$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: +DFq6Nmye8x+ti4BvPPQw6+2W7AcdeB04J3Jmv6b/2w= Subject key identifier: 3D:B0:7E:C3:F7:5F:37:5F:BD:EE:45:BD:5A:EE:F4:81:E4:D3:37:DC Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 55D7977884F7CFE453C52E31C561BF0ACC7ED73A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 02CD Signing time: Sat 19 Jul 2025 00:30:00 +0000 Manifest this update: Sat 19 Jul 2025 00:25:00 +0000 Manifest next update: Tue 22 Jul 2025 07:19:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: K6Q5pekUVV8JPEWs+ZLZK+PTLdUxtwsFQk3K8PXET3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 07:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d7:97:78:84:f7:cf:e4:53:c5:2e:31:c5:61:bf:0a:cc:7e:d7:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: Jul 19 00:25:00 2025 GMT Not After : Jul 22 07:19:00 2025 GMT Subject: CN=3DB07EC3F75F375FBDEE45BD5AEEF481E4D337DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:30:33:ea:07:71:99:fd:e4:d9:df:3a:c6: d2:3e:80:1e:76:82:9f:ff:c6:32:87:5e:54:a3:45: b8:28:e7:0a:2f:df:7c:21:13:7a:d7:69:bb:a6:59: 00:f9:07:7a:3a:64:d8:b7:5e:87:6f:63:8f:0c:ed: 4e:78:cd:89:4f:5c:4d:0b:f3:e9:da:7a:cf:c6:e1: 07:e6:4b:1a:7e:c2:16:21:73:4e:1d:84:2d:12:11: 06:e8:62:15:82:16:0f:13:2a:b7:9e:d2:b8:b3:e9: ed:0e:c0:71:50:34:86:41:3b:f3:96:81:37:5c:92: 0f:af:76:ca:82:0c:cb:ba:70:56:33:07:64:b4:b7: 4d:49:b1:3c:00:76:b6:cc:70:4d:ce:c3:6d:51:f6: bc:83:2a:01:f1:1e:5d:63:e0:e5:40:4c:28:6b:5e: 30:41:6c:80:81:62:df:64:b7:c2:ac:88:cb:2f:5f: 04:64:4f:bb:d0:ca:05:c9:b6:14:c7:2b:70:02:03: cd:ab:95:8e:71:b8:f4:41:95:e9:1e:69:72:82:2c: 1e:dd:96:8c:53:dd:d1:35:7e:1a:6a:cf:bc:26:69: 1f:66:0d:e0:77:e2:94:7b:83:c6:61:de:e2:40:65: 98:9c:9d:7b:83:46:17:e9:43:c9:4f:80:1a:a0:f3: 32:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B0:7E:C3:F7:5F:37:5F:BD:EE:45:BD:5A:EE:F4:81:E4:D3:37:DC X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:82:8d:9c:63:48:0b:fd:3a:5e:49:72:31:4c:d2:11:43:1b: d2:c6:51:41:0a:1a:b3:62:c9:b0:1a:ba:c4:18:9f:09:e6:5e: 50:6e:20:ef:81:17:e1:be:29:2a:87:a6:9e:d1:b0:8d:42:47: f4:55:81:63:3b:2b:c7:4c:cb:63:17:37:a8:23:e7:57:c5:44: 36:77:1f:23:3b:25:90:e6:63:68:de:08:9d:7c:96:b0:1c:c2: 10:1e:a1:05:77:f9:12:9f:59:aa:a7:9e:68:ef:2d:dc:13:96: 94:f7:4e:a6:81:80:4f:1a:db:c8:55:2f:e3:01:24:7a:a3:fb: 57:5d:b8:d1:1e:44:93:78:7f:22:eb:37:f8:b9:a6:15:7c:13: 45:b8:d4:f8:b7:d3:e2:04:77:ea:2c:db:1e:5d:f9:07:85:8b: 83:17:df:cb:ea:50:ad:13:69:e2:64:0f:b1:4c:57:4e:11:45: d4:01:44:fc:fd:0c:25:76:c4:ea:3d:9e:21:7d:00:a8:0a:0f: 38:48:e4:40:4b:47:e9:e8:b3:43:b4:c5:c7:25:7b:5d:d6:4b: 04:42:62:23:78:d4:d1:35:b9:4b:a3:9a:73:89:40:35:2e:3c: 6c:1f:f9:f5:4b:41:e9:e8:b5:ad:0b:8d:ca:ac:3d:67:31:68: 67:6f:b0:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVdeXeIT3z+RTxS4xxWG/Csx+1zowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNTA3MTkwMDI1MDBaFw0yNTA3MjIwNzE5MDBaMDMxMTAvBgNV BAMTKDNEQjA3RUMzRjc1RjM3NUZCREVFNDVCRDVBRUVGNDgxRTREMzM3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EDAz6gdxmf3k2d86xtI+gB52 gp//xjKHXlSjRbgo5wov33whE3rXabumWQD5B3o6ZNi3XodvY48M7U54zYlPXE0L 8+naes/G4QfmSxp+whYhc04dhC0SEQboYhWCFg8TKree0riz6e0OwHFQNIZBO/OW gTdckg+vdsqCDMu6cFYzB2S0t01JsTwAdrbMcE3Ow21R9ryDKgHxHl1j4OVATChr XjBBbICBYt9kt8KsiMsvXwRkT7vQygXJthTHK3ACA82rlY5xuPRBlekeaXKCLB7d loxT3dE1fhpqz7wmaR9mDeB34pR7g8Zh3uJAZZicnXuDRhfpQ8lPgBqg8zLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPbB+w/dfN1+97kW9Wu70geTTN9wwHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+CjZxjSAv9Ol5JcjFM0hFDG9LGUUEKGrNi ybAausQYnwnmXlBuIO+BF+G+KSqHpp7RsI1CR/RVgWM7K8dMy2MXN6gj51fFRDZ3 HyM7JZDmY2jeCJ18lrAcwhAeoQV3+RKfWaqnnmjvLdwTlpT3TqaBgE8a28hVL+MB JHqj+1dduNEeRJN4fyLrN/i5phV8E0W41Pi30+IEd+os2x5d+QeFi4MX38vqUK0T aeJkD7FMV04RRdQBRPz9DCV2xOo9niF9AKgKDzhI5EBLR+nos0O0xccle13WSwRC YiN41NE1uUujmnOJQDUuPGwf+fVLQenota0LjcqsPWcxaGdvsLc= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:08 2025 by rpki-client