$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: OdZRsk9t1nYEGeyUam27smyafODnxvwwAH/v1ULYhuU= Subject key identifier: 43:99:B4:87:7D:A7:9F:63:C4:D8:06:FC:B3:1D:CB:28:C2:64:EB:D6 Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 12608C735C2C134A0AC9F5E8ED41CCB9FCE1317C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 0278 Signing time: Fri 13 Jun 2025 16:30:37 +0000 Manifest this update: Fri 13 Jun 2025 16:25:37 +0000 Manifest next update: Tue 17 Jun 2025 03:02:37 +0000 Files and hashes: 1: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: NphR+D0H6P0i/ty9B4ft/Y5G+q0IP6H2DsyS/9S4+6w=) 2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 03:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:60:8c:73:5c:2c:13:4a:0a:c9:f5:e8:ed:41:cc:b9:fc:e1:31:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Jun 13 16:25:37 2025 GMT Not After : Jun 17 03:02:37 2025 GMT Subject: CN=4399B4877DA79F63C4D806FCB31DCB28C264EBD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:28:9a:eb:06:ec:c9:51:97:ff:a7:16:0b: 7c:42:d7:73:ff:f5:45:11:45:1c:b8:77:14:69:47: 36:13:0f:d8:b8:19:cf:ee:24:3c:72:df:2a:da:03: e3:d3:1e:6d:c2:26:5f:9f:59:35:19:b2:e8:f8:4e: 69:ce:c2:f9:8f:1e:20:c4:8b:70:4d:7f:b3:d0:69: 15:8d:58:e6:e2:c6:3a:eb:d6:9e:be:b4:5a:b3:97: ac:b3:b0:3f:8f:44:de:ba:bd:73:7e:58:af:7f:db: c1:9b:91:13:dd:5e:b3:73:6e:71:78:a5:17:14:69: f3:28:f1:66:dc:30:aa:51:9b:5d:90:4e:e8:1e:85: b4:27:c8:6d:3f:8e:ce:69:2b:f5:e8:72:d3:57:aa: 24:25:65:5c:df:ba:c7:5f:88:94:55:f8:e5:b4:eb: f1:1b:bf:96:cc:29:3f:41:8d:8c:aa:f3:5d:8c:ac: b0:cb:88:31:9e:b8:d4:c2:01:97:8a:ab:42:53:a8: 22:8e:25:90:b1:38:16:92:08:f0:4d:c4:dc:38:05: 91:bf:58:b1:bb:0d:59:9f:45:c6:25:49:8d:26:a6: 82:3d:e2:20:71:85:73:64:d1:2d:c0:36:a8:65:85: d1:95:41:60:6c:54:7e:81:ce:2d:65:f0:46:82:76: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:99:B4:87:7D:A7:9F:63:C4:D8:06:FC:B3:1D:CB:28:C2:64:EB:D6 X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b1:6e:e9:f4:fc:67:5e:89:c4:b3:5e:ea:c3:e8:48:1e:04: 0d:d1:91:2e:50:16:b8:57:36:07:d2:fe:7d:fa:30:27:66:77: 3d:61:03:12:11:7e:ba:9c:01:a2:0f:1d:22:86:54:e5:ee:b9: 57:d5:ca:a0:fa:3a:dc:ec:04:c2:dd:3a:09:7d:31:d3:c4:b4: df:44:46:98:36:84:e6:9e:bf:ff:af:ce:f8:78:cf:86:39:ac: 41:06:b6:92:63:b4:aa:ca:73:41:85:1f:68:55:90:49:2f:90: 7b:39:d5:5a:2e:a1:c5:ad:bd:d1:f3:29:01:d9:b8:03:6a:72: 4d:8f:ed:5e:1d:59:b7:02:b4:61:93:ca:69:72:4f:a2:08:07: 05:be:06:93:6b:e3:23:74:35:11:43:f5:06:68:c5:76:21:93: 31:b8:7e:c5:d7:d8:9d:2d:a3:e9:93:78:93:31:22:f5:24:30: a2:54:df:ad:3d:dd:db:5b:19:ab:e1:55:f1:b5:47:58:66:02: 85:34:70:36:06:a2:24:1e:85:07:b1:d1:12:6b:c9:f8:63:4a: 64:c3:26:99:f3:6b:bf:d1:70:19:2b:e3:a4:62:d7:b0:88:0d: ea:9c:e5:a4:74:99:c0:e5:80:39:97:e1:32:0b:ea:46:38:ce: fd:2a:01:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmCMc1wsE0oKyfXo7UHMufzhMXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNTA2MTMxNjI1MzdaFw0yNTA2MTcwMzAyMzdaMDMxMTAvBgNV BAMTKDQzOTlCNDg3N0RBNzlGNjNDNEQ4MDZGQ0IzMURDQjI4QzI2NEVCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivyia6wbsyVGX/6cWC3xC13P/ 9UURRRy4dxRpRzYTD9i4Gc/uJDxy3yraA+PTHm3CJl+fWTUZsuj4TmnOwvmPHiDE i3BNf7PQaRWNWObixjrr1p6+tFqzl6yzsD+PRN66vXN+WK9/28GbkRPdXrNzbnF4 pRcUafMo8WbcMKpRm12QTugehbQnyG0/js5pK/XoctNXqiQlZVzfusdfiJRV+OW0 6/Ebv5bMKT9BjYyq812MrLDLiDGeuNTCAZeKq0JTqCKOJZCxOBaSCPBNxNw4BZG/ WLG7DVmfRcYlSY0mpoI94iBxhXNk0S3ANqhlhdGVQWBsVH6Bzi1l8EaCduF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ5m0h32nn2PE2Ab8sx3LKMJk69YwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKxbun0/GdeicSzXurD6EgeBA3RkS5QFrhX NgfS/n36MCdmdz1hAxIRfrqcAaIPHSKGVOXuuVfVyqD6OtzsBMLdOgl9MdPEtN9E Rpg2hOaev/+vzvh4z4Y5rEEGtpJjtKrKc0GFH2hVkEkvkHs51VouocWtvdHzKQHZ uANqck2P7V4dWbcCtGGTymlyT6IIBwW+BpNr4yN0NRFD9QZoxXYhkzG4fsXX2J0t o+mTeJMxIvUkMKJU36093dtbGavhVfG1R1hmAoU0cDYGoiQehQex0RJryfhjSmTD Jpnza7/RcBkr46Ri17CIDeqc5aR0mcDlgDmX4TIL6kY4zv0qATg= -----END CERTIFICATE-----Generated at Sun Jun 15 17:57:11 2025 by rpki-client