$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: Ev3Mtt3MtM5kV34qa8L2kXrI5BbV8JVFrCVKgtN4No4= Subject key identifier: A5:2A:08:62:07:3A:C7:9F:13:71:75:F0:FD:6D:D0:98:D8:68:7D:BF Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 3486863DC824A4D4B5019D660C540272373102B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 01BB Signing time: Fri 22 Aug 2025 02:20:52 +0000 Manifest this update: Fri 22 Aug 2025 02:15:52 +0000 Manifest next update: Mon 25 Aug 2025 03:00:52 +0000 Files and hashes: 1: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: KHCF32QLaKybWiC9lwk9BEmdYv6iX5/zQlEEb7hcBvQ=) 2: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: uUdG4SGiybweBVH5rVedbcrvTamlpHOnLNXLU4+Tbhc=) 3: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 4: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 5: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: WU4OS1OV+8iN1dmvrErpUWqbsC92MVIT7keo4SWEOZs=) 6: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: acV9j3XIcn+bea9k3sYuulK5VVRC16qFjnWStKLLjhQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:86:86:3d:c8:24:a4:d4:b5:01:9d:66:0c:54:02:72:37:31:02:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Aug 22 02:15:52 2025 GMT Not After : Aug 25 03:00:52 2025 GMT Subject: CN=A52A0862073AC79F137175F0FD6DD098D8687DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:12:fa:e0:02:59:16:7f:db:85:9e:9a:92:4d: b1:15:37:1b:26:e8:8d:f3:d6:71:65:cb:47:b0:b0: ec:34:fe:f0:cf:66:03:79:20:d5:7b:91:ad:20:09: 70:fb:50:ae:08:d8:09:fd:0d:cc:c6:1d:55:01:d2: 13:f1:67:fc:fd:9c:21:75:ab:89:ab:a2:e6:21:90: a5:a9:ac:fc:56:b9:92:76:0c:6e:6e:a3:5c:39:d0: 86:4a:22:9c:f7:a4:d6:e5:66:20:ae:b4:17:5b:5a: 07:bf:39:cd:80:0e:bd:08:d9:5d:8a:eb:5c:a9:72: 2e:69:46:38:25:88:f2:45:57:fe:ee:4e:2c:32:98: a0:9f:4b:83:f1:57:4d:b9:df:c5:fe:60:e3:f1:b4: 42:8b:52:f2:bb:ac:ba:6e:14:9f:2a:9e:92:47:8d: a1:a7:cc:f9:5e:87:dc:44:37:e5:d8:d3:99:75:da: 81:ae:41:40:23:81:e9:e9:e8:c0:cd:23:8b:8b:46: 3f:6e:70:48:59:1c:7d:83:5a:aa:52:19:9e:cb:3b: c4:c3:a7:30:9f:3c:cb:8e:79:ca:51:de:1a:52:83: f3:08:89:a2:69:0a:93:f8:67:41:68:a7:0b:34:13: 34:92:4d:aa:11:69:21:b3:2d:ed:63:a7:6d:d1:8d: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2A:08:62:07:3A:C7:9F:13:71:75:F0:FD:6D:D0:98:D8:68:7D:BF X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fe:1b:86:1e:b8:47:49:2c:e2:00:65:91:7e:3f:fe:0b:1b: 5c:fe:c1:ae:69:f8:57:2b:c7:9b:75:33:ac:75:7b:77:f2:bf: 04:9e:38:15:2e:52:6d:ba:8d:ea:36:87:b6:99:65:44:95:45: 69:84:37:5b:2c:ba:1d:ab:d0:e5:06:08:fd:eb:6f:79:25:49: da:07:38:1e:ff:0b:fa:b2:21:16:bf:f7:22:2a:4c:66:24:6f: 43:c0:e3:99:59:15:5f:45:d0:ff:d8:0e:b1:0b:48:1f:f3:ea: c8:2a:94:02:ae:07:06:fb:e3:1e:e3:51:43:5a:d9:ad:d4:54: 4a:5e:55:db:85:86:3c:9e:af:d7:53:f9:48:d2:61:e8:83:13: ba:60:29:51:8c:2c:e1:51:4f:18:ee:39:50:9d:c3:57:c5:99: 08:72:25:97:83:17:9b:4e:d1:d0:d4:01:f8:15:37:85:ee:14: 2c:cc:9a:26:39:e4:0e:f4:c9:62:67:1a:b6:86:4d:26:7c:6c: b6:9a:e8:33:c3:e9:3b:df:a5:74:68:2e:ea:3d:c5:47:28:a0: 2e:1d:8f:d4:18:3e:eb:c8:cb:d4:d3:a9:01:d1:94:e9:b6:36: 06:94:aa:9d:d9:14:b2:77:ce:97:22:4a:31:14:c2:48:bd:81: f0:fe:d9:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIaGPcgkpNS1AZ1mDFQCcjcxArYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTA4MjIwMjE1NTJaFw0yNTA4MjUwMzAwNTJaMDMxMTAvBgNV BAMTKEE1MkEwODYyMDczQUM3OUYxMzcxNzVGMEZENkREMDk4RDg2ODdEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEEvrgAlkWf9uFnpqSTbEVNxsm 6I3z1nFly0ewsOw0/vDPZgN5INV7ka0gCXD7UK4I2An9DczGHVUB0hPxZ/z9nCF1 q4mrouYhkKWprPxWuZJ2DG5uo1w50IZKIpz3pNblZiCutBdbWge/Oc2ADr0I2V2K 61ypci5pRjgliPJFV/7uTiwymKCfS4PxV02538X+YOPxtEKLUvK7rLpuFJ8qnpJH jaGnzPleh9xEN+XY05l12oGuQUAjgenp6MDNI4uLRj9ucEhZHH2DWqpSGZ7LO8TD pzCfPMuOecpR3hpSg/MIiaJpCpP4Z0Fopws0EzSSTaoRaSGzLe1jp23RjXnnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpSoIYgc6x58TcXXw/W3QmNhofb8wHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/+G4YeuEdJLOIAZZF+P/4LG1z+wa5p+Fcr x5t1M6x1e3fyvwSeOBUuUm26jeo2h7aZZUSVRWmEN1ssuh2r0OUGCP3rb3klSdoH OB7/C/qyIRa/9yIqTGYkb0PA45lZFV9F0P/YDrELSB/z6sgqlAKuBwb74x7jUUNa 2a3UVEpeVduFhjyer9dT+UjSYeiDE7pgKVGMLOFRTxjuOVCdw1fFmQhyJZeDF5tO 0dDUAfgVN4XuFCzMmiY55A70yWJnGraGTSZ8bLaa6DPD6TvfpXRoLuo9xUcooC4d j9QYPuvIy9TTqQHRlOm2NgaUqp3ZFLJ3zpciSjEUwki9gfD+2T0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:05 2025 by rpki-client