$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: woZq3IvhjnwKWBHJDXIZHiXOMEXtWM6JSzyYm8G1G78= Subject key identifier: 5E:26:D2:D1:B1:05:88:AF:8E:68:A1:1A:B0:98:7C:CE:5C:7D:C6:CF Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 552E141B8DF34A8FAA9F5DA25383B10F20960962 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 02E3 Signing time: Sun 07 Sep 2025 12:50:00 +0000 Manifest this update: Sun 07 Sep 2025 12:45:00 +0000 Manifest next update: Wed 10 Sep 2025 15:13:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: kWshg3Wrn/6JQxPv7zmCxru5i/vjlQwDhEWyVXo1SdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2e:14:1b:8d:f3:4a:8f:aa:9f:5d:a2:53:83:b1:0f:20:96:09:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: Sep 7 12:45:00 2025 GMT Not After : Sep 10 15:13:00 2025 GMT Subject: CN=5E26D2D1B10588AF8E68A11AB0987CCE5C7DC6CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1d:97:05:86:70:ae:8b:4c:24:72:a6:ff:8b: d8:3b:88:e9:d8:b2:d4:93:22:b2:2e:7f:50:79:2a: 33:7a:61:1c:c0:3a:15:3c:6b:a2:c8:02:f3:b1:98: 30:a1:f2:9b:c3:23:44:07:db:bf:4e:7f:2b:d3:bf: 20:0a:53:7b:03:56:b2:39:94:ea:98:7e:53:89:ec: 1a:f7:2b:6d:e2:b3:1b:67:5b:9a:53:c2:32:73:e8: 90:fb:84:cb:47:16:e8:9c:42:28:20:38:32:d2:f2: dc:99:f2:35:2a:ae:b7:b2:b2:df:f9:04:2e:b2:5d: 74:b7:d6:f6:eb:b4:77:d3:ea:97:55:41:e5:71:06: 95:ea:a1:b6:39:22:40:d8:2c:30:79:e4:e9:f7:a9: 55:8a:f2:d0:04:08:1c:06:4b:c0:9b:9b:18:b5:b6: da:1f:30:73:32:3f:1a:ad:19:24:31:fb:1e:22:02: 8a:6c:0d:a3:50:b0:e9:d1:7e:12:60:9f:18:c8:f6: 2d:54:2a:ea:ee:1c:7b:95:5b:33:eb:bb:9b:39:6c: 29:57:49:de:5f:fe:12:9a:d0:61:9e:08:98:91:f1: 90:cb:51:ec:99:6e:d7:20:c7:dd:2d:11:b5:c4:f7: d0:e1:bd:64:9d:f5:0f:a9:96:02:08:8f:03:6a:d5: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:26:D2:D1:B1:05:88:AF:8E:68:A1:1A:B0:98:7C:CE:5C:7D:C6:CF X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:3a:ff:6f:c6:4e:35:80:6c:5b:5f:25:9e:89:26:34:82:82: 34:fd:73:f6:73:a9:4d:73:e7:49:a7:0a:1a:ee:40:95:63:c5: 1d:9c:2f:9f:83:a9:4b:3f:d6:d6:65:8d:e9:d2:df:ad:f5:ee: 53:76:15:73:96:c0:8c:15:37:8f:df:5f:e4:05:b6:12:c5:f1: 82:2c:51:89:cc:7e:3e:92:70:83:f9:21:b0:87:4f:53:e2:56: cf:5e:49:7f:5b:c2:60:d1:e5:2d:99:54:f4:16:c0:8d:47:57: 05:19:43:d1:a5:73:15:5a:b2:86:11:f1:68:c5:24:f9:8c:aa: 4e:4c:2d:88:a2:78:10:97:5c:22:58:d0:a5:39:da:89:00:b8: 24:b7:76:fc:07:61:58:8a:3a:0f:b1:b8:54:5f:8c:e5:e1:8f: 81:17:9b:7c:49:5f:4f:7a:62:95:d9:fa:4d:51:89:7d:c2:dc: ee:3f:97:ed:54:4a:17:f5:f3:f4:c2:db:10:f0:0d:45:64:b6: 38:28:f4:3b:0e:9e:6d:36:68:fb:36:a7:5d:af:38:f2:e8:d9: f0:94:ac:0c:82:9c:00:2f:15:19:fd:b8:57:18:41:84:8d:f2: 40:81:84:74:5f:69:97:f2:d5:ee:38:0a:f9:9a:aa:d0:c5:ab: 71:a9:63:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVS4UG43zSo+qn12iU4OxDyCWCWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNTA5MDcxMjQ1MDBaFw0yNTA5MTAxNTEzMDBaMDMxMTAvBgNV BAMTKDVFMjZEMkQxQjEwNTg4QUY4RTY4QTExQUIwOTg3Q0NFNUM3REM2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2HZcFhnCui0wkcqb/i9g7iOnY stSTIrIuf1B5KjN6YRzAOhU8a6LIAvOxmDCh8pvDI0QH279OfyvTvyAKU3sDVrI5 lOqYflOJ7Br3K23isxtnW5pTwjJz6JD7hMtHFuicQiggODLS8tyZ8jUqrreyst/5 BC6yXXS31vbrtHfT6pdVQeVxBpXqobY5IkDYLDB55On3qVWK8tAECBwGS8Cbmxi1 ttofMHMyPxqtGSQx+x4iAopsDaNQsOnRfhJgnxjI9i1UKuruHHuVWzPru5s5bClX Sd5f/hKa0GGeCJiR8ZDLUeyZbtcgx90tEbXE99DhvWSd9Q+plgIIjwNq1djtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXibS0bEFiK+OaKEasJh8zlx9xs8wHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJc6/2/GTjWAbFtfJZ6JJjSCgjT9c/ZzqU1z 50mnChruQJVjxR2cL5+DqUs/1tZljenS36317lN2FXOWwIwVN4/fX+QFthLF8YIs UYnMfj6ScIP5IbCHT1PiVs9eSX9bwmDR5S2ZVPQWwI1HVwUZQ9GlcxVasoYR8WjF JPmMqk5MLYiieBCXXCJY0KU52okAuCS3dvwHYViKOg+xuFRfjOXhj4EXm3xJX096 YpXZ+k1RiX3C3O4/l+1UShf18/TC2xDwDUVktjgo9DsOnm02aPs2p12vOPLo2fCU rAyCnAAvFRn9uFcYQYSN8kCBhHRfaZfy1e44CvmaqtDFq3GpY6A= -----END CERTIFICATE-----Generated at Sun Sep 7 15:35:05 2025 by rpki-client