$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: f3L5E80oJndiZUhiQXzU2M5M4R/bfzw2z7vT5zJA/VA= Subject key identifier: 49:4B:FD:29:01:0E:88:03:5C:96:8D:43:8C:25:B0:FE:EC:A8:81:70 Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 0FDFDBD3393667E393321005525D951E7D7C37A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 01C2 Signing time: Fri 05 Sep 2025 18:00:52 +0000 Manifest this update: Fri 05 Sep 2025 17:55:52 +0000 Manifest next update: Tue 09 Sep 2025 01:28:52 +0000 Files and hashes: 1: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: acV9j3XIcn+bea9k3sYuulK5VVRC16qFjnWStKLLjhQ=) 2: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 3: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 4: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: BfV+fjJNhGb/ppiIyJV8rUMuMI99alczIBnj/xHBTBQ=) 5: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: WU4OS1OV+8iN1dmvrErpUWqbsC92MVIT7keo4SWEOZs=) 6: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: uUdG4SGiybweBVH5rVedbcrvTamlpHOnLNXLU4+Tbhc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:df:db:d3:39:36:67:e3:93:32:10:05:52:5d:95:1e:7d:7c:37:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Sep 5 17:55:52 2025 GMT Not After : Sep 9 01:28:52 2025 GMT Subject: CN=494BFD29010E88035C968D438C25B0FEECA88170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:ee:99:47:92:ae:ad:95:48:9b:76:c3:38: 93:f1:71:9a:9a:44:4b:a8:da:f0:93:bd:ce:0a:51: 05:cf:75:fe:e8:92:66:9a:30:f2:f8:0f:5c:40:dc: 90:99:6b:55:4c:31:93:3a:b4:7c:07:b5:f4:14:21: 8f:1f:c5:5c:1b:f3:7b:ab:93:d3:b9:e9:ab:0a:a1: 45:40:8f:05:77:69:ab:b6:bc:d3:61:ce:6e:a3:b8: e8:b5:3e:98:09:ff:d8:34:9b:13:cf:2f:bd:22:ac: 98:98:6f:64:30:94:02:b7:84:ea:cd:96:cb:0d:5d: 89:42:a2:f1:15:c3:e6:ce:0d:53:e9:0a:54:e5:8a: bf:fa:2a:a5:2f:40:64:cd:c6:4f:d5:5f:fa:bd:9c: 0a:ac:5a:0a:9f:75:7d:fa:6f:70:e3:ee:4f:66:48: a0:9d:b0:2f:da:c6:89:13:7f:0e:46:cf:a4:80:50: c1:de:8c:79:25:7d:f2:6d:79:87:7a:d4:8a:d4:97: 56:69:f2:67:39:07:0f:bb:a9:3d:d0:d6:17:26:96: 18:b4:cf:cf:7c:96:0d:2e:28:e5:03:10:e4:7e:ba: 84:c1:11:a8:97:30:d3:7f:a6:8c:35:83:d6:ef:a4: 09:d4:38:20:a3:be:86:18:3a:01:42:66:9f:7b:04: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4B:FD:29:01:0E:88:03:5C:96:8D:43:8C:25:B0:FE:EC:A8:81:70 X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:77:b3:ec:2b:01:b4:6b:77:dd:10:3b:a6:cc:3b:76:04:c1: af:27:1c:37:ba:e4:ea:7e:db:28:a1:0f:da:24:3e:92:f4:ec: a5:68:5a:e3:48:2c:6c:1d:fd:f8:db:34:99:88:9d:cf:7e:62: 7f:9b:51:cb:d4:3b:47:b8:3b:c0:a8:ce:ef:95:70:41:0b:c0: b4:fa:02:2a:8d:41:6b:95:d5:0c:36:c7:b9:61:f2:6d:db:38: 17:01:1f:aa:8a:a4:ad:1a:3f:1f:7e:f7:58:3b:7b:ce:a8:21: da:dc:e7:92:27:1d:3b:92:2f:66:3c:70:ce:d2:6d:4c:f2:98: b5:7f:44:7e:61:1b:d9:29:4b:ce:cb:b6:7e:a1:9c:ee:83:b7: f9:47:1b:31:e6:32:cd:ff:18:5f:b2:29:d5:c1:33:81:75:fa: 75:4c:4b:99:28:d2:80:ab:e1:91:c9:1b:3b:bd:88:18:0f:51: ae:27:f4:dd:5e:c1:3a:25:c8:b7:28:f4:34:1c:73:80:06:dd: 00:d8:48:4b:8f:54:bd:57:47:ae:c8:c3:ac:f5:e6:de:85:14: ec:9e:22:f0:7e:5d:65:a3:8d:ba:b4:49:49:22:c7:7f:c8:20: 96:26:59:5e:2b:0c:a4:b6:f6:35:fb:92:07:d0:85:d1:6f:a0: cb:9a:74:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9/b0zk2Z+OTMhAFUl2VHn18N6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTA5MDUxNzU1NTJaFw0yNTA5MDkwMTI4NTJaMDMxMTAvBgNV BAMTKDQ5NEJGRDI5MDEwRTg4MDM1Qzk2OEQ0MzhDMjVCMEZFRUNBODgxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ee6ZR5KurZVIm3bDOJPxcZqa REuo2vCTvc4KUQXPdf7okmaaMPL4D1xA3JCZa1VMMZM6tHwHtfQUIY8fxVwb83ur k9O56asKoUVAjwV3aau2vNNhzm6juOi1PpgJ/9g0mxPPL70irJiYb2QwlAK3hOrN lssNXYlCovEVw+bODVPpClTlir/6KqUvQGTNxk/VX/q9nAqsWgqfdX36b3Dj7k9m SKCdsC/axokTfw5Gz6SAUMHejHklffJteYd61IrUl1Zp8mc5Bw+7qT3Q1hcmlhi0 z898lg0uKOUDEOR+uoTBEaiXMNN/pow1g9bvpAnUOCCjvoYYOgFCZp97BBqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSUv9KQEOiANclo1DjCWw/uyogXAwHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABh3s+wrAbRrd90QO6bMO3YEwa8nHDe65Op+ 2yihD9okPpL07KVoWuNILGwd/fjbNJmInc9+Yn+bUcvUO0e4O8Cozu+VcEELwLT6 AiqNQWuV1Qw2x7lh8m3bOBcBH6qKpK0aPx9+91g7e86oIdrc55InHTuSL2Y8cM7S bUzymLV/RH5hG9kpS87Ltn6hnO6Dt/lHGzHmMs3/GF+yKdXBM4F1+nVMS5ko0oCr 4ZHJGzu9iBgPUa4n9N1ewTolyLco9DQcc4AG3QDYSEuPVL1XR67Iw6z15t6FFOye IvB+XWWjjbq0SUkix3/IIJYmWV4rDKS29jX7kgfQhdFvoMuadHo= -----END CERTIFICATE-----Generated at Fri Sep 5 19:45:06 2025 by rpki-client