$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft File: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft (raw, json) Hash identifier: mLXopsGp6geNwfoqp95MTOboMunPlkchWeBqx7vwIMA= Subject key identifier: B1:68:B2:93:1A:5E:5E:2B:FB:E4:03:19:7D:EF:1C:94:BF:94:85:B0 Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C Certificate issuer: /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Certificate serial: 583C2981922A60A87D926E86270E4A00F5F265DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft Manifest number: 0391 Signing time: Sun 26 Oct 2025 06:12:17 +0000 Manifest this update: Sun 26 Oct 2025 06:07:17 +0000 Manifest next update: Wed 29 Oct 2025 07:10:17 +0000 Files and hashes: 1: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: fYk1A/6JlSofdoRQTxZ35IGs4jax1F7uqVxTxU6HBk4=) 2: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl (hash: xR7ASwFeDOchJcDwqilQh5wN5qZ3IxxxZdcUtAIjLfc=) 3: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: ylDWnunXe+P0sSpHe2ems7WUQ+PsguFxQzvub0cWxiw=) 4: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: rNa2on5+DMAnzayjr8XpEII8JqHWgOprf/5TlZrlTb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 07:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3c:29:81:92:2a:60:a8:7d:92:6e:86:27:0e:4a:00:f5:f2:65:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Validity Not Before: Oct 26 06:07:17 2025 GMT Not After : Oct 29 07:10:17 2025 GMT Subject: CN=B168B2931A5E5E2BFBE403197DEF1C94BF9485B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:83:15:4a:c4:1e:79:ce:a2:95:33:12:06: b3:c8:33:a8:12:60:33:1a:a9:70:b4:c7:37:eb:06: b9:81:dd:84:96:ca:b3:03:3d:f9:82:b2:41:e3:83: 62:c5:bd:fb:43:10:86:55:e7:73:ec:a9:81:87:de: 91:c5:9e:53:2b:b6:aa:f6:6b:22:ab:dc:d6:a3:77: c4:b7:45:29:fa:62:71:ab:33:97:66:2a:75:4e:c7: b8:87:b0:79:b6:e0:bd:08:2f:1e:8c:f6:a0:91:c9: eb:9c:93:9f:0d:c7:5d:9f:5e:7e:f2:0d:34:ae:ad: 49:17:82:fb:a5:a5:09:f7:4d:ed:a4:2a:e1:4f:a8: bf:13:ca:86:e2:d3:74:9e:23:87:5f:81:6f:cc:bb: f7:5c:1f:24:6d:ab:ae:64:07:68:38:ef:88:7f:f6: 88:e7:c1:10:1f:e2:0e:16:b7:86:a1:66:e8:50:81: 01:a9:9e:b8:0d:17:38:67:f3:76:fa:70:da:bf:37: 32:ab:c7:b5:33:86:c2:d9:e5:b8:a6:00:5c:29:00: 4b:21:51:e6:fd:73:79:91:f6:77:e2:d6:c6:4c:16: b9:41:58:12:c1:50:09:1a:eb:b2:ae:93:19:c1:6f: 91:50:60:a7:64:1e:7f:29:54:93:a2:e4:c5:d7:b7: 19:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:68:B2:93:1A:5E:5E:2B:FB:E4:03:19:7D:EF:1C:94:BF:94:85:B0 X509v3 Authority Key Identifier: keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:6e:77:9e:92:2a:95:0f:76:f3:49:98:98:3f:c0:80:3c:c4: 64:d0:61:28:6e:30:82:98:5b:77:4a:4a:3b:fc:52:8c:57:75: d4:f3:cb:22:0c:46:2b:11:62:88:06:7b:bb:ee:0f:63:c3:5b: 3c:d4:64:08:d3:58:d5:ef:a4:f5:4c:b4:9b:64:9a:db:04:ee: 7f:91:86:36:af:0c:ef:4e:cf:ea:1b:ea:55:cb:f5:cf:59:55: 09:fc:da:ea:cf:5d:10:51:61:e1:12:de:79:de:4e:29:4e:28: 41:31:22:de:9a:fd:59:f5:b8:ac:f4:8e:a8:80:56:41:a2:df: 4a:01:e1:b3:34:36:a5:ee:82:8a:a3:4a:17:d2:11:71:09:9d: 00:4a:39:f1:ce:d5:e5:04:50:f5:65:2a:4a:2f:2f:42:2f:4f: 99:44:bc:4e:51:f1:7a:2f:91:69:06:1c:68:23:f2:25:db:09: 98:8d:c9:be:70:fc:ff:e1:d1:ee:89:90:df:30:24:82:68:2d: 0d:ec:43:50:c9:1f:18:55:5c:8e:95:fc:75:82:c9:3f:3c:aa: 8d:00:da:11:85:0d:f5:87:a7:48:36:f8:dc:dc:1a:3d:22:24: d1:80:ed:f8:ba:2e:fe:2f:94:9a:96:2f:2f:1e:9c:56:1d:1e: 87:00:a8:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWDwpgZIqYKh9km6GJw5KAPXyZdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRD RkQ3RTI2QzAeFw0yNTEwMjYwNjA3MTdaFw0yNTEwMjkwNzEwMTdaMDMxMTAvBgNV BAMTKEIxNjhCMjkzMUE1RTVFMkJGQkU0MDMxOTdERUYxQzk0QkY5NDg1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlYMVSsQeec6ilTMSBrPIM6gS YDMaqXC0xzfrBrmB3YSWyrMDPfmCskHjg2LFvftDEIZV53PsqYGH3pHFnlMrtqr2 ayKr3Najd8S3RSn6YnGrM5dmKnVOx7iHsHm24L0ILx6M9qCRyeuck58Nx12fXn7y DTSurUkXgvulpQn3Te2kKuFPqL8Tyobi03SeI4dfgW/Mu/dcHyRtq65kB2g474h/ 9ojnwRAf4g4Wt4ahZuhQgQGpnrgNFzhn83b6cNq/NzKrx7UzhsLZ5bimAFwpAEsh Ueb9c3mR9nfi1sZMFrlBWBLBUAka67KukxnBb5FQYKdkHn8pVJOi5MXXtxlTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsWiykxpeXiv75AMZfe8clL+UhbAwHwYDVR0j BBgwFoAUynBPeF6liz9lnm48j3Hi1M/X4mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDIxOTg1Yi1hMGU2LTRlMDUtYmVmNi1mZTZmNWE2ZTJmNDMvMC9DQTcwNEY3ODVF QTU4QjNGNjU5RTZFM0M4RjcxRTJENENGRDdFMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRDRkQ3 RTI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUy RDRDRkQ3RTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1ud56SKpUPdvNJmJg/wIA8xGTQYShuMIKY W3dKSjv8UoxXddTzyyIMRisRYogGe7vuD2PDWzzUZAjTWNXvpPVMtJtkmtsE7n+R hjavDO9Oz+ob6lXL9c9ZVQn82urPXRBRYeES3nneTilOKEExIt6a/Vn1uKz0jqiA VkGi30oB4bM0NqXugoqjShfSEXEJnQBKOfHO1eUEUPVlKkovL0IvT5lEvE5R8Xov kWkGHGgj8iXbCZiNyb5w/P/h0e6JkN8wJIJoLQ3sQ1DJHxhVXI6V/HWCyT88qo0A 2hGFDfWHp0g2+NzcGj0iJNGA7fi6Lv4vlJqWLy8enFYdHocAqIo= -----END CERTIFICATE-----Generated at Mon Oct 27 13:04:33 2025 by rpki-client