$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: Eb8tttTneuvTvidroFFwak2CIv3OO/NuEAcJYoONS+I= Subject key identifier: 30:DC:20:D0:9F:B5:12:A1:F3:4B:44:F5:B3:B7:71:66:A0:BC:8F:B8 Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 3C87768EA11037C4E33D39E99E4B9BE6A90BFEBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 024A Signing time: Tue 04 Nov 2025 11:01:44 +0000 Manifest this update: Tue 04 Nov 2025 10:56:44 +0000 Manifest next update: Fri 07 Nov 2025 11:47:44 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: 4lH8vT/r4U65lYmdSw9bPQUNyelqOx9oFdlg2P69+jc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:87:76:8e:a1:10:37:c4:e3:3d:39:e9:9e:4b:9b:e6:a9:0b:fe:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Nov 4 10:56:44 2025 GMT Not After : Nov 7 11:47:44 2025 GMT Subject: CN=30DC20D09FB512A1F34B44F5B3B77166A0BC8FB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2d:43:67:37:f1:e5:15:46:7a:4f:40:a2:95: 2e:00:54:71:be:60:17:11:b1:af:e5:e8:a7:7c:db: 9b:0f:a9:b3:20:ba:d2:79:a8:08:98:17:b7:07:a8: 12:38:49:8a:7b:ba:12:32:50:73:8f:bb:1d:1a:4e: 7f:e7:b2:e9:9d:70:31:72:7f:ac:46:8b:81:64:15: c3:eb:2d:d2:3d:a7:29:80:2a:79:7e:b0:99:8c:0a: 98:1d:dc:78:d1:ea:47:40:87:02:6c:ca:30:f5:a9: f5:63:5d:07:ac:73:c2:ee:22:ce:99:38:e5:88:81: df:a8:c1:d5:ba:2d:7f:52:b8:2c:3e:0d:34:13:7c: 8b:a6:05:a4:57:5f:be:a3:fa:bb:0e:fc:f2:66:2c: f2:bb:17:03:1b:c2:81:a7:02:18:42:0c:be:2b:8e: 7f:66:f3:04:c6:cf:7a:d7:3c:1a:1e:3a:b9:e2:04: 7b:ce:24:50:66:03:9b:2f:d7:8a:9a:75:a1:d0:49: cd:07:34:c2:42:82:00:10:15:6d:5f:f6:46:37:df: cd:31:24:79:3d:0c:16:d4:8c:4f:34:40:d8:53:8d: e7:e8:d8:a4:f3:21:35:ce:27:84:a8:95:3f:8b:77: b4:41:24:2e:88:dc:b9:8a:9b:94:e0:4d:dd:86:e4: 0e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DC:20:D0:9F:B5:12:A1:F3:4B:44:F5:B3:B7:71:66:A0:BC:8F:B8 X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:cf:ca:37:c4:ce:f4:e1:31:24:79:c5:7e:c3:43:2d:73:90: b9:77:0f:30:5e:2b:9b:45:ca:49:82:9f:f0:a4:1b:cb:29:b4: 2e:db:16:83:18:fc:dd:4c:63:ae:f0:5b:e9:b7:57:06:31:6a: 0e:27:91:16:df:79:6e:8b:a5:9f:50:d5:e9:89:c7:05:b4:7a: 40:f1:94:b3:dc:72:38:a7:9f:2d:1c:39:86:5b:0d:31:89:3a: 36:64:b4:10:2a:e4:3f:47:fd:d8:e8:98:8c:c1:33:33:d0:c3: b1:eb:b2:ff:58:60:9e:40:ea:4b:52:92:b9:28:c8:b7:7e:70: 75:b2:b2:23:56:67:42:0c:36:07:ba:e6:03:d4:36:d5:64:34: 5e:2b:97:af:db:b9:2c:7b:93:8f:64:76:cf:5c:e9:57:c3:4a: 2c:29:c4:e4:6c:60:c9:d3:b9:2a:87:d9:3d:16:6d:7a:13:fb: cb:e1:aa:8b:2b:d4:c2:9a:b3:46:62:36:e0:fe:5d:87:ab:e4: 0e:d9:1a:e6:5a:d2:22:f7:78:aa:02:c2:7f:42:c2:ec:87:ef: d1:13:d9:b0:98:3f:08:5a:46:2a:f6:2f:1f:ab:e2:c7:03:df: c4:fb:a8:47:e9:2c:97:1d:1a:25:2c:7a:32:68:9f:85:fa:2c: e3:d2:7d:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPId2jqEQN8TjPTnpnkub5qkL/rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNTExMDQxMDU2NDRaFw0yNTExMDcxMTQ3NDRaMDMxMTAvBgNV BAMTKDMwREMyMEQwOUZCNTEyQTFGMzRCNDRGNUIzQjc3MTY2QTBCQzhGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWLUNnN/HlFUZ6T0CilS4AVHG+ YBcRsa/l6Kd825sPqbMgutJ5qAiYF7cHqBI4SYp7uhIyUHOPux0aTn/nsumdcDFy f6xGi4FkFcPrLdI9pymAKnl+sJmMCpgd3HjR6kdAhwJsyjD1qfVjXQesc8LuIs6Z OOWIgd+owdW6LX9SuCw+DTQTfIumBaRXX76j+rsO/PJmLPK7FwMbwoGnAhhCDL4r jn9m8wTGz3rXPBoeOrniBHvOJFBmA5sv14qadaHQSc0HNMJCggAQFW1f9kY3380x JHk9DBbUjE80QNhTjefo2KTzITXOJ4SolT+Ld7RBJC6I3LmKm5TgTd2G5A4lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMNwg0J+1EqHzS0T1s7dxZqC8j7gwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzPyjfEzvThMSR5xX7DQy1zkLl3DzBeK5tF ykmCn/CkG8sptC7bFoMY/N1MY67wW+m3VwYxag4nkRbfeW6LpZ9Q1emJxwW0ekDx lLPccjinny0cOYZbDTGJOjZktBAq5D9H/djomIzBMzPQw7Hrsv9YYJ5A6ktSkrko yLd+cHWysiNWZ0IMNge65gPUNtVkNF4rl6/buSx7k49kds9c6VfDSiwpxORsYMnT uSqH2T0WbXoT+8vhqosr1MKas0ZiNuD+XYer5A7ZGuZa0iL3eKoCwn9CwuyH79ET 2bCYPwhaRir2Lx+r4scD38T7qEfpLJcdGiUsejJon4X6LOPSfZw= -----END CERTIFICATE-----Generated at Tue Nov 4 12:44:24 2025 by rpki-client