$ rpki-client -vvf repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft File: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft (raw, json) Hash identifier: 0ZABAgMnXMqIe+Sxz1q4sHhcU32eugN5WK4rWM7oUsQ= Subject key identifier: 78:DE:3B:E2:69:55:BC:45:2D:17:01:6A:C3:92:7B:18:C9:C4:19:4A Authority key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C Certificate issuer: /CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Certificate serial: 672F0907C49B0EBF5EA810BA6774F2727B236C45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft Manifest number: 01A1 Signing time: Mon 04 Aug 2025 10:02:19 +0000 Manifest this update: Mon 04 Aug 2025 09:57:19 +0000 Manifest next update: Thu 07 Aug 2025 20:22:19 +0000 Files and hashes: 1: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl (hash: WAqWF73sInLfN+bb53YtBxsYuMHovkKWYsX85FqCSoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 20:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2f:09:07:c4:9b:0e:bf:5e:a8:10:ba:67:74:f2:72:7b:23:6c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Validity Not Before: Aug 4 09:57:19 2025 GMT Not After : Aug 7 20:22:19 2025 GMT Subject: CN=78DE3BE26955BC452D17016AC3927B18C9C4194A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8a:1d:b3:62:a7:6b:a9:4e:f8:f8:ba:ee:5d: 89:7d:ba:f2:54:58:9d:63:13:6e:f6:a9:1c:72:87: 81:59:47:08:eb:d8:5d:cd:2f:e7:4f:38:ee:e7:76: 64:10:e4:6a:34:af:cb:15:fc:31:2b:00:a2:92:11: c0:65:fd:2f:2b:ef:a9:9c:ba:43:84:c2:12:8c:31: a9:b1:41:c5:79:93:00:34:2a:cf:87:33:ef:dc:db: 83:34:1a:50:21:01:d2:c3:48:e2:7f:2f:b0:b1:74: 01:65:ac:b6:d0:65:25:8a:31:03:0f:26:07:89:a0: 6f:1b:94:fd:56:7e:2c:b9:64:69:59:22:1f:76:46: 6e:e1:32:e9:cb:57:64:99:9c:17:93:23:5b:76:3f: d9:74:98:2c:cd:cb:86:a9:21:9e:35:4a:4e:75:7c: 30:ce:71:c6:13:eb:1a:32:29:b5:e8:e0:5a:e6:07: 77:36:c6:6a:be:10:c3:d3:4f:b6:e4:0d:33:a8:66: bb:22:ad:ea:f5:77:ca:cf:9d:dc:17:0e:34:f1:5c: 51:c7:a2:37:81:d2:2a:c3:75:51:08:fc:e3:32:b9: 31:f9:af:ec:8e:95:7d:d8:3f:17:0a:e0:58:49:f1: 79:a5:e8:fd:16:dd:cf:fd:9e:d5:9e:26:bf:eb:13: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DE:3B:E2:69:55:BC:45:2D:17:01:6A:C3:92:7B:18:C9:C4:19:4A X509v3 Authority Key Identifier: keyid:70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:78:dd:d7:8d:11:e5:5d:ca:8c:01:57:d2:de:e7:20:46:6d: 07:85:81:07:66:d3:d4:56:33:ea:5c:02:04:b3:ac:0d:e5:ef: 06:7a:d2:6e:f0:c4:93:97:80:69:91:e5:d0:99:f2:46:a7:aa: 40:4f:c3:56:e5:97:7e:44:3b:8a:ed:d5:5a:52:13:bf:f1:68: e2:d2:b1:c8:02:2e:2b:27:bf:ed:7d:d7:55:d5:e0:51:6f:90: 89:dd:d1:82:12:ef:db:7d:c0:89:37:71:e2:51:e2:bc:54:59: 84:24:48:e5:8d:fa:77:56:1e:4e:6c:b9:97:2d:30:3e:18:bd: fd:b4:79:52:68:74:24:ad:21:13:6d:62:5b:80:43:28:bb:60: a9:8e:51:06:2b:9c:8e:53:be:f2:22:27:43:50:05:8f:3e:50: 34:32:18:f9:ea:5e:7f:34:bd:d6:31:ff:ac:bf:d2:be:b4:da: 24:b7:cc:08:71:b0:e9:82:a4:59:33:cd:75:74:f7:9b:6c:d9: 18:21:e1:d7:16:c5:fa:ea:fc:b9:5d:4b:b6:82:9e:dd:c3:b3: 4f:fb:c2:e8:07:45:e6:3a:82:c5:89:83:ca:e2:7d:36:87:cb: 5a:ea:43:c2:56:e6:80:60:51:5f:da:bd:50:7d:f2:dd:17:ab: 92:10:9b:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZy8JB8SbDr9eqBC6Z3TycnsjbEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4 NjE4OUIwQzAeFw0yNTA4MDQwOTU3MTlaFw0yNTA4MDcyMDIyMTlaMDMxMTAvBgNV BAMTKDc4REUzQkUyNjk1NUJDNDUyRDE3MDE2QUMzOTI3QjE4QzlDNDE5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqih2zYqdrqU74+LruXYl9uvJU WJ1jE272qRxyh4FZRwjr2F3NL+dPOO7ndmQQ5Go0r8sV/DErAKKSEcBl/S8r76mc ukOEwhKMMamxQcV5kwA0Ks+HM+/c24M0GlAhAdLDSOJ/L7CxdAFlrLbQZSWKMQMP JgeJoG8blP1Wfiy5ZGlZIh92Rm7hMunLV2SZnBeTI1t2P9l0mCzNy4apIZ41Sk51 fDDOccYT6xoyKbXo4FrmB3c2xmq+EMPTT7bkDTOoZrsirer1d8rPndwXDjTxXFHH ojeB0irDdVEI/OMyuTH5r+yOlX3YPxcK4FhJ8Xml6P0W3c/9ntWeJr/rE239AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeN474mlVvEUtFwFqw5J7GMnEGUowHwYDVR0j BBgwFoAUcApG8MSOeE6MvLp7J+RHT4YYmwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjhhMzE1ZS0xNmYxLTRmMjEtOWJjMC0yNjlkNWJlNzNkNjAvMC83MDBBNDZGMEM0 OEU3ODRFOENCQ0JBN0IyN0U0NDc0Rjg2MTg5QjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4NjE4 OUIwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY4YTMxNWUtMTZmMS00ZjIxLTli YzAtMjY5ZDViZTczZDYwLzAvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3 NEY4NjE4OUIwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGB43deNEeVdyowBV9Le5yBGbQeFgQdm09RW M+pcAgSzrA3l7wZ60m7wxJOXgGmR5dCZ8kanqkBPw1bll35EO4rt1VpSE7/xaOLS scgCLisnv+1911XV4FFvkInd0YIS79t9wIk3ceJR4rxUWYQkSOWN+ndWHk5suZct MD4Yvf20eVJodCStIRNtYluAQyi7YKmOUQYrnI5TvvIiJ0NQBY8+UDQyGPnqXn80 vdYx/6y/0r602iS3zAhxsOmCpFkzzXV095ts2Rgh4dcWxfrq/LldS7aCnt3Ds0/7 wugHReY6gsWJg8rifTaHy1rqQ8JW5oBgUV/avVB98t0Xq5IQm54= -----END CERTIFICATE-----Generated at Wed Aug 6 18:33:14 2025 by rpki-client