$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft File: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft (raw, json) Hash identifier: XQ3YMaevAgMTHGX8wnv6PzYNwRsQzalnuimv5ztjv6E= Subject key identifier: 4F:74:60:EA:99:BB:C6:B8:34:55:86:EE:4C:EE:CA:6A:28:04:1A:D1 Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C Certificate issuer: /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Certificate serial: 36A5E3FF8B9BF34BBF08095BB95D5E914A97027B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft Manifest number: 0364 Signing time: Sat 19 Jul 2025 19:32:27 +0000 Manifest this update: Sat 19 Jul 2025 19:27:27 +0000 Manifest next update: Wed 23 Jul 2025 00:29:26 +0000 Files and hashes: 1: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl (hash: jsqNclvSD84QxU05bO+O5EF7I5/xsHnPjjLaJgC5DoE=) 2: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: fYk1A/6JlSofdoRQTxZ35IGs4jax1F7uqVxTxU6HBk4=) 3: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: iv2SAjyHSWCSm/Qp+qCzqgF4lXDrzm6Us1pHd8OSMEA=) 4: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: rNa2on5+DMAnzayjr8XpEII8JqHWgOprf/5TlZrlTb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a5:e3:ff:8b:9b:f3:4b:bf:08:09:5b:b9:5d:5e:91:4a:97:02:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Validity Not Before: Jul 19 19:27:27 2025 GMT Not After : Jul 23 00:29:26 2025 GMT Subject: CN=4F7460EA99BBC6B8345586EE4CEECA6A28041AD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:a3:f2:e4:c3:e3:8c:5c:51:ea:13:ac:a5: 1b:5b:bb:e6:ad:fe:79:6c:91:2c:43:57:25:bb:e5: 28:88:cb:df:22:6d:d9:04:37:24:3d:40:80:23:cf: 34:34:de:19:de:ac:62:ae:d8:dc:40:f4:a4:da:7f: be:70:07:80:a6:33:b2:63:13:e0:3e:91:cd:f4:8b: 71:62:50:7d:b5:d5:53:7d:43:f7:9d:48:3c:cd:72: b6:07:33:22:3c:2a:9a:1a:70:52:9e:2d:c7:c8:f8: 43:2b:11:41:ba:81:aa:bc:08:f2:cf:4d:cc:05:39: 78:04:f4:18:be:7d:a2:b9:1d:c1:37:99:0e:08:cd: c6:f7:3d:ea:fb:68:42:e1:7f:06:a6:1b:ed:ab:55: 96:76:5d:bf:66:30:e2:9a:fc:3c:26:4c:c0:00:ea: c9:b7:7d:74:ae:87:49:7e:e0:c0:ea:3e:e3:9c:9e: 19:c8:62:83:fe:46:85:3a:ba:1f:67:8d:54:2b:b4: ea:f9:04:4d:93:95:56:b0:c9:f5:02:04:89:42:2b: 88:d2:37:a7:ee:06:73:55:37:ad:a0:30:83:1d:43: a3:b7:56:f8:5b:d8:63:37:68:af:e5:75:9a:7d:47: 31:3b:6e:44:53:d6:c2:6d:57:07:9e:02:b8:6f:2f: 70:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:74:60:EA:99:BB:C6:B8:34:55:86:EE:4C:EE:CA:6A:28:04:1A:D1 X509v3 Authority Key Identifier: keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7e:85:f2:aa:49:2c:c1:af:10:d4:36:dd:f9:af:f1:50:7b: 28:d8:16:60:4a:a9:fd:f9:51:c3:2b:ad:33:04:02:26:b4:49: 37:28:43:06:62:5b:b1:f3:79:44:ab:25:a9:9a:22:e0:a9:b9: 6c:40:d9:fb:52:ef:a9:12:b6:35:7b:15:d3:36:cc:03:92:dc: 85:8f:12:80:84:a6:01:a2:82:2d:09:28:7a:b2:59:e8:c9:69: 40:37:65:d9:78:75:8f:e6:04:24:dc:81:62:b7:fe:b3:7e:04: d9:fa:fc:dc:bf:f0:c4:f7:c2:2e:b9:f5:02:82:95:f7:33:f3: 42:80:35:fb:91:fb:6b:af:0b:e9:e3:a9:ff:4d:de:d9:c7:19: 81:4f:e4:55:eb:78:c3:e4:81:40:9e:94:18:f1:47:f5:34:1c: d1:72:2a:ce:3b:11:01:a8:47:6f:7d:88:55:47:3e:e5:92:52: db:56:8b:24:43:87:3a:4c:cd:a2:10:db:3f:7a:c5:a4:b4:73: bf:d5:a4:91:8a:ae:b9:39:20:f2:bd:0a:6e:83:f9:84:8b:e5: cb:ef:12:07:d6:7d:8a:6b:27:11:f6:9e:43:5e:2f:1f:b4:d3: a6:03:4d:57:7a:0e:75:0a:6d:e5:61:f2:57:cc:63:93:c4:ce: 13:ca:be:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNqXj/4ub80u/CAlbuV1ekUqXAnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRD RkQ3RTI2QzAeFw0yNTA3MTkxOTI3MjdaFw0yNTA3MjMwMDI5MjZaMDMxMTAvBgNV BAMTKDRGNzQ2MEVBOTlCQkM2QjgzNDU1ODZFRTRDRUVDQTZBMjgwNDFBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOeqPy5MPjjFxR6hOspRtbu+at /nlskSxDVyW75SiIy98ibdkENyQ9QIAjzzQ03hnerGKu2NxA9KTaf75wB4CmM7Jj E+A+kc30i3FiUH211VN9Q/edSDzNcrYHMyI8KpoacFKeLcfI+EMrEUG6gaq8CPLP TcwFOXgE9Bi+faK5HcE3mQ4Izcb3Per7aELhfwamG+2rVZZ2Xb9mMOKa/DwmTMAA 6sm3fXSuh0l+4MDqPuOcnhnIYoP+RoU6uh9njVQrtOr5BE2TlVawyfUCBIlCK4jS N6fuBnNVN62gMIMdQ6O3Vvhb2GM3aK/ldZp9RzE7bkRT1sJtVweeArhvL3DFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT3Rg6pm7xrg0VYbuTO7KaigEGtEwHwYDVR0j BBgwFoAUynBPeF6liz9lnm48j3Hi1M/X4mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDIxOTg1Yi1hMGU2LTRlMDUtYmVmNi1mZTZmNWE2ZTJmNDMvMC9DQTcwNEY3ODVF QTU4QjNGNjU5RTZFM0M4RjcxRTJENENGRDdFMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRDRkQ3 RTI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUy RDRDRkQ3RTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5+hfKqSSzBrxDUNt35r/FQeyjYFmBKqf35 UcMrrTMEAia0STcoQwZiW7HzeUSrJamaIuCpuWxA2ftS76kStjV7FdM2zAOS3IWP EoCEpgGigi0JKHqyWejJaUA3Zdl4dY/mBCTcgWK3/rN+BNn6/Ny/8MT3wi659QKC lfcz80KANfuR+2uvC+njqf9N3tnHGYFP5FXreMPkgUCelBjxR/U0HNFyKs47EQGo R299iFVHPuWSUttWiyRDhzpMzaIQ2z96xaS0c7/VpJGKrrk5IPK9Cm6D+YSL5cvv EgfWfYprJxH2nkNeLx+006YDTVd6DnUKbeVh8lfMY5PEzhPKvro= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:28 2025 by rpki-client