$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: 0bSFU22AKDcXA0PTeRrx8dzj8VSaRbsVl8cEvnhUyy4= Subject key identifier: 3D:FD:41:40:C9:DC:17:A0:E0:78:20:2D:12:19:C9:D5:E6:87:D2:09 Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 7A46384AAE1C40937414BBB6C268A46CE8112A5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: D4 Signing time: Sat 23 Aug 2025 06:11:45 +0000 Manifest this update: Sat 23 Aug 2025 06:06:45 +0000 Manifest next update: Tue 26 Aug 2025 07:52:45 +0000 Files and hashes: 1: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) 2: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) 3: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) 4: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 5: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 6: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: wBfVKL1q1erPfveMH9/O6E2GRr8PxqxlCG0b7Xy27wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:46:38:4a:ae:1c:40:93:74:14:bb:b6:c2:68:a4:6c:e8:11:2a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Aug 23 06:06:45 2025 GMT Not After : Aug 26 07:52:45 2025 GMT Subject: CN=3DFD4140C9DC17A0E078202D1219C9D5E687D209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:83:6f:cb:fd:b3:27:9f:02:96:52:59:be: 2d:c1:e7:4c:c8:89:3e:79:7e:a9:54:ae:01:be:9c: 00:71:b0:e8:d5:02:bb:52:96:4f:f5:75:6c:e3:89: 29:a6:2c:ef:ba:9c:53:4f:b5:20:3d:18:a5:13:85: 40:b0:93:c7:94:fc:10:b5:a0:17:3d:85:57:29:91: f3:71:c0:c1:ec:84:69:e6:cc:ea:dc:1a:2a:8b:f6: 80:9f:99:59:16:f0:6f:3f:5f:0f:26:8d:36:40:d6: 60:14:87:ff:0b:08:51:48:63:d6:3f:28:d7:f8:09: bc:03:d0:7f:94:30:d4:f4:dd:8d:8b:7d:28:c9:0c: b6:f6:02:76:67:23:25:c2:2a:1f:9f:18:48:23:e0: 6f:9b:1e:aa:a2:dd:6d:7b:b7:65:d6:3c:0a:bc:25: ca:50:a7:17:87:79:32:6a:a6:ad:bd:ac:1e:58:dc: 01:e8:31:0b:5a:d4:ab:2e:b3:cc:7f:37:a3:d9:f8: b1:0e:8e:d3:d2:a7:2f:5e:9e:83:05:1f:ef:40:14: 3b:f7:75:15:ae:cd:13:ec:54:c4:ee:e9:c0:73:11: 1a:a4:62:ed:87:35:90:7c:e7:db:39:c4:5d:43:53: 72:54:dd:92:87:09:98:d0:9b:1f:4a:95:be:94:e2: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FD:41:40:C9:DC:17:A0:E0:78:20:2D:12:19:C9:D5:E6:87:D2:09 X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ba:97:74:20:2a:60:36:70:e0:c2:27:ad:c2:b2:fa:56:b7: 03:cd:15:a6:80:8c:22:98:7f:32:01:d3:62:0c:a4:88:bf:cd: 7a:0b:48:3e:72:df:20:77:fc:20:02:eb:5e:c2:d7:70:46:bb: 1b:55:3b:df:a2:d2:25:2e:28:38:04:60:c3:55:f7:ac:57:00: 4e:fe:bb:a8:7c:da:f3:0c:77:9b:58:43:12:4a:3b:65:e1:ab: 64:be:b2:da:d3:55:97:6d:b1:06:d6:78:74:08:f0:40:80:83: 86:de:06:71:2c:9b:44:16:25:97:6d:18:c0:4b:ad:7f:04:4a: 3e:58:a2:58:8b:47:a1:70:45:ee:f3:70:08:c3:33:fe:3c:7d: 7f:78:06:65:98:85:a7:01:b7:32:c2:8a:58:0c:b8:41:b2:54: dd:73:3b:8a:91:14:ce:30:57:f0:7c:74:d8:09:60:7b:e2:f1: 7c:59:5e:fb:4c:70:1e:7e:05:61:5f:94:93:48:67:0e:69:59: 37:9c:39:0e:eb:eb:b6:d7:13:d4:e3:25:0f:c0:05:bb:96:bd: eb:cb:80:ff:70:d4:77:d4:2d:f5:82:a6:39:e5:1f:e5:78:c7: 87:a8:89:dd:c3:e6:e7:80:d8:13:05:27:91:d0:58:6a:5e:c3: 40:b0:c2:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUekY4Sq4cQJN0FLu2wmikbOgRKl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNTA4MjMwNjA2NDVaFw0yNTA4MjYwNzUyNDVaMDMxMTAvBgNV BAMTKDNERkQ0MTQwQzlEQzE3QTBFMDc4MjAyRDEyMTlDOUQ1RTY4N0QyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfs4Nvy/2zJ58CllJZvi3B50zI iT55fqlUrgG+nABxsOjVArtSlk/1dWzjiSmmLO+6nFNPtSA9GKUThUCwk8eU/BC1 oBc9hVcpkfNxwMHshGnmzOrcGiqL9oCfmVkW8G8/Xw8mjTZA1mAUh/8LCFFIY9Y/ KNf4CbwD0H+UMNT03Y2LfSjJDLb2AnZnIyXCKh+fGEgj4G+bHqqi3W17t2XWPAq8 JcpQpxeHeTJqpq29rB5Y3AHoMQta1Ksus8x/N6PZ+LEOjtPSpy9enoMFH+9AFDv3 dRWuzRPsVMTu6cBzERqkYu2HNZB859s5xF1DU3JU3ZKHCZjQmx9Klb6U4pstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPf1BQMncF6DgeCAtEhnJ1eaH0gkwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG66l3QgKmA2cODCJ63CsvpWtwPNFaaAjCKY fzIB02IMpIi/zXoLSD5y3yB3/CAC617C13BGuxtVO9+i0iUuKDgEYMNV96xXAE7+ u6h82vMMd5tYQxJKO2Xhq2S+strTVZdtsQbWeHQI8ECAg4beBnEsm0QWJZdtGMBL rX8ESj5YoliLR6FwRe7zcAjDM/48fX94BmWYhacBtzLCilgMuEGyVN1zO4qRFM4w V/B8dNgJYHvi8XxZXvtMcB5+BWFflJNIZw5pWTecOQ7r67bXE9TjJQ/ABbuWvevL gP9w1HfULfWCpjnlH+V4x4eoid3D5ueA2BMFJ5HQWGpew0CwwlM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:32:02 2025 by rpki-client