$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: iEPw/sLbGNNFJaC06FGxrZ4fxKbMvqBN704JQEsqsI8= Subject key identifier: 5D:BD:CF:91:F2:64:E5:55:7D:E1:69:F4:3F:DF:77:8D:1C:16:7B:39 Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 72E829E643ADC6982E46F95A16454810B267ED0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 0289 Signing time: Wed 25 Mar 2026 20:01:57 +0000 Manifest this update: Wed 25 Mar 2026 19:56:57 +0000 Manifest next update: Sat 28 Mar 2026 21:17:57 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: 2BN1gUhKgJoyVLG+O34VfOATSyAtCkrApkEiyt6zhDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e8:29:e6:43:ad:c6:98:2e:46:f9:5a:16:45:48:10:b2:67:ed:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Mar 25 19:56:57 2026 GMT Not After : Mar 28 21:17:57 2026 GMT Subject: CN=5DBDCF91F264E5557DE169F43FDF778D1C167B39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:10:92:dc:c0:69:e3:66:a8:4e:62:5e:6a:26: ab:bc:29:47:9d:1b:e0:d2:10:82:48:64:ff:3a:9a: 3e:1c:4a:83:d5:21:b1:0e:95:a9:0d:12:41:e0:f7: b6:c6:0b:f4:fb:9b:50:58:29:3d:02:5e:81:0a:41: 3d:5e:99:e2:01:12:3b:e9:93:26:39:2f:6a:bd:09: 82:d4:1f:34:74:af:99:c8:c1:ed:43:4f:33:17:49: 8d:a3:56:3a:c4:b5:8b:51:b6:0a:81:9a:6b:9d:06: d3:ff:be:1e:15:82:ad:f3:9f:ca:30:a5:bd:07:75: 2c:75:f8:8f:8e:b6:87:f3:49:49:03:bf:d8:fc:65: f0:1f:5b:a1:6d:ca:a0:2c:d7:ba:fb:fd:01:2a:30: f7:5d:89:69:b5:32:37:7e:b0:af:d7:c9:93:10:fd: 7b:38:89:0d:3b:ca:1e:a9:8f:c9:2d:b1:78:ca:80: d8:70:55:9b:f6:7c:67:32:1d:3b:84:6f:08:c1:6c: 7d:3f:ab:d9:0d:a3:6a:f1:d7:8f:ce:32:fd:24:3d: 03:a1:99:ae:59:82:54:3e:c8:d5:3a:0c:17:04:c5: 03:11:4a:80:4d:3f:f3:ec:5d:eb:ef:8d:20:73:d4: 48:c7:b2:1c:69:a7:78:6e:55:55:37:02:d1:d8:0c: 7d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BD:CF:91:F2:64:E5:55:7D:E1:69:F4:3F:DF:77:8D:1C:16:7B:39 X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bd:ad:15:98:d4:c3:ef:43:9b:0a:4c:83:6f:fc:ac:56:75: 0c:68:bb:33:85:9a:54:f7:13:b6:57:6d:57:6b:d5:a5:bc:ca: 02:68:c1:13:f4:cc:8f:5d:62:56:52:aa:4d:c1:eb:a6:9a:a2: 2b:31:85:3e:fa:f3:69:43:6a:d1:92:f2:12:2d:23:a5:58:0f: 6d:96:21:52:36:99:f5:f2:0b:49:b1:b8:21:3f:cb:06:83:da: 19:6d:00:f9:66:18:b8:db:4b:4c:aa:15:15:69:39:f4:00:6f: 28:ea:5a:bb:de:73:4e:a9:93:a5:12:28:20:a1:03:ab:b8:89: 64:94:ed:ed:fb:aa:b9:fb:e8:b7:29:69:11:5d:85:79:f9:76: 6d:86:eb:91:de:05:39:a7:e5:e4:dc:22:68:91:b8:5e:95:3c: a9:c1:91:4e:f1:13:2d:b6:b1:8e:1e:1e:c3:55:10:73:1a:4a: a3:19:7a:68:65:c7:18:9e:a7:31:1f:12:e8:1a:4f:b4:2a:0a: 6e:f1:88:b1:39:34:80:7f:fc:1f:a5:9b:07:d7:16:bc:d0:cf: 37:50:4a:c1:a3:3a:35:39:ae:ba:6b:81:a3:d6:6f:8c:41:54: f2:19:ca:82:8f:bc:91:b6:8a:9d:29:8b:14:4f:f3:e5:20:d2: c6:b0:83:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcugp5kOtxpguRvlaFkVIELJn7QwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNjAzMjUxOTU2NTdaFw0yNjAzMjgyMTE3NTdaMDMxMTAvBgNV BAMTKDVEQkRDRjkxRjI2NEU1NTU3REUxNjlGNDNGREY3NzhEMUMxNjdCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyEJLcwGnjZqhOYl5qJqu8KUed G+DSEIJIZP86mj4cSoPVIbEOlakNEkHg97bGC/T7m1BYKT0CXoEKQT1emeIBEjvp kyY5L2q9CYLUHzR0r5nIwe1DTzMXSY2jVjrEtYtRtgqBmmudBtP/vh4Vgq3zn8ow pb0HdSx1+I+OtofzSUkDv9j8ZfAfW6FtyqAs17r7/QEqMPddiWm1Mjd+sK/XyZMQ /Xs4iQ07yh6pj8ktsXjKgNhwVZv2fGcyHTuEbwjBbH0/q9kNo2rx14/OMv0kPQOh ma5ZglQ+yNU6DBcExQMRSoBNP/PsXevvjSBz1EjHshxpp3huVVU3AtHYDH1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXb3PkfJk5VV94Wn0P993jRwWezkwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE29rRWY1MPvQ5sKTINv/KxWdQxouzOFmlT3 E7ZXbVdr1aW8ygJowRP0zI9dYlZSqk3B66aaoisxhT7682lDatGS8hItI6VYD22W IVI2mfXyC0mxuCE/ywaD2hltAPlmGLjbS0yqFRVpOfQAbyjqWrvec06pk6USKCCh A6u4iWSU7e37qrn76LcpaRFdhXn5dm2G65HeBTmn5eTcImiRuF6VPKnBkU7xEy22 sY4eHsNVEHMaSqMZemhlxxiepzEfEugaT7QqCm7xiLE5NIB//B+lmwfXFrzQzzdQ SsGjOjU5rrprgaPWb4xBVPIZyoKPvJG2ip0pixRP8+Ug0sawg/s= -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:01 2026 by rpki-client