$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: Z3zhkqKkqnve56Xl4hTrhQh8Xkr2Pn2pcD/NgCSDNvo= Subject key identifier: 02:E5:48:33:59:E8:64:CC:5F:A5:3C:39:48:F4:97:FA:0D:DA:6C:8E Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 6B1FD22BD387D8BB6E8BC1D1B59666F5420F1E06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 0196 Signing time: Sun 01 Jun 2025 11:30:50 +0000 Manifest this update: Sun 01 Jun 2025 11:25:50 +0000 Manifest next update: Wed 04 Jun 2025 22:46:50 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: VXQG4LgTm2A9yFvzXIobJzQfhPQpDMemmOhQgXgjEso=) 2: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: eBIwtq3IDYbGntPd8udTR7pwimj3OQ7zrJEf3s/YHkM=) 3: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: uUdG4SGiybweBVH5rVedbcrvTamlpHOnLNXLU4+Tbhc=) 4: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: WU4OS1OV+8iN1dmvrErpUWqbsC92MVIT7keo4SWEOZs=) 5: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: 7SdlHNHpanO+tZRrcnf/PVVhgtLiona58qsGHYC7Vk0=) 6: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: acV9j3XIcn+bea9k3sYuulK5VVRC16qFjnWStKLLjhQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 22:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1f:d2:2b:d3:87:d8:bb:6e:8b:c1:d1:b5:96:66:f5:42:0f:1e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Jun 1 11:25:50 2025 GMT Not After : Jun 4 22:46:50 2025 GMT Subject: CN=02E5483359E864CC5FA53C3948F497FA0DDA6C8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:69:3c:4b:91:3d:69:95:c9:6d:8e:a5:8b: 9c:52:e3:be:dd:98:a0:13:c4:2d:d3:f0:0b:41:1d: a8:e1:f5:3c:0f:b0:4c:e0:dc:f4:20:80:0e:b8:72: 74:c9:d9:08:13:df:a6:a1:64:91:97:4e:c4:b1:40: 20:cb:19:df:39:64:b7:6d:13:8f:50:33:ce:18:68: 3d:a9:79:8d:8e:d0:c6:d2:26:78:c9:f1:e9:62:6f: 6b:b8:e1:7c:00:be:61:df:7f:ac:00:57:b2:a5:bd: 11:49:fe:3d:84:c1:10:d0:6f:b7:79:03:ee:2d:46: f4:7a:5d:80:1f:de:d2:9f:7f:ef:9f:56:a5:d9:29: 04:f1:93:80:e7:8f:18:23:53:07:14:2e:96:1e:df: 3e:31:84:c9:c8:cf:d8:f0:d4:eb:66:02:5c:ab:f5: fa:a9:97:b2:cf:d4:f4:b0:3f:0a:60:41:68:78:c3: 05:73:13:e2:d7:9b:8a:74:ab:b6:ff:b6:2a:f1:88: 2d:76:ed:c7:4a:dd:d8:06:17:19:48:b1:e6:d9:65: d1:18:ff:67:ba:70:07:2c:be:40:10:b0:5b:a9:f4: ef:5e:69:38:36:1a:56:b8:bb:8f:66:b8:ff:0d:31: 77:9f:ff:44:07:27:c4:80:71:a7:b7:70:05:44:f1: f7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E5:48:33:59:E8:64:CC:5F:A5:3C:39:48:F4:97:FA:0D:DA:6C:8E X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c9:22:8d:23:d6:67:ea:e0:bd:c4:f4:26:db:d4:1f:85:2a: 57:ab:5e:1f:84:73:03:7f:ff:4b:54:86:75:96:5f:31:3a:7d: 29:60:01:0e:b4:76:52:b6:26:b0:a1:e4:51:6f:c3:14:f4:ba: 67:4f:d7:e2:9f:a9:75:7c:cb:78:37:6f:32:90:e4:74:23:d8: d2:36:5b:24:68:20:8a:bd:5c:cf:58:0e:ae:d8:1e:b4:df:f6: 9e:2c:ca:e9:c6:7c:d3:57:7d:e6:d6:6e:ed:36:4f:2a:77:04: ef:fd:bf:d3:e0:32:f8:15:9b:a1:b7:1d:6f:46:b9:74:57:74: 3f:be:41:7e:ba:2f:af:18:04:93:dc:33:f2:96:03:15:a1:af: 61:d3:b5:c0:a7:fd:c4:61:3d:06:7e:79:d5:23:1b:b2:88:61: 5c:37:d7:2e:e8:e0:51:73:71:91:02:cf:25:b1:ac:ae:b0:28: 93:04:2e:f8:d5:25:1d:d8:f9:d6:a8:86:13:6f:4b:86:fc:c4: a1:cf:7c:5f:17:ac:51:76:41:25:fe:44:b3:d2:b8:97:31:85: 10:f8:5c:91:de:13:58:ed:b1:10:67:d7:45:c5:28:f6:8e:e0: 0f:89:0d:00:27:d8:04:c4:f5:98:a6:dd:94:79:fd:d3:df:29: 48:7f:d4:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUax/SK9OH2Ltui8HRtZZm9UIPHgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTA2MDExMTI1NTBaFw0yNTA2MDQyMjQ2NTBaMDMxMTAvBgNV BAMTKDAyRTU0ODMzNTlFODY0Q0M1RkE1M0MzOTQ4RjQ5N0ZBMEREQTZDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZmk8S5E9aZXJbY6li5xS477d mKATxC3T8AtBHajh9TwPsEzg3PQggA64cnTJ2QgT36ahZJGXTsSxQCDLGd85ZLdt E49QM84YaD2peY2O0MbSJnjJ8elib2u44XwAvmHff6wAV7KlvRFJ/j2EwRDQb7d5 A+4tRvR6XYAf3tKff++fVqXZKQTxk4DnjxgjUwcULpYe3z4xhMnIz9jw1OtmAlyr 9fqpl7LP1PSwPwpgQWh4wwVzE+LXm4p0q7b/tirxiC127cdK3dgGFxlIsebZZdEY /2e6cAcsvkAQsFup9O9eaTg2Gla4u49muP8NMXef/0QHJ8SAcae3cAVE8fd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAuVIM1noZMxfpTw5SPSX+g3abI4wHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7JIo0j1mfq4L3E9Cbb1B+FKlerXh+EcwN/ /0tUhnWWXzE6fSlgAQ60dlK2JrCh5FFvwxT0umdP1+KfqXV8y3g3bzKQ5HQj2NI2 WyRoIIq9XM9YDq7YHrTf9p4syunGfNNXfebWbu02Typ3BO/9v9PgMvgVm6G3HW9G uXRXdD++QX66L68YBJPcM/KWAxWhr2HTtcCn/cRhPQZ+edUjG7KIYVw31y7o4FFz cZECzyWxrK6wKJMELvjVJR3Y+daohhNvS4b8xKHPfF8XrFF2QSX+RLPSuJcxhRD4 XJHeE1jtsRBn10XFKPaO4A+JDQAn2ATE9Zim3ZR5/dPfKUh/1N4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:58 2025 by rpki-client