$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: UDFoG8ROlzDAdpaynNtjFDnD5j2ocMaoDFqrnxdUFAs= Subject key identifier: C7:95:EF:80:0C:E8:AB:18:A3:FA:69:F5:BC:22:CA:51:26:47:F0:64 Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 5235E273897C49855E906778B3AB4E976148401B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 01A3 Signing time: Sun 29 Jun 2025 10:00:51 +0000 Manifest this update: Sun 29 Jun 2025 09:55:51 +0000 Manifest next update: Wed 02 Jul 2025 21:12:51 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: WU4OS1OV+8iN1dmvrErpUWqbsC92MVIT7keo4SWEOZs=) 2: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 3: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 4: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: acV9j3XIcn+bea9k3sYuulK5VVRC16qFjnWStKLLjhQ=) 5: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: L6AhB3SJiTvapLUV9uB7Z8waPf0+D1v1CwZsfT8r2MU=) 6: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: uUdG4SGiybweBVH5rVedbcrvTamlpHOnLNXLU4+Tbhc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:35:e2:73:89:7c:49:85:5e:90:67:78:b3:ab:4e:97:61:48:40:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Jun 29 09:55:51 2025 GMT Not After : Jul 2 21:12:51 2025 GMT Subject: CN=C795EF800CE8AB18A3FA69F5BC22CA512647F064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a7:d9:b6:ce:18:0b:0e:c3:9c:61:23:a0:be: d4:71:ff:df:e1:96:ee:54:a2:a1:b4:eb:ea:73:8c: c6:71:5d:c6:c6:13:63:b5:5b:82:06:d5:fa:ff:55: af:0b:59:0f:10:f0:ad:9a:a9:f7:00:e2:55:7a:a4: 8c:5d:c8:38:a9:93:47:4c:76:27:ec:13:7f:97:12: af:dc:2c:fa:48:dd:fc:6a:92:35:88:71:8e:11:47: 92:7e:d4:ae:75:ba:52:16:93:40:33:03:85:82:b9: cf:b1:a3:02:ee:33:a8:d8:65:ac:53:68:18:fd:41: a8:7c:f0:44:de:2f:8c:60:9c:37:3a:f2:54:5d:49: 29:3b:a0:23:8e:55:9a:f8:52:8e:dd:24:21:c8:2a: 57:d6:c9:eb:a3:19:96:74:ca:e8:61:fc:19:c8:68: ad:d0:4f:77:fb:a8:f5:b3:cf:a3:51:c4:0a:59:5b: 28:77:cb:2b:3c:d3:c5:7d:8e:3b:ee:15:fa:7c:56: fb:0e:08:c1:be:6f:2e:78:a3:95:da:53:49:bc:c4: f9:1c:19:7e:4a:10:ca:f4:82:80:a6:7f:74:72:57: 66:b4:e0:f7:27:d3:27:a2:23:e9:7e:c7:5a:34:02: 5d:3b:dd:8f:74:0d:6e:df:61:a7:ae:cc:d9:db:8f: 72:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:95:EF:80:0C:E8:AB:18:A3:FA:69:F5:BC:22:CA:51:26:47:F0:64 X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7b:86:d4:ae:59:7a:51:b1:b3:ce:61:9c:87:e4:9a:2a:b5: 98:c8:cc:49:d9:ca:f4:f1:8b:c0:33:85:64:bc:44:d6:98:73: 24:09:5d:35:6e:95:28:d8:c0:b5:44:4b:11:7e:4b:ee:ef:72: 2a:02:b2:03:f0:bf:5c:72:e8:40:15:b1:ff:ef:17:70:43:59: 8c:85:96:68:66:14:54:65:26:2d:9f:52:af:83:83:35:e9:c6: a6:bd:d7:c4:ec:d4:05:c6:32:a6:8f:98:52:18:03:16:45:4c: 87:f1:d5:08:01:db:c9:d1:09:ae:5b:c2:58:a3:b4:25:47:7f: 43:ca:79:61:b6:dd:c7:ba:b2:59:b3:8e:fc:94:51:c1:ad:1f: 70:af:67:d9:24:fa:ec:c9:49:6c:d6:ce:06:97:f9:4d:8a:24: c0:de:50:8a:83:e9:87:04:4c:d8:84:80:ec:6a:fb:1f:e6:17: e5:c3:e5:ee:34:e6:74:6a:e1:03:ef:82:2d:af:ea:78:ff:4d: 34:37:bd:e9:50:c6:4b:f6:4c:3e:0b:b2:57:c0:51:8a:a9:de: bd:41:a5:29:3d:34:98:f7:89:18:b7:2f:a5:57:a9:11:d7:2b: 0d:cb:3d:30:03:f3:39:f5:35:97:12:80:06:42:c4:c8:eb:98: 67:eb:65:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjXic4l8SYVekGd4s6tOl2FIQBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTA2MjkwOTU1NTFaFw0yNTA3MDIyMTEyNTFaMDMxMTAvBgNV BAMTKEM3OTVFRjgwMENFOEFCMThBM0ZBNjlGNUJDMjJDQTUxMjY0N0YwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwp9m2zhgLDsOcYSOgvtRx/9/h lu5UoqG06+pzjMZxXcbGE2O1W4IG1fr/Va8LWQ8Q8K2aqfcA4lV6pIxdyDipk0dM difsE3+XEq/cLPpI3fxqkjWIcY4RR5J+1K51ulIWk0AzA4WCuc+xowLuM6jYZaxT aBj9Qah88ETeL4xgnDc68lRdSSk7oCOOVZr4Uo7dJCHIKlfWyeujGZZ0yuhh/BnI aK3QT3f7qPWzz6NRxApZWyh3yys808V9jjvuFfp8VvsOCMG+by54o5XaU0m8xPkc GX5KEMr0goCmf3RyV2a04Pcn0yeiI+l+x1o0Al073Y90DW7fYaeuzNnbj3JpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx5XvgAzoqxij+mn1vCLKUSZH8GQwHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ7htSuWXpRsbPOYZyH5JoqtZjIzEnZyvTx i8AzhWS8RNaYcyQJXTVulSjYwLVESxF+S+7vcioCsgPwv1xy6EAVsf/vF3BDWYyF lmhmFFRlJi2fUq+DgzXpxqa918Ts1AXGMqaPmFIYAxZFTIfx1QgB28nRCa5bwlij tCVHf0PKeWG23ce6slmzjvyUUcGtH3CvZ9kk+uzJSWzWzgaX+U2KJMDeUIqD6YcE TNiEgOxq+x/mF+XD5e405nRq4QPvgi2v6nj/TTQ3velQxkv2TD4LslfAUYqp3r1B pSk9NJj3iRi3L6VXqRHXKw3LPTAD8zn1NZcSgAZCxMjrmGfrZXA= -----END CERTIFICATE-----Generated at Sun Jun 29 18:47:25 2025 by rpki-client