$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: ASwlursmpVVAto2M+WFuuzKYXEoBUB6yMqEemcM9N9s= Subject key identifier: 30:B8:98:FA:D0:9E:BF:23:F9:7A:C3:58:0F:F2:35:19:C9:EB:E2:50 Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 708C54730A8195B1E984048DBA0E5F6411D4E1A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: C5 Signing time: Sun 20 Jul 2025 13:41:44 +0000 Manifest this update: Sun 20 Jul 2025 13:36:44 +0000 Manifest next update: Wed 23 Jul 2025 20:53:44 +0000 Files and hashes: 1: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) 2: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) 3: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 4: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 5: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) 6: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: KxzkMZeocQ4D1ZNU9TkLyvi4LkRmEf0koQcsiEL00Bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8c:54:73:0a:81:95:b1:e9:84:04:8d:ba:0e:5f:64:11:d4:e1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Jul 20 13:36:44 2025 GMT Not After : Jul 23 20:53:44 2025 GMT Subject: CN=30B898FAD09EBF23F97AC3580FF23519C9EBE250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:75:94:92:a9:51:e0:21:0d:c0:99:d8:bc: 5a:87:cb:b1:80:bf:cf:42:e3:4f:a2:d9:5d:bd:f7: f1:1c:e1:64:45:5e:7e:b9:ee:d3:22:a1:91:62:70: 33:0a:c0:48:89:56:fd:8f:d7:c4:8e:46:c2:b7:64: 99:c7:97:af:29:aa:3f:fd:87:17:d4:10:b1:59:ed: 81:ef:90:23:ca:bf:f6:9c:78:d2:72:67:b0:54:32: 43:b7:2a:72:c9:5c:65:df:71:06:f0:0b:e3:f9:be: 4b:af:52:be:c3:81:55:82:0a:61:34:82:aa:fc:aa: a4:d5:b3:57:d7:f2:4a:18:a3:8c:c8:35:75:ee:b3: 6c:01:d9:04:a1:9c:6a:68:8b:73:a4:fd:87:bc:1a: f7:b7:26:e0:04:61:e9:ac:21:8e:50:9c:36:95:a1: 21:23:8a:2a:38:02:8e:91:39:37:e7:34:e2:d9:d6: cf:1c:eb:d6:8d:c0:28:8f:54:aa:d0:b9:3d:02:49: a1:c6:d2:bc:92:29:ae:ae:27:af:4f:13:f5:aa:86: 8c:ec:0f:ff:65:8b:25:16:49:83:94:50:20:61:fa: 1c:b9:6e:8f:e1:78:f3:4a:5c:87:43:0c:59:83:30: 04:ce:90:9c:56:e7:7f:80:af:98:bd:83:bc:4b:19: c5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B8:98:FA:D0:9E:BF:23:F9:7A:C3:58:0F:F2:35:19:C9:EB:E2:50 X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a3:ca:c0:b0:6b:60:24:7d:81:4c:87:22:80:82:90:25:71: 54:d2:c6:3d:c0:af:b3:8d:55:49:c1:dd:3d:03:47:e1:4c:21: f4:86:a7:92:22:bb:f5:bc:47:6e:17:ca:f4:8e:d2:49:eb:cb: e8:df:f7:ae:76:0d:c8:7e:b9:c8:db:cd:ae:6a:e3:85:09:c4: c1:2f:be:06:85:e1:c8:be:4e:48:13:b4:7d:62:eb:b3:89:73: 3d:59:a7:e7:53:51:62:d4:79:c0:5d:8e:e3:ed:5d:83:29:46: ab:20:2e:06:24:55:41:0f:c8:03:ab:3b:d0:72:71:61:fe:f3: 35:8b:3d:f4:d3:c6:66:18:d8:ff:31:2e:26:05:bc:46:b5:17: 9d:ba:60:3d:ee:e3:67:a2:d4:e6:ce:d2:36:5f:53:a0:89:38: 58:cf:eb:13:1d:46:1d:52:b7:00:26:9e:41:f6:6e:ee:55:e5: 0b:00:1d:d2:e8:ca:dd:6b:94:a3:c1:0a:19:6b:2c:0d:f4:0b: c0:59:e6:1d:2b:91:4b:7a:7c:46:fd:f1:d2:20:5d:0b:67:bc: 9f:7e:9b:6e:74:59:01:7b:77:e6:fc:ff:b7:7a:b5:d0:2e:d6: 09:0c:b8:91:10:2b:32:90:59:bb:40:3c:ba:d9:6f:5b:3e:19: d2:f5:26:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcIxUcwqBlbHphASNug5fZBHU4aYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNTA3MjAxMzM2NDRaFw0yNTA3MjMyMDUzNDRaMDMxMTAvBgNV BAMTKDMwQjg5OEZBRDA5RUJGMjNGOTdBQzM1ODBGRjIzNTE5QzlFQkUyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVHWUkqlR4CENwJnYvFqHy7GA v89C40+i2V299/Ec4WRFXn657tMioZFicDMKwEiJVv2P18SORsK3ZJnHl68pqj/9 hxfUELFZ7YHvkCPKv/aceNJyZ7BUMkO3KnLJXGXfcQbwC+P5vkuvUr7DgVWCCmE0 gqr8qqTVs1fX8koYo4zINXXus2wB2QShnGpoi3Ok/Ye8Gve3JuAEYemsIY5QnDaV oSEjiio4Ao6ROTfnNOLZ1s8c69aNwCiPVKrQuT0CSaHG0rySKa6uJ69PE/Wqhozs D/9liyUWSYOUUCBh+hy5bo/hePNKXIdDDFmDMATOkJxW53+Ar5i9g7xLGcVPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMLiY+tCevyP5esNYD/I1Gcnr4lAwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACejysCwa2AkfYFMhyKAgpAlcVTSxj3Ar7ON VUnB3T0DR+FMIfSGp5Iiu/W8R24XyvSO0knry+jf9652Dch+ucjbza5q44UJxMEv vgaF4ci+TkgTtH1i67OJcz1Zp+dTUWLUecBdjuPtXYMpRqsgLgYkVUEPyAOrO9By cWH+8zWLPfTTxmYY2P8xLiYFvEa1F526YD3u42ei1ObO0jZfU6CJOFjP6xMdRh1S twAmnkH2bu5V5QsAHdLoyt1rlKPBChlrLA30C8BZ5h0rkUt6fEb98dIgXQtnvJ9+ m250WQF7d+b8/7d6tdAu1gkMuJEQKzKQWbtAPLrZb1s+GdL1Jgs= -----END CERTIFICATE-----Generated at Mon Jul 21 09:01:57 2025 by rpki-client