$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: XtVqG1AtALJRe9iG8gnQFCr10u0ytHLVE3DlEtR6Nww= Subject key identifier: 0C:32:EC:D9:51:89:E2:17:51:2E:9F:A1:1D:D5:0B:46:B3:C9:13:74 Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 08EC7DEB60F119B20C238076B2ED87B7658296BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 01D7 Signing time: Sun 19 Oct 2025 05:20:53 +0000 Manifest this update: Sun 19 Oct 2025 05:15:53 +0000 Manifest next update: Wed 22 Oct 2025 13:29:53 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 9H3El07W5poKziXy5nJS/+wd9IjLStSX7hOc3PPnjBQ=) 2: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8=) 3: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 4: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: HoohXxl+H0X4v1cgz7E/Tt3dJ0NIOzybrsIp1DnmZFI=) 5: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 6: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: vxMPTESIzZEY7G3+9W6n+soUJ5to979lR7MTr9paLOY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ec:7d:eb:60:f1:19:b2:0c:23:80:76:b2:ed:87:b7:65:82:96:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Oct 19 05:15:53 2025 GMT Not After : Oct 22 13:29:53 2025 GMT Subject: CN=0C32ECD95189E217512E9FA11DD50B46B3C91374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:22:3e:d2:1d:0b:fa:9b:8a:96:e6:f7:bd:fe: 8d:ed:51:52:38:e5:55:31:a8:23:c2:e2:5d:2e:f8: 85:94:ee:bb:74:70:cb:be:4f:7a:6f:44:b5:70:97: b3:f0:65:8f:b2:22:1f:6a:7f:34:44:70:07:6a:a1: 2a:91:d9:16:2b:13:12:9d:7a:b7:8a:54:73:f3:36: e9:44:db:bf:d0:66:2e:83:ff:4f:ec:9c:be:df:72: a2:ba:d9:7a:39:6d:dd:90:19:b0:d6:6b:92:72:3d: 7e:52:c6:5a:60:5a:71:06:e4:1e:c2:82:2b:2c:a6: 3c:a3:21:dc:5a:be:17:d8:21:12:53:16:56:62:2d: fb:cf:0e:7e:4a:6b:60:c3:08:71:44:46:cd:73:f5: d9:5e:8e:f9:fa:1b:fa:95:91:6b:4c:e6:16:67:29: 9f:00:ae:c2:51:66:9d:3b:d7:47:a4:16:03:5b:eb: ca:c0:6b:88:ec:84:39:2c:7c:87:1f:b3:8b:67:d8: d2:57:e2:24:9d:96:c9:85:1f:59:d0:a1:81:ea:2d: da:0c:98:b8:33:e5:24:d9:c2:36:dd:89:3c:0f:8e: 7b:ea:5e:0b:c5:86:bd:25:eb:2e:0f:31:c0:4e:2b: 25:6c:66:ae:31:34:20:05:5e:e2:35:68:64:60:82: 47:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:32:EC:D9:51:89:E2:17:51:2E:9F:A1:1D:D5:0B:46:B3:C9:13:74 X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cd:a2:d2:ee:9e:1a:71:b3:91:05:f6:9f:8f:2f:74:cc:3b: b8:32:4a:b7:1f:9d:f4:e8:7e:cf:36:57:1f:b2:b6:80:91:35: 6f:16:38:af:c8:28:34:09:72:fe:68:2c:f6:19:eb:38:69:fa: 12:b3:42:a5:1f:a8:22:d8:52:5e:d7:c0:0d:82:b3:80:55:01: f7:e5:bc:13:b7:8d:cc:44:1e:73:3c:fe:59:e7:9e:ae:1d:58: 15:15:c4:3b:f1:57:d2:cc:b9:50:0d:5b:ab:3e:eb:18:8d:86: 66:00:c7:7b:f9:7d:c3:0e:69:e5:b5:56:ea:50:f2:06:36:51: bc:f9:1d:f1:51:28:40:54:fe:f1:0b:3c:a2:7b:20:09:62:0a: 87:0c:15:5e:b8:a2:a8:e7:8e:d9:f5:9a:e7:91:0e:75:e2:8a: a9:ce:02:be:f4:53:35:cb:0c:28:40:02:6a:8a:46:96:7e:72: 00:1e:42:01:d1:42:b7:cb:2f:ab:b7:45:73:43:a2:48:d2:f1: 8e:9f:4e:31:db:59:28:eb:a9:98:04:b5:19:74:d9:73:1c:58: e7:10:be:4e:da:3e:11:68:b2:7e:36:d0:be:c6:07:44:a3:22: 31:a0:ed:c5:04:d4:36:22:cc:33:95:76:b3:14:ae:bb:d6:78: 65:bb:76:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOx962DxGbIMI4B2su2Ht2WClr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTEwMTkwNTE1NTNaFw0yNTEwMjIxMzI5NTNaMDMxMTAvBgNV BAMTKDBDMzJFQ0Q5NTE4OUUyMTc1MTJFOUZBMTFERDUwQjQ2QjNDOTEzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcIj7SHQv6m4qW5ve9/o3tUVI4 5VUxqCPC4l0u+IWU7rt0cMu+T3pvRLVwl7PwZY+yIh9qfzREcAdqoSqR2RYrExKd ereKVHPzNulE27/QZi6D/0/snL7fcqK62Xo5bd2QGbDWa5JyPX5SxlpgWnEG5B7C gisspjyjIdxavhfYIRJTFlZiLfvPDn5Ka2DDCHFERs1z9dlejvn6G/qVkWtM5hZn KZ8ArsJRZp0710ekFgNb68rAa4jshDksfIcfs4tn2NJX4iSdlsmFH1nQoYHqLdoM mLgz5STZwjbdiTwPjnvqXgvFhr0l6y4PMcBOKyVsZq4xNCAFXuI1aGRggkeBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDDLs2VGJ4hdRLp+hHdULRrPJE3QwHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/NotLunhpxs5EF9p+PL3TMO7gySrcfnfTo fs82Vx+ytoCRNW8WOK/IKDQJcv5oLPYZ6zhp+hKzQqUfqCLYUl7XwA2Cs4BVAffl vBO3jcxEHnM8/lnnnq4dWBUVxDvxV9LMuVANW6s+6xiNhmYAx3v5fcMOaeW1VupQ 8gY2Ubz5HfFRKEBU/vELPKJ7IAliCocMFV64oqjnjtn1mueRDnXiiqnOAr70UzXL DChAAmqKRpZ+cgAeQgHRQrfLL6u3RXNDokjS8Y6fTjHbWSjrqZgEtRl02XMcWOcQ vk7aPhFosn420L7GB0SjIjGg7cUE1DYizDOVdrMUrrvWeGW7drA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:49 2025 by rpki-client