$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: ZUXq3RyDo3gyo+vEW/jHd5PoKNLSKRWWgwkWe/C5vyY= Subject key identifier: 47:EE:D2:50:7C:8E:4A:D4:74:F9:1D:66:7A:4F:D4:74:9C:96:C5:17 Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 18727EFD2C5EB4FC4D87BCF8F57881A7218AE0CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 02FC Signing time: Tue 04 Nov 2025 02:10:00 +0000 Manifest this update: Tue 04 Nov 2025 02:05:00 +0000 Manifest next update: Fri 07 Nov 2025 09:24:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: h3JUtBP0LtyK6HONCtWAA4SWidt2vUSyyyNysS2EYwE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:72:7e:fd:2c:5e:b4:fc:4d:87:bc:f8:f5:78:81:a7:21:8a:e0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: Nov 4 02:05:00 2025 GMT Not After : Nov 7 09:24:00 2025 GMT Subject: CN=47EED2507C8E4AD474F91D667A4FD4749C96C517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8b:ff:c3:3b:b3:a2:62:15:95:2b:df:bf:f0: af:e3:c0:a9:fb:96:e1:b2:61:ef:3d:23:37:06:a5: c9:54:72:b5:5b:a9:fb:b1:42:89:dd:23:c4:45:77: 7f:4a:ce:fa:21:63:56:61:7f:50:d3:8d:6f:04:d1: 80:e3:7f:6b:a7:6a:72:e8:72:c8:df:55:b5:47:81: 29:a1:c3:d6:f4:fc:ac:02:b6:89:20:f3:f1:e6:ef: 9f:e6:0a:a6:b7:ab:97:4f:18:e8:a6:89:ed:3e:8b: 1c:ff:9a:7f:c5:f2:29:8b:60:ca:0e:25:ff:79:f5: 95:00:5c:a1:30:c1:c8:49:39:6f:16:a1:23:fe:5d: eb:fa:a6:43:81:9a:ed:6e:05:23:af:6c:ed:aa:8d: 26:28:f6:32:ce:ad:ea:b7:c7:0e:24:51:79:10:6a: ae:43:01:15:c8:3c:57:32:86:e0:15:23:31:56:83: 4b:b8:4b:8a:6d:9b:ad:fa:03:68:87:e9:91:37:0d: 52:b2:9d:83:7e:fa:d8:09:ed:7a:05:00:fa:01:e8: f0:ad:86:57:8a:55:39:21:5a:d0:99:9b:ff:64:b9: 53:cb:b9:5f:a7:4d:91:88:58:72:95:af:8f:88:88: 68:74:33:c2:bb:26:68:48:52:7c:6e:31:c1:75:a7: c9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EE:D2:50:7C:8E:4A:D4:74:F9:1D:66:7A:4F:D4:74:9C:96:C5:17 X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:1a:09:89:4e:6d:c4:3b:a9:47:52:d7:60:35:02:d8:17:05: 25:09:31:82:e4:4b:d6:46:25:8d:3c:97:11:6a:4f:5b:bb:d0: cd:55:7b:01:5b:b9:4d:8d:8a:a9:bc:77:c2:de:d0:20:e1:30: 68:f6:11:36:19:9b:59:c6:97:af:c1:cf:f4:fc:ef:d4:c1:b8: b5:9d:e1:60:c3:59:5b:7b:08:48:f6:04:9d:af:d1:16:15:07: cb:18:9c:07:f7:f4:66:75:b0:e9:ad:03:01:cd:7a:aa:9e:a2: fe:6f:94:15:48:87:af:2b:8e:4f:4f:76:6a:0f:4c:58:d7:3c: 16:8d:64:99:9a:e0:94:19:71:4a:3a:e1:ce:f5:62:ad:92:f7: e9:85:ce:be:d1:9b:e2:23:88:e8:b8:98:98:36:ad:93:03:cd: 23:89:2f:67:7f:1d:af:62:6c:1c:33:d6:38:90:a3:15:42:75: 78:65:3d:7f:27:d4:d1:bb:d5:d3:ac:73:18:7b:73:a8:92:99: 68:ab:f1:48:8b:80:85:1e:5f:eb:a9:c7:c7:e0:f6:41:ef:8d: 4f:bb:13:de:1d:03:03:80:ca:6c:af:3a:9e:dc:2b:6e:4b:27: b4:1f:15:18:af:5e:89:19:da:b7:9f:b2:c7:35:58:a1:1b:44: a8:ce:c2:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHJ+/SxetPxNh7z49XiBpyGK4M0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNTExMDQwMjA1MDBaFw0yNTExMDcwOTI0MDBaMDMxMTAvBgNV BAMTKDQ3RUVEMjUwN0M4RTRBRDQ3NEY5MUQ2NjdBNEZENDc0OUM5NkM1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGi//DO7OiYhWVK9+/8K/jwKn7 luGyYe89IzcGpclUcrVbqfuxQondI8RFd39KzvohY1Zhf1DTjW8E0YDjf2unanLo csjfVbVHgSmhw9b0/KwCtokg8/Hm75/mCqa3q5dPGOimie0+ixz/mn/F8imLYMoO Jf959ZUAXKEwwchJOW8WoSP+Xev6pkOBmu1uBSOvbO2qjSYo9jLOreq3xw4kUXkQ aq5DARXIPFcyhuAVIzFWg0u4S4ptm636A2iH6ZE3DVKynYN++tgJ7XoFAPoB6PCt hleKVTkhWtCZm/9kuVPLuV+nTZGIWHKVr4+IiGh0M8K7JmhIUnxuMcF1p8mRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR+7SUHyOStR0+R1mek/UdJyWxRcwHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4aCYlObcQ7qUdS12A1AtgXBSUJMYLkS9ZG JY08lxFqT1u70M1VewFbuU2Niqm8d8Le0CDhMGj2ETYZm1nGl6/Bz/T879TBuLWd 4WDDWVt7CEj2BJ2v0RYVB8sYnAf39GZ1sOmtAwHNeqqeov5vlBVIh68rjk9PdmoP TFjXPBaNZJma4JQZcUo64c71Yq2S9+mFzr7Rm+IjiOi4mJg2rZMDzSOJL2d/Ha9i bBwz1jiQoxVCdXhlPX8n1NG71dOscxh7c6iSmWir8UiLgIUeX+upx8fg9kHvjU+7 E94dAwOAymyvOp7cK25LJ7QfFRivXokZ2refssc1WKEbRKjOwmM= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:44 2025 by rpki-client