$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: /GFSF8jM1UTLOTdpjP6H6eSRgSXEdfRt35GsNMNXtS0= Subject key identifier: A5:7F:C7:B3:49:4B:42:5F:F5:C5:65:43:D7:7C:21:4D:53:72:1D:62 Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 6FBD5657AC630414808443FA978F184D1B1ED7B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: DA Signing time: Sat 06 Sep 2025 02:23:29 +0000 Manifest this update: Sat 06 Sep 2025 02:18:29 +0000 Manifest next update: Tue 09 Sep 2025 13:58:29 +0000 Files and hashes: 1: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) 2: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 3: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: wcXhim/hUoJTsIidUqcwg+aYJjTzzIgUQGvCDYIhobA=) 4: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 5: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) 6: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:bd:56:57:ac:63:04:14:80:84:43:fa:97:8f:18:4d:1b:1e:d7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Sep 6 02:18:29 2025 GMT Not After : Sep 9 13:58:29 2025 GMT Subject: CN=A57FC7B3494B425FF5C56543D77C214D53721D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5e:ea:01:a8:0e:24:57:bc:3c:82:c8:5a:0d: b5:33:64:94:28:ac:a6:03:fd:2b:d9:1a:41:ca:0a: 9d:c1:88:72:f1:c2:35:ee:9a:8b:a3:1e:44:3a:0e: 88:ed:50:11:8b:02:b3:9f:b5:31:fe:85:0b:49:a3: 05:2d:f9:77:0b:0b:04:c7:77:78:bd:b0:f6:53:84: 22:b8:88:94:31:9c:d7:5f:f0:00:e0:71:20:41:90: bf:b2:0f:3a:c3:3f:4b:74:05:39:28:7c:f9:3c:4d: 95:a7:78:88:1e:f3:4b:5f:96:9b:b9:93:78:49:67: 30:68:85:fc:f4:b4:74:6a:b0:bc:2a:87:fc:b7:36: e4:9b:9f:af:83:ce:b7:74:e5:4f:18:59:33:ad:bd: c8:26:8e:37:77:fc:36:3d:bf:f7:7b:ab:91:a7:53: aa:08:63:75:29:e9:1b:a2:a7:03:04:3c:2d:9f:87: ea:7c:c5:90:02:71:95:49:d8:ce:83:cd:38:25:91: 5e:78:3c:e1:db:f6:52:33:23:d3:39:ea:91:06:5e: a8:47:fa:b8:ca:8d:f3:73:51:ac:d2:9e:82:df:7e: 60:be:6b:b8:d9:48:fa:00:c1:93:81:16:aa:3f:5f: 80:dc:75:0c:6c:0a:62:11:4c:b1:23:d2:83:71:dd: 44:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7F:C7:B3:49:4B:42:5F:F5:C5:65:43:D7:7C:21:4D:53:72:1D:62 X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b6:ca:44:19:64:b1:86:3d:a1:c1:da:87:23:a1:9c:b5:a6: 79:a6:b4:d3:25:a3:d0:37:28:7b:16:e1:18:ab:90:76:b4:24: 52:81:c4:fd:4a:54:36:0f:45:10:c7:e1:40:75:a6:b7:ac:4e: 42:33:c0:82:df:ab:07:28:e4:60:e6:f5:16:72:bc:9b:ca:a4: 9e:02:9b:17:76:38:7d:d0:24:8d:e9:1e:0a:43:62:01:19:fb: 75:c1:55:9e:4b:fa:d6:07:9c:1c:d5:8a:56:e8:3d:d3:2f:74: 09:29:ac:f4:46:8e:a5:32:a2:3c:4f:f8:64:d3:ec:a3:ee:67: 2d:50:f9:fb:16:39:5a:2b:2f:1b:bb:ac:ea:7a:4d:ec:35:40: 23:3b:0a:16:1f:cc:38:5c:1d:ba:08:ed:c3:ad:01:2f:66:b0: 0e:78:05:4b:5d:95:3c:30:43:42:80:b2:61:fe:77:e8:a7:f8: 65:73:71:9c:3e:4e:7e:4d:c8:c4:43:40:c8:ea:eb:8e:29:96: 4e:84:ec:05:65:7b:11:1f:cc:e3:02:26:9a:80:d1:5c:ed:09: 0c:55:2e:f9:0e:83:a1:ba:1b:98:4c:4a:60:d9:5e:0c:e3:e9: 07:88:32:74:26:6a:66:2d:58:f1:3c:1a:45:f4:58:90:9f:bb: ab:bf:22:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb71WV6xjBBSAhEP6l48YTRse17EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNTA5MDYwMjE4MjlaFw0yNTA5MDkxMzU4MjlaMDMxMTAvBgNV BAMTKEE1N0ZDN0IzNDk0QjQyNUZGNUM1NjU0M0Q3N0MyMTRENTM3MjFENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsXuoBqA4kV7w8gshaDbUzZJQo rKYD/SvZGkHKCp3BiHLxwjXumoujHkQ6DojtUBGLArOftTH+hQtJowUt+XcLCwTH d3i9sPZThCK4iJQxnNdf8ADgcSBBkL+yDzrDP0t0BTkofPk8TZWneIge80tflpu5 k3hJZzBohfz0tHRqsLwqh/y3NuSbn6+Dzrd05U8YWTOtvcgmjjd3/DY9v/d7q5Gn U6oIY3Up6RuipwMEPC2fh+p8xZACcZVJ2M6DzTglkV54POHb9lIzI9M56pEGXqhH +rjKjfNzUazSnoLffmC+a7jZSPoAwZOBFqo/X4DcdQxsCmIRTLEj0oNx3UQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpX/Hs0lLQl/1xWVD13whTVNyHWIwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK62ykQZZLGGPaHB2ocjoZy1pnmmtNMlo9A3 KHsW4RirkHa0JFKBxP1KVDYPRRDH4UB1presTkIzwILfqwco5GDm9RZyvJvKpJ4C mxd2OH3QJI3pHgpDYgEZ+3XBVZ5L+tYHnBzVilboPdMvdAkprPRGjqUyojxP+GTT 7KPuZy1Q+fsWOVorLxu7rOp6Tew1QCM7ChYfzDhcHboI7cOtAS9msA54BUtdlTww Q0KAsmH+d+in+GVzcZw+Tn5NyMRDQMjq644plk6E7AVlexEfzOMCJpqA0VztCQxV LvkOg6G6G5hMSmDZXgzj6QeIMnQmamYtWPE8GkX0WJCfu6u/IlE= -----END CERTIFICATE-----Generated at Sun Sep 7 13:45:13 2025 by rpki-client