$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: PjeYlBVWskUrJmUzCOmAAfGbBwfmr2r9IRQDNUWZEx0= Subject key identifier: 17:85:6B:76:4F:F1:3D:F8:2D:6D:FF:1C:23:D1:6F:B8:4F:EB:95:BB Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 418651E5556B232D32770A9D62E34037AF92DB00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: 0134 Signing time: Wed 25 Mar 2026 21:42:00 +0000 Manifest this update: Wed 25 Mar 2026 21:37:00 +0000 Manifest next update: Sat 28 Mar 2026 23:00:00 +0000 Files and hashes: 1: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: KE/398lSeMUtHRrscwxIN6CfhOWbcM9cBrkB3gU53go=) 2: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: Ere/Mue6LDRnmJcZd1LlYsbJSFP1UwKGC0YZPV4qMDs=) 3: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: i+jlvxpTFwINLCyEDOLYiVMmzTheC3p0BfnqisiMDQA=) 4: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: YexQjl939Neb4FXseD4VCr2jwVvX5uGqagWDPx2/uZk=) 5: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: rzzsxZkGKsivQYJmvFaRwBy4kZLbKSDDcGxNt8FFqZc=) 6: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: g/bUmpPDJHsTD6dQdeDeZfbaKxT1TZ2LDGh+snNOyBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:86:51:e5:55:6b:23:2d:32:77:0a:9d:62:e3:40:37:af:92:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Mar 25 21:37:00 2026 GMT Not After : Mar 28 23:00:00 2026 GMT Subject: CN=17856B764FF13DF82D6DFF1C23D16FB84FEB95BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:aa:60:99:c5:56:e6:27:db:ac:4e:21:e6:5a: 94:52:98:1e:4e:d2:9b:13:95:98:1d:1b:da:f1:24: 41:cb:d6:dd:38:4a:41:f3:d7:fe:5a:1e:b9:82:16: 8e:60:af:43:3d:b9:32:8a:1d:2d:3c:a3:c0:09:87: 11:8a:89:b7:1a:a3:8f:12:28:7b:e4:17:da:4f:27: 9b:07:70:20:38:53:c7:9c:12:09:b0:16:ee:11:e6: 67:ed:8b:ef:54:b0:4c:cd:12:71:28:5f:e4:75:27: bb:0d:4c:d6:52:0b:2c:ad:94:38:f9:6b:59:ba:43: 18:63:5c:6d:1d:6f:7b:93:5c:7a:b0:57:9e:be:c1: ac:76:56:b2:c2:1b:12:fd:f4:80:33:fe:95:c0:df: 8f:43:e2:1f:87:db:4c:82:4d:2f:17:48:06:91:a7: 8a:a8:c9:c1:72:68:2b:d2:90:ae:bb:89:74:63:e3: 7a:28:d0:64:f0:39:72:c2:df:af:8b:68:9c:6b:2c: ab:ab:50:a9:f3:bf:fb:4d:6e:4c:af:71:a7:e4:bf: f5:f4:58:da:69:d6:15:fb:90:54:b7:35:6e:f5:8e: 3d:81:0b:90:df:af:65:4f:32:0f:91:7d:dc:f9:e1: 61:5d:97:cd:93:a8:51:d0:72:6c:49:eb:9f:8c:a7: 10:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:85:6B:76:4F:F1:3D:F8:2D:6D:FF:1C:23:D1:6F:B8:4F:EB:95:BB X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ff:47:5c:39:e0:f0:d6:48:ef:6a:3a:d4:d7:8b:d2:da:9d: 36:a8:1b:72:f5:01:83:a6:40:e2:4d:c9:bc:5d:ab:cb:eb:14: 80:bc:97:de:a3:4e:69:46:69:06:2a:87:e1:11:c4:69:39:af: ad:be:82:eb:2a:0c:74:f9:f5:41:1a:bf:16:ee:fa:8c:e0:65: de:d4:85:bf:22:2b:cc:f1:d6:8d:8f:99:4f:b2:02:d2:ef:46: d0:b8:b1:71:7d:aa:87:a1:4a:f1:9a:8a:c6:9a:cf:f1:4f:96: 54:90:cf:b4:13:3b:7f:14:ba:28:1a:5a:4a:53:83:18:6d:e8: 6a:a1:80:57:5b:f9:a5:34:ad:9b:63:e9:19:ab:e9:4c:10:39: cd:63:83:f5:bd:24:9e:a8:dd:65:55:f2:a0:25:2b:0e:4b:08: 0b:04:de:15:72:7e:18:8c:93:16:72:c7:90:5b:7d:c6:7d:c3: 5f:24:6d:d9:ce:40:9d:f8:97:e2:82:43:45:9b:79:72:25:b3: 13:62:84:e8:bf:d5:3a:35:1e:ef:93:53:ae:f1:66:16:95:46: e0:b2:f8:3b:f5:e4:2e:cd:d0:be:e9:47:8c:1a:9d:c2:b0:24: 57:92:21:27:59:57:48:cc:e9:d7:57:c4:7c:a3:cd:66:36:5b: 18:19:cf:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYZR5VVrIy0ydwqdYuNAN6+S2wAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNjAzMjUyMTM3MDBaFw0yNjAzMjgyMzAwMDBaMDMxMTAvBgNV BAMTKDE3ODU2Qjc2NEZGMTNERjgyRDZERkYxQzIzRDE2RkI4NEZFQjk1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlqmCZxVbmJ9usTiHmWpRSmB5O 0psTlZgdG9rxJEHL1t04SkHz1/5aHrmCFo5gr0M9uTKKHS08o8AJhxGKibcao48S KHvkF9pPJ5sHcCA4U8ecEgmwFu4R5mfti+9UsEzNEnEoX+R1J7sNTNZSCyytlDj5 a1m6QxhjXG0db3uTXHqwV56+wax2VrLCGxL99IAz/pXA349D4h+H20yCTS8XSAaR p4qoycFyaCvSkK67iXRj43oo0GTwOXLC36+LaJxrLKurUKnzv/tNbkyvcafkv/X0 WNpp1hX7kFS3NW71jj2BC5Dfr2VPMg+Rfdz54WFdl82TqFHQcmxJ65+MpxDLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF4Vrdk/xPfgtbf8cI9FvuE/rlbswHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP/R1w54PDWSO9qOtTXi9LanTaoG3L1AYOm QOJNybxdq8vrFIC8l96jTmlGaQYqh+ERxGk5r62+gusqDHT59UEavxbu+ozgZd7U hb8iK8zx1o2PmU+yAtLvRtC4sXF9qoehSvGaisaaz/FPllSQz7QTO38UuigaWkpT gxht6GqhgFdb+aU0rZtj6Rmr6UwQOc1jg/W9JJ6o3WVV8qAlKw5LCAsE3hVyfhiM kxZyx5BbfcZ9w18kbdnOQJ34l+KCQ0WbeXIlsxNihOi/1To1Hu+TU67xZhaVRuCy +Dv15C7N0L7pR4wancKwJFeSISdZV0jM6ddXxHyjzWY2WxgZz9A= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:39 2026 by rpki-client