$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: 0bz6zGFsJSM/Eukb5VDwzEIMjSYaS1FBcuhKEt52fHY= Subject key identifier: EB:1E:38:EF:B2:3C:47:22:D1:44:6B:8C:85:A6:32:B2:3B:06:96:B5 Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 69F63DFF3DC0992301C3BCD2DEFB9937A59253C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 01DA Signing time: Sat 25 Oct 2025 21:00:53 +0000 Manifest this update: Sat 25 Oct 2025 20:55:53 +0000 Manifest next update: Tue 28 Oct 2025 21:02:53 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 2: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 3: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8=) 4: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 9H3El07W5poKziXy5nJS/+wd9IjLStSX7hOc3PPnjBQ=) 5: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: vxMPTESIzZEY7G3+9W6n+soUJ5to979lR7MTr9paLOY=) 6: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: 1PZt0LvfZc6CUWlV1wlhvTgjWH5Wmqk4ds66+BY6EX8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 21:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f6:3d:ff:3d:c0:99:23:01:c3:bc:d2:de:fb:99:37:a5:92:53:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Oct 25 20:55:53 2025 GMT Not After : Oct 28 21:02:53 2025 GMT Subject: CN=EB1E38EFB23C4722D1446B8C85A632B23B0696B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f8:85:29:50:7a:0a:2f:95:8e:ac:1c:71:b4: 30:ef:15:e4:e0:a0:54:9c:e0:a4:71:05:4a:18:9c: eb:30:a4:36:ba:d2:97:7f:ae:d3:07:6a:1d:e3:d1: 84:7b:98:52:59:04:cd:83:9e:c8:33:9b:4f:0a:ff: 3b:ba:1c:97:be:99:bf:ba:af:82:f3:a2:08:0e:b6: 7e:8b:90:81:14:19:ed:36:45:ea:83:73:45:a1:32: 55:96:99:3c:fe:7f:ca:8c:df:ba:21:f2:9a:e0:61: 27:f1:5b:07:cc:2b:16:ba:6e:de:12:df:14:a6:a3: 88:fb:23:ab:09:2e:19:df:2f:52:28:75:4d:35:71: 49:45:7e:cd:f5:e5:56:9f:3e:39:fe:c0:14:30:0a: ed:d0:d4:83:e2:b0:75:72:24:ab:8e:e5:03:0e:29: 54:81:e3:a0:1f:31:6b:41:91:39:fe:89:6e:37:ec: c9:2f:2a:23:ef:ee:b8:97:c1:55:9e:6c:b8:7e:6b: 52:14:4d:39:ce:7f:99:39:bd:eb:7a:68:bb:30:f4: 5c:e4:f2:43:3d:6b:c8:32:b5:61:08:e8:80:12:ef: b2:7a:b4:01:60:d1:60:8f:ce:ab:e6:84:ea:b0:7b: 80:6e:99:53:03:12:5c:9b:a4:a7:a6:d2:3b:8b:08: 44:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1E:38:EF:B2:3C:47:22:D1:44:6B:8C:85:A6:32:B2:3B:06:96:B5 X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fe:20:f8:10:a5:d6:6c:47:d2:70:c2:dd:39:ac:67:f6:c9: de:32:99:01:0b:62:df:36:14:ab:d5:e7:4c:27:49:49:d7:51: d7:8e:d1:b7:cd:32:4c:6d:ed:b6:15:8a:bc:1d:90:33:7c:ea: 0e:d4:82:82:3e:4d:7c:a1:c9:61:8e:4f:8d:92:ec:67:26:36: a9:a2:3d:94:f2:cf:5b:31:25:f1:c8:f0:0b:dc:51:8b:72:f7: 94:22:aa:63:4c:11:e5:db:aa:11:98:c9:00:22:df:8b:42:5d: 11:4d:96:b7:f8:3c:af:c4:b6:2e:9a:b5:04:42:56:1e:bd:8c: 50:d3:7a:7d:86:2d:7f:6c:16:c7:be:1d:de:9f:1a:fc:b6:d9: 8f:e8:ee:ac:2a:04:5b:50:4b:19:60:1b:bb:e7:e7:7f:ec:0f: f8:48:cb:4c:5e:1d:e8:fd:91:46:1d:a2:a2:7d:01:af:33:82: 5f:6c:7e:13:eb:ed:34:56:f7:81:62:33:04:87:08:9e:5c:08: 59:9f:eb:97:0a:7c:d6:87:5b:fc:9f:83:c5:98:a9:5a:99:8d: 53:10:b9:37:92:c2:99:12:8c:59:90:45:7d:be:96:27:f2:96: 6d:d5:55:a6:82:e5:bf:ca:2d:cf:31:df:a9:21:2e:b3:7a:df: 8d:1e:4d:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUafY9/z3AmSMBw7zS3vuZN6WSU8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTEwMjUyMDU1NTNaFw0yNTEwMjgyMTAyNTNaMDMxMTAvBgNV BAMTKEVCMUUzOEVGQjIzQzQ3MjJEMTQ0NkI4Qzg1QTYzMkIyM0IwNjk2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl+IUpUHoKL5WOrBxxtDDvFeTg oFSc4KRxBUoYnOswpDa60pd/rtMHah3j0YR7mFJZBM2Dnsgzm08K/zu6HJe+mb+6 r4LzoggOtn6LkIEUGe02ReqDc0WhMlWWmTz+f8qM37oh8prgYSfxWwfMKxa6bt4S 3xSmo4j7I6sJLhnfL1IodU01cUlFfs315VafPjn+wBQwCu3Q1IPisHVyJKuO5QMO KVSB46AfMWtBkTn+iW437MkvKiPv7riXwVWebLh+a1IUTTnOf5k5vet6aLsw9Fzk 8kM9a8gytWEI6IAS77J6tAFg0WCPzqvmhOqwe4BumVMDElybpKem0juLCEThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6x4477I8RyLRRGuMhaYysjsGlrUwHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7+IPgQpdZsR9Jwwt05rGf2yd4ymQELYt82 FKvV50wnSUnXUdeO0bfNMkxt7bYVirwdkDN86g7UgoI+TXyhyWGOT42S7GcmNqmi PZTyz1sxJfHI8AvcUYty95QiqmNMEeXbqhGYyQAi34tCXRFNlrf4PK/Eti6atQRC Vh69jFDTen2GLX9sFse+Hd6fGvy22Y/o7qwqBFtQSxlgG7vn53/sD/hIy0xeHej9 kUYdoqJ9Aa8zgl9sfhPr7TRW94FiMwSHCJ5cCFmf65cKfNaHW/yfg8WYqVqZjVMQ uTeSwpkSjFmQRX2+lifylm3VVaaC5b/KLc8x36khLrN6340eTaY= -----END CERTIFICATE-----Generated at Mon Oct 27 09:34:52 2025 by rpki-client