$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: zBj/p/P4qlOduG5GsDg6deZxKRl0fxr8eG9g0EC66F0= Subject key identifier: CF:83:C6:A9:7F:71:0D:39:A2:26:90:B6:CE:02:CB:D5:81:CD:B0:F4 Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 4C1CF82A689D79A9633CFA2FEF5D4BF2D2417770 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 02B7 Signing time: Tue 04 Nov 2025 04:40:38 +0000 Manifest this update: Tue 04 Nov 2025 04:35:38 +0000 Manifest next update: Fri 07 Nov 2025 05:15:38 +0000 Files and hashes: 1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=) 2: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: 4co6nqmHHlb4VDSAKFoXK+a9sDR1OrAQ5a+9ZBAoMSE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:1c:f8:2a:68:9d:79:a9:63:3c:fa:2f:ef:5d:4b:f2:d2:41:77:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Nov 4 04:35:38 2025 GMT Not After : Nov 7 05:15:38 2025 GMT Subject: CN=CF83C6A97F710D39A22690B6CE02CBD581CDB0F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:53:7d:af:f4:54:4c:b6:4f:2e:2c:ee:15:74: 60:ba:20:30:d1:46:38:4d:58:a5:c5:02:a3:60:67: 92:1a:30:32:17:c4:1b:08:1a:92:f1:af:61:f6:c6: 68:26:b9:66:ed:d7:3f:f9:a5:bd:f0:ea:e6:1e:e8: 1f:c7:3c:bd:93:31:df:db:c5:b4:96:3b:45:b2:2f: 45:4d:6c:27:26:bf:45:ae:cb:67:39:55:96:27:5f: a6:cb:28:2c:6d:94:d7:8e:fe:e7:ac:d3:2c:60:4e: ef:04:eb:d1:3b:b2:bf:5c:5d:87:31:f7:e5:fe:21: c4:d5:0a:61:35:5b:f8:e8:dc:53:c3:65:e2:a1:50: e4:37:a8:22:b5:38:88:f5:57:90:cb:e4:53:dd:44: 71:ff:1e:1c:3c:fe:b1:7b:76:6b:d7:77:8e:90:fc: 2e:fd:7b:8a:ef:76:1c:2b:a1:b1:5e:1c:21:82:c0: a2:2d:93:ef:f5:df:72:7d:0e:ab:d2:bb:9f:51:53: e4:6e:e9:3a:01:22:fc:64:f1:4b:2b:9b:a3:2d:72: 73:81:86:c7:9b:46:30:0a:59:2f:ae:76:60:7c:d8: 2c:51:21:0d:b1:ae:dc:7c:ea:69:01:8c:6e:be:21: 32:d2:32:d5:2e:92:fc:d9:73:8a:b2:71:20:f8:57: 9c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:83:C6:A9:7F:71:0D:39:A2:26:90:B6:CE:02:CB:D5:81:CD:B0:F4 X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:30:18:d1:20:fa:5d:82:f4:0e:eb:6e:5c:62:3b:73:29:79: 28:e0:d9:a8:fa:4f:c6:71:1c:d7:a9:e6:a9:75:1f:a3:fb:7a: 8e:a7:0e:73:a7:4b:9b:23:59:0c:90:df:de:f5:fd:03:76:65: 6c:bf:47:58:7f:f4:0b:db:e8:81:5b:36:c7:b6:56:32:6c:f7: cd:7b:af:38:dc:dc:9a:9c:26:dd:fc:d5:52:e0:c1:b2:76:78: f8:e0:02:30:fe:19:71:57:12:59:94:12:7a:ed:40:58:1a:c6: be:1d:05:a7:3c:42:20:3c:9e:c9:d9:09:3d:87:9f:2d:4e:e6: bd:c9:be:b2:95:e4:5f:f2:50:87:17:ce:d6:e6:4e:f9:7c:47: 3e:ba:c0:74:3d:38:6b:a1:19:25:a5:16:f9:c0:e5:7a:4a:65: 2e:21:e1:a8:26:59:3d:d8:4f:0b:45:29:2b:7a:fd:4a:bc:92: 3b:89:72:9d:e8:aa:f2:6b:18:f1:35:df:62:d8:37:40:07:ee: 1b:46:01:09:75:3b:95:33:ba:0d:8f:0e:f4:67:5b:2b:2e:e7: d0:92:e9:44:17:68:37:58:d0:33:f0:7f:7b:e8:ab:ae:94:c0: 1a:69:8a:ce:cd:f2:8c:8e:bb:9a:f0:39:58:a5:ec:c7:56:ce: ec:73:a6:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBz4KmidealjPPov711L8tJBd3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTExMDQwNDM1MzhaFw0yNTExMDcwNTE1MzhaMDMxMTAvBgNV BAMTKENGODNDNkE5N0Y3MTBEMzlBMjI2OTBCNkNFMDJDQkQ1ODFDREIwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqU32v9FRMtk8uLO4VdGC6IDDR RjhNWKXFAqNgZ5IaMDIXxBsIGpLxr2H2xmgmuWbt1z/5pb3w6uYe6B/HPL2TMd/b xbSWO0WyL0VNbCcmv0Wuy2c5VZYnX6bLKCxtlNeO/ues0yxgTu8E69E7sr9cXYcx 9+X+IcTVCmE1W/jo3FPDZeKhUOQ3qCK1OIj1V5DL5FPdRHH/Hhw8/rF7dmvXd46Q /C79e4rvdhwrobFeHCGCwKItk+/133J9DqvSu59RU+Ru6ToBIvxk8Usrm6MtcnOB hsebRjAKWS+udmB82CxRIQ2xrtx86mkBjG6+ITLSMtUukvzZc4qycSD4V5zJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz4PGqX9xDTmiJpC2zgLL1YHNsPQwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0wGNEg+l2C9A7rblxiO3MpeSjg2aj6T8Zx HNep5ql1H6P7eo6nDnOnS5sjWQyQ3971/QN2ZWy/R1h/9Avb6IFbNse2VjJs9817 rzjc3JqcJt381VLgwbJ2ePjgAjD+GXFXElmUEnrtQFgaxr4dBac8QiA8nsnZCT2H ny1O5r3JvrKV5F/yUIcXztbmTvl8Rz66wHQ9OGuhGSWlFvnA5XpKZS4h4agmWT3Y TwtFKSt6/Uq8kjuJcp3oqvJrGPE132LYN0AH7htGAQl1O5Uzug2PDvRnWysu59CS 6UQXaDdY0DPwf3voq66UwBppis7N8oyOu5rwOVil7MdWzuxzpmE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:08 2025 by rpki-client