$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft File: C70A343932991281F91796DB87B011987603BBF4.mft (raw, json) Hash identifier: wEsB/ptuTDgeZ7/nlZiyTjwwZNT6jJhJpuTu2IxACx4= Subject key identifier: 7B:47:8E:03:6A:67:CB:06:3A:44:5D:70:2E:D8:85:BC:F5:F7:8E:2D Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4 Certificate serial: 72BC28AFA6592929026FB5D050C0F47E57016F71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft Manifest number: 0219 Signing time: Wed 06 Aug 2025 09:01:33 +0000 Manifest this update: Wed 06 Aug 2025 08:56:33 +0000 Manifest next update: Sat 09 Aug 2025 18:14:33 +0000 Files and hashes: 1: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: TB7U9GvlAmHnGk0/8JpxDBGjqTq2O6M0WEaScBuoS/g=) 2: C70A343932991281F91796DB87B011987603BBF4.crl (hash: 68BglXn3Kgof+B+PwSJdsrx11dq6PbqlJukdJwoxZKE=) 3: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: K/te+OOqq38HfLYFBM6maqhYABgY51ViE5jJN8jRKPY=) 4: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 7CE9BXOCk+npQ95V1OHYui5nCFjD3JZ2DBCvcvu4/Kk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:bc:28:af:a6:59:29:29:02:6f:b5:d0:50:c0:f4:7e:57:01:6f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70A343932991281F91796DB87B011987603BBF4 Validity Not Before: Aug 6 08:56:33 2025 GMT Not After : Aug 9 18:14:33 2025 GMT Subject: CN=7B478E036A67CB063A445D702ED885BCF5F78E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:32:5a:b9:a4:fe:25:05:c0:9c:12:b3:4d: e1:22:36:db:1d:28:ca:da:06:88:61:ef:32:8c:9d: dc:c0:41:55:b2:03:cb:9d:10:f2:d5:41:78:4f:64: 3d:c5:43:8b:dc:ad:a6:df:d1:b2:4a:50:2d:51:62: 8c:3e:35:9e:72:a4:0c:ca:b8:5c:cb:10:86:8a:78: 95:c0:70:66:00:51:71:f1:25:d3:5a:f6:09:c9:63: 1d:9d:d7:1a:27:54:a1:46:83:3d:11:ab:c8:4c:22: ef:86:2d:90:b4:5d:e1:42:af:04:ba:2a:f4:b7:62: 0e:4e:b0:dd:07:27:b4:98:77:e4:1c:99:1a:36:1d: 9b:22:e6:06:01:c1:6c:56:77:4e:3f:b8:f5:d1:ab: 84:a0:76:8b:1d:2e:7a:02:0e:57:a0:9c:4f:c8:5a: 58:cc:15:93:16:31:ee:1d:d0:57:f9:7f:53:c3:e6: 22:a3:36:7d:d5:d4:dc:36:e0:a5:81:30:2b:56:27: 75:f5:bd:11:a4:9a:3d:f8:56:ca:d1:56:d1:ce:91: 9e:5e:59:4d:b9:38:7f:1a:52:67:e8:40:6c:9f:e7: 90:52:70:d8:1d:d1:6b:c1:12:bc:d1:38:05:fa:da: b3:12:94:90:74:7a:6b:49:e3:2b:38:2c:11:49:8c: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:47:8E:03:6A:67:CB:06:3A:44:5D:70:2E:D8:85:BC:F5:F7:8E:2D X509v3 Authority Key Identifier: keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b8:55:6d:48:f6:7e:36:a8:13:39:41:01:b8:f6:01:3f:28: bc:34:fd:f2:bf:2d:b5:ee:b8:b1:9f:a4:78:48:88:bf:1f:e9: 9b:67:5a:f2:aa:8f:bd:92:df:e1:d1:b4:30:aa:7b:a9:15:06: 87:b0:ca:c9:f7:f5:86:79:d4:a6:c8:18:f2:2b:34:40:f8:a6: c8:df:8c:67:08:7d:19:a0:38:f7:9c:72:98:6d:6c:4f:95:ab: 67:26:b2:9e:49:8d:8e:66:0e:c8:fb:eb:10:7a:9d:fc:1a:c4: 7f:4f:a2:1d:23:18:c9:e7:79:47:7f:4b:4a:66:70:7d:c3:dc: ee:08:de:b4:a8:f4:de:6b:f2:3a:60:bf:c8:31:27:97:38:b4: a6:bc:04:d3:e6:45:a1:99:e0:cf:68:df:20:3d:a9:d6:e1:59: 66:9e:90:74:97:62:d8:8a:09:b2:dd:47:3d:e0:aa:92:28:c8: c4:7e:e3:92:e2:5e:74:a6:88:0a:58:79:cd:af:5a:5a:4e:a0: 77:f5:e5:12:15:19:99:69:d2:b6:28:b1:6b:bf:e0:21:39:d4: a2:8f:54:33:69:45:8e:91:da:9a:18:a2:cc:19:dc:9f:05:e7: c0:43:b1:52:64:26:a4:e3:1f:a3:a8:32:ab:5a:61:4f:c3:58: 4d:85:92:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrwor6ZZKSkCb7XQUMD0flcBb3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3 NjAzQkJGNDAeFw0yNTA4MDYwODU2MzNaFw0yNTA4MDkxODE0MzNaMDMxMTAvBgNV BAMTKDdCNDc4RTAzNkE2N0NCMDYzQTQ0NUQ3MDJFRDg4NUJDRjVGNzhFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCVDJauaT+JQXAnBKzTeEiNtsd KMraBohh7zKMndzAQVWyA8udEPLVQXhPZD3FQ4vcrabf0bJKUC1RYow+NZ5ypAzK uFzLEIaKeJXAcGYAUXHxJdNa9gnJYx2d1xonVKFGgz0Rq8hMIu+GLZC0XeFCrwS6 KvS3Yg5OsN0HJ7SYd+QcmRo2HZsi5gYBwWxWd04/uPXRq4SgdosdLnoCDlegnE/I WljMFZMWMe4d0Ff5f1PD5iKjNn3V1Nw24KWBMCtWJ3X1vRGkmj34VsrRVtHOkZ5e WU25OH8aUmfoQGyf55BScNgd0WvBErzROAX62rMSlJB0emtJ4ys4LBFJjIvJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe0eOA2pnywY6RF1wLtiFvPX3ji0wHwYDVR0j BBgwFoAUxwo0OTKZEoH5F5bbh7ARmHYDu/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmMxN2NjMi1mNGEyLTQxNWUtOGVhMi1mOWM0N2Y3NWM0Y2EvMC9DNzBBMzQzOTMy OTkxMjgxRjkxNzk2REI4N0IwMTE5ODc2MDNCQkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3NjAz QkJGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDEx OTg3NjAzQkJGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABy4VW1I9n42qBM5QQG49gE/KLw0/fK/LbXu uLGfpHhIiL8f6ZtnWvKqj72S3+HRtDCqe6kVBoewysn39YZ51KbIGPIrNED4psjf jGcIfRmgOPeccphtbE+Vq2cmsp5JjY5mDsj76xB6nfwaxH9Poh0jGMnneUd/S0pm cH3D3O4I3rSo9N5r8jpgv8gxJ5c4tKa8BNPmRaGZ4M9o3yA9qdbhWWaekHSXYtiK CbLdRz3gqpIoyMR+45LiXnSmiApYec2vWlpOoHf15RIVGZlp0rYosWu/4CE51KKP VDNpRY6R2poYoswZ3J8F58BDsVJkJqTjH6OoMqtaYU/DWE2Fki4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:29:50 2025 by rpki-client