$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: a2vl9ZRRn0IoEfEOCMdCol/+G5L23njxrXcgcali5i4= Subject key identifier: C7:95:13:34:B9:B4:2A:11:75:B7:67:25:D7:43:6B:8E:47:00:94:C8 Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 3D6B91EFC4E118336237E21E0043CF6BF49F1CCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 0290 Signing time: Thu 07 Aug 2025 11:20:40 +0000 Manifest this update: Thu 07 Aug 2025 11:15:40 +0000 Manifest next update: Sun 10 Aug 2025 12:07:40 +0000 Files and hashes: 1: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: eCdG1eh5XGchbWY5BWPAzDUJOgvWg7cNH/Pli7tr1YU=) 2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 12:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6b:91:ef:c4:e1:18:33:62:37:e2:1e:00:43:cf:6b:f4:9f:1c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Aug 7 11:15:40 2025 GMT Not After : Aug 10 12:07:40 2025 GMT Subject: CN=C7951334B9B42A1175B76725D7436B8E470094C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:88:7e:8f:68:9d:e3:b3:26:7a:81:88:0f: ca:65:e9:8f:b0:66:00:eb:d0:1b:cd:70:de:37:e9: 87:42:f2:9f:b3:66:e1:cc:90:f5:ab:a4:22:8c:44: b2:83:cf:21:cf:9f:91:3e:32:56:9a:fd:ae:5d:62: d8:ea:5e:e2:58:ed:ff:c7:1e:2f:52:6e:d1:8a:96: 6c:a8:44:2e:43:4a:63:b1:d7:01:69:2d:9d:27:91: 57:37:26:70:4f:9c:73:30:e9:f4:55:73:af:dd:06: d3:94:bf:bb:02:45:47:a1:91:a3:63:e2:47:17:af: 2f:fe:9e:ab:8c:d5:44:f3:22:10:5e:25:2a:0b:2f: c8:0a:1d:91:24:8a:5c:c1:79:d5:0e:07:c2:4b:dc: 1d:8c:61:8d:41:2d:04:77:28:5b:2d:e4:b5:2f:26: e9:d5:3e:f7:6c:44:e1:49:b4:91:25:47:4c:c8:04: 0b:5e:f8:b5:bf:3d:6c:ab:b4:56:d1:74:e7:0a:72: ea:7a:bd:e6:35:1b:26:99:0a:81:0b:30:04:b8:49: 63:ba:c4:11:79:0d:30:44:7a:b5:29:8c:5f:c1:b4: c9:96:4e:84:ec:7c:ff:59:a2:fe:6e:fe:a6:20:85: f5:8f:e7:ed:62:55:73:29:8f:67:52:3f:e0:45:e9: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:95:13:34:B9:B4:2A:11:75:B7:67:25:D7:43:6B:8E:47:00:94:C8 X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:27:af:5d:42:d3:c8:0c:18:d2:68:da:c9:96:18:db:ee:cc: f4:c1:5e:59:eb:ae:89:b8:02:4f:5b:b0:2c:b1:d6:64:c7:a7: 7c:dc:17:c0:dd:48:6f:32:66:12:2f:61:0d:69:ff:71:50:e4: 15:b3:9c:67:56:a3:ce:53:c3:56:c6:b3:a4:ed:a6:6b:6c:4c: b3:ec:ba:af:7c:91:28:24:39:f1:b3:da:b5:59:c8:88:db:7f: b7:c0:0b:84:f0:3a:4d:e5:cd:1f:f0:71:bb:0b:d1:83:12:5e: aa:60:39:a4:3a:3f:e7:5f:9e:a1:22:10:d0:1b:1f:d3:1c:0d: c3:ba:9f:3c:a6:f6:28:b7:8d:6b:90:2c:1e:04:88:f4:c8:20: e4:62:3b:2c:d0:db:d9:24:e9:32:e8:44:ce:71:3a:10:df:d3: 61:2f:d4:44:e4:ce:2c:67:53:72:9b:c9:3f:2e:0c:05:99:5d: 9a:de:87:5c:b6:fd:84:31:00:94:ac:7f:23:9e:5e:b1:66:86: 07:bf:1c:1b:50:e7:7e:0b:cf:50:e3:28:bc:a1:8c:23:d1:94: bf:93:65:7c:f7:50:29:01:a1:b0:c6:73:ca:15:42:98:3d:68: f0:74:f6:30:d0:43:48:be:04:8a:8a:a6:7d:37:19:fd:28:19: ea:c6:84:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWuR78ThGDNiN+IeAEPPa/SfHMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTA4MDcxMTE1NDBaFw0yNTA4MTAxMjA3NDBaMDMxMTAvBgNV BAMTKEM3OTUxMzM0QjlCNDJBMTE3NUI3NjcyNUQ3NDM2QjhFNDcwMDk0QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uYh+j2id47MmeoGID8pl6Y+w ZgDr0BvNcN436YdC8p+zZuHMkPWrpCKMRLKDzyHPn5E+Mlaa/a5dYtjqXuJY7f/H Hi9SbtGKlmyoRC5DSmOx1wFpLZ0nkVc3JnBPnHMw6fRVc6/dBtOUv7sCRUehkaNj 4kcXry/+nquM1UTzIhBeJSoLL8gKHZEkilzBedUOB8JL3B2MYY1BLQR3KFst5LUv JunVPvdsROFJtJElR0zIBAte+LW/PWyrtFbRdOcKcup6veY1GyaZCoELMAS4SWO6 xBF5DTBEerUpjF/BtMmWToTsfP9Zov5u/qYghfWP5+1iVXMpj2dSP+BF6SFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx5UTNLm0KhF1t2cl10NrjkcAlMgwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAnr11C08gMGNJo2smWGNvuzPTBXlnrrom4 Ak9bsCyx1mTHp3zcF8DdSG8yZhIvYQ1p/3FQ5BWznGdWo85Tw1bGs6TtpmtsTLPs uq98kSgkOfGz2rVZyIjbf7fAC4TwOk3lzR/wcbsL0YMSXqpgOaQ6P+dfnqEiENAb H9McDcO6nzym9ii3jWuQLB4EiPTIIORiOyzQ29kk6TLoRM5xOhDf02Ev1ETkzixn U3KbyT8uDAWZXZreh1y2/YQxAJSsfyOeXrFmhge/HBtQ534Lz1DjKLyhjCPRlL+T ZXz3UCkBobDGc8oVQpg9aPB09jDQQ0i+BIqKpn03Gf0oGerGhEA= -----END CERTIFICATE-----Generated at Fri Aug 8 10:09:38 2025 by rpki-client