$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: NdI+4E46ze8PZu4GtcdJ9xk9ERWD9O5Shyuyfs+dzRA= Subject key identifier: C1:B5:A5:75:98:04:23:8E:5D:41:17:AA:C0:3B:8F:87:80:F2:D1:DD Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 51EF2271FA9FD13F3A549DD213307BE6B8C08754 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: 013E Signing time: Fri 17 Apr 2026 16:22:08 +0000 Manifest this update: Fri 17 Apr 2026 16:17:08 +0000 Manifest next update: Mon 20 Apr 2026 23:00:08 +0000 Files and hashes: 1: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: i+jlvxpTFwINLCyEDOLYiVMmzTheC3p0BfnqisiMDQA=) 2: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: YexQjl939Neb4FXseD4VCr2jwVvX5uGqagWDPx2/uZk=) 3: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: rzzsxZkGKsivQYJmvFaRwBy4kZLbKSDDcGxNt8FFqZc=) 4: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: Ere/Mue6LDRnmJcZd1LlYsbJSFP1UwKGC0YZPV4qMDs=) 5: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: /BWq1K0U8ZkA8PZH2XGS5oGGkqiB4QlPbHoRZXk7Ht0=) 6: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: KE/398lSeMUtHRrscwxIN6CfhOWbcM9cBrkB3gU53go=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ef:22:71:fa:9f:d1:3f:3a:54:9d:d2:13:30:7b:e6:b8:c0:87:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Apr 17 16:17:08 2026 GMT Not After : Apr 20 23:00:08 2026 GMT Subject: CN=C1B5A5759804238E5D4117AAC03B8F8780F2D1DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:63:3b:cc:11:9b:d5:4d:0c:44:94:1b:35:7c: 0f:d7:53:b1:1a:4d:52:c3:5e:5c:a0:23:cc:3a:da: bf:ad:6e:15:22:63:45:93:13:49:04:49:de:11:b8: 54:c8:96:c2:57:a7:51:a9:1c:d9:3e:19:10:e0:de: 43:b5:c4:d2:53:99:b5:9e:c0:89:69:ec:0d:5a:46: fb:8d:cf:5e:98:22:08:50:ed:69:b7:e4:a9:9d:29: 33:0b:e8:90:59:5d:cc:bc:68:cf:e8:f1:90:fa:14: 73:11:6f:4c:0d:44:a7:bc:d8:77:1a:f8:08:d0:a1: 8d:10:c4:be:ef:09:6a:4c:38:d1:38:d6:bf:79:90: c1:fc:22:40:ba:a5:97:7d:0d:37:1b:9e:27:59:db: f7:31:1a:cb:7a:7e:3f:75:17:97:ca:bd:64:92:92: 6e:81:1d:49:9d:f3:dc:46:ed:d2:9a:37:cf:b5:ac: 9a:48:5d:42:06:36:8e:f8:72:2a:73:c2:da:b9:45: 21:fa:39:5a:f6:26:9f:a4:0d:9d:8f:2f:af:e9:b5: 14:cd:dd:e0:c8:ca:bc:13:83:0f:e9:69:23:9e:19: 7c:86:7a:c9:97:e2:73:06:0b:18:11:b3:53:1e:07: c0:73:18:3b:8f:5c:97:3b:f4:a8:63:96:e5:84:a6: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B5:A5:75:98:04:23:8E:5D:41:17:AA:C0:3B:8F:87:80:F2:D1:DD X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f6:f2:20:65:2c:38:8b:7a:31:77:6e:be:14:11:b3:eb:34: fb:0f:17:8a:90:00:a5:7b:b2:8f:2d:ec:a0:82:c4:54:05:40: 8f:02:55:1f:e0:23:df:0c:d1:8b:b2:cb:cf:b3:a5:4b:9f:48: 0f:44:3b:fc:5e:3f:b1:a9:f0:9f:a1:99:6a:40:93:4c:c2:00: 3d:d9:3c:ba:8f:d2:9a:52:dc:a7:f0:49:1f:69:0d:db:35:eb: c2:43:a5:d4:63:69:34:8b:81:a3:95:18:37:0e:dc:b8:2b:b5: 4a:1a:cc:c5:26:84:46:13:29:fc:fc:29:48:60:43:dc:40:7e: a7:25:12:2c:eb:52:7d:7c:7a:68:5a:28:1f:a9:e5:17:11:7c: c7:b7:8b:dd:e1:df:07:fb:c4:26:fd:66:01:de:c5:6d:b1:c3: d4:20:74:da:b3:69:68:78:25:25:e8:55:20:8d:fd:44:17:92: 1e:9c:4a:17:10:01:83:14:d0:44:df:56:16:23:3c:f9:e2:90: 84:c7:a6:66:f1:0d:bc:ad:5b:ba:4b:22:dc:90:39:c9:a5:70: 16:25:34:4b:79:b3:d2:89:b8:6c:29:f1:88:f4:be:a2:51:e5: 2e:f5:3e:d7:42:06:88:d0:03:2d:d6:38:4c:63:b7:55:7c:52: 70:1e:b4:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUe8icfqf0T86VJ3SEzB75rjAh1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNjA0MTcxNjE3MDhaFw0yNjA0MjAyMzAwMDhaMDMxMTAvBgNV BAMTKEMxQjVBNTc1OTgwNDIzOEU1RDQxMTdBQUMwM0I4Rjg3ODBGMkQxREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuYzvMEZvVTQxElBs1fA/XU7Ea TVLDXlygI8w62r+tbhUiY0WTE0kESd4RuFTIlsJXp1GpHNk+GRDg3kO1xNJTmbWe wIlp7A1aRvuNz16YIghQ7Wm35KmdKTML6JBZXcy8aM/o8ZD6FHMRb0wNRKe82Hca +AjQoY0QxL7vCWpMONE41r95kMH8IkC6pZd9DTcbnidZ2/cxGst6fj91F5fKvWSS km6BHUmd89xG7dKaN8+1rJpIXUIGNo74cipzwtq5RSH6OVr2Jp+kDZ2PL6/ptRTN 3eDIyrwTgw/paSOeGXyGesmX4nMGCxgRs1MeB8BzGDuPXJc79KhjluWEpi0DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwbWldZgEI45dQReqwDuPh4Dy0d0wHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAP28iBlLDiLejF3br4UEbPrNPsPF4qQAKV7 so8t7KCCxFQFQI8CVR/gI98M0Yuyy8+zpUufSA9EO/xeP7Gp8J+hmWpAk0zCAD3Z PLqP0ppS3KfwSR9pDds168JDpdRjaTSLgaOVGDcO3LgrtUoazMUmhEYTKfz8KUhg Q9xAfqclEizrUn18emhaKB+p5RcRfMe3i93h3wf7xCb9ZgHexW2xw9QgdNqzaWh4 JSXoVSCN/UQXkh6cShcQAYMU0ETfVhYjPPnikITHpmbxDbytW7pLItyQOcmlcBYl NEt5s9KJuGwp8Yj0vqJR5S71PtdCBojQAy3WOExjt1V8UnAetOI= -----END CERTIFICATE-----Generated at Sun Apr 19 15:47:31 2026 by rpki-client