$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft File: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json) Hash identifier: vGkBOpCNbvp4L//ITqsBz3Vm0VGkAUT/5HU+hGkWNi4= Subject key identifier: 8B:3A:6E:26:28:59:94:4E:BD:56:60:F0:9D:5F:40:BA:CF:99:42:62 Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Certificate serial: 790FA52C7EA128B2532EEB35CD268E7D1C161498 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft Manifest number: 04BE Signing time: Mon 03 Nov 2025 01:41:50 +0000 Manifest this update: Mon 03 Nov 2025 01:36:50 +0000 Manifest next update: Thu 06 Nov 2025 06:11:50 +0000 Files and hashes: 1: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: hfNgLGqSX9758a3lYA3mTTi71kcr8lUuQO0UHJEYAtI=) 2: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: Ygp8V6ySgNlfzeAzxcG8tV45vBV3m6RFvl0r9jM7VeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0f:a5:2c:7e:a1:28:b2:53:2e:eb:35:cd:26:8e:7d:1c:16:14:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Validity Not Before: Nov 3 01:36:50 2025 GMT Not After : Nov 6 06:11:50 2025 GMT Subject: CN=8B3A6E262859944EBD5660F09D5F40BACF994262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7b:e7:ee:05:50:33:d2:75:60:15:20:06:e1: 38:75:18:54:65:72:db:6f:da:c5:fc:ac:ed:d4:09: 68:0f:9d:e9:c5:49:e3:0f:11:c7:e3:09:90:98:7b: 2e:61:9a:cc:be:82:28:9f:b6:a0:34:8e:8f:79:1a: 63:04:0c:fc:c8:40:89:3d:b1:41:49:f8:c4:c8:a7: be:9b:a5:ef:a3:1c:70:98:ff:84:76:43:74:d3:f8: 31:68:cb:99:85:fe:a5:26:7e:d1:eb:43:fb:b2:fe: 75:39:65:b0:75:28:49:2c:01:cb:2b:34:86:a8:43: f7:46:6d:d4:f4:51:c3:f5:7b:7b:f6:c4:6d:cc:ac: 09:23:a5:dd:2e:bd:89:fc:53:fc:b6:59:4f:34:56: 78:5a:4a:fe:4e:3d:0b:57:aa:0a:47:a6:de:e7:e1: 0e:d1:ec:92:ac:a4:29:89:f3:c1:5c:62:a7:05:dd: 54:06:33:80:fc:69:44:f7:53:e9:86:d0:19:83:8b: 61:16:2d:11:03:13:67:97:35:6e:3e:50:69:f4:be: d9:9c:f4:36:da:85:9a:8e:8c:f7:e8:ec:69:7e:3b: a3:f5:81:71:3b:ba:e2:ff:70:0a:31:ee:b5:13:ce: 5a:ad:c3:2b:8a:2b:4c:d4:1c:e6:53:34:56:f3:ca: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3A:6E:26:28:59:94:4E:BD:56:60:F0:9D:5F:40:BA:CF:99:42:62 X509v3 Authority Key Identifier: keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3f:4d:ff:f3:22:cc:9f:c0:82:1e:75:46:36:ce:a1:b2:42: cc:4d:8a:8d:4a:50:81:a0:7e:fa:4c:30:eb:f6:69:6c:a7:d3: 92:6f:bc:17:22:69:76:87:55:5b:b8:cc:32:c6:27:fd:06:ad: 9d:41:bf:2f:81:ac:70:1e:47:51:dd:41:22:e5:5d:7d:fe:37: 5d:17:ad:ca:2b:74:ff:77:41:48:c7:2d:61:d0:02:4d:20:06: 54:ad:71:46:10:6e:80:de:9b:b8:b1:eb:5c:62:00:b3:3b:6d: 18:48:de:24:86:62:72:5c:7e:83:79:43:7e:26:85:5d:d5:eb: 33:b8:e9:04:01:2d:54:cc:b5:20:c9:a3:b0:2d:2a:7d:3b:98: 72:f7:42:61:26:4f:eb:48:11:c1:f6:04:7c:95:28:75:a4:cd: 87:48:8d:7e:70:15:13:4b:fb:c9:d0:59:31:7c:9e:3f:a6:4c: 90:79:62:7a:c6:da:a3:af:82:7d:bf:fa:14:6f:2c:b7:53:df: 75:b9:fb:4e:63:bd:c6:a9:3c:0e:c4:1d:c9:1a:61:a7:cb:d3: 9c:cf:49:ac:9d:21:3f:5e:5a:f0:9c:74:ba:c8:0f:e9:05:6e: b1:95:35:69:72:2c:55:6e:e7:b5:e0:26:4e:3b:ab:f6:05:7a: bc:85:36:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQ+lLH6hKLJTLus1zSaOfRwWFJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0 QzQyQkY4NDAeFw0yNTExMDMwMTM2NTBaFw0yNTExMDYwNjExNTBaMDMxMTAvBgNV BAMTKDhCM0E2RTI2Mjg1OTk0NEVCRDU2NjBGMDlENUY0MEJBQ0Y5OTQyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDme+fuBVAz0nVgFSAG4Th1GFRl cttv2sX8rO3UCWgPnenFSeMPEcfjCZCYey5hmsy+giiftqA0jo95GmMEDPzIQIk9 sUFJ+MTIp76bpe+jHHCY/4R2Q3TT+DFoy5mF/qUmftHrQ/uy/nU5ZbB1KEksAcsr NIaoQ/dGbdT0UcP1e3v2xG3MrAkjpd0uvYn8U/y2WU80VnhaSv5OPQtXqgpHpt7n 4Q7R7JKspCmJ88FcYqcF3VQGM4D8aUT3U+mG0BmDi2EWLREDE2eXNW4+UGn0vtmc 9DbahZqOjPfo7Gl+O6P1gXE7uuL/cAox7rUTzlqtwyuKK0zUHOZTNFbzymvVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUizpuJihZlE69VmDwnV9Aus+ZQmIwHwYDVR0j BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0 OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEw/Tf/zIsyfwIIedUY2zqGyQsxNio1KUIGg fvpMMOv2aWyn05JvvBciaXaHVVu4zDLGJ/0GrZ1Bvy+BrHAeR1HdQSLlXX3+N10X rcordP93QUjHLWHQAk0gBlStcUYQboDem7ix61xiALM7bRhI3iSGYnJcfoN5Q34m hV3V6zO46QQBLVTMtSDJo7AtKn07mHL3QmEmT+tIEcH2BHyVKHWkzYdIjX5wFRNL +8nQWTF8nj+mTJB5YnrG2qOvgn2/+hRvLLdT33W5+05jvcapPA7EHckaYafL05zP SaydIT9eWvCcdLrID+kFbrGVNWlyLFVu57XgJk47q/YFeryFNoo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:14 2025 by rpki-client