$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: hgU+IPps7PtiP9msgAajPPVsNZg4AbmB69wiNCnzpFw= Subject key identifier: B1:90:C0:CE:F5:1E:6D:AB:7F:37:8B:C2:5F:8C:C8:22:DE:91:56:D9 Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 2EA63492B446B96A7377CD43BF6F4DE2BB39F72D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: A4 Signing time: Wed 07 May 2025 02:31:44 +0000 Manifest this update: Wed 07 May 2025 02:26:44 +0000 Manifest next update: Sat 10 May 2025 08:52:44 +0000 Files and hashes: 1: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 2: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) 3: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 4: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: HoH4r1lp+R/GjYAysZd2uTB5/DN25U3Vb0HSZ7emlvU=) 5: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) 6: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 08:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a6:34:92:b4:46:b9:6a:73:77:cd:43:bf:6f:4d:e2:bb:39:f7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: May 7 02:26:44 2025 GMT Not After : May 10 08:52:44 2025 GMT Subject: CN=B190C0CEF51E6DAB7F378BC25F8CC822DE9156D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:00:c1:e5:84:69:1a:cd:03:08:bc:72:22: 77:5c:c9:55:b8:fb:49:f8:4e:12:7f:c4:d5:c3:36: e7:99:7e:dd:46:6e:2e:1c:4d:c1:94:00:8b:cc:97: 9c:e6:7c:6c:e8:83:c8:9b:f6:aa:3c:66:08:c4:b8: 34:09:8a:26:26:4d:f4:cb:41:34:7c:74:a2:c5:70: df:86:0e:d5:f9:ba:4b:41:0d:58:6d:26:ab:9c:48: 5e:7f:f8:23:85:d2:fb:22:50:3f:58:b8:71:e8:71: e0:46:e4:16:3b:45:d3:a4:b5:e2:71:86:36:93:0c: 66:af:bd:bf:da:01:d7:14:ca:17:22:30:98:42:40: f3:0d:d5:6c:cc:ce:a2:f2:d5:22:f9:e5:a5:3f:55: fb:09:75:63:ee:08:f2:31:49:b0:3e:78:2e:a3:17: 3c:5a:63:79:86:aa:d2:4b:8e:8c:b8:27:94:fb:eb: fe:b6:4b:7f:df:cd:0b:39:32:54:cc:1c:0f:a2:50: 3b:b9:2b:b5:ef:c1:e1:6f:a5:6b:14:36:23:6f:35: de:2e:a1:a6:ad:2e:5c:55:f5:88:e5:df:9b:44:7d: e6:9f:1b:56:7d:48:f9:0d:13:7c:af:92:7e:7b:47: 80:f6:bf:bf:c8:d9:eb:91:b5:b7:48:e8:29:24:d8: 47:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:90:C0:CE:F5:1E:6D:AB:7F:37:8B:C2:5F:8C:C8:22:DE:91:56:D9 X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:86:a5:60:90:8a:2e:c6:79:3a:4d:01:7f:9a:60:b2:56:f9: 4a:a0:2a:36:be:0b:8e:b3:e6:88:53:38:06:65:42:09:2b:11: 2e:67:9c:19:cc:1a:f4:cb:6a:cf:86:91:16:97:2d:e4:50:88: fc:99:59:64:1f:8c:89:04:fa:42:e5:2e:8d:a6:8b:d5:f8:1c: 5d:90:3f:1d:0f:0e:9a:0c:cd:81:f1:84:09:a0:9d:30:a9:b9: 44:cb:09:1d:3c:6c:7b:86:6f:b9:20:84:27:66:77:f6:67:27: 32:f4:d3:8e:10:33:c3:91:01:02:d3:a0:5e:24:a1:75:ed:7e: d5:19:6e:42:ce:b5:28:73:71:83:16:f6:d3:6c:fd:a5:01:33: 22:4f:7a:92:90:67:68:5b:e8:d3:e7:ef:ab:c8:a7:78:98:a3: 2c:02:be:34:d2:57:88:eb:06:39:3b:2d:30:f5:b2:f0:b1:6c: 50:51:3f:80:86:7d:c3:c3:da:ca:f9:3d:fe:ac:03:5a:a0:94: a5:46:10:c1:3f:00:a2:79:95:71:58:e1:55:25:c1:8b:c8:cc: 7f:ae:42:79:ac:bb:b4:0e:c1:b8:51:40:2d:52:38:e1:35:b2: b2:82:9a:33:70:d4:20:77:72:87:86:c2:99:3b:d7:3c:f0:3c: e5:ad:c5:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULqY0krRGuWpzd81Dv29N4rs59y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNTA1MDcwMjI2NDRaFw0yNTA1MTAwODUyNDRaMDMxMTAvBgNV BAMTKEIxOTBDMENFRjUxRTZEQUI3RjM3OEJDMjVGOENDODIyREU5MTU2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtpwDB5YRpGs0DCLxyIndcyVW4 +0n4ThJ/xNXDNueZft1Gbi4cTcGUAIvMl5zmfGzog8ib9qo8ZgjEuDQJiiYmTfTL QTR8dKLFcN+GDtX5uktBDVhtJqucSF5/+COF0vsiUD9YuHHoceBG5BY7RdOkteJx hjaTDGavvb/aAdcUyhciMJhCQPMN1WzMzqLy1SL55aU/VfsJdWPuCPIxSbA+eC6j FzxaY3mGqtJLjoy4J5T76/62S3/fzQs5MlTMHA+iUDu5K7XvweFvpWsUNiNvNd4u oaatLlxV9Yjl35tEfeafG1Z9SPkNE3yvkn57R4D2v7/I2euRtbdI6Ckk2EcnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsZDAzvUebat/N4vCX4zIIt6RVtkwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuGpWCQii7GeTpNAX+aYLJW+UqgKja+C46z 5ohTOAZlQgkrES5nnBnMGvTLas+GkRaXLeRQiPyZWWQfjIkE+kLlLo2mi9X4HF2Q Px0PDpoMzYHxhAmgnTCpuUTLCR08bHuGb7kghCdmd/ZnJzL0044QM8ORAQLToF4k oXXtftUZbkLOtShzcYMW9tNs/aUBMyJPepKQZ2hb6NPn76vIp3iYoywCvjTSV4jr Bjk7LTD1svCxbFBRP4CGfcPD2sr5Pf6sA1qglKVGEME/AKJ5lXFY4VUlwYvIzH+u Qnmsu7QOwbhRQC1SOOE1srKCmjNw1CB3coeGwpk71zzwPOWtxYk= -----END CERTIFICATE-----Generated at Wed May 7 20:03:52 2025 by rpki-client