:1F:06:8E:FC:E7:DA:9F:CE:35:45:DC:13:92:E5:3F:CE:B9 X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b3:0e:0b:40:88:b0:03:1e:e1:86:b3:12:fe:ab:2b:0a:36: 1a:f1:70:1a:e4:7d:f9:c7:0c:4b:b2:58:0f:19:10:64:8b:c9: ec:48:45:bc:16:cf:c4:c0:31:f7:f8:c9:55:8a:89:ee:a7:93: 06:4e:13:9d:64:38:91:3c:d5:44:cd:f5:2d:1e:e9:96:b6:d2: a6:6d:ad:ff:1e:d2:e4:d1:29:61:2c:96:aa:08:5c:3f:3b:d6: 97:57:f0:56:f5:e7:9d:bd:97:b8:51:7c:6b:30:3b:f6:3a:cf: 28:29:70:67:03:cb:c0:51:6b:f5:c3:de:7f:68:a1:e4:bf:55: 63:30:2b:29:14:cf:ba:1a:ae:52:d0:74:76:9e:90:b8:49:d9: 4d:02:05:1c:1f:67:d4:b9:dc:9e:cb:dd:df:d6:90:0e:2a:07: 72:4a:2c:64:b8:73:c8:62:dd:04:8a:2f:7e:10:b1:85:1e:fb: 75:3c:68:4c:2a:8f:f7:fc:43:44:72:56:1a:58:8c:e8:0f:ef: 43:c8:a3:19:47:82:56:8d:d8:e2:c7:75:aa:e5:f6:37:9a:fa: 57:0c:74:40:5e:5f:fe:ae:e0:8d:50:84:a0:cf:0a:7d:ee:42: 65:6b:72:21:28:5e:1a:4d:00:0b:4b:ab:f1:d9:0d:62:12:7d: e9:72:bd:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNUIwkzDWYQa/Bmd8zcoFq4/bUj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNTA0MjUyMDA2MTJaFw0yNTA0MjkwNDUwMTJaMDMxMTAvBgNV BAMTKEQyMTQ4RjFGMDY4RUZDRTdEQTlGQ0UzNTQ1REMxMzkyRTUzRkNFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYg/UTv7chJG8+uVM5Uma9UnKX ocOlvwpyfL/+oAv0RbFZUKKL8LIRINnP6Uz8f7Yag345PreagxWoe9NTvShFiOZa s4nigFz5uFSSGlJTJAVPQILl27umTjHJIiHYQNjaXPrCDjGa+EYAbn7Tm7hpDMBv 9NeByNSfbB7ABv2YO20oK1IohIz2DBkeuwZQJavbyPLC4mjIPTcztst6N7ARclJ7 Uit/vKojB5vaD61A2mOxus9lqf52J1r0Tjj23vADQofds9hiCPcflt7iU4SNYGhO ACb/Qd1GEKvnksm1LwHeC9Tl5wbGMXRCi73Yt1pp0DwTd0q0wxsLu5BFU+N9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0hSPHwaO/Ofan841RdwTkuU/zrkwHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4 Mzg0NDcyMjI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuzDgtAiLADHuGGsxL+qysKNhrxcBrkffnH DEuyWA8ZEGSLyexIRbwWz8TAMff4yVWKie6nkwZOE51kOJE81UTN9S0e6Za20qZt rf8e0uTRKWEslqoIXD871pdX8Fb15529l7hRfGswO/Y6zygpcGcDy8BRa/XD3n9o oeS/VWMwKykUz7oarlLQdHaekLhJ2U0CBRwfZ9S53J7L3d/WkA4qB3JKLGS4c8hi 3QSKL34QsYUe+3U8aEwqj/f8Q0RyVhpYjOgP70PIoxlHglaN2OLHdarl9jea+lcM dEBeX/6u4I1QhKDPCn3uQmVrciEoXhpNAAtLq/HZDWISfelyvZY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:44 2025 by rpki-client