$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: 4kU+BbjAzfp0OE/r8dKwx6AEo3OqrgN2FtTW/kP/bn4= Subject key identifier: A9:7C:90:72:39:B6:C1:A8:6D:A8:81:55:0B:0F:EA:2D:41:36:A1:A5 Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 55D21F1E476972283C441BEC7FAC604491329BE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 0227 Signing time: Thu 16 Apr 2026 18:11:01 +0000 Manifest this update: Thu 16 Apr 2026 18:06:01 +0000 Manifest next update: Mon 20 Apr 2026 03:03:01 +0000 Files and hashes: 1: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8=) 2: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 9H3El07W5poKziXy5nJS/+wd9IjLStSX7hOc3PPnjBQ=) 3: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: 2OMuHBY28A9tb5HRQm2uk5Feal4uJfI20UjmPksTq/k=) 4: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 5: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 6: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: vxMPTESIzZEY7G3+9W6n+soUJ5to979lR7MTr9paLOY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d2:1f:1e:47:69:72:28:3c:44:1b:ec:7f:ac:60:44:91:32:9b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Apr 16 18:06:01 2026 GMT Not After : Apr 20 03:03:01 2026 GMT Subject: CN=A97C907239B6C1A86DA881550B0FEA2D4136A1A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:30:d3:1a:05:4e:f3:4e:1c:2e:90:b6:66:9a: 10:53:e4:b7:36:ec:a6:0a:76:5f:1b:1a:b7:08:b4: 9b:93:52:c8:68:f8:4b:6a:a1:66:b4:42:ca:97:3e: 3b:03:3a:9f:2f:55:00:90:ae:d1:99:e9:ca:1f:3a: 34:9c:5c:79:d0:8d:0f:fc:41:c1:2e:fe:f9:60:c9: 3f:88:5a:63:04:9c:85:82:49:0a:98:61:41:a0:2d: 0c:57:97:1d:4c:80:06:3a:9a:99:b8:88:60:11:f3: be:2b:d0:9c:67:7e:21:d8:c8:4b:7a:c4:1c:d0:86: 12:89:24:a0:cd:26:d5:83:6d:f7:b6:94:a5:24:94: e4:b7:70:7e:fd:53:ef:df:18:4b:96:03:2a:12:6e: 53:16:00:79:c3:56:01:9d:35:f2:bf:62:cb:d2:e2: ac:a8:1e:51:db:00:d1:b4:ab:49:b6:fc:3e:9b:f5: 20:ba:09:cb:b7:18:aa:8e:35:e2:57:47:59:3b:74: ae:89:40:a5:b3:68:6e:81:b9:70:c3:0a:14:40:5a: d3:69:94:a2:74:d6:0e:19:a1:88:62:b0:15:c3:ca: 60:eb:64:ca:78:6b:bc:55:2b:4b:ef:6d:09:64:fd: 21:46:8f:f1:d8:21:a8:ad:29:c2:d6:5a:ce:63:da: 62:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7C:90:72:39:B6:C1:A8:6D:A8:81:55:0B:0F:EA:2D:41:36:A1:A5 X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:52:89:dd:a6:ff:9f:21:01:ae:36:a3:ff:19:17:87:89:ca: aa:59:02:8d:02:63:e3:de:8d:54:dd:14:6c:78:d5:43:91:90: 42:d5:8d:9e:d0:66:7b:e2:65:2d:42:dd:46:a7:62:7f:46:74: 1e:fa:8a:d8:79:e5:3d:57:59:18:58:40:34:2a:e8:38:ac:03: 18:5f:e3:b4:47:57:c5:39:25:c2:d5:2b:6b:81:11:02:37:d1: 5c:7e:ba:a6:57:e6:75:8d:fe:1e:cf:30:6f:4d:8a:73:f1:96: dd:1e:38:da:f9:49:66:de:9c:e1:ea:a5:86:07:75:d6:bd:be: 34:e5:7e:60:c2:7b:c4:90:21:11:f8:f4:19:c1:ae:ad:05:12: 21:1e:65:17:88:b6:5a:65:cc:83:fe:78:3a:13:f6:82:5c:c7: 1b:f6:0d:cf:da:27:8d:fe:ae:4c:28:f6:6a:a1:a0:63:d8:43: 24:0b:8b:81:50:5c:12:26:52:a1:41:e5:2d:c1:04:88:52:a5: a4:c5:ed:08:04:0f:a3:2d:f5:0a:b1:23:81:d1:71:50:ee:b4: b8:08:9e:44:5c:2f:48:90:07:7b:70:d4:df:f3:91:81:d0:82: a5:5e:18:2b:6d:b9:6e:46:15:9d:47:cb:7b:02:34:b9:9f:85: 45:26:15:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVdIfHkdpcig8RBvsf6xgRJEym+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNjA0MTYxODA2MDFaFw0yNjA0MjAwMzAzMDFaMDMxMTAvBgNV BAMTKEE5N0M5MDcyMzlCNkMxQTg2REE4ODE1NTBCMEZFQTJENDEzNkExQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbMNMaBU7zThwukLZmmhBT5Lc2 7KYKdl8bGrcItJuTUsho+EtqoWa0QsqXPjsDOp8vVQCQrtGZ6cofOjScXHnQjQ/8 QcEu/vlgyT+IWmMEnIWCSQqYYUGgLQxXlx1MgAY6mpm4iGAR874r0JxnfiHYyEt6 xBzQhhKJJKDNJtWDbfe2lKUklOS3cH79U+/fGEuWAyoSblMWAHnDVgGdNfK/YsvS 4qyoHlHbANG0q0m2/D6b9SC6Ccu3GKqONeJXR1k7dK6JQKWzaG6BuXDDChRAWtNp lKJ01g4ZoYhisBXDymDrZMp4a7xVK0vvbQlk/SFGj/HYIaitKcLWWs5j2mK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqXyQcjm2wahtqIFVCw/qLUE2oaUwHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9Sid2m/58hAa42o/8ZF4eJyqpZAo0CY+Pe jVTdFGx41UORkELVjZ7QZnviZS1C3UanYn9GdB76ith55T1XWRhYQDQq6DisAxhf 47RHV8U5JcLVK2uBEQI30Vx+uqZX5nWN/h7PMG9NinPxlt0eONr5SWbenOHqpYYH dda9vjTlfmDCe8SQIRH49BnBrq0FEiEeZReItlplzIP+eDoT9oJcxxv2Dc/aJ43+ rkwo9mqhoGPYQyQLi4FQXBImUqFB5S3BBIhSpaTF7QgED6Mt9QqxI4HRcVDutLgI nkRcL0iQB3tw1N/zkYHQgqVeGCttuW5GFZ1Hy3sCNLmfhUUmFbE= -----END CERTIFICATE-----Generated at Fri Apr 17 18:44:28 2026 by rpki-client