$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft File: B70932ED6C688D58897E32E1D5C990B20910FF02.mft (raw, json) Hash identifier: PJLiFEmoIJHOfrL9sIVDQNujK495z3HIHjBgminzakk= Subject key identifier: 3E:6C:C8:49:70:4C:46:38:51:09:C9:B5:B2:8B:51:29:88:A4:81:24 Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 Certificate issuer: /CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Certificate serial: 48F955B309CBA764C6DCED48B5D7253A09896932 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft Manifest number: 019A Signing time: Fri 08 Aug 2025 23:12:15 +0000 Manifest this update: Fri 08 Aug 2025 23:07:15 +0000 Manifest next update: Tue 12 Aug 2025 02:33:15 +0000 Files and hashes: 1: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: D7YG7GtU8OdbibrqJfPY6iiVpoIqqq1mmvO/Oo1ZWAQ=) 2: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: b+1ENA1CQV0UHypRXPMfHhHTGiVgtOzzvTXY/wFcyPw=) 3: B70932ED6C688D58897E32E1D5C990B20910FF02.crl (hash: WAJXUlF73/78Y07sIKq7hJmh4GFnqCXirOOP7Ud3biw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f9:55:b3:09:cb:a7:64:c6:dc:ed:48:b5:d7:25:3a:09:89:69:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02 Validity Not Before: Aug 8 23:07:15 2025 GMT Not After : Aug 12 02:33:15 2025 GMT Subject: CN=3E6CC849704C46385109C9B5B28B512988A48124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:eb:bd:d3:8c:d6:d6:0b:6f:2e:ba:21:92: 11:f9:44:f0:f1:4a:7c:6a:14:c7:d7:1f:f9:95:53: 44:fc:e9:98:a3:98:42:61:98:cb:c3:9c:69:91:49: af:0d:ad:96:41:e5:65:66:ec:96:49:30:68:ba:ca: db:bb:28:c4:5f:84:e2:67:1b:49:4c:af:06:10:8f: e8:59:ab:12:6e:24:cb:62:b3:e7:b7:dd:ac:93:1f: 78:bf:8c:12:03:59:50:70:63:f1:48:eb:a4:97:eb: e7:bf:8c:d8:26:ef:2a:0d:fe:0d:6b:77:a5:cf:73: d3:cf:4d:06:a8:98:5a:85:55:b5:61:9c:d9:be:71: 7e:77:7e:78:98:89:f0:72:21:9e:ed:1d:54:2e:44: be:dd:29:fb:2a:7b:03:cb:2b:ed:a3:d0:81:8c:ef: 16:63:08:df:1c:1a:1b:c4:74:2d:2f:59:dc:fc:3d: b4:2f:d1:c0:cb:52:cb:36:67:78:d8:73:78:f3:cc: b5:3e:36:62:44:6c:f1:52:2f:25:5e:13:4c:6c:b3: f7:20:0a:d4:c5:2b:2b:d2:eb:ba:53:06:26:ee:3b: 35:6c:8e:32:6f:ba:1c:64:fb:6f:38:52:ae:55:ae: cb:eb:4e:bc:48:b0:23:03:db:45:a6:35:84:c5:61: 33:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6C:C8:49:70:4C:46:38:51:09:C9:B5:B2:8B:51:29:88:A4:81:24 X509v3 Authority Key Identifier: keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5f:47:35:13:3f:c0:0b:dd:2d:84:45:5f:4a:31:d7:f8:2d: 0c:82:1e:72:44:ab:17:29:50:36:3f:85:5e:c9:5f:ef:ee:db: 77:72:28:d9:d8:0c:1a:a9:b4:71:17:dc:b0:5f:6e:3d:03:e6: 8c:e5:eb:3d:36:20:59:b6:b1:69:7c:77:04:28:75:f5:f7:0e: 59:cd:b7:6a:07:f7:f7:97:6c:d2:64:a0:ce:d5:82:f4:2e:a3: 1c:a3:d4:26:02:c2:8c:40:13:b5:fa:8d:39:7c:47:17:69:f9: 12:b1:dd:0b:51:90:ad:f0:0a:f8:f5:db:74:04:98:ae:81:24: f2:73:30:7f:38:bd:51:78:0e:17:23:8f:66:e9:8b:22:a3:2c: 48:3b:a6:0b:a7:0f:c6:72:7a:e0:a0:b3:69:aa:2e:10:49:82: 88:bb:17:76:c9:57:88:a4:5b:52:ba:fa:41:ea:19:0b:69:a2: 44:f8:d3:38:30:5a:b8:e7:b7:24:f7:94:30:88:0a:87:56:e5: 1a:6e:fd:ff:e5:3e:f7:a3:a2:b4:04:a7:b4:22:b3:ea:6e:5c: 1e:ac:81:d5:35:24:4c:9c:0a:d9:33:66:d8:c6:49:ab:cd:62: f3:c5:67:35:9d:dd:e7:a4:62:36:fc:0d:9f:01:95:69:52:94: 74:82:1f:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPlVswnLp2TG3O1ItdclOgmJaTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIw OTEwRkYwMjAeFw0yNTA4MDgyMzA3MTVaFw0yNTA4MTIwMjMzMTVaMDMxMTAvBgNV BAMTKDNFNkNDODQ5NzA0QzQ2Mzg1MTA5QzlCNUIyOEI1MTI5ODhBNDgxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtl+u904zW1gtvLrohkhH5RPDx SnxqFMfXH/mVU0T86ZijmEJhmMvDnGmRSa8NrZZB5WVm7JZJMGi6ytu7KMRfhOJn G0lMrwYQj+hZqxJuJMtis+e33ayTH3i/jBIDWVBwY/FI66SX6+e/jNgm7yoN/g1r d6XPc9PPTQaomFqFVbVhnNm+cX53fniYifByIZ7tHVQuRL7dKfsqewPLK+2j0IGM 7xZjCN8cGhvEdC0vWdz8PbQv0cDLUss2Z3jYc3jzzLU+NmJEbPFSLyVeE0xss/cg CtTFKyvS67pTBibuOzVsjjJvuhxk+284Uq5VrsvrTrxIsCMD20WmNYTFYTMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPmzISXBMRjhRCcm1sotRKYikgSQwHwYDVR0j BBgwFoAUtwky7WxojViJfjLh1cmQsgkQ/wIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTkwZGE0OS05ODYyLTQxZGUtODMzZS1iMzA0ZjBjMWFlNTcvMC9CNzA5MzJFRDZD Njg4RDU4ODk3RTMyRTFENUM5OTBCMjA5MTBGRjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIwOTEw RkYwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz M2UtYjMwNGYwYzFhZTU3LzAvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkw QjIwOTEwRkYwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJfRzUTP8AL3S2ERV9KMdf4LQyCHnJEqxcp UDY/hV7JX+/u23dyKNnYDBqptHEX3LBfbj0D5ozl6z02IFm2sWl8dwQodfX3DlnN t2oH9/eXbNJkoM7VgvQuoxyj1CYCwoxAE7X6jTl8Rxdp+RKx3QtRkK3wCvj123QE mK6BJPJzMH84vVF4Dhcjj2bpiyKjLEg7pgunD8ZyeuCgs2mqLhBJgoi7F3bJV4ik W1K6+kHqGQtpokT40zgwWrjntyT3lDCICodW5Rpu/f/lPvejorQEp7Qis+puXB6s gdU1JEycCtkzZtjGSavNYvPFZzWd3eekYjb8DZ8BlWlSlHSCHzA= -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:12 2025 by rpki-client