$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: 2vC4f2gwO5eN9R299Kqp+lbJdiwqcJBgyNs3larlDDw= Subject key identifier: A0:8C:BF:F8:DD:4E:21:7C:C8:F6:75:21:0D:B4:9E:C4:80:0D:1E:C8 Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 06C42BE216104FAFB2EF4F0307A542BB54D9456E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 0213 Signing time: Fri 04 Jul 2025 05:11:41 +0000 Manifest this update: Fri 04 Jul 2025 05:06:41 +0000 Manifest next update: Mon 07 Jul 2025 11:43:41 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: kOdMhMHrXTsVcB1unjwdP7WKs6ZCRLA/gJLz82bU2Ds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 11:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c4:2b:e2:16:10:4f:af:b2:ef:4f:03:07:a5:42:bb:54:d9:45:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Jul 4 05:06:41 2025 GMT Not After : Jul 7 11:43:41 2025 GMT Subject: CN=A08CBFF8DD4E217CC8F675210DB49EC4800D1EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:bc:92:89:11:53:4c:77:31:45:c6:b3:31: 98:c9:b7:ad:f2:0a:2d:9f:73:94:a7:01:3b:2e:0d: 61:b6:c1:47:ca:cb:9d:91:ce:a7:09:55:2f:ea:d6: 93:5c:ea:0e:23:60:6f:04:4e:22:dd:1c:9a:aa:e5: 1e:b1:e0:4b:b0:a1:da:29:f6:ed:f9:1b:2a:0f:52: a1:d2:56:4e:a6:af:f1:9a:ac:89:24:46:44:06:9c: 4e:cf:61:38:e6:4c:f0:bf:3c:72:2b:76:54:8f:b5: 45:97:b3:a1:3b:03:82:3d:de:d6:c2:c9:09:37:0f: 63:1e:bd:20:fc:24:4c:bb:05:c3:f1:62:5d:e9:d2: 4e:1f:36:cf:2a:e2:fc:ef:27:48:fa:2a:8e:8d:0e: b1:24:8f:9d:58:e1:a9:26:8d:b3:7e:53:f6:99:08: c0:cf:1f:a9:85:f2:2a:9c:67:57:6b:64:04:3b:c2: 77:1e:95:24:00:db:51:4e:51:ed:3f:75:0c:b8:b0: ee:6d:60:9e:f0:fa:2e:fc:21:ef:d0:8c:ec:3f:7b: 93:d2:00:57:2d:e7:42:e6:be:1d:77:b1:78:4f:60: 01:82:54:5b:48:87:41:7f:9b:c2:82:f6:0f:eb:58: fb:52:72:ce:e7:aa:da:0f:da:6f:db:0e:f1:ba:95: 0d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8C:BF:F8:DD:4E:21:7C:C8:F6:75:21:0D:B4:9E:C4:80:0D:1E:C8 X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5a:46:68:ce:39:af:fd:cc:9c:c8:9a:8c:de:91:70:93:57: f0:73:2e:4c:60:42:83:af:be:fb:ae:a3:0f:27:70:cb:39:5b: 1c:b4:9d:c0:e4:ab:7c:21:ce:a7:b9:9f:72:ff:23:0e:c0:3d: aa:76:12:a7:34:63:10:06:d7:c9:19:07:54:a4:35:9c:5d:f2: f8:f4:ab:d2:a9:6c:41:91:3c:d3:30:43:cd:9f:e0:92:57:0d: d0:15:65:38:04:6a:19:df:a0:4c:95:05:95:77:61:b6:38:ac: 57:69:16:4e:2c:d4:12:f4:6b:1c:8a:5a:99:a6:ee:a0:0e:c1: 27:57:88:e2:98:17:32:d3:6d:ef:d5:e3:39:91:99:e9:21:a0: 60:06:53:5e:87:6f:ce:1b:39:85:a6:8c:db:cf:af:0b:69:23: d0:31:80:d3:d5:45:17:21:19:4f:e5:63:d8:70:14:2f:41:3e: 3d:67:fc:01:e1:4f:58:70:97:dc:f7:d6:ab:ab:10:1a:e9:e2: fb:14:dc:be:1d:25:b5:6d:1f:13:3c:9a:d1:ab:70:68:0a:66: 9e:e9:54:7f:91:8a:2a:5f:50:ed:d0:fc:22:d8:11:90:82:df: cc:0e:f4:a3:9f:f9:a2:c4:0f:f7:f0:bb:3b:98:0b:8d:25:90: d9:cd:57:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsQr4hYQT6+y708DB6VCu1TZRW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNTA3MDQwNTA2NDFaFw0yNTA3MDcxMTQzNDFaMDMxMTAvBgNV BAMTKEEwOENCRkY4REQ0RTIxN0NDOEY2NzUyMTBEQjQ5RUM0ODAwRDFFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fLySiRFTTHcxRcazMZjJt63y Ci2fc5SnATsuDWG2wUfKy52RzqcJVS/q1pNc6g4jYG8ETiLdHJqq5R6x4Euwodop 9u35GyoPUqHSVk6mr/GarIkkRkQGnE7PYTjmTPC/PHIrdlSPtUWXs6E7A4I93tbC yQk3D2MevSD8JEy7BcPxYl3p0k4fNs8q4vzvJ0j6Ko6NDrEkj51Y4akmjbN+U/aZ CMDPH6mF8iqcZ1drZAQ7wncelSQA21FOUe0/dQy4sO5tYJ7w+i78Ie/QjOw/e5PS AFct50Lmvh13sXhPYAGCVFtIh0F/m8KC9g/rWPtScs7nqtoP2m/bDvG6lQ2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoIy/+N1OIXzI9nUhDbSexIANHsgwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVaRmjOOa/9zJzImozekXCTV/BzLkxgQoOv vvuuow8ncMs5Wxy0ncDkq3whzqe5n3L/Iw7APap2Eqc0YxAG18kZB1SkNZxd8vj0 q9KpbEGRPNMwQ82f4JJXDdAVZTgEahnfoEyVBZV3YbY4rFdpFk4s1BL0axyKWpmm 7qAOwSdXiOKYFzLTbe/V4zmRmekhoGAGU16Hb84bOYWmjNvPrwtpI9AxgNPVRRch GU/lY9hwFC9BPj1n/AHhT1hwl9z31qurEBrp4vsU3L4dJbVtHxM8mtGrcGgKZp7p VH+RiipfUO3Q/CLYEZCC38wO9KOf+aLED/fwuzuYC40lkNnNV8I= -----END CERTIFICATE-----Generated at Fri Jul 4 13:33:43 2025 by rpki-client