$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: NBHlLhfqlMnusuVr9MrZiHWWY/oYB0/sd2GEXpd6Vcs= Subject key identifier: B9:E4:D7:6C:02:C3:A2:28:55:47:55:C2:12:71:32:EB:05:7F:7B:5C Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 277D9ED68D747BA3148BD07AE04D91275F0C76F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: F4 Signing time: Sun 02 Nov 2025 16:11:47 +0000 Manifest this update: Sun 02 Nov 2025 16:06:47 +0000 Manifest next update: Thu 06 Nov 2025 02:07:47 +0000 Files and hashes: 1: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) 2: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) 3: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 4: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 5: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: IjXNbD6F9BUrulv7vcbim4HYyerSBGUDdEo1pW/GNpo=) 6: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:7d:9e:d6:8d:74:7b:a3:14:8b:d0:7a:e0:4d:91:27:5f:0c:76:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Nov 2 16:06:47 2025 GMT Not After : Nov 6 02:07:47 2025 GMT Subject: CN=B9E4D76C02C3A228554755C2127132EB057F7B5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:77:de:23:a4:6e:94:de:d1:2c:3a:b0:94:b5: c5:7a:25:15:1a:3c:5f:83:cd:1b:7c:30:c7:c6:ab: b0:f9:91:be:9a:ad:69:1f:89:3c:d6:2d:52:9e:52: ce:3a:5b:70:17:1b:aa:29:9b:13:1b:b1:31:50:8d: af:5c:dc:d2:6c:29:86:95:a6:80:1e:d0:22:d1:82: 44:9e:b5:30:7f:da:e4:14:d0:f4:42:ea:37:24:e3: d0:26:d4:c4:67:b1:99:ab:56:ae:5a:de:86:5c:9a: ee:3c:f0:31:b6:12:77:df:36:3a:02:62:12:91:48: f7:81:b2:44:3b:69:f0:c2:18:47:45:d8:77:0a:91: 65:85:a5:d1:4a:c0:50:be:16:81:5c:23:da:d7:40: 91:3d:cf:45:e3:be:0b:e9:9f:e6:45:cd:e9:e9:aa: da:09:40:df:37:06:4e:b8:c4:21:32:50:97:3e:3a: fe:e9:b8:c8:03:9d:38:ad:4f:33:b1:1d:62:77:a9: ec:b3:68:4a:19:16:bd:12:80:76:43:55:8c:e5:ff: 46:58:1f:c5:33:25:e7:64:bf:25:72:de:a0:4f:19: 0e:6d:d7:29:25:15:ef:46:63:49:ba:f9:14:62:c6: 8f:3d:19:7d:07:54:e2:d7:3a:15:c8:f7:a0:43:5b: dd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E4:D7:6C:02:C3:A2:28:55:47:55:C2:12:71:32:EB:05:7F:7B:5C X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d0:3e:87:b6:b8:12:83:53:bf:99:ca:49:e9:2d:1a:f2:8c: 82:7b:e3:1a:bb:02:bc:67:23:36:db:b3:dc:40:9b:d8:01:7f: d4:37:5c:02:0c:dd:ea:76:1b:00:eb:47:aa:54:e9:29:2a:9b: 74:7b:5f:18:8a:ca:4f:52:0e:12:74:ba:29:9f:6c:d3:8c:b4: 58:0c:11:ff:9a:d8:48:ab:fc:93:76:9d:ad:c4:ad:0c:12:b9: e3:e2:33:7b:a2:74:94:b0:8d:48:77:4d:0f:d4:d5:83:d7:c2: ae:b8:de:92:10:8f:3f:24:8c:bf:7e:52:cd:bc:c0:e5:80:44: 2d:d8:24:4a:e7:c0:c3:68:a4:d0:9b:b6:c6:c4:20:24:5e:2a: bf:a9:8c:90:f5:09:a1:17:66:29:3d:65:7b:e8:bb:99:31:f1: fb:1e:e9:fd:28:af:00:88:be:9f:82:46:e8:81:20:a9:a5:dc: aa:34:13:5c:78:43:de:35:0d:06:61:59:a8:f9:65:94:58:89: b8:4d:25:f7:35:db:8c:8a:63:a0:4d:ab:15:18:a6:58:ec:84: 9d:d7:3c:3f:a8:9f:0b:7c:49:1c:44:39:99:eb:62:5a:16:69: ea:e7:d7:65:ae:19:f3:e8:2b:21:00:c5:c4:6e:99:5a:cd:09: 11:5b:66:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ32e1o10e6MUi9B64E2RJ18MdvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNTExMDIxNjA2NDdaFw0yNTExMDYwMjA3NDdaMDMxMTAvBgNV BAMTKEI5RTRENzZDMDJDM0EyMjg1NTQ3NTVDMjEyNzEzMkVCMDU3RjdCNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtd94jpG6U3tEsOrCUtcV6JRUa PF+DzRt8MMfGq7D5kb6arWkfiTzWLVKeUs46W3AXG6opmxMbsTFQja9c3NJsKYaV poAe0CLRgkSetTB/2uQU0PRC6jck49Am1MRnsZmrVq5a3oZcmu488DG2EnffNjoC YhKRSPeBskQ7afDCGEdF2HcKkWWFpdFKwFC+FoFcI9rXQJE9z0Xjvgvpn+ZFzenp qtoJQN83Bk64xCEyUJc+Ov7puMgDnTitTzOxHWJ3qeyzaEoZFr0SgHZDVYzl/0ZY H8UzJedkvyVy3qBPGQ5t1yklFe9GY0m6+RRixo89GX0HVOLXOhXI96BDW903AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUueTXbALDoihVR1XCEnEy6wV/e1wwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfQPoe2uBKDU7+ZyknpLRryjIJ74xq7Arxn Izbbs9xAm9gBf9Q3XAIM3ep2GwDrR6pU6Skqm3R7XxiKyk9SDhJ0uimfbNOMtFgM Ef+a2Eir/JN2na3ErQwSuePiM3uidJSwjUh3TQ/U1YPXwq643pIQjz8kjL9+Us28 wOWARC3YJErnwMNopNCbtsbEICReKr+pjJD1CaEXZik9ZXvou5kx8fse6f0orwCI vp+CRuiBIKml3Ko0E1x4Q941DQZhWaj5ZZRYibhNJfc124yKY6BNqxUYpljshJ3X PD+onwt8SRxEOZnrYloWaern12WuGfPoKyEAxcRumVrNCRFbZgY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:28:08 2025 by rpki-client