$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft File: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft (raw, json) Hash identifier: alGaLalzBzJQrkVG1JgCL4yJOVuSfIQjdNwX3jbhxR8= Subject key identifier: A6:13:65:02:EA:74:66:1F:E6:93:B8:EB:FC:C7:AE:2A:D9:A8:E3:1E Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C Certificate issuer: /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Certificate serial: 7B126B2F3E229D260E164A0D8022049EAEA89DE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft Manifest number: 0342 Signing time: Mon 05 May 2025 00:12:10 +0000 Manifest this update: Mon 05 May 2025 00:07:10 +0000 Manifest next update: Thu 08 May 2025 11:07:10 +0000 Files and hashes: 1: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: fYk1A/6JlSofdoRQTxZ35IGs4jax1F7uqVxTxU6HBk4=) 2: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl (hash: G3xAQ4wJIicICakBxMpbF+/pVnwVF+G3XENzWK/7fHg=) 3: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: iv2SAjyHSWCSm/Qp+qCzqgF4lXDrzm6Us1pHd8OSMEA=) 4: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: rNa2on5+DMAnzayjr8XpEII8JqHWgOprf/5TlZrlTb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 11:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:12:6b:2f:3e:22:9d:26:0e:16:4a:0d:80:22:04:9e:ae:a8:9d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Validity Not Before: May 5 00:07:10 2025 GMT Not After : May 8 11:07:10 2025 GMT Subject: CN=A6136502EA74661FE693B8EBFCC7AE2AD9A8E31E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:52:07:75:6f:f3:fd:34:69:27:12:59:89: f2:cb:b9:b7:ea:2f:17:cd:bb:3c:7d:70:8e:c0:4b: f1:b1:9c:db:34:88:e1:c3:98:76:91:8a:15:11:18: 50:0b:e6:c0:ea:28:86:52:a4:ad:fa:a1:1b:20:45: a8:f4:30:29:2b:d2:0d:d0:41:8a:3b:ee:ee:d1:75: f4:ca:e1:d9:d1:75:53:cb:bd:56:56:b0:0f:f7:ce: 1b:bb:4c:e3:8e:19:c6:fa:81:59:5c:97:c6:a0:8c: 90:cb:73:bd:30:09:2a:97:c1:4c:76:72:30:ca:07: 39:96:b5:52:d2:50:44:d5:7a:99:a1:99:39:68:41: ed:87:72:a2:29:96:b7:ab:fb:c2:91:05:6d:43:e9: 43:c9:50:83:b3:49:0d:ba:1d:56:77:97:11:34:ac: 91:55:f8:f6:03:38:b4:d1:b6:da:59:cd:00:0a:a5: f2:be:e0:fd:40:4c:b8:fa:ee:3f:63:e7:bb:1f:dc: 78:4f:3d:63:b0:ca:41:32:be:15:ed:2a:8d:2b:0c: 02:a5:f1:25:8a:4d:ea:10:f3:bb:81:66:09:ef:28: 46:32:1c:3e:e3:93:2b:ac:92:e3:a1:c3:da:c8:24: a5:c5:8d:e0:69:d0:36:92:25:fa:73:28:46:f2:de: 18:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:13:65:02:EA:74:66:1F:E6:93:B8:EB:FC:C7:AE:2A:D9:A8:E3:1E X509v3 Authority Key Identifier: keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:77:fa:fe:22:9f:1f:da:93:a4:bb:3f:a7:cb:90:74:55:3b: 9e:c5:73:97:de:d2:8f:c6:c2:e6:7f:c8:03:9f:1e:76:cf:da: e1:d0:bf:9b:78:77:63:bd:ab:08:f2:3d:f4:7d:70:f6:d7:d6: 41:7c:33:6c:22:15:d8:77:a1:1a:b8:c0:b0:ff:6c:5e:d6:f3: 46:64:15:50:41:40:7a:22:61:56:f8:f0:9e:b6:90:3f:6b:15: 11:f7:6a:38:eb:27:d1:3d:b0:e6:36:ad:a5:3a:a6:b7:9c:f5: 9c:4e:9b:cc:73:35:58:43:1e:e2:b8:88:a4:86:3d:64:3c:28: 7c:6b:5a:9b:78:a6:3b:f5:42:89:85:f5:ca:c0:93:43:c3:72: 2e:01:4f:71:65:3d:ae:db:22:c0:40:67:a9:90:e3:31:78:a9: 13:1d:70:84:20:c7:f6:16:1e:5e:20:dc:cc:8b:23:c1:08:5a: ec:29:28:3d:78:03:a9:54:27:25:c3:86:f0:06:3a:f6:6c:89: 51:45:4b:6a:52:0b:ca:d8:96:0d:3a:63:2f:40:d2:68:91:18: b4:50:8a:3c:a9:83:a2:3d:bf:5c:e5:95:2f:0b:a0:d0:7f:be: d6:2b:a1:ab:10:18:15:7f:1e:25:57:1c:cd:74:f0:39:59:8c: e9:20:15:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexJrLz4inSYOFkoNgCIEnq6oneYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRD RkQ3RTI2QzAeFw0yNTA1MDUwMDA3MTBaFw0yNTA1MDgxMTA3MTBaMDMxMTAvBgNV BAMTKEE2MTM2NTAyRUE3NDY2MUZFNjkzQjhFQkZDQzdBRTJBRDlBOEUzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNv1IHdW/z/TRpJxJZifLLubfq LxfNuzx9cI7AS/GxnNs0iOHDmHaRihURGFAL5sDqKIZSpK36oRsgRaj0MCkr0g3Q QYo77u7RdfTK4dnRdVPLvVZWsA/3zhu7TOOOGcb6gVlcl8agjJDLc70wCSqXwUx2 cjDKBzmWtVLSUETVepmhmTloQe2HcqIplrer+8KRBW1D6UPJUIOzSQ26HVZ3lxE0 rJFV+PYDOLTRttpZzQAKpfK+4P1ATLj67j9j57sf3HhPPWOwykEyvhXtKo0rDAKl 8SWKTeoQ87uBZgnvKEYyHD7jkyuskuOhw9rIJKXFjeBp0DaSJfpzKEby3hgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUphNlAup0Zh/mk7jr/MeuKtmo4x4wHwYDVR0j BBgwFoAUynBPeF6liz9lnm48j3Hi1M/X4mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDIxOTg1Yi1hMGU2LTRlMDUtYmVmNi1mZTZmNWE2ZTJmNDMvMC9DQTcwNEY3ODVF QTU4QjNGNjU5RTZFM0M4RjcxRTJENENGRDdFMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRDRkQ3 RTI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUy RDRDRkQ3RTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACN3+v4inx/ak6S7P6fLkHRVO57Fc5fe0o/G wuZ/yAOfHnbP2uHQv5t4d2O9qwjyPfR9cPbX1kF8M2wiFdh3oRq4wLD/bF7W80Zk FVBBQHoiYVb48J62kD9rFRH3ajjrJ9E9sOY2raU6prec9ZxOm8xzNVhDHuK4iKSG PWQ8KHxrWpt4pjv1QomF9crAk0PDci4BT3FlPa7bIsBAZ6mQ4zF4qRMdcIQgx/YW Hl4g3MyLI8EIWuwpKD14A6lUJyXDhvAGOvZsiVFFS2pSC8rYlg06Yy9A0miRGLRQ ijypg6I9v1zllS8LoNB/vtYroasQGBV/HiVXHM108DlZjOkgFSI= -----END CERTIFICATE-----Generated at Wed May 7 17:23:26 2025 by rpki-client