$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: 7puKqw8eyvTKhsd5bRdvnO/Sczkfkj750wc6jr4pM88= Subject key identifier: EC:8E:49:0C:63:2B:50:DE:DC:78:5A:2D:D2:25:B5:E0:34:BF:6E:D6 Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 5B192905493D06A61C27F049EAF9B8CFA389A00E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 022F Signing time: Thu 04 Sep 2025 06:51:43 +0000 Manifest this update: Thu 04 Sep 2025 06:46:43 +0000 Manifest next update: Sun 07 Sep 2025 16:02:43 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: OpsHLQplDrJoGFZYEHJmrpIAo3QEJptmXpNABU+joeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 16:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:19:29:05:49:3d:06:a6:1c:27:f0:49:ea:f9:b8:cf:a3:89:a0:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Sep 4 06:46:43 2025 GMT Not After : Sep 7 16:02:43 2025 GMT Subject: CN=EC8E490C632B50DEDC785A2DD225B5E034BF6ED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:bd:a3:91:b0:1c:68:56:71:c5:56:3b:8a: b0:e1:9d:d7:cf:7f:ec:06:a5:17:31:35:2a:8d:3e: cd:88:ac:91:1a:b1:5d:e7:71:54:03:7d:08:62:c7: ae:eb:3b:03:a3:e5:d9:f1:f8:1b:c3:5d:f8:36:32: ca:76:45:25:d3:92:15:8c:dc:b2:89:82:f4:12:0d: 2d:e4:88:33:75:9a:b7:ee:c1:33:9c:01:81:56:99: 59:fd:89:4f:bf:b9:0f:8a:c4:70:d1:45:39:fe:1b: f9:f7:9f:65:38:96:4e:ca:ea:d1:49:13:3d:d2:f0: 9a:1b:ed:f5:d4:03:ab:39:ad:c3:97:13:f4:85:c0: bf:35:35:16:d6:05:74:c7:d2:69:53:1e:45:ba:e6: 26:0a:61:2a:dd:0e:f3:05:2d:75:78:b7:91:7f:54: 25:9b:af:09:c0:a3:ee:b4:c8:12:da:88:bb:18:34: 13:49:68:cd:0e:e1:84:92:db:31:5c:88:e3:54:82: e9:3a:1c:f3:80:ce:31:5d:18:94:c7:e8:04:3f:24: c8:2b:fb:85:c2:e9:54:d0:58:cd:d1:d5:bc:ef:69: c8:d4:67:27:f8:bb:19:73:6e:e6:ad:66:7f:97:0e: e4:a3:6c:e5:e5:8b:d2:f2:3d:e0:c7:28:15:66:9d: 0d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8E:49:0C:63:2B:50:DE:DC:78:5A:2D:D2:25:B5:E0:34:BF:6E:D6 X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fc:e0:80:91:cf:bf:fa:87:8d:c5:f6:fc:e1:12:42:a4:24: 17:1c:33:2e:4b:bf:4e:67:b3:b6:06:57:62:7f:09:43:8e:f5: 54:c5:ab:1b:1b:f0:bf:ea:2f:e8:f6:a0:28:7d:20:96:01:10: e7:00:c8:f0:30:0e:64:97:b7:df:e2:a5:59:c7:f6:23:88:6f: b9:59:e5:c7:04:a2:68:fa:30:5e:f6:17:24:72:5e:1c:6d:fc: d1:61:69:7a:fa:72:cd:51:49:fb:88:a6:d9:52:72:1f:47:67: c3:ed:33:ae:68:2e:3d:66:27:c5:f1:f7:cc:0e:1c:98:2d:26: 50:27:64:12:4e:8c:6d:1c:91:49:7a:b5:9d:cc:95:0e:d8:29: 26:0d:0c:e2:d2:cf:70:45:b2:52:6d:0b:2d:66:16:69:cc:8b: db:6b:57:c0:55:a0:ae:eb:b1:62:8f:12:f9:1d:19:15:73:ee: af:70:14:80:db:44:5d:e9:52:bd:83:fc:01:e1:1d:ac:89:34: f2:0f:f9:54:43:1c:87:f5:c4:3e:be:d0:0b:51:e6:9e:e8:d9: 72:00:0e:6d:ec:6f:de:29:5e:10:ea:e5:25:c4:fe:58:9a:8c: c6:50:66:49:af:63:60:33:15:0b:5c:a0:23:4f:1f:d4:58:bd: 6e:4b:23:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxkpBUk9BqYcJ/BJ6vm4z6OJoA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNTA5MDQwNjQ2NDNaFw0yNTA5MDcxNjAyNDNaMDMxMTAvBgNV BAMTKEVDOEU0OTBDNjMyQjUwREVEQzc4NUEyREQyMjVCNUUwMzRCRjZFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV5r2jkbAcaFZxxVY7irDhndfP f+wGpRcxNSqNPs2IrJEasV3ncVQDfQhix67rOwOj5dnx+BvDXfg2Msp2RSXTkhWM 3LKJgvQSDS3kiDN1mrfuwTOcAYFWmVn9iU+/uQ+KxHDRRTn+G/n3n2U4lk7K6tFJ Ez3S8Job7fXUA6s5rcOXE/SFwL81NRbWBXTH0mlTHkW65iYKYSrdDvMFLXV4t5F/ VCWbrwnAo+60yBLaiLsYNBNJaM0O4YSS2zFciONUguk6HPOAzjFdGJTH6AQ/JMgr +4XC6VTQWM3R1bzvacjUZyf4uxlzbuatZn+XDuSjbOXli9LyPeDHKBVmnQ0LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7I5JDGMrUN7ceFot0iW14DS/btYwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADz84ICRz7/6h43F9vzhEkKkJBccMy5Lv05n s7YGV2J/CUOO9VTFqxsb8L/qL+j2oCh9IJYBEOcAyPAwDmSXt9/ipVnH9iOIb7lZ 5ccEomj6MF72FyRyXhxt/NFhaXr6cs1RSfuIptlSch9HZ8PtM65oLj1mJ8Xx98wO HJgtJlAnZBJOjG0ckUl6tZ3MlQ7YKSYNDOLSz3BFslJtCy1mFmnMi9trV8BVoK7r sWKPEvkdGRVz7q9wFIDbRF3pUr2D/AHhHayJNPIP+VRDHIf1xD6+0AtR5p7o2XIA Dm3sb94pXhDq5SXE/liajMZQZkmvY2AzFQtcoCNPH9RYvW5LI4U= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:24 2025 by rpki-client