$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: y2ecU0ERV7WbFZVqWWBkavdH/b8s3OcWRNyEiORV6mc= Subject key identifier: 45:EC:50:E1:D4:ED:04:AD:2E:5D:3D:81:49:8B:CE:83:2F:DB:88:42 Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 76BE9FBE1CE22FC61117ABE9B69971795CA5FE83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 021B Signing time: Fri 20 Mar 2026 11:01:04 +0000 Manifest this update: Fri 20 Mar 2026 10:56:04 +0000 Manifest next update: Mon 23 Mar 2026 13:00:04 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8=) 2: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 9H3El07W5poKziXy5nJS/+wd9IjLStSX7hOc3PPnjBQ=) 3: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 4: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: Nes9vAYtBqIzLcM1g+aSaQqAZ6xni9w+tjn64qrz/Hs=) 5: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: vxMPTESIzZEY7G3+9W6n+soUJ5to979lR7MTr9paLOY=) 6: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 13:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:be:9f:be:1c:e2:2f:c6:11:17:ab:e9:b6:99:71:79:5c:a5:fe:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Mar 20 10:56:04 2026 GMT Not After : Mar 23 13:00:04 2026 GMT Subject: CN=45EC50E1D4ED04AD2E5D3D81498BCE832FDB8842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:04:3d:e6:69:ad:99:87:c5:d9:f7:54:33: 7f:7c:86:ef:3c:ea:44:69:2c:99:ab:be:ad:aa:b0: aa:8b:6c:3e:0e:83:87:25:95:39:b4:81:0c:83:bf: 42:b6:8e:7b:93:2c:90:b4:12:8a:ce:94:ea:6f:9c: 94:9d:38:52:e0:70:9d:44:65:16:1b:3b:f3:74:75: 79:dd:c3:b0:65:87:cc:4e:d5:4d:25:13:c9:9b:e5: 56:53:c6:ac:72:aa:67:79:94:85:9a:45:77:93:0b: 08:7d:3b:21:ae:20:a8:54:1a:7d:0d:1c:f6:73:6a: 72:7f:1c:77:91:68:47:0c:ff:f1:f4:05:e3:6a:f5: 57:c5:91:a5:bc:2c:3f:1f:22:e1:d7:34:b7:2a:ef: c5:f8:6b:37:41:99:f5:11:71:4e:ed:25:0d:36:93: 98:6f:04:81:88:e8:ef:e6:0b:35:a7:1a:5f:62:6e: 18:45:ab:de:38:8a:ac:3d:f3:33:7c:d3:8c:19:73: 27:bf:59:95:b3:42:c2:4b:e2:4c:f1:8b:2c:5f:8a: e0:65:d0:46:34:b3:2d:70:6d:8f:92:a4:12:e3:21: f8:2e:02:d1:1b:6d:30:93:c9:89:62:01:b8:24:61: c8:9b:74:02:ee:24:d8:38:67:aa:74:0c:fd:cf:88: 7d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EC:50:E1:D4:ED:04:AD:2E:5D:3D:81:49:8B:CE:83:2F:DB:88:42 X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:21:8e:ee:72:ad:0b:3b:d7:62:d7:bb:e1:36:39:7b:bc:82: 30:85:76:3b:c7:77:5a:31:25:e6:52:1f:a0:45:ac:35:51:a2: f7:44:69:f1:35:cb:58:59:96:38:e7:75:3b:b0:3c:ab:8d:fc: ca:be:09:13:f3:db:a5:6e:9f:de:49:2c:8a:c5:39:a0:dd:88: 71:a3:7d:2a:44:bf:e0:b3:42:40:a2:3f:8b:ce:80:18:bb:be: f2:aa:1e:10:86:a9:42:8d:47:67:df:5f:cc:15:f7:66:51:80: b5:75:df:30:e8:a9:cb:b4:42:68:a3:33:d3:da:54:83:d1:1b: ea:96:e2:a0:8b:b2:2a:c3:b8:76:3b:86:de:49:a9:35:60:6d: 50:2f:4f:38:21:75:0a:af:6f:ad:8c:6d:59:9b:44:1f:1f:a1: 34:db:b2:6d:48:4c:72:0b:9d:2a:e9:f9:f0:c7:95:6a:7c:2c: fd:db:46:d8:21:2a:8a:49:8b:0f:67:43:ca:90:f3:29:e3:54: b1:21:cf:23:b1:8c:c9:da:b6:4b:7e:d6:22:44:11:86:64:a6: 41:d3:2a:f1:40:4b:f9:48:97:86:1b:ac:fb:5c:fc:14:a7:e2: fd:67:95:83:d3:8b:03:e6:07:a1:3c:4c:ac:be:3b:ac:4d:fa: 72:3b:d6:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdr6fvhziL8YRF6vptplxeVyl/oMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNjAzMjAxMDU2MDRaFw0yNjAzMjMxMzAwMDRaMDMxMTAvBgNV BAMTKDQ1RUM1MEUxRDRFRDA0QUQyRTVEM0Q4MTQ5OEJDRTgzMkZEQjg4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyewQ95mmtmYfF2fdUM398hu88 6kRpLJmrvq2qsKqLbD4Og4cllTm0gQyDv0K2jnuTLJC0EorOlOpvnJSdOFLgcJ1E ZRYbO/N0dXndw7Blh8xO1U0lE8mb5VZTxqxyqmd5lIWaRXeTCwh9OyGuIKhUGn0N HPZzanJ/HHeRaEcM//H0BeNq9VfFkaW8LD8fIuHXNLcq78X4azdBmfURcU7tJQ02 k5hvBIGI6O/mCzWnGl9ibhhFq944iqw98zN804wZcye/WZWzQsJL4kzxiyxfiuBl 0EY0sy1wbY+SpBLjIfguAtEbbTCTyYliAbgkYcibdALuJNg4Z6p0DP3PiH1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURexQ4dTtBK0uXT2BSYvOgy/biEIwHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHohju5yrQs712LXu+E2OXu8gjCFdjvHd1ox JeZSH6BFrDVRovdEafE1y1hZljjndTuwPKuN/Mq+CRPz26Vun95JLIrFOaDdiHGj fSpEv+CzQkCiP4vOgBi7vvKqHhCGqUKNR2ffX8wV92ZRgLV13zDoqcu0QmijM9Pa VIPRG+qW4qCLsirDuHY7ht5JqTVgbVAvTzghdQqvb62MbVmbRB8foTTbsm1ITHIL nSrp+fDHlWp8LP3bRtghKopJiw9nQ8qQ8ynjVLEhzyOxjMnatkt+1iJEEYZkpkHT KvFAS/lIl4YbrPtc/BSn4v1nlYPTiwPmB6E8TKy+O6xN+nI71s8= -----END CERTIFICATE-----Generated at Sat Mar 21 01:33:36 2026 by rpki-client