$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: jlkwfc3jblw3yyqI36snEMNC7cfGbC2HGwn9SvhOiN8= Subject key identifier: 75:D3:1A:A9:CA:4D:90:54:35:9A:D0:E4:05:56:85:01:07:29:FA:D1 Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 7A93FF36253A1382A43DB651857969FDAE1D06BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 01DE Signing time: Mon 03 Nov 2025 09:30:52 +0000 Manifest this update: Mon 03 Nov 2025 09:25:52 +0000 Manifest next update: Thu 06 Nov 2025 10:03:52 +0000 Files and hashes: 1: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: 5QPn3HjIF5zGhn9G5NpVrRyVrmwxdjX2wwr7HRlXFGE=) 2: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8=) 3: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 4: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 5: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: vxMPTESIzZEY7G3+9W6n+soUJ5to979lR7MTr9paLOY=) 6: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 9H3El07W5poKziXy5nJS/+wd9IjLStSX7hOc3PPnjBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:ff:36:25:3a:13:82:a4:3d:b6:51:85:79:69:fd:ae:1d:06:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Nov 3 09:25:52 2025 GMT Not After : Nov 6 10:03:52 2025 GMT Subject: CN=75D31AA9CA4D9054359AD0E4055685010729FAD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:c4:8a:02:26:74:42:fe:d8:58:78:78:df: 7f:48:a3:20:4d:fe:57:44:4d:79:9a:61:f7:3d:9f: b3:76:a3:9a:ef:3b:38:49:be:d1:75:0c:a7:a6:c8: d7:5f:dc:da:9e:92:b1:85:c2:8a:f2:ac:85:91:9d: a6:7e:66:ed:d4:37:ee:c5:7d:7f:57:37:38:2f:ed: dd:a3:0d:6c:07:03:1f:8c:37:19:07:75:3d:1a:95: 1e:a0:81:1f:e8:f3:a3:83:9b:97:f5:ec:04:87:38: 97:21:5a:64:84:f6:ed:de:c3:00:dd:37:18:2a:f8: 3c:27:61:4f:17:63:4c:14:4b:0b:78:d8:25:d2:ef: 1c:1e:a0:a0:08:f1:6f:b5:82:0c:58:ca:e7:fe:32: 8d:9f:59:10:05:ae:f0:dd:21:1b:cf:ff:8a:8e:33: aa:83:01:38:d4:d1:88:ed:d6:54:81:98:e3:10:aa: 1c:e2:59:ce:fc:25:48:42:5d:6f:ea:bf:ee:c8:83: 84:f4:03:b7:d8:34:0f:5d:1d:43:5e:89:e8:bb:df: f2:a4:83:42:07:38:f7:87:28:85:ee:eb:32:34:8b: 5c:c8:f2:bb:90:59:d9:46:99:84:ae:87:ba:26:15: 99:b7:b1:ef:81:03:b7:fa:39:06:ec:ba:9c:f4:87: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D3:1A:A9:CA:4D:90:54:35:9A:D0:E4:05:56:85:01:07:29:FA:D1 X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:15:8e:8e:e7:c0:85:4a:bb:12:90:0a:6a:e0:ab:70:e0:96: f1:43:e9:86:b2:bd:cb:c9:bc:19:25:ce:74:6f:ee:3e:57:fa: 45:c4:a5:91:2e:62:8c:f6:f1:77:76:01:69:0e:fe:84:57:6e: c6:65:35:5a:d4:34:14:af:62:80:63:4c:27:6b:46:05:ee:8d: 5b:f8:26:d7:6d:7c:ab:4a:a5:46:d4:6f:3c:e3:8a:47:e7:00: 72:da:05:97:f1:11:af:87:a4:74:2d:40:b3:36:a4:52:d5:c5: 43:bb:57:eb:c8:fb:bd:d1:ec:97:41:6f:7b:a8:cf:0f:86:86: 17:a3:0b:c7:b0:98:44:5d:87:9a:87:df:b1:69:28:f9:bc:35: db:3b:ba:b9:c6:6f:a9:30:c5:0c:69:1d:7a:95:58:81:7a:6f: 17:94:24:39:77:76:13:31:e3:5d:d1:55:6b:25:4a:f6:2a:32: ef:39:52:f3:af:6e:03:cf:11:36:6d:a7:de:26:39:fb:9b:32: 1f:c3:75:b5:b9:69:98:ce:06:6a:17:a1:95:ab:78:66:89:fe: 55:d5:1a:5a:a6:3f:10:04:0e:5e:9b:83:4a:6b:9c:6d:a8:60: 75:fd:eb:f2:3a:8c:0c:34:bb:1c:39:80:5f:2f:64:19:70:a3: 2c:8c:75:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUepP/NiU6E4KkPbZRhXlp/a4dBr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTExMDMwOTI1NTJaFw0yNTExMDYxMDAzNTJaMDMxMTAvBgNV BAMTKDc1RDMxQUE5Q0E0RDkwNTQzNTlBRDBFNDA1NTY4NTAxMDcyOUZBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADcSKAiZ0Qv7YWHh4339IoyBN /ldETXmaYfc9n7N2o5rvOzhJvtF1DKemyNdf3NqekrGFworyrIWRnaZ+Zu3UN+7F fX9XNzgv7d2jDWwHAx+MNxkHdT0alR6ggR/o86ODm5f17ASHOJchWmSE9u3ewwDd Nxgq+DwnYU8XY0wUSwt42CXS7xweoKAI8W+1ggxYyuf+Mo2fWRAFrvDdIRvP/4qO M6qDATjU0Yjt1lSBmOMQqhziWc78JUhCXW/qv+7Ig4T0A7fYNA9dHUNeiei73/Kk g0IHOPeHKIXu6zI0i1zI8ruQWdlGmYSuh7omFZm3se+BA7f6OQbsupz0h+BLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUddMaqcpNkFQ1mtDkBVaFAQcp+tEwHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcVjo7nwIVKuxKQCmrgq3DglvFD6YayvcvJ vBklznRv7j5X+kXEpZEuYoz28Xd2AWkO/oRXbsZlNVrUNBSvYoBjTCdrRgXujVv4 JtdtfKtKpUbUbzzjikfnAHLaBZfxEa+HpHQtQLM2pFLVxUO7V+vI+73R7JdBb3uo zw+GhhejC8ewmERdh5qH37FpKPm8Nds7urnGb6kwxQxpHXqVWIF6bxeUJDl3dhMx 413RVWslSvYqMu85UvOvbgPPETZtp94mOfubMh/DdbW5aZjOBmoXoZWreGaJ/lXV GlqmPxAEDl6bg0prnG2oYHX96/I6jAw0uxw5gF8vZBlwoyyMdSk= -----END CERTIFICATE-----Generated at Tue Nov 4 19:54:52 2025 by rpki-client