$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: LZV+Pe6qKRcWBUTuq8LMFZFav6NbznC6nPIF6sC+BUk= Subject key identifier: F5:FD:D8:09:AC:B0:7E:2F:46:87:D7:11:05:BA:50:F5:E4:B8:CB:BC Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 25CE102EEBF16DACBBF233FDD632905DD2620E1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: 0100 Signing time: Sun 15 Jun 2025 10:12:20 +0000 Manifest this update: Sun 15 Jun 2025 10:07:20 +0000 Manifest next update: Wed 18 Jun 2025 10:22:20 +0000 Files and hashes: 1: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: fie/TsseW03KgqMOx5RpYfcWvyfH/ejsgKHzBCFha6M=) 2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: xFoVEBixfaV59f5eLoKvzCfI+maBpFsE/LQmHoFGuNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ce:10:2e:eb:f1:6d:ac:bb:f2:33:fd:d6:32:90:5d:d2:62:0e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Jun 15 10:07:20 2025 GMT Not After : Jun 18 10:22:20 2025 GMT Subject: CN=F5FDD809ACB07E2F4687D71105BA50F5E4B8CBBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:96:3b:17:8a:d8:1f:91:0b:06:a3:4b:fc: 63:22:85:3f:b0:bc:f5:59:a9:13:ab:5d:df:da:8e: 56:a7:94:55:2d:35:c5:97:50:50:aa:0d:19:b0:0f: fb:5f:3d:44:c7:f3:33:45:d9:ab:3e:7b:fe:6e:03: 10:be:94:69:18:93:a2:f2:d2:44:fa:2f:96:fc:27: fd:1b:15:08:4b:d3:52:7b:0a:fc:cc:48:e2:1e:ce: c2:25:2b:e5:36:e2:57:24:32:de:8a:f9:c8:e0:a4: 64:77:46:18:3c:9b:39:55:2c:00:36:e4:02:c5:7a: 50:af:48:2a:ab:a2:56:73:35:96:a9:f0:cc:27:81: 24:3d:23:1b:91:62:3c:3e:72:c2:f5:e2:72:3d:6d: 90:e5:65:c0:41:83:66:a0:4d:78:6f:3b:09:8f:c9: cc:f1:2b:b0:ed:f1:53:e3:36:e5:7c:cf:50:25:65: 36:e5:af:64:13:6d:f5:75:f2:9a:bc:53:87:69:18: 8e:99:a6:0d:86:a2:8e:2b:10:fe:cd:0c:63:bb:9b: 15:e5:fa:81:17:a1:8c:c7:bb:60:a5:cb:b9:15:91: 53:2a:78:66:aa:3e:a8:67:88:92:bc:4f:85:73:45: e1:36:ea:ae:62:8d:16:5a:2e:68:cd:f9:21:d3:3a: 77:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FD:D8:09:AC:B0:7E:2F:46:87:D7:11:05:BA:50:F5:E4:B8:CB:BC X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:57:3c:01:9b:37:84:89:cc:75:32:a0:03:2c:a4:67:3b:57: f1:ef:9b:77:c6:65:2c:d2:e7:67:a3:3c:74:00:50:b6:91:14: 35:74:09:60:b1:8f:20:17:5e:11:06:09:79:8e:df:c8:59:11: 1a:b7:13:db:e2:bc:6d:eb:c4:a4:b3:cb:9d:89:3a:28:34:4f: b8:04:fd:ca:30:72:7a:ca:cd:b1:c4:71:90:d9:09:c9:ee:93: 9f:1c:15:6f:59:0b:13:24:18:72:2a:52:d6:f8:fc:b0:d8:4b: 29:81:ea:e8:fc:1f:2d:72:27:bd:c8:30:82:30:8b:37:0c:c7: 4d:96:d2:16:43:40:47:d6:8f:e7:9c:46:75:a9:69:05:fc:26: ab:f3:9a:f2:a2:db:09:40:aa:46:aa:0c:05:f8:c1:dc:0a:e8: 4e:5b:67:35:77:1c:4d:c7:c3:46:3b:f2:1b:3d:02:6d:02:bd: 64:f2:42:58:bc:f4:d5:e8:21:c7:76:60:f3:78:e1:cb:26:77: b1:8a:32:c6:f7:0f:bd:38:ac:07:2d:5c:56:0f:36:f6:61:cc: 7b:c0:39:e1:ab:54:95:4f:6d:d3:c4:3a:da:dd:1b:2b:21:54: 3b:1a:0f:ef:a7:7a:60:b3:f2:8d:55:94:52:94:68:73:d1:c7: 4c:b1:2d:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJc4QLuvxbay78jP91jKQXdJiDh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNTA2MTUxMDA3MjBaFw0yNTA2MTgxMDIyMjBaMDMxMTAvBgNV BAMTKEY1RkREODA5QUNCMDdFMkY0Njg3RDcxMTA1QkE1MEY1RTRCOENCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGJY7F4rYH5ELBqNL/GMihT+w vPVZqROrXd/ajlanlFUtNcWXUFCqDRmwD/tfPUTH8zNF2as+e/5uAxC+lGkYk6Ly 0kT6L5b8J/0bFQhL01J7CvzMSOIezsIlK+U24lckMt6K+cjgpGR3Rhg8mzlVLAA2 5ALFelCvSCqrolZzNZap8MwngSQ9IxuRYjw+csL14nI9bZDlZcBBg2agTXhvOwmP yczxK7Dt8VPjNuV8z1AlZTblr2QTbfV18pq8U4dpGI6Zpg2Goo4rEP7NDGO7mxXl +oEXoYzHu2Cly7kVkVMqeGaqPqhniJK8T4VzReE26q5ijRZaLmjN+SHTOnfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9f3YCaywfi9Gh9cRBbpQ9eS4y7wwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRXPAGbN4SJzHUyoAMspGc7V/Hvm3fGZSzS 52ejPHQAULaRFDV0CWCxjyAXXhEGCXmO38hZERq3E9vivG3rxKSzy52JOig0T7gE /cowcnrKzbHEcZDZCcnuk58cFW9ZCxMkGHIqUtb4/LDYSymB6uj8Hy1yJ73IMIIw izcMx02W0hZDQEfWj+ecRnWpaQX8JqvzmvKi2wlAqkaqDAX4wdwK6E5bZzV3HE3H w0Y78hs9Am0CvWTyQli89NXoIcd2YPN44csmd7GKMsb3D704rActXFYPNvZhzHvA OeGrVJVPbdPEOtrdGyshVDsaD++nemCz8o1VlFKUaHPRx0yxLQk= -----END CERTIFICATE-----Generated at Mon Jun 16 00:04:28 2025 by rpki-client