$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft File: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft (raw, json) Hash identifier: k9ntPsDh6WSqzpEnMkzqBvFrG75Kimj7W5AioWIXWms= Subject key identifier: 61:1F:01:3F:27:55:F0:00:E8:CB:98:8E:10:51:A3:FF:86:B6:F2:B5 Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C Certificate issuer: /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Certificate serial: 4CD0D30891B5B56FCBCD9D96714A42C511C28419 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft Manifest number: 038E Signing time: Sun 19 Oct 2025 15:01:44 +0000 Manifest this update: Sun 19 Oct 2025 14:56:44 +0000 Manifest next update: Wed 22 Oct 2025 19:45:44 +0000 Files and hashes: 1: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl (hash: DOaQ3gRXzNam+c5scp5fhE9afvA+1Wh1YTvASt6zeAA=) 2: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: ylDWnunXe+P0sSpHe2ems7WUQ+PsguFxQzvub0cWxiw=) 3: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: fYk1A/6JlSofdoRQTxZ35IGs4jax1F7uqVxTxU6HBk4=) 4: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: rNa2on5+DMAnzayjr8XpEII8JqHWgOprf/5TlZrlTb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d0:d3:08:91:b5:b5:6f:cb:cd:9d:96:71:4a:42:c5:11:c2:84:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Validity Not Before: Oct 19 14:56:44 2025 GMT Not After : Oct 22 19:45:44 2025 GMT Subject: CN=611F013F2755F000E8CB988E1051A3FF86B6F2B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:cd:74:a3:a6:ba:06:b6:0a:49:39:fe:f8: 6c:22:92:b0:8b:b7:25:8e:a2:9f:5d:fb:2b:6c:f5: 6c:f9:76:f0:14:f2:51:c4:72:0b:c8:fe:ee:7c:98: 6c:bd:9a:76:b6:5c:da:c7:42:11:eb:fd:7e:77:28: dd:6c:45:3f:20:30:3d:36:1a:b5:17:14:b2:c1:8b: fc:26:49:cf:26:b1:39:80:4b:93:95:89:85:d8:ad: e9:d5:7f:5f:c8:97:4c:15:f0:c3:9a:6d:76:d2:7e: 96:f7:99:be:d5:5f:c9:73:c8:99:9a:0c:6d:3b:15: 53:71:e9:d6:72:a6:2a:e1:f8:db:3e:3a:f1:52:dd: 7b:32:dc:b4:34:10:fa:6c:cc:9e:b2:72:1c:4f:5f: f4:9b:29:bd:60:37:19:97:0e:b2:9f:05:55:bd:1c: 6c:ad:a7:f4:66:a4:a8:b2:63:96:fa:d6:c7:fb:5f: 21:4f:dc:04:ea:1d:68:ec:37:dc:a0:db:19:6c:68: 64:8f:00:ec:98:b0:49:fc:28:8f:29:d7:28:c5:f1: e3:47:c2:92:1e:d1:30:7c:ab:9e:72:20:67:31:de: f7:71:4c:31:33:bb:87:46:4e:c8:6a:6e:dd:c6:bc: cb:8f:03:59:d7:18:9c:64:99:cf:eb:f0:c5:b1:c5: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1F:01:3F:27:55:F0:00:E8:CB:98:8E:10:51:A3:FF:86:B6:F2:B5 X509v3 Authority Key Identifier: keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ae:4e:70:b9:c0:ec:fc:82:6c:39:94:a1:68:32:0b:9b:37: bc:70:0c:5b:19:ec:f4:6b:a9:80:34:26:8f:72:5c:ff:10:ea: 8e:74:4f:6c:8e:d6:c5:5a:39:ad:80:ea:0c:34:25:c2:5d:8f: 2f:c0:fa:db:cb:65:7d:f5:7c:0c:3e:c5:59:9a:9a:02:d0:2f: 51:19:b2:92:61:84:eb:40:f8:4e:7d:b1:ac:1c:a1:df:96:88: e4:a5:60:73:a0:47:3c:35:d4:b2:00:8c:f1:d9:fe:33:21:c9: 2e:15:f3:27:cd:54:88:55:6e:84:c8:25:ee:dd:47:23:36:4f: 79:2d:1a:2c:8b:11:33:f4:91:f4:6a:80:6b:38:99:ce:4f:94: 37:ad:64:6f:97:6f:94:48:bc:b9:11:ea:f0:70:f4:1c:b7:95: 07:61:14:ba:73:e1:3b:98:26:08:cd:0a:95:04:f3:0a:d1:95: 3b:5f:98:41:8d:08:be:0c:51:96:fc:c0:e8:ef:69:17:2d:d4: b5:3a:ac:bf:74:18:de:83:a9:f1:d7:24:88:ad:6f:0c:c9:9d: 22:66:c1:c7:17:a3:7c:7f:10:4a:19:ec:da:ad:ac:77:a2:9c: 64:ae:b4:18:94:c7:4c:d8:22:44:72:2f:82:98:b9:ff:82:e0: c6:0e:0a:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNDTCJG1tW/LzZ2WcUpCxRHChBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRD RkQ3RTI2QzAeFw0yNTEwMTkxNDU2NDRaFw0yNTEwMjIxOTQ1NDRaMDMxMTAvBgNV BAMTKDYxMUYwMTNGMjc1NUYwMDBFOENCOTg4RTEwNTFBM0ZGODZCNkYyQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLns10o6a6BrYKSTn++GwikrCL tyWOop9d+yts9Wz5dvAU8lHEcgvI/u58mGy9mna2XNrHQhHr/X53KN1sRT8gMD02 GrUXFLLBi/wmSc8msTmAS5OViYXYrenVf1/Il0wV8MOabXbSfpb3mb7VX8lzyJma DG07FVNx6dZypirh+Ns+OvFS3Xsy3LQ0EPpszJ6ychxPX/SbKb1gNxmXDrKfBVW9 HGytp/RmpKiyY5b61sf7XyFP3ATqHWjsN9yg2xlsaGSPAOyYsEn8KI8p1yjF8eNH wpIe0TB8q55yIGcx3vdxTDEzu4dGTshqbt3GvMuPA1nXGJxkmc/r8MWxxRMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYR8BPydV8ADoy5iOEFGj/4a28rUwHwYDVR0j BBgwFoAUynBPeF6liz9lnm48j3Hi1M/X4mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDIxOTg1Yi1hMGU2LTRlMDUtYmVmNi1mZTZmNWE2ZTJmNDMvMC9DQTcwNEY3ODVF QTU4QjNGNjU5RTZFM0M4RjcxRTJENENGRDdFMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRDRkQ3 RTI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUy RDRDRkQ3RTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAauTnC5wOz8gmw5lKFoMgubN7xwDFsZ7PRr qYA0Jo9yXP8Q6o50T2yO1sVaOa2A6gw0JcJdjy/A+tvLZX31fAw+xVmamgLQL1EZ spJhhOtA+E59sawcod+WiOSlYHOgRzw11LIAjPHZ/jMhyS4V8yfNVIhVboTIJe7d RyM2T3ktGiyLETP0kfRqgGs4mc5PlDetZG+Xb5RIvLkR6vBw9By3lQdhFLpz4TuY JgjNCpUE8wrRlTtfmEGNCL4MUZb8wOjvaRct1LU6rL90GN6DqfHXJIitbwzJnSJm wccXo3x/EEoZ7NqtrHeinGSutBiUx0zYIkRyL4KYuf+C4MYOClM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:09:37 2025 by rpki-client