$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: LLrr84A+A1XyGCP6YA14nGQutLdoVhPl+FNoNTC6Xtk= Subject key identifier: 47:66:A9:86:94:9C:6B:4C:19:AA:C0:5A:F2:80:65:34:97:8A:99:98 Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 2A07AD3061A7B2F04A23981B1B4EB875712F320B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: 0129 Signing time: Sun 01 Mar 2026 02:52:01 +0000 Manifest this update: Sun 01 Mar 2026 02:47:01 +0000 Manifest next update: Wed 04 Mar 2026 05:09:01 +0000 Files and hashes: 1: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 2: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) 3: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) 4: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) 5: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 6: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: N7O6THxWoMXLZNMNWooAfC0onQoDF/c661NyDGaprmA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:07:ad:30:61:a7:b2:f0:4a:23:98:1b:1b:4e:b8:75:71:2f:32:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Mar 1 02:47:01 2026 GMT Not After : Mar 4 05:09:01 2026 GMT Subject: CN=4766A986949C6B4C19AAC05AF2806534978A9998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:d4:91:a2:00:0b:58:0f:e7:bb:37:1b:8d: e1:44:a6:99:95:b0:1d:e4:0f:82:19:cb:8c:57:b5: 90:2c:ae:44:08:00:4b:51:16:8a:9f:8a:3b:5f:53: 00:63:ae:d2:68:75:90:df:8e:84:7e:c0:57:f0:b8: d3:8d:73:df:f9:d7:bf:89:bd:35:bc:c6:f9:58:10: a2:13:95:04:86:56:d1:c1:e0:d8:60:4c:81:d6:dc: 79:f6:ad:57:d5:f2:53:db:05:eb:16:11:2c:75:a8: 79:14:db:3b:0c:2f:ab:26:dd:5f:06:b1:91:84:8f: 39:8f:01:9a:f3:6e:fa:07:3a:bf:7a:b6:74:43:1c: c4:7f:c6:45:fa:a9:b7:c6:35:06:18:96:de:13:8d: 0b:bf:e7:c6:69:b4:69:6f:e0:17:d2:46:ea:a8:f1: 5c:6d:51:54:74:cf:d9:a2:91:42:ea:21:de:6f:1f: 31:a5:f4:78:1d:95:46:f8:6f:b4:1a:f4:5f:cf:00: c9:86:9e:55:f1:8f:d9:c9:dd:7c:2b:ae:52:fa:8b: fb:86:c4:17:d4:22:d2:15:b2:66:dd:01:0c:00:88: c9:7c:d1:53:93:4a:cf:78:2c:cb:4c:92:7c:78:d5: 27:d6:3a:6f:c3:a8:31:eb:fb:9d:90:b1:8d:5f:35: 40:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:66:A9:86:94:9C:6B:4C:19:AA:C0:5A:F2:80:65:34:97:8A:99:98 X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:73:6f:ad:1a:d8:42:99:3c:a2:4c:38:27:de:4d:e8:4e:2e: fc:90:ce:70:ae:8c:85:bc:99:2b:44:ec:7d:19:28:0d:01:2b: fa:58:eb:66:36:8b:c3:be:d7:01:24:f2:41:87:60:48:6f:b9: 75:46:d9:f1:0c:63:c9:db:bf:ef:e8:51:e4:b4:74:5a:31:87: 34:3d:bb:d6:69:6b:19:67:b4:b9:c5:0b:33:0e:57:28:5b:42: 19:a6:a5:fd:74:9c:5c:75:49:4f:01:13:48:44:64:e4:81:58: af:79:ad:59:b1:8a:3c:ec:a4:a0:66:8c:70:bf:7f:b2:43:a6: f0:39:da:cd:9d:d2:81:41:2d:15:d3:ef:ff:7c:af:2a:b2:56: 6b:30:c8:aa:0c:e3:03:89:31:42:c0:38:2c:fe:39:66:ca:b0: 7c:be:b2:d2:f9:93:f2:0f:5f:6b:b2:c0:28:79:e2:59:97:12: 8a:15:32:88:23:18:2d:ca:23:0a:5d:99:ef:17:90:2f:a2:24: 6a:03:93:02:57:14:2f:d0:ed:7c:1d:a4:9f:48:34:da:58:47: 1a:87:8e:1f:bf:72:d0:a6:80:79:85:83:df:36:96:18:fa:c0: 0f:64:99:cc:88:ee:52:64:df:eb:49:10:91:d0:75:f7:b1:ad: 28:b7:f3:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgetMGGnsvBKI5gbG064dXEvMgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNjAzMDEwMjQ3MDFaFw0yNjAzMDQwNTA5MDFaMDMxMTAvBgNV BAMTKDQ3NjZBOTg2OTQ5QzZCNEMxOUFBQzA1QUYyODA2NTM0OTc4QTk5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCottSRogALWA/nuzcbjeFEppmV sB3kD4IZy4xXtZAsrkQIAEtRFoqfijtfUwBjrtJodZDfjoR+wFfwuNONc9/517+J vTW8xvlYEKITlQSGVtHB4NhgTIHW3Hn2rVfV8lPbBesWESx1qHkU2zsML6sm3V8G sZGEjzmPAZrzbvoHOr96tnRDHMR/xkX6qbfGNQYYlt4TjQu/58ZptGlv4BfSRuqo 8VxtUVR0z9mikULqId5vHzGl9HgdlUb4b7Qa9F/PAMmGnlXxj9nJ3XwrrlL6i/uG xBfUItIVsmbdAQwAiMl80VOTSs94LMtMknx41SfWOm/DqDHr+52QsY1fNUDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR2aphpSca0wZqsBa8oBlNJeKmZgwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFzb60a2EKZPKJMOCfeTehOLvyQznCujIW8 mStE7H0ZKA0BK/pY62Y2i8O+1wEk8kGHYEhvuXVG2fEMY8nbv+/oUeS0dFoxhzQ9 u9ZpaxlntLnFCzMOVyhbQhmmpf10nFx1SU8BE0hEZOSBWK95rVmxijzspKBmjHC/ f7JDpvA52s2d0oFBLRXT7/98ryqyVmswyKoM4wOJMULAOCz+OWbKsHy+stL5k/IP X2uywCh54lmXEooVMogjGC3KIwpdme8XkC+iJGoDkwJXFC/Q7XwdpJ9INNpYRxqH jh+/ctCmgHmFg982lhj6wA9kmcyI7lJk3+tJEJHQdfexrSi3840= -----END CERTIFICATE-----Generated at Mon Mar 2 04:15:25 2026 by rpki-client