$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: RlBb8MXS0cPMIj3O5yfurGMq8gyzp++RDt0px+UwjNk= Subject key identifier: 62:3C:09:2F:35:DB:DD:F6:C3:E0:19:C0:0F:8C:A9:07:FC:42:D6:6D Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 4D7EBEE30CBFBA1085CA4BD97CD4B6996C2370C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: 0117 Signing time: Tue 05 Aug 2025 21:11:01 +0000 Manifest this update: Tue 05 Aug 2025 21:06:01 +0000 Manifest next update: Fri 08 Aug 2025 23:29:01 +0000 Files and hashes: 1: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: xFoVEBixfaV59f5eLoKvzCfI+maBpFsE/LQmHoFGuNo=) 2: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: cpFnibMSR83D70/o+PsY8Q+7S0WrfD+ZBglmsQh9l8k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7e:be:e3:0c:bf:ba:10:85:ca:4b:d9:7c:d4:b6:99:6c:23:70:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Aug 5 21:06:01 2025 GMT Not After : Aug 8 23:29:01 2025 GMT Subject: CN=623C092F35DBDDF6C3E019C00F8CA907FC42D66D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:08:2e:56:99:b6:93:c1:cf:5d:b6:84:fd: 61:f4:9f:d7:4d:27:4a:ac:ed:ba:31:a6:5f:fb:08: 98:60:82:24:1c:9b:8d:bf:e1:8c:5a:b7:57:6b:2c: 9b:61:96:57:b9:ab:a2:51:33:b6:51:7e:37:7a:a0: 0a:be:2d:6f:f3:9a:8a:16:76:f3:88:b5:3a:ac:68: 44:79:76:db:b5:96:6b:f2:d9:14:12:be:af:65:0d: 31:46:02:77:32:7f:ac:e7:4c:72:1a:20:11:6b:26: 59:dc:6c:61:95:04:ac:e2:af:5b:ad:b3:cc:bd:e4: 5b:1f:a0:94:e3:f9:15:db:4a:4f:59:78:6d:2f:7a: b9:bf:ab:82:1b:63:0a:f1:1e:ce:d4:af:aa:fd:4d: 82:3d:7c:cc:3d:cf:fb:82:fc:d8:1c:ef:c1:06:9f: 89:12:26:42:24:3b:21:b2:f9:56:fa:8a:93:94:d1: f5:65:dc:c0:1a:6b:a8:da:62:8e:b5:89:56:13:45: 5e:29:55:5e:f6:6b:96:62:8b:6f:3b:e2:74:47:9d: 9a:db:0d:d5:fc:d8:bb:f1:21:15:b1:89:94:06:e4: 63:b9:d3:ba:0f:2c:a7:19:8b:f0:ef:88:87:b8:d6: 6d:89:8f:24:5a:d4:c3:d4:27:99:3b:86:a7:f9:4c: 55:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3C:09:2F:35:DB:DD:F6:C3:E0:19:C0:0F:8C:A9:07:FC:42:D6:6D X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ce:90:3b:f3:a5:28:a4:ab:1c:cb:e5:e5:d5:bb:bb:34:b3: 33:c0:c6:08:94:22:9e:aa:71:8d:4d:4d:24:c0:82:70:61:68: 58:7a:59:d9:f4:bc:bc:4a:13:a2:36:4b:4e:72:a6:02:ef:d3: b5:4a:67:a3:78:f4:b2:8e:20:4d:6b:f6:a1:a7:a3:8c:45:0a: 27:eb:a4:7a:09:66:c4:e7:e5:23:ec:a7:42:9c:20:fa:8f:e0: a1:5e:02:d9:61:72:97:3c:0b:25:30:24:68:8e:f3:fe:56:ad: 4f:11:fe:f4:29:fd:c2:a3:8b:7a:f9:ba:68:3c:dc:66:9b:81: e2:51:cd:88:4e:97:f1:8f:7b:d9:07:4f:d5:7a:8f:d4:de:bb: 13:01:bf:fe:0a:6a:49:7c:45:ed:7a:87:77:88:84:62:87:c0: 3a:25:26:76:16:82:0c:26:51:59:6f:fc:01:5d:48:4f:ea:5a: ad:14:d4:07:e3:6e:ec:5e:88:42:68:6c:55:f4:74:70:59:44: 83:78:41:6c:c2:51:16:a4:04:30:89:fa:66:6b:b5:fe:d3:6e: 76:98:3e:d1:54:8d:a6:e5:da:82:92:e9:5d:03:e1:c0:fd:87: 8d:1b:7b:0f:85:f9:32:61:c3:49:57:3b:51:cd:06:be:fe:2f: 14:a0:97:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTX6+4wy/uhCFykvZfNS2mWwjcMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNTA4MDUyMTA2MDFaFw0yNTA4MDgyMzI5MDFaMDMxMTAvBgNV BAMTKDYyM0MwOTJGMzVEQkRERjZDM0UwMTlDMDBGOENBOTA3RkM0MkQ2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8gguVpm2k8HPXbaE/WH0n9dN J0qs7boxpl/7CJhggiQcm42/4Yxat1drLJthlle5q6JRM7ZRfjd6oAq+LW/zmooW dvOItTqsaER5dtu1lmvy2RQSvq9lDTFGAncyf6znTHIaIBFrJlncbGGVBKzir1ut s8y95FsfoJTj+RXbSk9ZeG0verm/q4IbYwrxHs7Ur6r9TYI9fMw9z/uC/Ngc78EG n4kSJkIkOyGy+Vb6ipOU0fVl3MAaa6jaYo61iVYTRV4pVV72a5Zii2874nRHnZrb DdX82LvxIRWxiZQG5GO507oPLKcZi/DviIe41m2JjyRa1MPUJ5k7hqf5TFULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYjwJLzXb3fbD4BnAD4ypB/xC1m0wHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrOkDvzpSikqxzL5eXVu7s0szPAxgiUIp6q cY1NTSTAgnBhaFh6Wdn0vLxKE6I2S05ypgLv07VKZ6N49LKOIE1r9qGno4xFCifr pHoJZsTn5SPsp0KcIPqP4KFeAtlhcpc8CyUwJGiO8/5WrU8R/vQp/cKji3r5umg8 3GabgeJRzYhOl/GPe9kHT9V6j9TeuxMBv/4Kakl8Re16h3eIhGKHwDolJnYWggwm UVlv/AFdSE/qWq0U1AfjbuxeiEJobFX0dHBZRIN4QWzCURakBDCJ+mZrtf7TbnaY PtFUjabl2oKS6V0D4cD9h40bew+F+TJhw0lXO1HNBr7+LxSgl8Y= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:51 2025 by rpki-client