$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: 61tKY8qaL3Vfz1AjvqTSIOnh06T/rc33pvaUMVPt9RA= Subject key identifier: 4C:4D:7A:2C:CD:D5:D5:82:59:AC:20:2D:74:70:E0:FE:C8:DD:7D:01 Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 70AAA7C4AD0567E536CD67BDBD28A0E4451C6DB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 0293 Signing time: Thu 16 Apr 2026 22:51:57 +0000 Manifest this update: Thu 16 Apr 2026 22:46:57 +0000 Manifest next update: Mon 20 Apr 2026 09:28:57 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: KHRmnREXmc2EovwXouPulZOYVikrr5I4XjTaIL04PYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:aa:a7:c4:ad:05:67:e5:36:cd:67:bd:bd:28:a0:e4:45:1c:6d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Apr 16 22:46:57 2026 GMT Not After : Apr 20 09:28:57 2026 GMT Subject: CN=4C4D7A2CCDD5D58259AC202D7470E0FEC8DD7D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c7:4a:73:57:38:bc:7a:bf:69:b9:1b:d3:8c: 39:72:e2:ae:0b:86:76:cd:4f:a1:35:e2:a2:69:5c: 19:95:62:bb:cf:51:d5:77:8a:7a:7f:aa:e0:2c:d5: d4:21:1d:8d:9a:d9:25:31:eb:49:ef:b1:fa:6f:35: 45:05:b7:73:76:54:ee:20:45:ea:6d:f0:f7:76:6c: 85:74:c8:df:8f:81:71:99:d4:c4:2d:cd:80:16:6c: 9f:66:3a:d2:81:9e:5f:f3:ce:aa:0a:2e:05:30:1d: 0f:8b:3a:57:f1:96:19:d3:f3:5c:94:68:b6:35:bf: 78:ca:5e:d9:ec:5f:50:57:48:71:69:08:2f:13:f1: 35:ab:fd:85:04:54:16:c5:fa:34:d4:b8:2b:46:e0: 54:09:79:16:c0:bb:3e:57:80:eb:56:91:12:d8:2c: 4d:ba:cc:e3:b5:a4:16:ab:0e:02:ed:a5:ba:1c:90: 2c:a1:3e:0e:f6:c6:1c:6b:18:d1:2d:d7:c5:db:28: 06:57:b9:53:c1:6e:2c:ca:fe:94:e8:67:35:7f:ec: d7:fb:fe:41:c2:70:35:e5:40:08:9f:2d:6a:9e:d7: cd:2a:8e:a3:68:3e:27:e4:31:cc:e8:db:ea:03:ae: 14:f1:e8:7d:17:1f:b9:45:cf:b8:a8:ec:b0:46:39: 82:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4D:7A:2C:CD:D5:D5:82:59:AC:20:2D:74:70:E0:FE:C8:DD:7D:01 X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c7:21:c9:42:00:fb:4b:5d:f4:fd:9a:53:62:d6:ee:24:8c: 0a:c2:11:4a:d3:79:54:5b:35:60:2e:3d:86:48:06:cb:f3:f1: 51:b3:0d:f8:67:7d:88:4a:38:89:00:23:ce:2c:99:69:2a:c9: 67:e2:e3:fc:67:04:99:87:54:19:3c:3d:2e:97:68:c3:26:4b: ff:33:16:d4:d2:82:cd:c8:f1:51:4b:91:16:79:d9:60:54:c4: 0f:9f:0e:c3:63:bc:54:ac:33:08:56:56:51:ad:da:b5:eb:d6: 0e:e8:af:5c:be:ca:91:a9:a7:36:e5:99:f8:20:36:02:2f:e0: 12:0b:a6:c1:d8:88:ad:e2:3a:1f:f9:16:a6:64:f4:43:c1:7f: e4:6b:23:62:ed:51:be:8f:a2:90:3f:ff:28:af:1c:ee:82:8a: 79:c1:73:cb:85:f4:d1:65:f1:d7:6c:ba:43:9c:fd:c6:8e:2d: 9b:fc:6c:ba:18:c6:67:dd:b7:12:a1:8b:a6:7b:61:96:6d:36: 67:ec:73:da:12:1b:c0:00:3b:70:60:39:37:d2:43:80:3d:90: 0c:1d:dc:7e:6b:32:76:b1:10:5c:c2:c5:53:4d:09:c4:b0:a6: 04:6c:28:47:43:46:4e:87:3a:ef:18:ad:36:be:f6:ff:39:db: 4a:81:e3:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKqnxK0FZ+U2zWe9vSig5EUcbbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNjA0MTYyMjQ2NTdaFw0yNjA0MjAwOTI4NTdaMDMxMTAvBgNV BAMTKDRDNEQ3QTJDQ0RENUQ1ODI1OUFDMjAyRDc0NzBFMEZFQzhERDdEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXx0pzVzi8er9puRvTjDly4q4L hnbNT6E14qJpXBmVYrvPUdV3inp/quAs1dQhHY2a2SUx60nvsfpvNUUFt3N2VO4g Rept8Pd2bIV0yN+PgXGZ1MQtzYAWbJ9mOtKBnl/zzqoKLgUwHQ+LOlfxlhnT81yU aLY1v3jKXtnsX1BXSHFpCC8T8TWr/YUEVBbF+jTUuCtG4FQJeRbAuz5XgOtWkRLY LE26zOO1pBarDgLtpbockCyhPg72xhxrGNEt18XbKAZXuVPBbizK/pToZzV/7Nf7 /kHCcDXlQAifLWqe180qjqNoPifkMczo2+oDrhTx6H0XH7lFz7io7LBGOYKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTE16LM3V1YJZrCAtdHDg/sjdfQEwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7HIclCAPtLXfT9mlNi1u4kjArCEUrTeVRb NWAuPYZIBsvz8VGzDfhnfYhKOIkAI84smWkqyWfi4/xnBJmHVBk8PS6XaMMmS/8z FtTSgs3I8VFLkRZ52WBUxA+fDsNjvFSsMwhWVlGt2rXr1g7or1y+ypGppzblmfgg NgIv4BILpsHYiK3iOh/5FqZk9EPBf+RrI2LtUb6PopA//yivHO6CinnBc8uF9NFl 8ddsukOc/caOLZv8bLoYxmfdtxKhi6Z7YZZtNmfsc9oSG8AAO3BgOTfSQ4A9kAwd 3H5rMnaxEFzCxVNNCcSwpgRsKEdDRk6HOu8YrTa+9v8520qB4+U= -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:34 2026 by rpki-client