$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: ZK8KeBNTnRLgUrEgQCirOtFhHSrR+SJqnCZso20tcv8= Subject key identifier: 00:BE:CD:91:1A:C0:09:B1:A1:C0:77:C7:B3:AF:5D:BD:D8:04:AF:7C Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 0ADB11F39656D8E05209265CFCAE9E9E7760439E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 027E Signing time: Sun 01 Mar 2026 16:11:53 +0000 Manifest this update: Sun 01 Mar 2026 16:06:53 +0000 Manifest next update: Wed 04 Mar 2026 17:24:53 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: U1spI52JSLvv9taOv1YGTsnSjSPhf9ZS2eMGZMzrXCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:db:11:f3:96:56:d8:e0:52:09:26:5c:fc:ae:9e:9e:77:60:43:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Mar 1 16:06:53 2026 GMT Not After : Mar 4 17:24:53 2026 GMT Subject: CN=00BECD911AC009B1A1C077C7B3AF5DBDD804AF7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:8f:ad:c2:8c:65:9c:3a:97:20:47:20:5f: d3:dc:26:6a:a4:31:50:3f:3d:1e:bf:29:02:f6:74: 6c:22:7b:05:5e:87:9b:6d:4d:4f:3c:89:2b:63:7c: 7a:41:18:ea:e7:90:16:b0:98:e6:c8:3a:8e:38:de: 31:4a:aa:75:ff:3f:a8:dc:21:53:7b:2b:8e:b4:e3: 68:fc:73:0d:8b:32:48:a0:3f:b4:18:8d:eb:a3:cb: b8:9c:2a:0e:c3:e0:25:e7:88:e5:33:96:ed:28:91: c7:52:53:ed:c2:e5:32:b5:46:38:84:6a:e8:2f:32: f4:0c:80:4c:78:00:f6:27:1c:70:50:8e:f9:d6:d6: f4:f2:b5:62:bc:0a:46:4d:5a:dd:6a:7a:20:f0:af: 8b:b0:dc:e9:d9:9f:a2:d2:0e:d3:79:10:8d:72:c5: 41:21:f8:e5:89:ba:9d:c2:35:63:44:74:9c:7d:89: 14:96:66:88:c7:e9:12:b8:52:51:a2:d4:67:10:6d: 3d:49:5e:2b:6f:27:0f:64:ae:89:14:36:e2:9f:2f: 70:a6:af:83:a3:42:9a:ca:a3:30:60:70:9e:81:ed: ae:46:06:cc:ec:c7:03:20:81:d1:e8:b0:ba:90:c8: 3d:fd:13:6c:6f:c3:9e:75:d8:c9:fd:13:3a:11:79: f0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BE:CD:91:1A:C0:09:B1:A1:C0:77:C7:B3:AF:5D:BD:D8:04:AF:7C X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1c:e0:b0:f2:88:a0:bf:01:76:f5:a4:c4:75:46:e8:64:ba: 6e:c3:4f:1e:c5:b4:5c:e4:51:7e:c2:e1:ae:66:47:0d:31:24: 3a:20:6c:69:d1:d3:4f:cc:b0:e8:71:21:8c:0c:d7:3e:20:c7: 9a:d7:71:7e:f3:4c:c1:46:9d:4a:e2:b3:47:6a:ad:87:be:2e: 28:ac:6c:65:b8:6c:04:7f:4b:24:fc:d9:dc:c1:f1:a7:b9:31: 48:5a:7f:38:3e:53:40:d5:a0:f5:45:c1:ee:26:1d:32:69:bd: e1:c4:57:02:fc:de:31:ba:ac:88:44:52:c8:c4:65:4b:10:08: da:0a:c3:bf:95:7d:0a:0f:93:23:0f:04:92:41:54:d4:52:89: 6c:d7:88:8e:b5:9b:23:39:dd:99:a6:02:71:44:7e:e5:b2:4e: 1a:c3:27:9b:7d:f1:64:98:b8:fd:11:eb:8d:0a:15:2c:40:8b: bd:0f:aa:fa:16:8a:1c:03:96:95:2e:bb:96:be:d2:01:60:fc: 3d:c4:28:c8:ec:c4:fa:13:a6:5e:55:4b:82:e4:5e:f9:25:41: f2:d1:bd:51:62:f9:1f:ac:1d:7d:4b:27:81:27:6c:71:83:95: fb:55:58:f6:d2:44:60:3b:8e:8b:17:ee:45:2e:2a:8c:42:a0: c1:3f:5f:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtsR85ZW2OBSCSZc/K6enndgQ54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNjAzMDExNjA2NTNaFw0yNjAzMDQxNzI0NTNaMDMxMTAvBgNV BAMTKDAwQkVDRDkxMUFDMDA5QjFBMUMwNzdDN0IzQUY1REJERDgwNEFGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EY+twoxlnDqXIEcgX9PcJmqk MVA/PR6/KQL2dGwiewVeh5ttTU88iStjfHpBGOrnkBawmObIOo443jFKqnX/P6jc IVN7K46042j8cw2LMkigP7QYjeujy7icKg7D4CXniOUzlu0okcdSU+3C5TK1RjiE augvMvQMgEx4APYnHHBQjvnW1vTytWK8CkZNWt1qeiDwr4uw3OnZn6LSDtN5EI1y xUEh+OWJup3CNWNEdJx9iRSWZojH6RK4UlGi1GcQbT1JXitvJw9krokUNuKfL3Cm r4OjQprKozBgcJ6B7a5GBszsxwMggdHosLqQyD39E2xvw5512Mn9EzoRefBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAL7NkRrACbGhwHfHs69dvdgEr3wwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMc4LDyiKC/AXb1pMR1Ruhkum7DTx7FtFzk UX7C4a5mRw0xJDogbGnR00/MsOhxIYwM1z4gx5rXcX7zTMFGnUris0dqrYe+Liis bGW4bAR/SyT82dzB8ae5MUhafzg+U0DVoPVFwe4mHTJpveHEVwL83jG6rIhEUsjE ZUsQCNoKw7+VfQoPkyMPBJJBVNRSiWzXiI61myM53ZmmAnFEfuWyThrDJ5t98WSY uP0R640KFSxAi70PqvoWihwDlpUuu5a+0gFg/D3EKMjsxPoTpl5VS4LkXvklQfLR vVFi+R+sHX1LJ4EnbHGDlftVWPbSRGA7josX7kUuKoxCoME/XxQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:41:39 2026 by rpki-client