$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: HTP03kNUyPZIebonRrLuuEmTe35lqcYPRw5t7F16Vx0= Subject key identifier: BB:AD:4F:B6:2B:2F:33:A0:26:55:A4:10:0F:A5:ED:16:EA:FE:01:A5 Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 51F6C7FC399CC3F681184B9651A50FC654490AD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 0243 Signing time: Sun 19 Oct 2025 15:01:44 +0000 Manifest this update: Sun 19 Oct 2025 14:56:44 +0000 Manifest next update: Wed 22 Oct 2025 21:14:44 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: 0p1fSs7d03ZL1PU/fF+J8220to7poT16HWpLugDHNKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f6:c7:fc:39:9c:c3:f6:81:18:4b:96:51:a5:0f:c6:54:49:0a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Oct 19 14:56:44 2025 GMT Not After : Oct 22 21:14:44 2025 GMT Subject: CN=BBAD4FB62B2F33A02655A4100FA5ED16EAFE01A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1a:d4:f2:2b:94:7e:d0:cd:93:76:fe:b3:20: 52:17:35:74:7a:17:9e:4b:f7:82:8f:8b:0d:bb:78: e6:99:1a:fe:b5:b5:58:c7:10:57:51:dd:77:63:0f: a6:35:6e:45:83:38:f6:c2:19:4d:f7:6a:97:75:db: 5d:21:a6:97:46:6e:23:e7:3a:4b:64:08:41:da:eb: d0:22:a8:be:5d:8a:13:7c:57:38:1a:7f:00:03:ee: 14:3c:09:36:1e:0b:77:20:e5:03:09:10:18:89:b2: b9:c5:2f:12:1a:75:ea:0f:61:69:f4:c5:de:84:d6: 71:65:6a:0a:fb:09:8a:40:84:61:88:46:e0:89:c8: 69:84:46:8b:f6:ce:b2:6b:1e:a1:0f:02:c9:62:8e: e0:34:e7:f2:24:cb:bd:06:81:d9:89:10:0b:20:49: 1b:8b:07:f1:83:32:92:a1:13:db:c9:2e:22:ad:8e: 59:6c:db:4a:26:05:a5:16:f7:76:76:01:f2:a9:1b: 0a:59:09:b7:67:b9:25:95:6d:5e:fd:50:62:2c:4d: e9:ca:59:18:d1:46:36:7c:fc:b6:9c:e4:f0:66:e6: 75:44:9d:3c:c1:7d:66:83:49:ab:59:ec:61:2f:e2: 76:96:2b:14:38:9a:be:7b:e1:1c:fa:5d:76:3e:79: 0c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AD:4F:B6:2B:2F:33:A0:26:55:A4:10:0F:A5:ED:16:EA:FE:01:A5 X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c3:ff:be:c0:0c:38:50:15:3d:6e:9e:0f:0b:ae:1b:b2:ab: 5e:db:b5:b3:6b:af:1c:65:58:bb:df:aa:02:c5:b8:c4:fd:01: e6:b9:d2:ca:fe:4b:37:43:b2:63:a9:30:21:05:94:5f:32:62: e1:05:8b:79:51:6a:33:6b:cf:5d:27:d0:a4:35:75:ba:61:63: e8:a3:4a:71:b3:d4:24:c1:98:c3:c8:df:57:da:85:82:81:f2: 22:32:95:80:37:e8:56:e5:9f:6e:ac:e5:10:b5:8a:45:86:6f: 6c:00:6b:56:ba:f0:69:44:70:f3:89:32:27:3b:11:39:d8:10: 19:45:be:01:e7:86:ba:5d:e4:53:7e:f6:bf:91:d1:88:1b:79: b1:55:85:d7:14:8e:80:18:96:8f:c4:7b:22:22:b4:50:d8:b3: c0:d4:25:b3:1e:49:b5:d1:00:d7:2e:13:78:49:31:b7:f2:03: 9a:28:91:c9:3c:ba:75:1a:91:5b:68:c2:09:a0:75:89:df:5d: bc:d0:a0:49:90:9e:41:58:2e:7c:11:88:33:25:37:4f:fe:e1: e2:8a:95:f2:56:32:ee:e6:b4:9b:da:d3:91:77:ba:b3:5e:62: 96:af:b5:ad:c2:a8:ef:29:1c:aa:c1:c8:75:45:4f:3f:79:6e: 8c:9d:ea:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUfbH/Dmcw/aBGEuWUaUPxlRJCtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNTEwMTkxNDU2NDRaFw0yNTEwMjIyMTE0NDRaMDMxMTAvBgNV BAMTKEJCQUQ0RkI2MkIyRjMzQTAyNjU1QTQxMDBGQTVFRDE2RUFGRTAxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGtTyK5R+0M2Tdv6zIFIXNXR6 F55L94KPiw27eOaZGv61tVjHEFdR3XdjD6Y1bkWDOPbCGU33apd1210hppdGbiPn OktkCEHa69AiqL5dihN8VzgafwAD7hQ8CTYeC3cg5QMJEBiJsrnFLxIadeoPYWn0 xd6E1nFlagr7CYpAhGGIRuCJyGmERov2zrJrHqEPAslijuA05/Iky70GgdmJEAsg SRuLB/GDMpKhE9vJLiKtjlls20omBaUW93Z2AfKpGwpZCbdnuSWVbV79UGIsTenK WRjRRjZ8/Lac5PBm5nVEnTzBfWaDSatZ7GEv4naWKxQ4mr574Rz6XXY+eQxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu61PtisvM6AmVaQQD6XtFur+AaUwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnD/77ADDhQFT1ung8Lrhuyq17btbNrrxxl WLvfqgLFuMT9Aea50sr+SzdDsmOpMCEFlF8yYuEFi3lRajNrz10n0KQ1dbphY+ij SnGz1CTBmMPI31fahYKB8iIylYA36Fbln26s5RC1ikWGb2wAa1a68GlEcPOJMic7 ETnYEBlFvgHnhrpd5FN+9r+R0YgbebFVhdcUjoAYlo/EeyIitFDYs8DUJbMeSbXR ANcuE3hJMbfyA5ookck8unUakVtowgmgdYnfXbzQoEmQnkFYLnwRiDMlN0/+4eKK lfJWMu7mtJva05F3urNeYpavta3CqO8pHKrByHVFTz95boyd6vM= -----END CERTIFICATE-----Generated at Tue Oct 21 06:33:28 2025 by rpki-client