$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: 9quRYYDEnGrr9ux8SfuzhSMQO4urjezfU9HotOqOHJc= Subject key identifier: 63:81:2B:07:AA:41:44:DC:36:1F:13:86:81:A8:7B:0C:93:91:CA:20 Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 2FC12247BC354298EEE764E41843C6C7BA51490A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 017E Signing time: Tue 08 Apr 2025 07:10:50 +0000 Manifest this update: Tue 08 Apr 2025 07:05:50 +0000 Manifest next update: Fri 11 Apr 2025 17:00:50 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: uUdG4SGiybweBVH5rVedbcrvTamlpHOnLNXLU4+Tbhc=) 2: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: ttKnAd2zBVpjutykWNzE106VkhwOqa9Tn0l8CY0ZQd8=) 3: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: eBIwtq3IDYbGntPd8udTR7pwimj3OQ7zrJEf3s/YHkM=) 4: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: acV9j3XIcn+bea9k3sYuulK5VVRC16qFjnWStKLLjhQ=) 5: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: VXQG4LgTm2A9yFvzXIobJzQfhPQpDMemmOhQgXgjEso=) 6: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: WU4OS1OV+8iN1dmvrErpUWqbsC92MVIT7keo4SWEOZs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 12:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c1:22:47:bc:35:42:98:ee:e7:64:e4:18:43:c6:c7:ba:51:49:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Apr 8 07:05:50 2025 GMT Not After : Apr 11 17:00:50 2025 GMT Subject: CN=63812B07AA4144DC361F138681A87B0C9391CA20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8c:8a:f5:3d:45:13:e9:62:a0:a8:be:7a:0d: 84:b3:ce:be:c9:1f:5f:16:5b:13:0e:96:e8:e4:c3: 87:ec:20:52:2a:8f:90:5f:95:74:62:70:ac:22:8f: 1c:00:98:b3:a4:e5:27:72:4c:11:52:46:91:77:60: e9:72:f8:4d:50:15:0e:43:3a:76:fc:35:75:87:09: 0a:e6:1f:70:1d:63:5d:71:07:ec:3f:b4:30:02:88: b6:27:56:1e:67:7e:8d:df:3a:9a:6f:54:99:c3:6d: 81:d2:93:e6:e9:56:b3:58:e3:67:67:32:b6:53:9a: bd:0e:9a:bb:8a:52:0a:14:1f:75:e9:44:02:ad:cf: 82:8a:23:cd:bb:e2:31:22:64:0e:67:b1:e3:d3:32: 8a:9d:d3:11:a2:13:30:c9:64:ff:11:be:0d:4d:8d: fd:91:c6:5f:45:c5:fc:36:d8:a9:3c:9f:de:3a:97: 74:92:4b:d0:96:a5:f6:4e:d5:3f:06:e5:1a:c1:e1: 39:93:eb:79:c8:a8:fc:54:83:dd:f1:9d:c1:74:56: aa:d6:0b:c9:9b:b4:e3:b6:39:bd:53:24:ba:6c:79: 28:d0:90:38:4f:18:21:3a:8a:37:aa:d6:4c:21:ba: c7:d6:50:72:ef:ee:13:1d:d3:ec:23:3c:8e:0c:6b: 23:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:81:2B:07:AA:41:44:DC:36:1F:13:86:81:A8:7B:0C:93:91:CA:20 X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c4:10:b0:77:17:a3:09:d9:fe:2a:ab:1a:dc:b5:92:eb:53: 67:bd:f0:d6:d8:ef:32:53:51:9c:68:d2:5b:a9:6f:eb:28:c1: 1b:d0:35:1c:62:b0:d0:98:0c:f2:68:53:6b:89:43:2d:70:7b: 65:c4:4c:de:f1:3c:28:01:a5:95:b9:ba:80:8f:a1:35:3c:96: d1:69:b5:f4:fd:cf:91:f2:95:c2:df:e0:38:d4:a7:cd:e6:29: 7a:0e:37:55:55:6d:fc:9f:f6:ed:49:75:c6:0d:b0:23:24:8d: 71:ff:07:9c:2a:b3:a0:10:a0:12:88:79:81:c5:b8:13:fa:c2: 4e:57:75:f3:75:77:77:dc:45:1a:36:a9:5d:6f:22:81:e1:e2: ed:e3:26:96:72:2f:0d:cf:34:47:c7:80:05:a5:69:22:f7:b2: 1d:33:05:31:31:f5:b5:73:a2:3b:9a:a4:6b:d8:3d:20:1e:b2: 1c:d5:cc:00:b4:f9:2f:80:fd:88:5d:b5:46:fc:e9:8b:ea:12: 97:25:9c:5f:50:e2:e6:20:75:04:2d:27:03:4b:b1:f8:77:5b: 33:40:76:36:c2:ca:d9:3c:4a:e9:61:ef:7a:3b:37:6e:54:7a: 58:63:5d:c1:03:45:fb:be:2b:10:a2:42:84:bc:03:20:b0:20: 95:2b:21:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8EiR7w1Qpju52TkGEPGx7pRSQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTA0MDgwNzA1NTBaFw0yNTA0MTExNzAwNTBaMDMxMTAvBgNV BAMTKDYzODEyQjA3QUE0MTQ0REMzNjFGMTM4NjgxQTg3QjBDOTM5MUNBMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChjIr1PUUT6WKgqL56DYSzzr7J H18WWxMOlujkw4fsIFIqj5BflXRicKwijxwAmLOk5SdyTBFSRpF3YOly+E1QFQ5D Onb8NXWHCQrmH3AdY11xB+w/tDACiLYnVh5nfo3fOppvVJnDbYHSk+bpVrNY42dn MrZTmr0OmruKUgoUH3XpRAKtz4KKI8274jEiZA5nsePTMoqd0xGiEzDJZP8Rvg1N jf2Rxl9Fxfw22Kk8n946l3SSS9CWpfZO1T8G5RrB4TmT63nIqPxUg93xncF0VqrW C8mbtOO2Ob1TJLpseSjQkDhPGCE6ijeq1kwhusfWUHLv7hMd0+wjPI4MayMbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4ErB6pBRNw2HxOGgah7DJORyiAwHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXEELB3F6MJ2f4qqxrctZLrU2e98NbY7zJT UZxo0lupb+sowRvQNRxisNCYDPJoU2uJQy1we2XETN7xPCgBpZW5uoCPoTU8ltFp tfT9z5HylcLf4DjUp83mKXoON1VVbfyf9u1JdcYNsCMkjXH/B5wqs6AQoBKIeYHF uBP6wk5XdfN1d3fcRRo2qV1vIoHh4u3jJpZyLw3PNEfHgAWlaSL3sh0zBTEx9bVz ojuapGvYPSAeshzVzAC0+S+A/YhdtUb86YvqEpclnF9Q4uYgdQQtJwNLsfh3WzNA djbCytk8Sulh73o7N25UelhjXcEDRfu+KxCiQoS8AyCwIJUrITQ= -----END CERTIFICATE-----Generated at Tue Apr 8 17:12:06 2025 by rpki-client