$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: ixCfU5ZBKJaUdYlLS7PqcXCYluAXTMc7g9e8emSE0Fk= Subject key identifier: 84:6B:22:A5:47:AA:70:35:3E:C7:E6:FA:EC:FF:45:EC:59:63:D8:4A Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 5646399A83DA67BBFD15EF6BB8299B98FE0298E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: B1 Signing time: Thu 05 Jun 2025 10:41:46 +0000 Manifest this update: Thu 05 Jun 2025 10:36:46 +0000 Manifest next update: Sun 08 Jun 2025 13:00:46 +0000 Files and hashes: 1: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 2: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) 3: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 4: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: 8YKL3n6VeoiawOca52UCWdGjOvFd1UYx/yzAAXWhJLw=) 5: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) 6: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:46:39:9a:83:da:67:bb:fd:15:ef:6b:b8:29:9b:98:fe:02:98:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Jun 5 10:36:46 2025 GMT Not After : Jun 8 13:00:46 2025 GMT Subject: CN=846B22A547AA70353EC7E6FAECFF45EC5963D84A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1c:ea:13:32:5b:d3:53:5d:b1:0d:3f:48:cb: fa:0c:ff:38:cf:7b:8e:30:61:7b:6e:2e:ef:6a:c6: 79:d8:a7:2f:71:fc:5e:7b:57:ae:d9:ba:af:25:3f: 94:7b:3b:95:18:6f:1d:f1:c7:98:aa:59:e2:b6:5a: b2:c9:2a:dc:90:1b:96:e2:6a:d0:8d:98:0b:5c:15: 1e:74:13:3d:ac:06:ed:33:d8:80:38:3c:f2:09:12: 0b:e6:d5:b3:59:6f:78:a7:ea:c6:e1:ca:a9:a6:4f: 44:1e:a5:f7:08:dd:ef:5c:bf:dc:ae:98:1c:78:6b: 85:b4:d6:2e:0e:7e:35:1c:0e:17:18:a5:a0:60:e8: 2a:4e:bb:6a:b4:b8:d2:19:b6:50:bc:3c:c6:08:98: 5b:1b:74:44:83:d3:b4:ab:8d:5c:35:67:9e:a4:a1: 91:a4:cb:0e:8c:b0:14:f3:71:16:2a:f3:a1:7e:0a: c8:0c:70:92:3e:11:73:a7:7d:e5:3b:e4:e7:8e:1b: 38:37:13:64:e1:75:59:8e:fe:72:bb:33:40:c4:3f: 0c:d6:22:22:b5:2f:98:58:86:6f:cf:bb:64:a0:b4: 8d:fa:d0:31:28:be:58:ab:39:81:27:8f:b8:65:de: 5d:d2:5a:ec:b4:48:50:ff:a6:74:16:c7:9f:46:75: d6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6B:22:A5:47:AA:70:35:3E:C7:E6:FA:EC:FF:45:EC:59:63:D8:4A X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:1a:b8:4e:9e:56:0d:7e:ac:4a:eb:43:21:e6:ee:5b:df:81: 14:b6:8c:e1:e0:bf:8c:70:71:06:18:97:8a:77:c3:db:0b:b5: 51:c9:fb:4d:78:63:cf:6e:1b:d0:88:bb:6f:a8:a3:35:79:6e: 2d:e3:6c:b3:c2:a9:21:e4:83:01:15:cf:6e:3a:ef:24:c4:f9: fa:e0:89:3b:6d:86:89:a8:c7:b5:3f:4f:b4:28:95:90:eb:ea: 12:63:8d:c9:f1:e4:50:8e:e5:4e:09:05:93:dd:27:b0:2a:a0: a1:70:7e:a9:8a:74:55:84:25:b1:72:a1:b3:17:a2:88:c9:d3: 02:3a:8f:49:67:40:b4:44:26:14:f5:e2:53:45:29:94:d0:a8: 6e:94:b8:b0:15:52:02:56:a3:c3:d5:d1:d0:cf:8c:43:d2:39: c5:7b:35:77:16:a9:af:50:46:ab:da:24:20:07:5c:0a:08:03: d4:ad:73:35:e2:69:46:c0:16:03:b6:f7:5a:ac:24:ab:0c:9d: ba:f9:8f:74:82:b5:24:16:fe:bc:27:83:b0:9b:00:6e:ab:5a: 93:0e:e4:89:0a:a6:d0:4f:81:f6:0f:fe:bc:e5:c4:b7:8f:3c: 52:77:75:fa:8b:07:ba:32:d5:3a:e8:58:88:9c:ab:9b:bf:90: 3a:cf:1b:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkY5moPaZ7v9Fe9ruCmbmP4CmOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNTA2MDUxMDM2NDZaFw0yNTA2MDgxMzAwNDZaMDMxMTAvBgNV BAMTKDg0NkIyMkE1NDdBQTcwMzUzRUM3RTZGQUVDRkY0NUVDNTk2M0Q4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHOoTMlvTU12xDT9Iy/oM/zjP e44wYXtuLu9qxnnYpy9x/F57V67Zuq8lP5R7O5UYbx3xx5iqWeK2WrLJKtyQG5bi atCNmAtcFR50Ez2sBu0z2IA4PPIJEgvm1bNZb3in6sbhyqmmT0QepfcI3e9cv9yu mBx4a4W01i4OfjUcDhcYpaBg6CpOu2q0uNIZtlC8PMYImFsbdESD07SrjVw1Z56k oZGkyw6MsBTzcRYq86F+CsgMcJI+EXOnfeU75OeOGzg3E2ThdVmO/nK7M0DEPwzW IiK1L5hYhm/Pu2SgtI360DEovlirOYEnj7hl3l3SWuy0SFD/pnQWx59Gddb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhGsipUeqcDU+x+b67P9F7Flj2EowHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAauE6eVg1+rErrQyHm7lvfgRS2jOHgv4xw cQYYl4p3w9sLtVHJ+014Y89uG9CIu2+oozV5bi3jbLPCqSHkgwEVz2467yTE+frg iTtthomox7U/T7QolZDr6hJjjcnx5FCO5U4JBZPdJ7AqoKFwfqmKdFWEJbFyobMX oojJ0wI6j0lnQLREJhT14lNFKZTQqG6UuLAVUgJWo8PV0dDPjEPSOcV7NXcWqa9Q RqvaJCAHXAoIA9StczXiaUbAFgO291qsJKsMnbr5j3SCtSQW/rwng7CbAG6rWpMO 5IkKptBPgfYP/rzlxLePPFJ3dfqLB7oy1TroWIicq5u/kDrPG4c= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:05 2025 by rpki-client