$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: KInp1eicmF/VDsCZ21cZ40x2Wh8KBvWX4MHHQsWnx6Y= Subject key identifier: 0A:66:E3:FD:38:2B:B4:CC:98:19:16:15:56:C8:42:C0:43:3A:F2:DE Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 33D7B74F3F17F2819B395991B390677636C18B85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 0330 Signing time: Mon 02 Mar 2026 01:20:00 +0000 Manifest this update: Mon 02 Mar 2026 01:15:00 +0000 Manifest next update: Thu 05 Mar 2026 09:21:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: jwralGiSF871y8C9QXUI8kMrKGX9xH6LTGl3tgMOf4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d7:b7:4f:3f:17:f2:81:9b:39:59:91:b3:90:67:76:36:c1:8b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: Mar 2 01:15:00 2026 GMT Not After : Mar 5 09:21:00 2026 GMT Subject: CN=0A66E3FD382BB4CC9819161556C842C0433AF2DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:06:bc:3f:f5:88:ef:87:f4:48:21:45:ae:d1: 3f:6d:d3:90:e1:85:ed:be:42:65:23:ae:f4:a3:a5: c6:f7:16:4f:45:f5:32:88:9f:bc:c3:b8:4b:ab:7e: fb:8e:02:70:44:70:90:19:62:50:34:d6:87:50:35: ea:72:28:2c:81:fe:86:05:e3:68:ec:96:a7:00:8f: d1:11:d7:5c:e2:ce:36:23:07:fe:01:42:82:6f:d8: 09:e3:38:a5:83:fe:01:51:02:f4:ce:a4:63:3b:eb: 99:49:da:f0:34:ec:2a:fe:e8:53:ac:89:d0:e9:40: 24:8a:42:04:5b:f2:73:96:cf:4e:d3:4e:07:7f:ef: 8a:e0:68:3d:78:85:33:26:b4:cf:57:60:22:ae:74: f0:18:6b:db:52:c6:ee:0f:c5:2f:96:00:f2:2b:ab: bd:35:b2:77:62:92:a6:6c:26:98:ea:eb:fa:1f:dc: b8:1b:34:b4:87:b9:33:6b:c9:21:17:b1:4c:df:ff: e2:bb:37:d0:35:f7:1f:55:57:01:54:3b:d3:bc:a7: af:78:ca:be:8e:3d:c1:dc:8b:4d:35:87:6c:41:de: 38:d7:27:24:d3:4e:17:cc:af:06:3e:13:00:f8:de: 49:5a:d5:bf:ae:bc:93:a1:ce:2e:15:59:12:66:29: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:66:E3:FD:38:2B:B4:CC:98:19:16:15:56:C8:42:C0:43:3A:F2:DE X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:7f:6f:82:77:59:f4:76:40:83:50:4c:4c:ea:ad:2c:70:04: 8b:39:55:d2:a5:66:de:04:49:ec:38:d2:12:24:96:bd:0e:78: e9:24:28:10:d1:4c:ff:93:38:ef:a0:6a:95:1a:2b:f3:80:7b: e6:e1:f9:99:a5:fc:7a:c5:04:8e:1b:56:fa:84:dc:2f:c3:83: 8f:1c:2c:af:b9:23:5d:23:9c:65:64:0d:b5:f2:42:e2:b6:96: e2:08:c5:e5:d2:81:28:12:40:3b:16:03:95:33:a4:c4:46:e8: 8a:55:03:a7:4c:17:0e:9f:dc:eb:1e:27:6e:ba:8c:a0:f3:8a: 2d:5c:56:34:d0:1b:d3:92:62:73:3f:2e:a6:4e:61:57:fa:ff: 85:6e:7b:b9:1d:4b:1b:74:48:8d:a1:9a:07:da:95:ee:30:b3: 45:3a:9e:78:4e:50:e4:d3:7f:ce:1e:3b:23:d3:67:4d:1d:11: 21:e3:e4:cb:63:06:ac:f7:de:e8:c3:8f:00:2f:8b:99:18:d2: 53:74:a1:90:9f:8d:43:fd:bf:5a:db:82:86:d9:e3:66:7b:65: 98:15:0e:cb:66:ed:e2:f0:5b:a9:e0:6a:38:bc:72:7d:84:dc: 71:51:9e:d2:f5:b2:98:0b:19:83:b9:16:3d:87:de:01:e9:61: 94:2a:62:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM9e3Tz8X8oGbOVmRs5BndjbBi4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNjAzMDIwMTE1MDBaFw0yNjAzMDUwOTIxMDBaMDMxMTAvBgNV BAMTKDBBNjZFM0ZEMzgyQkI0Q0M5ODE5MTYxNTU2Qzg0MkMwNDMzQUYyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnBrw/9Yjvh/RIIUWu0T9t05Dh he2+QmUjrvSjpcb3Fk9F9TKIn7zDuEurfvuOAnBEcJAZYlA01odQNepyKCyB/oYF 42jslqcAj9ER11zizjYjB/4BQoJv2AnjOKWD/gFRAvTOpGM765lJ2vA07Cr+6FOs idDpQCSKQgRb8nOWz07TTgd/74rgaD14hTMmtM9XYCKudPAYa9tSxu4PxS+WAPIr q701sndikqZsJpjq6/of3LgbNLSHuTNrySEXsUzf/+K7N9A19x9VVwFUO9O8p694 yr6OPcHci001h2xB3jjXJyTTThfMrwY+EwD43kla1b+uvJOhzi4VWRJmKV1BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCmbj/TgrtMyYGRYVVshCwEM68t4wHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALB/b4J3WfR2QINQTEzqrSxwBIs5VdKlZt4E Sew40hIklr0OeOkkKBDRTP+TOO+gapUaK/OAe+bh+Zml/HrFBI4bVvqE3C/Dg48c LK+5I10jnGVkDbXyQuK2luIIxeXSgSgSQDsWA5UzpMRG6IpVA6dMFw6f3OseJ266 jKDzii1cVjTQG9OSYnM/LqZOYVf6/4Vue7kdSxt0SI2hmgfale4ws0U6nnhOUOTT f84eOyPTZ00dESHj5MtjBqz33ujDjwAvi5kY0lN0oZCfjUP9v1rbgobZ42Z7ZZgV Dstm7eLwW6ngaji8cn2E3HFRntL1spgLGYO5Fj2H3gHpYZQqYk0= -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:37 2026 by rpki-client