$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft File: C70A343932991281F91796DB87B011987603BBF4.mft (raw, json) Hash identifier: 51e6ZVivduoCJI/eyiHkCRFC5XkSIvYyI3AxrZFrHgc= Subject key identifier: 3A:DB:45:11:1C:D4:91:27:74:9E:D8:07:2F:F5:4C:8D:1A:76:81:95 Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4 Certificate serial: 0E6811D8D847E87A735C380C6F8DEBF822E96CDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft Manifest number: 0202 Signing time: Sun 15 Jun 2025 02:51:31 +0000 Manifest this update: Sun 15 Jun 2025 02:46:31 +0000 Manifest next update: Wed 18 Jun 2025 05:29:31 +0000 Files and hashes: 1: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 7CE9BXOCk+npQ95V1OHYui5nCFjD3JZ2DBCvcvu4/Kk=) 2: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: TB7U9GvlAmHnGk0/8JpxDBGjqTq2O6M0WEaScBuoS/g=) 3: C70A343932991281F91796DB87B011987603BBF4.crl (hash: 4PX2lOoIcf0/ixzj3vLLzYoYTSgVj3lGG1ErnfaBw/E=) 4: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: K/te+OOqq38HfLYFBM6maqhYABgY51ViE5jJN8jRKPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:68:11:d8:d8:47:e8:7a:73:5c:38:0c:6f:8d:eb:f8:22:e9:6c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70A343932991281F91796DB87B011987603BBF4 Validity Not Before: Jun 15 02:46:31 2025 GMT Not After : Jun 18 05:29:31 2025 GMT Subject: CN=3ADB45111CD49127749ED8072FF54C8D1A768195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:b9:8d:6e:dd:8d:d6:1a:d7:db:30:86:74: 32:d0:ec:5d:a1:1e:43:26:fb:00:34:d0:7f:62:b8: d3:f2:68:f1:5e:da:bf:a1:40:bf:f0:b2:c8:68:a9: 8a:35:6a:21:e0:26:5e:23:b8:75:12:cc:6b:4d:26: 54:7a:61:e4:c5:3f:df:c0:dd:fc:8a:1b:bb:61:55: e8:bd:ec:9f:e9:8e:71:1f:12:8a:8d:e8:45:33:88: 5b:73:12:3a:34:c7:75:7b:66:3a:d9:5d:61:71:9d: ba:c0:ea:9d:ae:6c:54:eb:c9:9e:c0:22:dd:30:a3: bf:45:b4:4a:28:88:d9:5c:e2:a5:de:dd:0d:f3:bc: 58:5c:52:1c:75:04:a6:bf:17:aa:48:59:b9:7f:10: c1:1b:f4:3d:fb:45:bb:2d:b6:71:72:e8:00:b1:b0: 5d:ce:46:8c:b3:53:07:bc:a8:13:97:c6:39:f3:12: 9a:0f:2d:05:99:27:b8:b0:e3:c2:ec:39:b0:c3:c0: da:72:32:41:ff:c3:ea:13:d0:ff:ce:f6:3a:a8:ed: dc:b2:c5:77:9e:a4:60:4b:5a:39:af:f8:31:45:fe: 04:c2:3c:56:4e:d5:51:62:af:87:23:09:f4:38:a1: 4a:87:3f:47:a9:7e:7e:3c:87:7c:ac:00:3f:91:05: af:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DB:45:11:1C:D4:91:27:74:9E:D8:07:2F:F5:4C:8D:1A:76:81:95 X509v3 Authority Key Identifier: keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:3a:d7:8c:13:d4:8f:ce:f2:a3:1e:ce:a5:3a:c7:ae:78:a0: 52:36:eb:5c:53:aa:3b:27:87:5c:33:68:ce:2f:90:d1:e7:93: ff:66:0f:63:e2:7e:9e:98:fc:72:ca:93:1d:e5:57:80:0d:3d: 19:ee:2f:19:6b:1d:d0:42:4e:db:a4:70:29:e5:8f:0c:27:5c: 74:34:76:46:0a:4e:db:e9:65:e8:ae:c7:25:05:c6:f4:30:e9: c4:aa:c1:5b:c0:44:a5:59:22:2d:6f:74:74:9d:3d:4e:5e:76: a9:40:fd:a1:f6:c9:48:c5:4d:4c:33:c7:54:b5:9c:69:07:08: 6b:73:1c:85:c1:03:2f:4d:b9:03:46:36:e9:b3:f1:12:b5:22: 8b:f9:79:e0:ef:b8:9e:4d:e6:21:97:8b:c9:3b:cb:21:50:92: d6:a3:28:6a:19:2c:8e:3e:80:23:2f:a2:32:6f:62:5f:4c:85: 71:47:aa:1b:b5:c5:3a:1f:11:98:26:0b:3e:c0:05:8e:1c:d7: f5:41:25:ea:b7:a4:7b:15:a8:88:29:ad:5c:8a:59:6b:8c:3f: 15:7d:d5:85:20:f6:95:b5:7f:88:c4:dd:bf:2d:4b:42:2d:20: 5b:37:88:07:6d:73:7b:af:d5:0d:cf:7d:16:fe:90:a4:63:9f: 73:5a:d9:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDmgR2NhH6HpzXDgMb43r+CLpbN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3 NjAzQkJGNDAeFw0yNTA2MTUwMjQ2MzFaFw0yNTA2MTgwNTI5MzFaMDMxMTAvBgNV BAMTKDNBREI0NTExMUNENDkxMjc3NDlFRDgwNzJGRjU0QzhEMUE3NjgxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6LmNbt2N1hrX2zCGdDLQ7F2h HkMm+wA00H9iuNPyaPFe2r+hQL/wsshoqYo1aiHgJl4juHUSzGtNJlR6YeTFP9/A 3fyKG7thVei97J/pjnEfEoqN6EUziFtzEjo0x3V7ZjrZXWFxnbrA6p2ubFTryZ7A It0wo79FtEooiNlc4qXe3Q3zvFhcUhx1BKa/F6pIWbl/EMEb9D37RbsttnFy6ACx sF3ORoyzUwe8qBOXxjnzEpoPLQWZJ7iw48LsObDDwNpyMkH/w+oT0P/O9jqo7dyy xXeepGBLWjmv+DFF/gTCPFZO1VFir4cjCfQ4oUqHP0epfn48h3ysAD+RBa/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOttFERzUkSd0ntgHL/VMjRp2gZUwHwYDVR0j BBgwFoAUxwo0OTKZEoH5F5bbh7ARmHYDu/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmMxN2NjMi1mNGEyLTQxNWUtOGVhMi1mOWM0N2Y3NWM0Y2EvMC9DNzBBMzQzOTMy OTkxMjgxRjkxNzk2REI4N0IwMTE5ODc2MDNCQkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3NjAz QkJGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDEx OTg3NjAzQkJGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJo614wT1I/O8qMezqU6x654oFI261xTqjsn h1wzaM4vkNHnk/9mD2Pifp6Y/HLKkx3lV4ANPRnuLxlrHdBCTtukcCnljwwnXHQ0 dkYKTtvpZeiuxyUFxvQw6cSqwVvARKVZIi1vdHSdPU5edqlA/aH2yUjFTUwzx1S1 nGkHCGtzHIXBAy9NuQNGNumz8RK1Iov5eeDvuJ5N5iGXi8k7yyFQktajKGoZLI4+ gCMvojJvYl9MhXFHqhu1xTofEZgmCz7ABY4c1/VBJeq3pHsVqIgprVyKWWuMPxV9 1YUg9pW1f4jE3b8tS0ItIFs3iAdtc3uv1Q3PfRb+kKRjn3Na2U8= -----END CERTIFICATE-----Generated at Sun Jun 15 17:05:15 2025 by rpki-client