$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: smqV5yuWO6puECecSa/nFBCw4YjH3fPepAPKJPzOxmo= Subject key identifier: FE:72:FB:89:3C:E0:60:74:E8:F8:FF:2E:E9:F5:6E:0D:17:AB:93:7B Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 183F2493C1C197AB3F00E5787FF153D310F76F3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 01B4 Signing time: Wed 06 Aug 2025 10:50:53 +0000 Manifest this update: Wed 06 Aug 2025 10:45:53 +0000 Manifest next update: Sat 09 Aug 2025 21:51:53 +0000 Files and hashes: 1: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: acV9j3XIcn+bea9k3sYuulK5VVRC16qFjnWStKLLjhQ=) 2: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 3: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: Dv4rpEzKpK+upYCp3gcQNaPeJGkBO+///f1BSCh2MAc=) 4: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 5: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: uUdG4SGiybweBVH5rVedbcrvTamlpHOnLNXLU4+Tbhc=) 6: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: WU4OS1OV+8iN1dmvrErpUWqbsC92MVIT7keo4SWEOZs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3f:24:93:c1:c1:97:ab:3f:00:e5:78:7f:f1:53:d3:10:f7:6f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Aug 6 10:45:53 2025 GMT Not After : Aug 9 21:51:53 2025 GMT Subject: CN=FE72FB893CE06074E8F8FF2EE9F56E0D17AB937B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:04:3a:cb:2b:af:a1:f7:87:85:73:44:1a: d7:47:df:2e:03:5c:7e:e5:69:4e:88:d5:6c:83:cc: 87:33:22:b5:80:24:15:8a:98:95:e3:5a:ca:db:89: de:da:ee:34:4b:49:5e:39:ce:44:5c:e3:50:30:8c: 05:28:7a:77:4f:63:e1:be:57:53:48:98:af:e5:96: 3c:73:7d:cc:b6:fe:e4:64:c5:bb:7b:75:b3:79:49: 30:56:f1:79:d5:90:b8:ed:17:6d:87:e4:5d:73:85: 44:e0:5b:b3:c8:24:fc:14:99:91:29:0c:e8:36:29: b2:fb:29:7c:98:02:63:f3:ce:36:e8:c3:a1:de:c8: a0:5e:90:4c:1f:32:66:63:32:36:19:7e:3c:a5:48: ee:84:60:6b:78:4e:78:98:5c:e8:5b:de:18:b2:ea: 13:f6:49:bb:c3:d4:64:0f:a4:87:b7:03:0f:74:81: 3a:86:40:74:50:94:d4:ea:d6:53:d2:fa:49:a0:d9: 85:0d:2d:b8:8e:a1:89:e0:b3:e7:1e:e3:2b:b8:70: 9c:dd:e7:24:eb:69:4d:ab:b5:ed:1f:69:eb:ca:ae: 32:53:aa:30:20:50:1d:0f:dc:ea:f7:c6:4c:c7:17: a6:1a:e9:3a:db:d1:89:38:57:67:71:48:8a:c8:36: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:72:FB:89:3C:E0:60:74:E8:F8:FF:2E:E9:F5:6E:0D:17:AB:93:7B X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ec:57:3d:04:70:33:97:a6:50:74:dd:d9:4c:9f:9a:f9:56: af:fc:38:b3:37:a5:03:8a:b4:2d:77:5a:f1:f9:dd:ec:d0:3f: 46:d6:98:c9:95:0e:0d:96:75:34:47:fb:7f:d1:68:e5:ec:f2: 15:5e:24:1c:f1:09:12:12:d2:23:75:27:71:2b:38:4a:9b:7a: e0:1a:9a:14:2c:fd:87:0b:4a:6e:b5:6e:b0:79:ea:06:c1:dd: 4d:a8:17:f2:47:e0:56:67:40:8b:33:72:19:e9:fe:b1:42:a1: 11:d2:6e:b4:05:4b:32:24:ae:9c:88:c9:ae:58:79:13:87:0e: 0e:0a:ec:e3:15:8f:b2:89:ad:98:c9:7e:30:0b:57:31:19:70: 2f:00:86:fc:06:74:8f:5c:4d:73:e3:9b:bb:88:76:06:07:c2: 3f:94:cf:87:38:f9:47:05:e5:0f:07:5d:d6:dd:94:2a:c7:bf: 5d:01:17:44:e3:b6:ac:b7:f9:74:60:a2:f1:93:63:41:b2:f2: 1f:08:55:2b:b9:bc:f0:c2:07:76:d1:77:90:17:ff:cc:ad:ab: 3e:2a:8c:3c:11:01:1f:4e:56:d8:1b:3a:a0:b9:a3:81:04:d3: 3b:91:77:38:87:b7:aa:28:17:47:9f:43:00:07:a7:2d:95:69: ee:76:6e:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGD8kk8HBl6s/AOV4f/FT0xD3bz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTA4MDYxMDQ1NTNaFw0yNTA4MDkyMTUxNTNaMDMxMTAvBgNV BAMTKEZFNzJGQjg5M0NFMDYwNzRFOEY4RkYyRUU5RjU2RTBEMTdBQjkzN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yQQ6yyuvofeHhXNEGtdH3y4D XH7laU6I1WyDzIczIrWAJBWKmJXjWsrbid7a7jRLSV45zkRc41AwjAUoendPY+G+ V1NImK/lljxzfcy2/uRkxbt7dbN5STBW8XnVkLjtF22H5F1zhUTgW7PIJPwUmZEp DOg2KbL7KXyYAmPzzjbow6HeyKBekEwfMmZjMjYZfjylSO6EYGt4TniYXOhb3hiy 6hP2SbvD1GQPpIe3Aw90gTqGQHRQlNTq1lPS+kmg2YUNLbiOoYngs+ce4yu4cJzd 5yTraU2rte0faevKrjJTqjAgUB0P3Or3xkzHF6Ya6Trb0Yk4V2dxSIrINjWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/nL7iTzgYHTo+P8u6fVuDRerk3swHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/sVz0EcDOXplB03dlMn5r5Vq/8OLM3pQOK tC13WvH53ezQP0bWmMmVDg2WdTRH+3/RaOXs8hVeJBzxCRIS0iN1J3ErOEqbeuAa mhQs/YcLSm61brB56gbB3U2oF/JH4FZnQIszchnp/rFCoRHSbrQFSzIkrpyIya5Y eROHDg4K7OMVj7KJrZjJfjALVzEZcC8AhvwGdI9cTXPjm7uIdgYHwj+Uz4c4+UcF 5Q8HXdbdlCrHv10BF0Tjtqy3+XRgovGTY0Gy8h8IVSu5vPDCB3bRd5AX/8ytqz4q jDwRAR9OVtgbOqC5o4EE0zuRdziHt6ooF0efQwAHpy2Vae52bto= -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:44 2025 by rpki-client