$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: txbfrJD3Z8D+KbxtkmSpMy7sBIhedKKBYg6qClYIJz8= Subject key identifier: BE:C6:8B:26:5E:A7:B3:80:36:0B:7C:36:F0:D1:D4:10:78:C9:D6:37 Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 7A5019E13ADCEA8C32F49E75474A734176F70DDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: EE Signing time: Mon 20 Oct 2025 05:31:45 +0000 Manifest this update: Mon 20 Oct 2025 05:26:45 +0000 Manifest next update: Thu 23 Oct 2025 09:50:45 +0000 Files and hashes: 1: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) 2: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) 3: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: SvN/JMWfZ9MEEv6XcTSJjHjO6skw5W124+YRcClb2wE=) 4: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) 5: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 6: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:50:19:e1:3a:dc:ea:8c:32:f4:9e:75:47:4a:73:41:76:f7:0d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Oct 20 05:26:45 2025 GMT Not After : Oct 23 09:50:45 2025 GMT Subject: CN=BEC68B265EA7B380360B7C36F0D1D41078C9D637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:7a:aa:33:67:fa:dd:6e:a2:12:77:01:d7: a3:7f:6e:86:7b:af:81:4f:37:9c:91:8c:8d:ab:ee: 12:38:f0:4b:87:7c:9c:6f:d3:46:c1:a4:78:5d:3c: 25:29:b1:52:4b:3d:d7:1b:a1:f9:1c:5e:26:e7:17: f5:ff:c9:8a:7b:fd:d3:16:5a:04:d8:c5:bd:d8:31: d0:27:24:97:b3:74:50:02:ab:d4:6d:ca:eb:05:c4: a0:15:7f:0a:f7:d7:a6:25:e5:23:e9:a2:19:90:0e: 9f:2d:af:80:14:72:46:53:c7:9c:a5:bb:b7:3f:a6: fb:a1:bb:eb:7b:4b:d9:af:4f:34:91:db:ee:d7:fc: 55:54:cd:fd:cd:cc:cc:49:65:f8:ab:9b:06:a5:4f: bc:20:fb:fc:58:6b:ac:3d:15:c7:89:7d:1e:94:03: 24:25:4c:40:ae:f6:9e:f1:c2:47:d0:e8:9f:4e:79: fc:99:4c:cd:84:fb:a8:f1:62:63:87:21:53:29:7a: 91:ad:ea:3c:a3:99:7b:43:41:d0:17:7e:c4:d5:4e: 45:39:11:98:f4:6d:1a:9c:eb:bf:6b:40:ce:6f:4b: b9:6b:ae:42:94:4b:d6:64:5d:29:81:c9:5d:24:d8: 05:1d:ed:2f:d3:ab:7a:1e:18:e5:42:30:36:80:93: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C6:8B:26:5E:A7:B3:80:36:0B:7C:36:F0:D1:D4:10:78:C9:D6:37 X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:47:68:a9:c9:56:9f:aa:b2:1b:d1:98:a5:d8:b5:8f:3d:44: 9c:09:42:82:1e:83:a2:4f:58:89:11:89:67:3c:17:fc:12:06: 03:8d:44:d0:a3:02:24:71:6b:4c:fc:e4:dd:52:c2:ae:99:d1: e9:b2:63:e7:a4:14:56:6e:f1:32:03:e3:16:43:ca:b1:5d:74: b2:eb:a2:f5:03:5c:c2:3b:db:e3:f9:ab:6b:f4:4e:ce:7c:ec: 21:4d:ab:8b:58:7e:32:34:bb:42:05:13:3b:a6:72:ea:fd:3e: e5:6a:f3:17:1a:d0:8f:4e:e5:e6:6d:e6:ca:32:6f:0a:ab:c6: 22:f3:cf:0a:4b:93:c9:0d:0c:70:7c:51:b8:27:1b:7d:7e:26: e8:05:30:d8:5e:fd:5a:01:74:61:55:d3:83:43:89:93:9b:6d: 06:ba:1b:7b:50:a2:a2:65:42:a1:af:05:c6:0d:7e:cc:52:7e: a3:5b:cd:54:59:6f:d1:65:68:9d:03:c9:62:c5:20:de:66:f0: a3:68:27:28:f6:94:90:f4:a4:52:38:6d:b6:2f:d8:86:99:c0: 44:17:1c:db:ac:04:39:2c:82:0c:dd:5c:f6:b5:d0:c8:7e:7e: 3a:23:85:21:ca:70:7d:5b:f4:08:ff:e6:ae:d7:6d:9f:94:b0: a9:cc:62:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUelAZ4Trc6owy9J51R0pzQXb3Dd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNTEwMjAwNTI2NDVaFw0yNTEwMjMwOTUwNDVaMDMxMTAvBgNV BAMTKEJFQzY4QjI2NUVBN0IzODAzNjBCN0MzNkYwRDFENDEwNzhDOUQ2MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWXqqM2f63W6iEncB16N/boZ7 r4FPN5yRjI2r7hI48EuHfJxv00bBpHhdPCUpsVJLPdcbofkcXibnF/X/yYp7/dMW WgTYxb3YMdAnJJezdFACq9RtyusFxKAVfwr316Yl5SPpohmQDp8tr4AUckZTx5yl u7c/pvuhu+t7S9mvTzSR2+7X/FVUzf3NzMxJZfirmwalT7wg+/xYa6w9FceJfR6U AyQlTECu9p7xwkfQ6J9OefyZTM2E+6jxYmOHIVMpepGt6jyjmXtDQdAXfsTVTkU5 EZj0bRqc679rQM5vS7lrrkKUS9ZkXSmByV0k2AUd7S/Tq3oeGOVCMDaAk6bpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvsaLJl6ns4A2C3w28NHUEHjJ1jcwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxHaKnJVp+qshvRmKXYtY89RJwJQoIeg6JP WIkRiWc8F/wSBgONRNCjAiRxa0z85N1Swq6Z0emyY+ekFFZu8TID4xZDyrFddLLr ovUDXMI72+P5q2v0Ts587CFNq4tYfjI0u0IFEzumcur9PuVq8xca0I9O5eZt5soy bwqrxiLzzwpLk8kNDHB8UbgnG31+JugFMNhe/VoBdGFV04NDiZObbQa6G3tQoqJl QqGvBcYNfsxSfqNbzVRZb9FlaJ0DyWLFIN5m8KNoJyj2lJD0pFI4bbYv2IaZwEQX HNusBDksggzdXPa10Mh+fjojhSHKcH1b9Aj/5q7XbZ+UsKnMYuI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:19:57 2025 by rpki-client