$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: DzVa24QRROJN0bMbuvAxPCqLrKVB07zD+r6szlS1LPQ= Subject key identifier: FA:86:84:86:34:3D:01:41:13:8E:94:C4:B7:87:39:C5:79:ED:C7:3E Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 08FD33F0D47D8D6D4D742024D11866A3B2C3AE91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 0223 Signing time: Fri 08 Aug 2025 10:21:44 +0000 Manifest this update: Fri 08 Aug 2025 10:16:44 +0000 Manifest next update: Mon 11 Aug 2025 14:41:44 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: zjUVb8cF3L0nGwjRCmf6XcNgsXVjU3AJSV9Ps7FST/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fd:33:f0:d4:7d:8d:6d:4d:74:20:24:d1:18:66:a3:b2:c3:ae:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Aug 8 10:16:44 2025 GMT Not After : Aug 11 14:41:44 2025 GMT Subject: CN=FA868486343D0141138E94C4B78739C579EDC73E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c6:86:10:60:d3:70:66:8d:bf:54:84:9e:5c: 97:24:67:4a:fd:10:bc:09:46:b1:9c:11:67:6b:b0: 8a:56:1c:47:09:21:1b:de:7e:62:1c:7b:cb:bf:60: 43:38:f6:14:1a:f2:b8:72:f0:28:33:a0:be:e0:ff: 58:a7:93:5a:54:93:bf:1c:d3:5b:28:29:13:ea:99: c2:c3:1c:0f:b4:8e:c9:1f:be:97:d6:44:3c:74:7c: 8f:d8:f0:8f:31:2e:a6:88:91:dc:61:b0:5d:a4:57: 2b:ff:84:85:07:6b:5c:27:14:89:89:42:60:7c:3f: 3b:5a:a8:f3:75:8b:8d:a9:15:e1:7a:76:19:1d:5b: 79:ae:81:d8:98:f0:cd:f5:af:f3:a3:89:86:0a:71: 28:c0:0a:e2:88:99:dc:a5:be:ba:b6:0b:1a:fa:29: 2a:e0:4a:d4:53:ed:17:47:0d:6e:e7:eb:f4:22:d8: 90:81:2d:af:42:89:33:57:6d:68:c2:09:7d:60:1e: c1:b1:07:14:cd:64:40:e5:73:bd:b0:f9:a0:a9:90: f1:b4:75:ef:5a:b6:d4:63:e0:b4:e7:6c:60:da:7a: ee:e1:9a:f0:45:43:02:b5:9f:ed:97:05:ce:59:62: f9:20:69:54:1a:9f:70:48:dd:12:3f:a1:87:9a:e5: f4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:86:84:86:34:3D:01:41:13:8E:94:C4:B7:87:39:C5:79:ED:C7:3E X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9e:37:6d:d7:ef:d0:a0:77:52:bf:e2:ef:02:cb:0c:07:11: 62:41:82:46:89:fd:71:86:32:67:b3:b7:47:47:b6:6e:d7:fa: 21:de:45:43:89:64:57:64:a9:c0:ba:0a:5e:75:fc:b0:15:b4: 51:15:30:25:e6:fc:ef:18:4b:3d:2a:b1:d0:75:b2:c1:bd:f2: 6c:82:ca:24:a7:bc:81:49:48:d3:27:bb:c1:26:97:c4:d4:bb: e8:0e:14:79:5b:da:ac:30:e5:f2:52:87:28:6d:85:10:15:b0: ba:32:33:a3:fa:d8:ea:10:eb:60:4b:7d:3c:d0:13:fa:2c:5f: 27:cf:82:b8:37:b4:82:8a:c6:82:d0:bd:ac:77:05:2f:e8:88: 9d:43:5c:c7:8b:16:b4:13:c1:ef:75:7c:80:fa:8d:55:93:ba: 40:b5:4d:5e:55:eb:ab:89:a4:a0:12:4b:e1:53:22:4c:82:fe: 72:0d:2a:be:20:65:1a:b9:d5:1c:d9:d4:5f:56:e0:98:55:35: 0f:26:24:a2:38:95:70:9d:b9:77:f7:23:8e:c6:d1:b3:a5:26: 7f:b2:0c:b9:ad:5c:9f:45:4c:f2:05:b8:43:a5:fb:5d:7e:eb: 28:14:f7:90:a2:70:98:3f:de:fc:95:ca:c5:f6:9a:c7:97:69: 3f:aa:98:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCP0z8NR9jW1NdCAk0Rhmo7LDrpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNTA4MDgxMDE2NDRaFw0yNTA4MTExNDQxNDRaMDMxMTAvBgNV BAMTKEZBODY4NDg2MzQzRDAxNDExMzhFOTRDNEI3ODczOUM1NzlFREM3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpxoYQYNNwZo2/VISeXJckZ0r9 ELwJRrGcEWdrsIpWHEcJIRvefmIce8u/YEM49hQa8rhy8CgzoL7g/1ink1pUk78c 01soKRPqmcLDHA+0jskfvpfWRDx0fI/Y8I8xLqaIkdxhsF2kVyv/hIUHa1wnFImJ QmB8PztaqPN1i42pFeF6dhkdW3mugdiY8M31r/OjiYYKcSjACuKImdylvrq2Cxr6 KSrgStRT7RdHDW7n6/Qi2JCBLa9CiTNXbWjCCX1gHsGxBxTNZEDlc72w+aCpkPG0 de9attRj4LTnbGDaeu7hmvBFQwK1n+2XBc5ZYvkgaVQan3BI3RI/oYea5fT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+oaEhjQ9AUETjpTEt4c5xXntxz4wHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOeN23X79Cgd1K/4u8CywwHEWJBgkaJ/XGG Mmezt0dHtm7X+iHeRUOJZFdkqcC6Cl51/LAVtFEVMCXm/O8YSz0qsdB1ssG98myC yiSnvIFJSNMnu8Eml8TUu+gOFHlb2qww5fJShyhthRAVsLoyM6P62OoQ62BLfTzQ E/osXyfPgrg3tIKKxoLQvax3BS/oiJ1DXMeLFrQTwe91fID6jVWTukC1TV5V66uJ pKASS+FTIkyC/nINKr4gZRq51RzZ1F9W4JhVNQ8mJKI4lXCduXf3I47G0bOlJn+y DLmtXJ9FTPIFuEOl+11+6ygU95CicJg/3vyVysX2mseXaT+qmNY= -----END CERTIFICATE-----Generated at Sun Aug 10 05:34:18 2025 by rpki-client