$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft File: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft (raw, json) Hash identifier: 92IiTd4OnR30bEvO2Axg5nduPPK3QMtSSxKk82jfZ70= Subject key identifier: 4C:87:08:76:10:7B:E9:15:41:CF:70:97:49:84:8A:E5:68:1A:92:F9 Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C Certificate issuer: /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Certificate serial: 787B61BBB30C267CA9611EC1A787D4CDF1D21FCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft Manifest number: 035A Signing time: Fri 27 Jun 2025 20:12:19 +0000 Manifest this update: Fri 27 Jun 2025 20:07:19 +0000 Manifest next update: Tue 01 Jul 2025 03:31:19 +0000 Files and hashes: 1: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: iv2SAjyHSWCSm/Qp+qCzqgF4lXDrzm6Us1pHd8OSMEA=) 2: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl (hash: FVvOWtI4QOCcauh/+2prI1Z+NKPUka9SyjGvOsLzq6A=) 3: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: rNa2on5+DMAnzayjr8XpEII8JqHWgOprf/5TlZrlTb0=) 4: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: fYk1A/6JlSofdoRQTxZ35IGs4jax1F7uqVxTxU6HBk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 03:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7b:61:bb:b3:0c:26:7c:a9:61:1e:c1:a7:87:d4:cd:f1:d2:1f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Validity Not Before: Jun 27 20:07:19 2025 GMT Not After : Jul 1 03:31:19 2025 GMT Subject: CN=4C870876107BE91541CF709749848AE5681A92F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3f:d6:0d:43:f1:ea:b4:ef:6f:70:a3:e2:4e: 65:23:c3:76:bc:ea:78:d4:a5:b3:7d:fd:6e:5a:f1: ea:43:48:99:77:07:cc:1c:9e:90:31:e2:58:51:22: 6c:61:08:04:95:91:d3:40:2b:38:c2:75:71:e1:74: d2:34:dd:f8:d0:22:8f:09:19:2d:c5:76:b1:cc:f4: ee:b2:6b:a3:68:0c:ff:0f:a1:c6:ea:e6:b8:09:6b: 6a:a9:ef:2d:fd:0e:74:57:22:55:c7:ef:78:91:85: b7:05:0b:38:51:6e:fb:a8:0c:cf:e2:fc:6f:1d:64: c7:2f:03:49:ac:b8:f3:2b:2c:5b:8d:5d:f4:07:28: d5:60:2c:7e:9d:ed:e2:0b:8f:2c:fd:85:76:f7:59: 45:64:64:48:8a:5b:49:12:8f:f5:11:22:74:60:15: 0f:28:1f:9f:bb:2b:76:3d:93:0f:16:50:1c:0e:30: 87:8d:f1:6e:44:c7:9a:b5:d0:df:87:bf:02:77:ce: 62:f1:21:9a:0d:7b:bd:7d:24:24:31:2b:0d:c5:9b: 73:c8:53:b2:9f:73:5f:e9:ba:ec:1c:d5:df:ea:71: 59:23:b9:a4:d7:ec:f9:6f:b0:ed:06:7f:3e:2c:0d: 32:c0:dc:9f:ee:30:a5:8b:aa:15:62:00:8c:56:65: 3e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:87:08:76:10:7B:E9:15:41:CF:70:97:49:84:8A:E5:68:1A:92:F9 X509v3 Authority Key Identifier: keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:22:b6:d8:e8:50:e7:18:0c:8d:fd:02:95:66:33:68:0c:ae: 0d:bd:ee:b1:60:85:fa:34:36:05:cd:8f:c2:fc:bb:98:51:04: c5:fa:59:7f:cc:e5:9f:c3:fc:3b:21:b1:bb:44:3a:7c:08:9d: 70:2e:2e:5f:c8:7c:e2:06:07:be:07:44:10:d3:aa:fa:ab:4f: 39:5d:cd:26:77:d3:10:51:75:18:af:1d:3d:9b:23:f6:16:71: a6:d8:3d:1c:e9:36:4e:bc:08:20:b1:8f:b9:89:c1:1e:bd:48: f9:7a:d6:d3:54:ff:ef:dd:8c:12:0f:c8:2b:91:02:0e:3a:83: 48:17:06:06:75:95:9d:a5:86:c6:1e:36:bb:14:45:60:15:87: a8:44:d9:cc:f3:ca:70:d6:65:62:3c:b8:d6:b5:8e:8c:bd:35: 9e:d5:cc:a8:62:97:0b:f5:ce:e1:0c:63:ed:8d:17:e6:21:c0: 0c:1b:fe:02:65:c2:3e:3b:45:41:7c:be:a5:9c:42:32:f7:50: a4:55:ab:74:bc:4f:a1:e2:b5:a1:5f:88:3c:a8:5b:6c:76:d5: c6:28:32:1d:6a:f8:c6:9c:81:b3:14:e4:0a:8c:4e:83:da:41: 31:e3:10:c4:08:4e:e0:4f:5f:6c:ee:af:cc:a4:2e:39:b5:14: 1f:f1:1f:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeHthu7MMJnypYR7Bp4fUzfHSH84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRD RkQ3RTI2QzAeFw0yNTA2MjcyMDA3MTlaFw0yNTA3MDEwMzMxMTlaMDMxMTAvBgNV BAMTKDRDODcwODc2MTA3QkU5MTU0MUNGNzA5NzQ5ODQ4QUU1NjgxQTkyRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuP9YNQ/HqtO9vcKPiTmUjw3a8 6njUpbN9/W5a8epDSJl3B8wcnpAx4lhRImxhCASVkdNAKzjCdXHhdNI03fjQIo8J GS3FdrHM9O6ya6NoDP8Pocbq5rgJa2qp7y39DnRXIlXH73iRhbcFCzhRbvuoDM/i /G8dZMcvA0msuPMrLFuNXfQHKNVgLH6d7eILjyz9hXb3WUVkZEiKW0kSj/URInRg FQ8oH5+7K3Y9kw8WUBwOMIeN8W5Ex5q10N+HvwJ3zmLxIZoNe719JCQxKw3Fm3PI U7Kfc1/puuwc1d/qcVkjuaTX7PlvsO0Gfz4sDTLA3J/uMKWLqhViAIxWZT5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTIcIdhB76RVBz3CXSYSK5WgakvkwHwYDVR0j BBgwFoAUynBPeF6liz9lnm48j3Hi1M/X4mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDIxOTg1Yi1hMGU2LTRlMDUtYmVmNi1mZTZmNWE2ZTJmNDMvMC9DQTcwNEY3ODVF QTU4QjNGNjU5RTZFM0M4RjcxRTJENENGRDdFMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRDRkQ3 RTI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUy RDRDRkQ3RTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgittjoUOcYDI39ApVmM2gMrg297rFghfo0 NgXNj8L8u5hRBMX6WX/M5Z/D/DshsbtEOnwInXAuLl/IfOIGB74HRBDTqvqrTzld zSZ30xBRdRivHT2bI/YWcabYPRzpNk68CCCxj7mJwR69SPl61tNU/+/djBIPyCuR Ag46g0gXBgZ1lZ2lhsYeNrsURWAVh6hE2czzynDWZWI8uNa1joy9NZ7VzKhilwv1 zuEMY+2NF+YhwAwb/gJlwj47RUF8vqWcQjL3UKRVq3S8T6HitaFfiDyoW2x21cYo Mh1q+MacgbMU5AqMToPaQTHjEMQITuBPX2zur8ykLjm1FB/xH5A= -----END CERTIFICATE-----Generated at Sun Jun 29 18:09:11 2025 by rpki-client