$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft File: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft (raw, json) Hash identifier: k4kQHMijHgRGy0P6aMoqLSlhP1gcJSoBbnzG7WR0JRs= Subject key identifier: 8A:99:4A:41:1C:C6:1D:02:DA:4E:52:A5:22:E2:50:22:E7:8A:77:35 Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C Certificate issuer: /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Certificate serial: 146ABA849885340B851129EA12AB702116FE4CD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft Manifest number: 0373 Signing time: Fri 22 Aug 2025 15:52:14 +0000 Manifest this update: Fri 22 Aug 2025 15:47:14 +0000 Manifest next update: Tue 26 Aug 2025 02:23:14 +0000 Files and hashes: 1: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl (hash: jI9ZjwW6jho2ox6LN8YCBy1lVsxzrwEjoeI3h9FeZlE=) 2: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: fYk1A/6JlSofdoRQTxZ35IGs4jax1F7uqVxTxU6HBk4=) 3: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: iv2SAjyHSWCSm/Qp+qCzqgF4lXDrzm6Us1pHd8OSMEA=) 4: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: rNa2on5+DMAnzayjr8XpEII8JqHWgOprf/5TlZrlTb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:6a:ba:84:98:85:34:0b:85:11:29:ea:12:ab:70:21:16:fe:4c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Validity Not Before: Aug 22 15:47:14 2025 GMT Not After : Aug 26 02:23:14 2025 GMT Subject: CN=8A994A411CC61D02DA4E52A522E25022E78A7735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:da:be:48:e6:10:80:4a:8a:7a:bd:e9:d0: 35:68:22:b8:7e:0c:c0:ff:79:7f:c9:9c:c8:10:de: 8a:73:6f:01:dc:c4:1a:9c:63:de:f2:46:01:51:a2: 47:54:18:e9:7a:c3:a9:14:94:89:82:c8:ce:64:c9: ad:73:3b:0e:bc:18:2f:dd:53:7b:fc:e8:19:36:f9: 2e:f1:26:6f:04:ac:10:7e:26:5c:29:c3:5e:ad:51: b3:11:d0:e3:d8:c5:51:02:e0:19:8f:9a:c4:bb:29: 38:ab:51:10:b6:06:b4:f8:3b:ed:60:2f:29:f6:f1: ce:2c:b7:4b:ec:08:dd:ad:a7:46:48:1d:2e:ea:b6: fe:b1:88:12:53:c1:a7:a4:b8:a7:a7:cb:78:bb:73: ac:24:23:aa:b8:54:ed:af:39:d1:b3:42:38:bc:7d: 62:4d:86:11:a9:68:c4:90:21:e5:02:00:55:80:5d: 4e:1f:29:2a:0a:d6:1e:93:37:1c:81:84:25:b9:ca: 82:8c:50:38:c4:04:94:f9:3a:89:f8:1a:5c:64:6e: d5:ac:a4:49:ae:de:b3:a8:87:95:40:7d:c1:d7:ac: a1:b7:bf:a4:ad:4c:82:e1:d7:d1:a9:f2:9e:61:b5: 8c:6e:15:44:5d:a6:ec:55:e0:60:13:55:0e:97:20: b1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:99:4A:41:1C:C6:1D:02:DA:4E:52:A5:22:E2:50:22:E7:8A:77:35 X509v3 Authority Key Identifier: keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:36:56:57:e5:ca:53:df:5d:cd:36:8b:1e:69:74:65:27:83: e1:14:57:0f:a2:fb:8d:4d:6e:df:20:03:f3:3a:c4:6b:b7:7a: 32:02:b1:6b:67:ad:08:d4:91:11:22:38:fd:ac:e9:db:1a:7d: 75:53:9e:7d:b7:b4:aa:b5:5c:20:50:5b:d6:f0:17:f9:73:b7: e3:21:b1:05:c3:76:8e:dc:f1:49:73:66:c7:c0:43:26:e9:46: 3f:05:9e:fd:e2:d6:3f:46:ca:28:04:80:41:40:2a:bf:52:bf: e5:4d:81:1f:ff:c8:f2:71:78:dc:b7:41:44:d8:b1:9a:40:e8: 48:1e:ce:fe:9e:44:b2:2f:4e:41:82:2b:ce:ca:9a:31:4a:82: 35:17:de:1c:0e:79:94:71:cd:12:ef:05:33:b3:f7:a3:5f:50: 6a:1c:45:7b:4f:2b:aa:17:96:0d:57:4f:95:78:0c:98:93:09: 30:c4:3d:06:08:2e:8b:d2:67:9b:e5:29:6f:45:6a:8d:c3:d9: 47:02:ed:31:72:d0:9e:24:f3:95:0f:ec:29:36:37:05:13:3b: 6a:24:84:99:b3:20:22:ab:72:28:60:d8:de:25:34:de:aa:96: 30:b4:7e:fc:a1:38:90:9d:ba:73:b7:31:54:77:b5:75:f3:38: 71:80:2a:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFGq6hJiFNAuFESnqEqtwIRb+TNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRD RkQ3RTI2QzAeFw0yNTA4MjIxNTQ3MTRaFw0yNTA4MjYwMjIzMTRaMDMxMTAvBgNV BAMTKDhBOTk0QTQxMUNDNjFEMDJEQTRFNTJBNTIyRTI1MDIyRTc4QTc3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WNq+SOYQgEqKer3p0DVoIrh+ DMD/eX/JnMgQ3opzbwHcxBqcY97yRgFRokdUGOl6w6kUlImCyM5kya1zOw68GC/d U3v86Bk2+S7xJm8ErBB+Jlwpw16tUbMR0OPYxVEC4BmPmsS7KTirURC2BrT4O+1g Lyn28c4st0vsCN2tp0ZIHS7qtv6xiBJTwaekuKeny3i7c6wkI6q4VO2vOdGzQji8 fWJNhhGpaMSQIeUCAFWAXU4fKSoK1h6TNxyBhCW5yoKMUDjEBJT5Oon4GlxkbtWs pEmu3rOoh5VAfcHXrKG3v6StTILh19Gp8p5htYxuFURdpuxV4GATVQ6XILHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiplKQRzGHQLaTlKlIuJQIueKdzUwHwYDVR0j BBgwFoAUynBPeF6liz9lnm48j3Hi1M/X4mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDIxOTg1Yi1hMGU2LTRlMDUtYmVmNi1mZTZmNWE2ZTJmNDMvMC9DQTcwNEY3ODVF QTU4QjNGNjU5RTZFM0M4RjcxRTJENENGRDdFMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRDRkQ3 RTI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUy RDRDRkQ3RTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGo2VlflylPfXc02ix5pdGUng+EUVw+i+41N bt8gA/M6xGu3ejICsWtnrQjUkREiOP2s6dsafXVTnn23tKq1XCBQW9bwF/lzt+Mh sQXDdo7c8UlzZsfAQybpRj8Fnv3i1j9GyigEgEFAKr9Sv+VNgR//yPJxeNy3QUTY sZpA6Egezv6eRLIvTkGCK87KmjFKgjUX3hwOeZRxzRLvBTOz96NfUGocRXtPK6oX lg1XT5V4DJiTCTDEPQYILovSZ5vlKW9Fao3D2UcC7TFy0J4k85UP7Ck2NwUTO2ok hJmzICKrcihg2N4lNN6qljC0fvyhOJCdunO3MVR3tXXzOHGAKqE= -----END CERTIFICATE-----Generated at Sat Aug 23 11:56:25 2025 by rpki-client