$ rpki-client -vvf repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft File: B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft (raw, json) Hash identifier: pFwunkfZaqSYt50astltH0fmhd2esao44VjNejRSehY= Subject key identifier: 04:F6:2B:E0:9F:72:A3:02:AE:3F:19:33:68:4A:FA:3A:B0:94:2A:3D Authority key identifier: B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 Certificate issuer: /CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Certificate serial: 25BC7C239871668E48A55C77918E70198380747E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft Manifest number: 0145 Signing time: Tue 04 Nov 2025 22:31:26 +0000 Manifest this update: Tue 04 Nov 2025 22:26:26 +0000 Manifest next update: Sat 08 Nov 2025 01:41:26 +0000 Files and hashes: 1: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: AIJ0j0Aq9CMXFN6w7WVU0mj1+YJAf4nV9FCI3W971zc=) 2: B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl (hash: dSRCK5c16zP3uyrJHcGl26gh7L4zY4X2m2AMvLJEK60=) 3: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: Lmf9Da9j85YcfNYeEFfKaXIaWC1krFrSr92XELTEqhs=) 4: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: 7AeF/hZA331ui0AxYNl+UaJERQ0zt8cfqxeWUU2JfUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 01:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bc:7c:23:98:71:66:8e:48:a5:5c:77:91:8e:70:19:83:80:74:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Validity Not Before: Nov 4 22:26:26 2025 GMT Not After : Nov 8 01:41:26 2025 GMT Subject: CN=04F62BE09F72A302AE3F1933684AFA3AB0942A3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1d:23:38:76:96:33:81:00:e6:00:c5:76:ad: 81:b7:52:80:c2:e2:f6:58:ad:66:b1:72:42:2a:f1: 49:b2:5e:eb:21:c9:76:fa:cc:8f:a9:39:50:7e:01: a6:b5:c8:68:05:88:79:93:a8:93:4f:b4:f7:b9:06: 67:08:5f:ee:a9:20:93:bf:7e:63:12:4a:31:43:94: d2:e0:ef:38:90:b9:55:25:37:c7:3f:57:3d:0e:b7: ec:19:b3:9c:d8:ea:a2:94:29:79:92:73:68:9e:08: 63:8d:4e:2f:c1:7b:ed:4a:2e:41:11:b9:03:fa:e7: 62:53:b4:14:cc:73:ee:c8:b3:5f:16:09:83:1b:e2: 69:38:fd:1e:23:56:a1:96:fd:dc:88:48:d5:82:72: 4a:1e:d8:b4:70:31:3a:55:f2:79:ef:97:93:4d:8d: 6a:e1:ae:d1:f6:9a:7a:f9:26:63:31:4a:ea:11:20: 7c:a8:d4:f6:bd:bf:aa:15:b8:da:04:48:1e:c8:49: 94:c9:56:04:ea:7d:18:f0:27:e3:65:91:66:6c:24: d5:a2:07:56:12:4c:f0:4c:14:05:80:a3:1a:fe:df: 33:6b:b9:0d:eb:1a:ed:91:ce:e3:74:3b:a4:b9:74: 30:44:6b:34:74:ab:df:e1:56:61:36:a6:3d:d9:9c: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F6:2B:E0:9F:72:A3:02:AE:3F:19:33:68:4A:FA:3A:B0:94:2A:3D X509v3 Authority Key Identifier: keyid:B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:71:49:d2:7b:39:eb:75:3c:38:e9:56:0c:54:75:48:cb:49: 94:6a:f8:c0:5e:2d:db:77:cf:29:12:d1:2c:9a:4b:08:04:a1: 27:4f:cb:d2:ac:1b:82:e2:bf:87:57:98:57:9b:89:5e:59:94: dc:20:9f:c5:17:c4:63:27:fb:e2:9e:c3:61:29:9f:51:ad:ce: 52:80:67:00:d0:03:58:18:87:ba:06:8c:83:e9:e4:c0:6c:90: d3:ff:6f:fc:3e:91:14:67:7e:17:dc:37:2d:82:34:6f:0c:01: 0e:75:c5:9c:17:c3:97:68:51:ff:2e:b1:1b:84:54:bc:01:ae: 7e:67:78:0a:19:04:59:70:a6:ea:49:c9:34:97:20:ad:6f:4c: b0:9e:5c:e9:3d:fe:b9:ae:59:91:6f:c2:7c:24:45:72:97:55: c8:23:85:bf:42:73:7d:9a:d2:15:a8:95:42:73:0f:ed:a4:6c: 91:05:75:c1:b7:c8:05:31:4f:32:af:cb:0e:b7:d9:39:39:f7: 5e:f6:e1:62:2d:da:67:b3:8c:b3:8f:ba:93:57:37:74:b4:51: 04:a0:87:43:fd:af:06:fc:64:3d:9b:2d:4e:93:3a:91:86:f0: e7:18:78:05:43:c5:51:36:8a:43:ac:f5:f4:8e:d4:3e:c7:d6: dd:61:99:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJbx8I5hxZo5IpVx3kY5wGYOAdH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRD QkFBOTkxMDAeFw0yNTExMDQyMjI2MjZaFw0yNTExMDgwMTQxMjZaMDMxMTAvBgNV BAMTKDA0RjYyQkUwOUY3MkEzMDJBRTNGMTkzMzY4NEFGQTNBQjA5NDJBM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlHSM4dpYzgQDmAMV2rYG3UoDC 4vZYrWaxckIq8UmyXushyXb6zI+pOVB+Aaa1yGgFiHmTqJNPtPe5BmcIX+6pIJO/ fmMSSjFDlNLg7ziQuVUlN8c/Vz0Ot+wZs5zY6qKUKXmSc2ieCGONTi/Be+1KLkER uQP652JTtBTMc+7Is18WCYMb4mk4/R4jVqGW/dyISNWCckoe2LRwMTpV8nnvl5NN jWrhrtH2mnr5JmMxSuoRIHyo1Pa9v6oVuNoESB7ISZTJVgTqfRjwJ+NlkWZsJNWi B1YSTPBMFAWAoxr+3zNruQ3rGu2RzuN0O6S5dDBEazR0q9/hVmE2pj3ZnLlHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPYr4J9yowKuPxkzaEr6OrCUKj0wHwYDVR0j BBgwFoAUtwzWZplYIvMsBOCa/wGy1MuqmRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmQ0Zjg2OS00ZGI2LTRiMGEtYWFiNi1jZGU0N2I0NDdkNzcvMC9CNzBDRDY2Njk5 NTgyMkYzMkMwNEUwOUFGRjAxQjJENENCQUE5OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRDQkFB OTkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkNGY4NjktNGRiNi00YjBhLWFh YjYtY2RlNDdiNDQ3ZDc3LzAvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIy RDRDQkFBOTkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1xSdJ7Oet1PDjpVgxUdUjLSZRq+MBeLdt3 zykS0SyaSwgEoSdPy9KsG4Liv4dXmFebiV5ZlNwgn8UXxGMn++Kew2Epn1GtzlKA ZwDQA1gYh7oGjIPp5MBskNP/b/w+kRRnfhfcNy2CNG8MAQ51xZwXw5doUf8usRuE VLwBrn5neAoZBFlwpupJyTSXIK1vTLCeXOk9/rmuWZFvwnwkRXKXVcgjhb9Cc32a 0hWolUJzD+2kbJEFdcG3yAUxTzKvyw632Tk591724WIt2mezjLOPupNXN3S0UQSg h0P9rwb8ZD2bLU6TOpGG8OcYeAVDxVE2ikOs9fSO1D7H1t1hmf0= -----END CERTIFICATE-----Generated at Thu Nov 6 00:23:24 2025 by rpki-client