$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft File: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft (raw, json) Hash identifier: RGBPIkvDcWbvdf6Citl2V3iZu2tnBcArgRhscT573uA= Subject key identifier: B1:37:67:51:6A:62:F2:FD:D3:E6:12:6A:BD:67:B0:B6:41:E4:A5:EC Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C Certificate issuer: /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Certificate serial: 34A0A6ACB90FE80B800C6C1B730B4C3FCBDCD766 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft Manifest number: 03D5 Signing time: Wed 25 Mar 2026 07:52:34 +0000 Manifest this update: Wed 25 Mar 2026 07:47:34 +0000 Manifest next update: Sat 28 Mar 2026 09:17:34 +0000 Files and hashes: 1: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: ylDWnunXe+P0sSpHe2ems7WUQ+PsguFxQzvub0cWxiw=) 2: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl (hash: g9In2Em9vhg+vbZmR25TBIqbe0LCxYx6wShT5UT5Dn8=) 3: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: iZk4nKRAyYY4CGj+caK3PfJut3d/hrLgka43LgJ9lgQ=) 4: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: jLcNXh3PdlCUsOrK8Wn6cIHJ87Bgrp1+sOpFF9srttE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a0:a6:ac:b9:0f:e8:0b:80:0c:6c:1b:73:0b:4c:3f:cb:dc:d7:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Validity Not Before: Mar 25 07:47:34 2026 GMT Not After : Mar 28 09:17:34 2026 GMT Subject: CN=B13767516A62F2FDD3E6126ABD67B0B641E4A5EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:64:14:ce:c6:80:02:9d:50:cc:ab:32:97:89: e4:cc:8a:21:30:be:78:dc:fe:a2:53:23:35:1e:4d: 5f:47:4f:0f:25:79:a4:de:85:28:90:5f:0e:85:f6: e4:31:88:59:2b:75:94:11:23:8b:db:ea:e6:57:ff: c8:85:5d:ff:50:de:13:23:24:cf:df:44:40:39:72: 67:38:f5:3e:2c:df:c8:63:00:e6:f9:e7:ab:08:3f: 28:17:6b:9e:ef:23:fa:03:d2:21:4c:5e:81:5e:44: be:cc:10:13:34:d3:1c:ef:25:e9:55:ba:9c:05:05: 4c:51:81:94:7d:a1:9a:a8:de:41:d6:00:f4:a5:c9: d6:58:4b:41:96:ee:e3:0a:fe:37:27:d6:98:41:75: 56:ed:82:1e:d0:69:02:0a:14:8e:53:e3:11:32:fc: 71:d5:0e:73:27:e1:4c:96:0f:a8:84:25:30:4c:04: 6c:be:56:04:ce:93:33:4b:ef:9e:14:11:12:b6:ee: bb:e7:b0:9b:4d:fa:3e:1b:0f:4d:24:70:26:34:99: c9:31:54:2d:89:ca:c0:93:49:2b:bd:fd:a2:1e:c2: 25:66:7f:17:1f:1e:38:c6:86:45:b4:48:fd:b2:54: a7:8b:10:73:c4:ae:6f:da:58:19:0a:81:01:45:a7: ef:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:37:67:51:6A:62:F2:FD:D3:E6:12:6A:BD:67:B0:B6:41:E4:A5:EC X509v3 Authority Key Identifier: keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f7:b9:e2:43:86:f8:72:33:c2:80:03:1b:4d:f7:14:0b:7b: 8b:64:07:c0:ba:ab:8d:b6:95:3e:49:1c:04:26:76:70:fa:5e: 05:60:06:f1:2e:ec:fb:d3:68:8e:0e:41:86:d2:d9:b3:90:63: 25:22:15:06:5e:ca:54:53:f0:b0:62:61:6d:e3:e8:de:64:04: 4a:7e:f2:80:10:09:72:31:3c:c3:ae:11:3a:83:00:1f:d4:0b: 4d:10:22:e9:05:e1:ff:d4:93:e4:43:9d:12:8a:37:31:08:64: 49:f6:b5:a6:a4:ac:63:a8:f5:e4:b2:53:e1:a7:40:58:8b:bf: e1:90:7a:78:c4:b6:68:90:b7:30:74:3d:d4:44:6f:01:6b:97: 1b:61:36:9c:1b:ba:2a:52:0e:65:3a:ea:28:d7:94:d0:45:88: de:0d:54:6f:c4:12:9c:4f:df:63:43:29:35:4f:ed:38:12:b3: 10:13:d9:62:82:18:68:15:a0:dd:98:33:25:89:e1:c0:76:14: 16:cd:77:f2:4e:b2:8b:bd:fc:51:19:e9:4e:bc:da:b2:e5:db: b9:4f:6c:52:9e:c9:f9:c4:31:57:70:38:23:03:6a:7d:db:55: 51:b1:5e:64:75:8e:c1:94:93:6c:8c:28:eb:d4:0b:ca:ef:fb: d1:22:25:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKCmrLkP6AuADGwbcwtMP8vc12YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRD RkQ3RTI2QzAeFw0yNjAzMjUwNzQ3MzRaFw0yNjAzMjgwOTE3MzRaMDMxMTAvBgNV BAMTKEIxMzc2NzUxNkE2MkYyRkREM0U2MTI2QUJENjdCMEI2NDFFNEE1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChZBTOxoACnVDMqzKXieTMiiEw vnjc/qJTIzUeTV9HTw8leaTehSiQXw6F9uQxiFkrdZQRI4vb6uZX/8iFXf9Q3hMj JM/fREA5cmc49T4s38hjAOb556sIPygXa57vI/oD0iFMXoFeRL7MEBM00xzvJelV upwFBUxRgZR9oZqo3kHWAPSlydZYS0GW7uMK/jcn1phBdVbtgh7QaQIKFI5T4xEy /HHVDnMn4UyWD6iEJTBMBGy+VgTOkzNL754UERK27rvnsJtN+j4bD00kcCY0mckx VC2JysCTSSu9/aIewiVmfxcfHjjGhkW0SP2yVKeLEHPErm/aWBkKgQFFp+9pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsTdnUWpi8v3T5hJqvWewtkHkpewwHwYDVR0j BBgwFoAUynBPeF6liz9lnm48j3Hi1M/X4mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDIxOTg1Yi1hMGU2LTRlMDUtYmVmNi1mZTZmNWE2ZTJmNDMvMC9DQTcwNEY3ODVF QTU4QjNGNjU5RTZFM0M4RjcxRTJENENGRDdFMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRDRkQ3 RTI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUy RDRDRkQ3RTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/3ueJDhvhyM8KAAxtN9xQLe4tkB8C6q422 lT5JHAQmdnD6XgVgBvEu7PvTaI4OQYbS2bOQYyUiFQZeylRT8LBiYW3j6N5kBEp+ 8oAQCXIxPMOuETqDAB/UC00QIukF4f/Uk+RDnRKKNzEIZEn2taakrGOo9eSyU+Gn QFiLv+GQenjEtmiQtzB0PdREbwFrlxthNpwbuipSDmU66ijXlNBFiN4NVG/EEpxP 32NDKTVP7TgSsxAT2WKCGGgVoN2YMyWJ4cB2FBbNd/JOsou9/FEZ6U682rLl27lP bFKeyfnEMVdwOCMDan3bVVGxXmR1jsGUk2yMKOvUC8rv+9EiJcQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:10 2026 by rpki-client