$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: dnazyy9ZKd/QaSQYJdglAdCQjO0qwAAKviMhBCaHB9c= Subject key identifier: A6:6F:0C:88:AA:2C:48:52:D5:E4:3A:E4:AA:7E:C9:5D:EA:70:56:AE Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 458E366EA1C7469F809F172FA42A9100DCC94CC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 02C4 Signing time: Sat 28 Jun 2025 16:40:00 +0000 Manifest this update: Sat 28 Jun 2025 16:35:00 +0000 Manifest next update: Tue 01 Jul 2025 18:03:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: emHmq0SqKfaStDhZEmBzc4us/wfYMVXq7PdUopoTnnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 18:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8e:36:6e:a1:c7:46:9f:80:9f:17:2f:a4:2a:91:00:dc:c9:4c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: Jun 28 16:35:00 2025 GMT Not After : Jul 1 18:03:00 2025 GMT Subject: CN=A66F0C88AA2C4852D5E43AE4AA7EC95DEA7056AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:28:e5:47:2e:d7:8f:8a:c9:d5:5d:47:8d:5e: 9d:90:52:47:a7:85:84:a9:d1:71:a8:1b:39:e9:33: 1b:76:09:c2:e7:ff:96:97:eb:7e:50:ca:56:fa:ea: 3b:b5:8e:2c:75:19:94:d5:c5:f4:97:a6:ab:d4:ce: b8:bf:f1:dc:26:0f:f1:ae:31:62:61:5e:b6:e1:d2: 7c:62:44:bb:5f:a0:18:30:ee:e7:15:5d:80:db:56: 53:7a:45:26:62:16:6f:aa:a0:58:c1:61:16:f9:d5: 49:5f:9d:89:7c:7b:ce:e7:e5:86:6b:9b:44:0d:22: ba:96:d3:f2:09:65:9b:f0:7d:e8:48:82:bb:18:44: 3c:f2:7d:11:5c:c1:66:62:e5:20:ec:1d:d2:2f:d1: b3:55:e3:12:d9:57:0e:1a:30:77:2a:5e:bf:a4:f2: 74:a1:1b:2e:04:1e:24:da:9c:ac:49:cb:3b:f1:8b: 2e:2e:8c:89:e0:8a:32:6a:a9:fe:83:14:2d:d1:52: 3c:2e:2f:60:a6:27:fc:88:86:fa:c6:8d:c8:e0:39: 12:8c:01:92:2e:7d:90:ab:1e:38:6e:12:9a:21:c2: 67:65:26:f3:06:d6:b1:7a:cd:b4:df:f5:1e:bf:b0: 21:38:0d:7e:e1:03:c5:8b:05:a2:7e:27:c4:28:c2: 44:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6F:0C:88:AA:2C:48:52:D5:E4:3A:E4:AA:7E:C9:5D:EA:70:56:AE X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c7:7b:f0:22:c5:1d:5f:4f:63:3a:f7:71:cd:ae:6e:cd:29: 60:ca:7f:2c:ea:48:08:61:4c:30:44:5b:6b:5b:f8:61:43:77: 69:bb:76:c9:1b:5a:7c:9a:da:c1:7d:42:b9:af:0a:99:e9:68: 4a:ae:ad:ba:2d:28:12:a0:55:b1:8f:14:f6:ca:2f:f0:72:2c: 49:c8:b1:fb:96:29:e8:09:60:b3:eb:8b:da:b1:ea:4e:b0:93: 64:59:9f:6e:ad:ea:5c:2f:99:fe:9f:de:57:c6:18:b4:a3:42: 2b:62:20:20:bb:63:d2:b8:c7:ac:17:0a:dc:47:be:89:6a:03: dc:d1:30:0d:55:00:5a:ff:cf:33:56:d1:46:d5:b7:fd:2d:f3: 64:40:b4:b8:ee:07:73:36:33:ca:d4:17:dc:28:8e:fa:1b:a2: f1:9e:60:01:dc:b2:6b:52:04:0a:76:d1:4f:a5:7a:69:b2:de: 50:2d:d3:b8:e9:26:6b:cb:64:4c:e7:7c:ee:68:22:01:23:b8: eb:43:a9:96:ec:ec:08:20:5f:2b:b1:d5:52:e6:df:40:0e:95: e1:19:37:e7:9e:0b:bb:73:1b:5d:e3:69:e8:2b:30:a4:e7:62: 60:e1:f6:0f:29:34:aa:a3:7b:1a:59:85:5e:19:fa:83:79:9d: c4:d1:9f:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURY42bqHHRp+AnxcvpCqRANzJTMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNTA2MjgxNjM1MDBaFw0yNTA3MDExODAzMDBaMDMxMTAvBgNV BAMTKEE2NkYwQzg4QUEyQzQ4NTJENUU0M0FFNEFBN0VDOTVERUE3MDU2QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKOVHLtePisnVXUeNXp2QUken hYSp0XGoGznpMxt2CcLn/5aX635Qylb66ju1jix1GZTVxfSXpqvUzri/8dwmD/Gu MWJhXrbh0nxiRLtfoBgw7ucVXYDbVlN6RSZiFm+qoFjBYRb51UlfnYl8e87n5YZr m0QNIrqW0/IJZZvwfehIgrsYRDzyfRFcwWZi5SDsHdIv0bNV4xLZVw4aMHcqXr+k 8nShGy4EHiTanKxJyzvxiy4ujIngijJqqf6DFC3RUjwuL2CmJ/yIhvrGjcjgORKM AZIufZCrHjhuEpohwmdlJvMG1rF6zbTf9R6/sCE4DX7hA8WLBaJ+J8QowkQpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpm8MiKosSFLV5Drkqn7JXepwVq4wHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrHe/AixR1fT2M693HNrm7NKWDKfyzqSAhh TDBEW2tb+GFDd2m7dskbWnya2sF9QrmvCpnpaEqurbotKBKgVbGPFPbKL/ByLEnI sfuWKegJYLPri9qx6k6wk2RZn26t6lwvmf6f3lfGGLSjQitiICC7Y9K4x6wXCtxH volqA9zRMA1VAFr/zzNW0UbVt/0t82RAtLjuB3M2M8rUF9wojvobovGeYAHcsmtS BAp20U+lemmy3lAt07jpJmvLZEznfO5oIgEjuOtDqZbs7AggXyux1VLm30AOleEZ N+eeC7tzG13jaegrMKTnYmDh9g8pNKqjexpZhV4Z+oN5ncTRn4k= -----END CERTIFICATE-----Generated at Sun Jun 29 18:07:48 2025 by rpki-client