$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: BnTC+Sj/J3r43cZv9cUWwXgQmvq3fldmxEzZ0dDIaLk= Subject key identifier: E8:BB:A0:83:C0:7C:A2:42:39:DB:EE:3C:01:B1:D8:9C:04:4D:51:14 Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 109506897C435C0DDC0128B64F8D2988C7F019E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 01AC Signing time: Sat 19 Jul 2025 11:40:51 +0000 Manifest this update: Sat 19 Jul 2025 11:35:51 +0000 Manifest next update: Tue 22 Jul 2025 15:02:51 +0000 Files and hashes: 1: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: 6MOD1ny9j774z4sGl0Uz0IM7+hfy48I5r5JdfQqYnoE=) 2: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 3: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: WU4OS1OV+8iN1dmvrErpUWqbsC92MVIT7keo4SWEOZs=) 4: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 5: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: uUdG4SGiybweBVH5rVedbcrvTamlpHOnLNXLU4+Tbhc=) 6: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: acV9j3XIcn+bea9k3sYuulK5VVRC16qFjnWStKLLjhQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 15:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:95:06:89:7c:43:5c:0d:dc:01:28:b6:4f:8d:29:88:c7:f0:19:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Jul 19 11:35:51 2025 GMT Not After : Jul 22 15:02:51 2025 GMT Subject: CN=E8BBA083C07CA24239DBEE3C01B1D89C044D5114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:5f:7e:19:a6:e5:c9:a0:74:82:db:b2:e0: a6:63:56:48:30:bc:72:5b:bb:6d:d1:16:93:8a:5a: 21:7a:11:69:90:f9:0a:7d:3e:53:11:7f:61:8b:51: df:ed:76:bd:51:9b:3e:5b:8c:85:56:48:80:75:39: 72:b4:cc:be:cb:8b:49:24:0c:37:bd:68:05:ce:86: 68:a4:cf:f4:a8:8b:99:55:28:08:fc:ec:a9:15:2a: 90:b5:d9:1f:85:d6:fd:93:08:a3:e0:a6:1a:a9:0d: 05:f4:17:be:3a:c9:67:5b:6b:09:78:ed:d4:2c:6e: 74:c8:fd:aa:c2:30:8a:80:f7:41:ad:b5:b2:51:b0: 85:2d:4e:aa:c3:f2:9e:0b:6a:25:63:ad:ed:cd:0c: 2c:85:02:22:08:9f:a1:a6:40:d8:ed:7d:da:38:94: e9:d4:ee:6c:a5:b3:de:2c:41:db:93:ef:1d:75:9a: 85:00:1a:3b:a0:27:df:4d:9c:df:8f:f6:fd:5d:6a: 3b:39:0f:29:2e:d4:9a:5d:b4:0a:67:63:e3:19:69: 00:7f:a6:df:f4:39:e7:82:df:14:39:3b:94:0e:c5: fe:75:f3:ae:d6:c2:82:a3:bd:32:f7:58:ba:f4:ed: 69:60:d6:9b:c2:f7:a7:59:37:6b:00:57:6d:00:13: 5d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BB:A0:83:C0:7C:A2:42:39:DB:EE:3C:01:B1:D8:9C:04:4D:51:14 X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:26:81:52:4a:d6:7a:fe:42:c0:0e:2e:f5:1f:88:c8:f0:bc: 11:8d:69:96:a6:3d:da:f2:85:d2:b5:0c:01:29:b1:f9:12:af: 66:aa:44:b1:14:df:07:e1:5f:99:4f:7c:75:98:bb:55:33:8b: b6:f1:c2:85:f6:f6:f2:89:a1:ae:86:9f:bd:3c:e6:aa:80:59: f3:d4:72:3a:50:d7:fe:10:97:70:fa:05:8a:bd:d1:c0:49:98: d7:cb:3c:b5:4d:43:9e:46:ba:19:d8:72:23:2b:cf:40:6b:5a: cf:9b:4d:8f:d4:f9:de:d5:5d:f9:73:7d:7d:96:ef:56:ca:4c: eb:fd:58:28:77:85:60:8e:99:52:16:6d:69:30:a6:ad:6b:64: 37:db:ce:4d:32:dd:3f:98:de:34:51:ed:53:55:a0:5e:c2:9a: f2:09:8f:07:48:39:bd:84:a3:57:1f:25:6e:84:7d:68:93:56: 7f:58:69:f2:39:59:03:a0:dc:d9:f0:48:fc:62:1c:b8:74:9d: f1:d5:8a:80:02:4b:6e:18:cc:a9:01:cb:e9:14:0d:58:95:6d: b1:33:49:f5:9d:22:f5:6f:f3:7d:d8:8e:ad:62:86:3e:09:da: 55:17:f2:89:c9:a6:6a:40:f6:9f:3e:64:df:23:c7:fe:d2:dd: 07:13:a8:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJUGiXxDXA3cASi2T40piMfwGeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTA3MTkxMTM1NTFaFw0yNTA3MjIxNTAyNTFaMDMxMTAvBgNV BAMTKEU4QkJBMDgzQzA3Q0EyNDIzOURCRUUzQzAxQjFEODlDMDQ0RDUxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4W19+GablyaB0gtuy4KZjVkgw vHJbu23RFpOKWiF6EWmQ+Qp9PlMRf2GLUd/tdr1Rmz5bjIVWSIB1OXK0zL7Li0kk DDe9aAXOhmikz/Soi5lVKAj87KkVKpC12R+F1v2TCKPgphqpDQX0F746yWdbawl4 7dQsbnTI/arCMIqA90GttbJRsIUtTqrD8p4LaiVjre3NDCyFAiIIn6GmQNjtfdo4 lOnU7myls94sQduT7x11moUAGjugJ99NnN+P9v1dajs5Dyku1JpdtApnY+MZaQB/ pt/0OeeC3xQ5O5QOxf51867WwoKjvTL3WLr07Wlg1pvC96dZN2sAV20AE12lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Lugg8B8okI52+48AbHYnARNURQwHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMmgVJK1nr+QsAOLvUfiMjwvBGNaZamPdry hdK1DAEpsfkSr2aqRLEU3wfhX5lPfHWYu1Uzi7bxwoX29vKJoa6Gn7085qqAWfPU cjpQ1/4Ql3D6BYq90cBJmNfLPLVNQ55GuhnYciMrz0BrWs+bTY/U+d7VXflzfX2W 71bKTOv9WCh3hWCOmVIWbWkwpq1rZDfbzk0y3T+Y3jRR7VNVoF7CmvIJjwdIOb2E o1cfJW6EfWiTVn9YafI5WQOg3NnwSPxiHLh0nfHVioACS24YzKkBy+kUDViVbbEz SfWdIvVv833Yjq1ihj4J2lUX8onJpmpA9p8+ZN8jx/7S3QcTqGg= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:18 2025 by rpki-client