$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: U60nJapdVMLnAWRZN+jsd6YNRFqt+ZnoKDfn63l7syI= Subject key identifier: F0:C5:2D:68:0D:67:4F:D7:00:8B:3E:1B:28:9C:A2:6F:11:9B:1E:39 Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 7B32D12E52FC4FC1AA569D5422A0F549222D0D84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: CC Signing time: Tue 05 Aug 2025 13:21:45 +0000 Manifest this update: Tue 05 Aug 2025 13:16:45 +0000 Manifest next update: Fri 08 Aug 2025 13:47:45 +0000 Files and hashes: 1: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) 2: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) 3: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 4: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 5: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: t6ly2ic4GIRt9/+kXg0Zu6sMH9QYGspcibUODHXa4+g=) 6: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:32:d1:2e:52:fc:4f:c1:aa:56:9d:54:22:a0:f5:49:22:2d:0d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Aug 5 13:16:45 2025 GMT Not After : Aug 8 13:47:45 2025 GMT Subject: CN=F0C52D680D674FD7008B3E1B289CA26F119B1E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:70:c5:b8:83:19:3d:e4:2c:a7:62:f1:c1:56: 4c:57:d7:f0:c1:f1:b3:98:79:8d:01:60:13:5e:3d: 6d:13:6d:5b:7f:89:fc:32:f8:3a:02:3b:c9:9d:6b: 5e:c5:1f:00:82:7e:e8:ae:92:45:7a:6d:31:1f:e5: ee:df:25:be:f4:b9:cd:8d:b4:89:17:d5:87:21:44: e5:a0:be:ae:30:49:7e:63:f5:0e:c1:a5:14:73:f6: d3:f4:cc:7c:0c:36:b1:21:14:4d:c7:f6:96:5c:ef: c4:90:c4:a4:e3:b0:12:81:6d:a6:c6:be:8c:93:64: 10:1e:04:5d:82:db:c9:05:a0:2a:f3:89:d6:ca:5d: 72:7a:bd:a6:8c:4c:82:01:3c:fb:92:fe:d7:a7:b3: 9d:36:b6:d6:70:41:26:93:87:72:d6:cd:ba:58:5d: 15:02:d6:1a:5e:69:e6:4e:86:f4:1a:a1:0d:b3:c8: cc:6b:62:bf:8a:b2:23:82:76:8a:d6:fc:bf:e1:ed: 25:9c:dc:53:e3:8a:00:aa:f1:47:fc:0b:44:c5:0f: e7:0b:59:79:14:51:b0:ff:d2:fd:19:6d:31:e5:4c: 87:c6:72:fb:1c:c1:2c:cf:69:53:af:ce:59:98:c2: 8a:ef:ff:c8:c8:ca:d3:1f:05:6d:6f:84:25:c0:d2: ce:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C5:2D:68:0D:67:4F:D7:00:8B:3E:1B:28:9C:A2:6F:11:9B:1E:39 X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:39:f9:4c:ae:41:d2:9f:95:4f:8f:f5:b3:24:80:4e:7c:da: 4f:25:f2:d7:07:87:16:28:c0:32:21:ac:b3:a5:a4:9d:5f:51: 8c:0d:98:dd:5e:eb:30:0d:80:24:27:e6:cc:a8:b6:89:59:c4: dd:3d:45:b9:7e:8c:60:86:17:0e:92:8b:b8:83:5f:42:74:3e: 05:3b:37:22:29:8b:ad:66:47:20:b6:ad:d9:16:70:52:ad:ad: 48:bb:85:23:9a:36:9e:4d:2c:ce:50:7a:2d:50:c4:a7:0b:37: 00:6c:c4:cb:d0:e9:fe:48:86:9a:98:ab:d2:29:fe:dd:98:42: 3f:e1:fb:3c:50:15:f9:dd:da:af:c0:5e:cb:3a:74:47:9b:62: 72:ec:8e:fd:8b:22:02:2d:8c:09:7d:2a:d9:0a:be:04:5e:57: 34:13:b0:8b:cb:41:26:5e:7d:2c:f1:08:15:6d:eb:58:9a:d5: da:cd:ed:ab:74:e7:e8:b7:cc:47:ad:2d:9f:7e:6a:ab:a0:c1: 84:ce:00:52:1a:08:0c:3a:7c:86:f5:d8:fc:01:81:c3:a0:9b: 58:be:85:1c:a0:b5:89:98:a3:cc:ea:20:1a:8a:98:e0:b5:6c: 67:58:78:ad:b3:e5:3e:a4:38:d1:42:f2:f8:bb:ba:81:d2:73: 7d:ab:51:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUezLRLlL8T8GqVp1UIqD1SSItDYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNTA4MDUxMzE2NDVaFw0yNTA4MDgxMzQ3NDVaMDMxMTAvBgNV BAMTKEYwQzUyRDY4MEQ2NzRGRDcwMDhCM0UxQjI4OUNBMjZGMTE5QjFFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjcMW4gxk95CynYvHBVkxX1/DB 8bOYeY0BYBNePW0TbVt/ifwy+DoCO8mda17FHwCCfuiukkV6bTEf5e7fJb70uc2N tIkX1YchROWgvq4wSX5j9Q7BpRRz9tP0zHwMNrEhFE3H9pZc78SQxKTjsBKBbabG voyTZBAeBF2C28kFoCrzidbKXXJ6vaaMTIIBPPuS/tens502ttZwQSaTh3LWzbpY XRUC1hpeaeZOhvQaoQ2zyMxrYr+KsiOCdorW/L/h7SWc3FPjigCq8Uf8C0TFD+cL WXkUUbD/0v0ZbTHlTIfGcvscwSzPaVOvzlmYworv/8jIytMfBW1vhCXA0s5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8MUtaA1nT9cAiz4bKJyibxGbHjkwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALA5+UyuQdKflU+P9bMkgE582k8l8tcHhxYo wDIhrLOlpJ1fUYwNmN1e6zANgCQn5syotolZxN09Rbl+jGCGFw6Si7iDX0J0PgU7 NyIpi61mRyC2rdkWcFKtrUi7hSOaNp5NLM5Qei1QxKcLNwBsxMvQ6f5IhpqYq9Ip /t2YQj/h+zxQFfnd2q/AXss6dEebYnLsjv2LIgItjAl9KtkKvgReVzQTsIvLQSZe fSzxCBVt61ia1drN7at05+i3zEetLZ9+aqugwYTOAFIaCAw6fIb12PwBgcOgm1i+ hRygtYmYo8zqIBqKmOC1bGdYeK2z5T6kONFC8vi7uoHSc32rUXQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:36 2025 by rpki-client