$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: XKsbfVtB7tjYJjI4Bx1bNnP9kP90y7UzvTU4HK/5abo= Subject key identifier: A9:69:BA:AE:A3:9E:2C:B2:F1:17:D5:31:9C:FA:BE:66:55:2A:03:D6 Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 4F3D052AB89CC7A6D2099379BE0CCA08671DE9E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 0213 Signing time: Mon 02 Mar 2026 15:21:00 +0000 Manifest this update: Mon 02 Mar 2026 15:16:00 +0000 Manifest next update: Fri 06 Mar 2026 00:09:00 +0000 Files and hashes: 1: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 2: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 9H3El07W5poKziXy5nJS/+wd9IjLStSX7hOc3PPnjBQ=) 3: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 4: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: vxMPTESIzZEY7G3+9W6n+soUJ5to979lR7MTr9paLOY=) 5: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: ciQ2gosoLIbUCmoUO9ieeCAgYQfSeGEOveAkWqx7gAg=) 6: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3d:05:2a:b8:9c:c7:a6:d2:09:93:79:be:0c:ca:08:67:1d:e9:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Mar 2 15:16:00 2026 GMT Not After : Mar 6 00:09:00 2026 GMT Subject: CN=A969BAAEA39E2CB2F117D5319CFABE66552A03D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:60:cd:e1:02:2b:49:01:86:e2:ea:0a:6d:1a: 67:af:c4:20:55:34:61:06:14:d4:7c:ed:9b:0b:da: 34:21:2a:fb:f9:c6:96:b3:c7:94:5c:a3:6c:3a:a7: 20:3b:92:01:90:b5:16:b4:c1:e2:fb:28:15:8a:79: bd:c0:61:9a:ac:84:b3:9c:54:a2:01:57:6c:f3:9f: 00:6b:50:fe:93:f0:00:d6:c6:8a:fe:d2:79:51:41: 4a:5a:01:f7:fa:d1:d6:6c:76:db:3b:de:36:f8:42: ca:55:1b:0a:02:13:90:c1:ab:39:03:38:89:6c:9d: 35:d3:eb:5f:3e:e8:d7:cd:c3:6d:85:b3:d3:05:93: c1:3f:ea:33:09:09:3d:af:b6:62:f8:4a:5f:b1:34: a6:d0:cf:2f:d7:47:2e:df:69:11:01:dc:6e:a2:71: a7:11:ad:6f:ff:a4:60:a8:b2:e3:15:f4:b3:ea:f6: 12:6a:08:8e:0a:6e:40:82:e8:8e:99:bd:67:38:7a: 45:42:22:4a:2d:79:3e:f3:22:da:ca:9f:ae:97:61: 6d:65:f6:ae:2d:91:7f:fc:21:a3:36:9b:c3:bf:87: 1d:cd:f7:25:ee:d5:2e:a9:4c:2a:40:86:36:66:a6: 22:30:15:5b:a4:bd:36:60:4c:ca:2d:66:63:8a:b9: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:69:BA:AE:A3:9E:2C:B2:F1:17:D5:31:9C:FA:BE:66:55:2A:03:D6 X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:25:fa:3f:31:9d:a2:20:4d:82:2a:1f:38:99:30:15:f2:f8: ac:52:22:e4:08:2a:13:98:1b:a3:a2:e3:01:5f:e1:61:ff:62: db:21:c7:df:5e:db:82:c8:ad:f3:48:dd:32:e6:1a:50:d2:95: 04:b2:13:4d:71:61:e7:99:80:74:49:fb:25:60:af:f0:1a:15: 4c:9b:00:54:58:22:7f:27:27:f3:59:b2:31:c5:34:2a:90:3c: ac:18:ac:ae:ee:49:3a:21:ee:d0:f1:27:38:85:3d:a5:f7:c1: f6:2f:ba:f5:7e:e0:5b:93:2e:f5:b3:1f:98:1b:4e:71:98:d5: 37:5a:2a:54:02:14:f8:e0:e2:e9:da:d9:58:d0:3d:d3:cd:51: 18:0f:9c:97:19:28:fd:98:40:e4:68:cc:60:f3:85:08:24:b9: 3e:19:8b:d3:49:98:27:ce:5a:bb:7e:c7:72:fc:e8:20:0a:b4: 62:b8:24:ba:71:c0:89:22:73:10:a2:e4:ef:7b:b4:0c:98:a9: 8b:9f:dd:6e:aa:7e:38:46:a4:e4:41:f6:fd:9c:2d:92:ed:dc: 8b:be:21:b2:1a:99:23:a2:f9:86:f9:80:f6:60:48:ed:d5:4b: 81:42:a7:e3:eb:d1:a0:28:45:ba:1a:a8:58:bc:a0:41:25:11: 87:1a:c6:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTz0FKricx6bSCZN5vgzKCGcd6eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNjAzMDIxNTE2MDBaFw0yNjAzMDYwMDA5MDBaMDMxMTAvBgNV BAMTKEE5NjlCQUFFQTM5RTJDQjJGMTE3RDUzMTlDRkFCRTY2NTUyQTAzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMYM3hAitJAYbi6gptGmevxCBV NGEGFNR87ZsL2jQhKvv5xpazx5Rco2w6pyA7kgGQtRa0weL7KBWKeb3AYZqshLOc VKIBV2zznwBrUP6T8ADWxor+0nlRQUpaAff60dZsdts73jb4QspVGwoCE5DBqzkD OIlsnTXT618+6NfNw22Fs9MFk8E/6jMJCT2vtmL4Sl+xNKbQzy/XRy7faREB3G6i cacRrW//pGCosuMV9LPq9hJqCI4KbkCC6I6ZvWc4ekVCIkoteT7zItrKn66XYW1l 9q4tkX/8IaM2m8O/hx3N9yXu1S6pTCpAhjZmpiIwFVukvTZgTMotZmOKuUKbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqWm6rqOeLLLxF9UxnPq+ZlUqA9YwHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkl+j8xnaIgTYIqHziZMBXy+KxSIuQIKhOY G6Oi4wFf4WH/Ytshx99e24LIrfNI3TLmGlDSlQSyE01xYeeZgHRJ+yVgr/AaFUyb AFRYIn8nJ/NZsjHFNCqQPKwYrK7uSToh7tDxJziFPaX3wfYvuvV+4FuTLvWzH5gb TnGY1TdaKlQCFPjg4una2VjQPdPNURgPnJcZKP2YQORozGDzhQgkuT4Zi9NJmCfO Wrt+x3L86CAKtGK4JLpxwIkicxCi5O97tAyYqYuf3W6qfjhGpORB9v2cLZLt3Iu+ IbIamSOi+Yb5gPZgSO3VS4FCp+Pr0aAoRboaqFi8oEElEYcaxuI= -----END CERTIFICATE-----Generated at Mon Mar 2 18:33:49 2026 by rpki-client