$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: NLN66LEt+YMUTXktZv5RyVlsCjNOx9m4qvJoeCkxS8A= Subject key identifier: F0:22:45:0B:2A:4B:A9:48:83:39:FA:88:17:A0:B7:2C:B4:56:E6:04 Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 2F16BC6AC6AB324EE14E5C615D0F4714AEAE367C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 0229 Signing time: Fri 22 Aug 2025 01:41:42 +0000 Manifest this update: Fri 22 Aug 2025 01:36:42 +0000 Manifest next update: Mon 25 Aug 2025 02:17:42 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: vYuh9YTy6/WH8K5m8El5wv/Vh6QMNOhs3VLE/8CHoxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:16:bc:6a:c6:ab:32:4e:e1:4e:5c:61:5d:0f:47:14:ae:ae:36:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Aug 22 01:36:42 2025 GMT Not After : Aug 25 02:17:42 2025 GMT Subject: CN=F022450B2A4BA9488339FA8817A0B72CB456E604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:37:50:3f:a5:85:95:26:bf:9a:fa:35:37: de:cc:98:59:40:81:19:7c:07:91:68:93:0a:e1:1f: 90:b4:41:81:94:8c:3a:5d:ce:1c:14:d6:33:fa:c1: 6a:3b:e2:5d:fd:85:4a:fe:c2:28:af:19:60:13:92: fe:a8:c2:7a:5f:a5:77:66:b9:2f:61:14:68:b7:ef: 90:ce:e9:20:2a:97:dd:b4:43:0f:64:3e:2a:04:d4: 21:d7:8f:2c:d6:d6:07:04:b9:d2:43:a0:8a:19:ce: 75:ab:7f:fe:ab:53:e8:75:56:e9:01:a2:45:d8:32: 73:2b:f2:11:c0:b9:72:aa:10:01:69:3f:26:fb:38: 79:2e:56:ad:a2:ee:17:92:bc:8b:79:e5:46:13:1f: 1b:78:46:6a:26:99:f1:4c:c5:c4:eb:65:0a:88:ec: 61:b9:b6:f5:fd:aa:e9:a6:c7:fc:16:f2:37:73:4e: 83:df:c8:c4:d8:a7:3a:4a:a3:d0:eb:13:23:a2:e1: e5:3c:e8:ed:e6:d6:ca:63:b4:8c:50:16:85:10:e0: 6d:1f:b1:d2:d1:8f:9c:57:fd:92:a8:86:76:b8:c3: e7:63:bf:7e:86:fd:57:a1:b9:45:ae:b2:92:8b:a5: 22:4a:ce:a1:56:44:9d:56:a4:24:18:06:9f:bd:46: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:22:45:0B:2A:4B:A9:48:83:39:FA:88:17:A0:B7:2C:B4:56:E6:04 X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ed:ee:1e:07:0d:52:78:21:2e:d9:33:82:a9:44:84:59:e1: ee:f1:24:75:e1:ac:b7:ce:77:dc:c0:64:78:bf:b7:0e:f1:77: 3f:65:81:e8:6c:24:bc:f8:7e:7d:57:33:20:fc:3e:51:36:f5: 24:13:d2:25:b5:54:15:f4:2d:de:15:ae:bb:2a:39:ce:b0:e0: 92:6e:7d:26:2c:5a:f1:f5:96:2e:71:82:fe:f5:67:60:83:25: 49:dd:8e:70:e3:5a:53:10:f3:21:87:13:44:13:3f:d1:30:12: 18:c9:5f:5c:aa:65:35:1a:9a:16:29:76:f8:18:c7:2c:07:87: 73:cc:f4:b9:32:4c:aa:34:0b:69:0e:27:25:d6:df:b9:d7:30: 89:dc:41:16:fe:aa:ae:39:79:54:4f:36:20:c3:a6:15:80:bc: 6a:bf:71:c0:fb:fa:42:cd:7d:1d:3a:27:3a:1f:38:a3:da:50: e9:3b:e3:1e:8e:8f:9c:fb:37:8d:98:be:24:c6:37:38:0b:6b: 7b:7b:00:5e:37:57:31:0e:df:e4:a4:5a:57:6d:f7:54:bb:a0: 2b:21:49:50:af:83:0b:f5:f3:5c:b8:54:6c:a4:5e:16:7f:c4: 58:48:1f:e2:c3:94:c5:b6:b5:a7:fe:44:b2:3e:63:22:9f:f1: b9:b6:fe:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxa8asarMk7hTlxhXQ9HFK6uNnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNTA4MjIwMTM2NDJaFw0yNTA4MjUwMjE3NDJaMDMxMTAvBgNV BAMTKEYwMjI0NTBCMkE0QkE5NDg4MzM5RkE4ODE3QTBCNzJDQjQ1NkU2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFDdQP6WFlSa/mvo1N97MmFlA gRl8B5FokwrhH5C0QYGUjDpdzhwU1jP6wWo74l39hUr+wiivGWATkv6ownpfpXdm uS9hFGi375DO6SAql920Qw9kPioE1CHXjyzW1gcEudJDoIoZznWrf/6rU+h1VukB okXYMnMr8hHAuXKqEAFpPyb7OHkuVq2i7heSvIt55UYTHxt4RmommfFMxcTrZQqI 7GG5tvX9qummx/wW8jdzToPfyMTYpzpKo9DrEyOi4eU86O3m1spjtIxQFoUQ4G0f sdLRj5xX/ZKohna4w+djv36G/VehuUWuspKLpSJKzqFWRJ1WpCQYBp+9RkkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8CJFCypLqUiDOfqIF6C3LLRW5gQwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvt7h4HDVJ4IS7ZM4KpRIRZ4e7xJHXhrLfO d9zAZHi/tw7xdz9lgehsJLz4fn1XMyD8PlE29SQT0iW1VBX0Ld4VrrsqOc6w4JJu fSYsWvH1li5xgv71Z2CDJUndjnDjWlMQ8yGHE0QTP9EwEhjJX1yqZTUamhYpdvgY xywHh3PM9LkyTKo0C2kOJyXW37nXMIncQRb+qq45eVRPNiDDphWAvGq/ccD7+kLN fR06JzofOKPaUOk74x6Oj5z7N42YviTGNzgLa3t7AF43VzEO3+SkWldt91S7oCsh SVCvgwv181y4VGykXhZ/xFhIH+LDlMW2taf+RLI+YyKf8bm2/gA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:30:37 2025 by rpki-client