$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: hxoJ9xLlGqPkih3/Rb2C6p5C8MghTLmJdfPwdJgmSgk= Subject key identifier: 0D:8B:FB:56:27:3A:C4:F1:DC:22:39:49:A0:C4:EC:EF:E1:AF:2B:48 Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 42163BEC2E7C0C11DD44754B23408A396ACC5399 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 033A Signing time: Tue 24 Mar 2026 15:30:00 +0000 Manifest this update: Tue 24 Mar 2026 15:25:00 +0000 Manifest next update: Fri 27 Mar 2026 19:49:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: JCMz8Lq82Pza3I4pojXkP2EStM09xL+wFIfNfVXkgak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:16:3b:ec:2e:7c:0c:11:dd:44:75:4b:23:40:8a:39:6a:cc:53:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: Mar 24 15:25:00 2026 GMT Not After : Mar 27 19:49:00 2026 GMT Subject: CN=0D8BFB56273AC4F1DC223949A0C4ECEFE1AF2B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:df:22:09:5f:95:89:47:bd:99:7b:9c:e4: d7:f9:06:ac:20:e1:68:48:8b:3a:ac:47:36:19:a9: 23:7a:23:57:4b:a9:6d:15:eb:89:0a:99:56:70:f9: e5:b4:38:b6:1e:89:93:ae:48:33:9b:d2:c9:74:90: 66:7e:0e:60:1c:6c:c5:c6:d0:b0:a0:e1:0a:f8:0a: aa:48:df:37:9b:51:ef:86:1b:57:f8:ed:81:8f:07: 48:74:3e:96:4b:46:2a:6b:cc:bf:b8:be:4b:9f:a1: a2:89:b1:3a:25:b2:d6:f7:45:42:84:ae:df:76:c0: 6a:50:51:5d:ee:23:3e:fb:36:17:cd:ba:5a:10:85: 6c:f6:19:68:f8:5e:8a:58:5b:37:86:ef:28:67:64: 35:bd:db:1a:a5:c6:08:9d:46:9d:84:07:fe:db:1c: 00:27:55:60:86:9d:af:4e:df:b7:36:a6:f0:f4:40: ec:77:0d:79:43:c8:06:36:4e:ab:f6:a8:83:ff:5b: c2:ae:c9:6f:b6:44:2a:fe:be:f4:54:ce:9e:73:46: f8:12:1d:26:8a:1b:17:0d:9a:eb:d1:c9:0b:64:d9: 42:06:c4:05:03:af:2c:d6:6f:bc:98:97:d4:3e:12: 13:db:46:a8:76:53:be:00:bd:6a:fe:a7:28:ce:33: 1e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8B:FB:56:27:3A:C4:F1:DC:22:39:49:A0:C4:EC:EF:E1:AF:2B:48 X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:91:0c:c1:b9:aa:ac:ea:1c:e8:67:f5:72:51:67:71:5f:26: 60:06:5b:1d:61:b4:78:e2:ae:08:13:77:8d:50:8e:fa:d7:0d: 96:2b:cc:89:70:64:a2:7e:0e:62:39:16:06:ef:1d:70:8f:fb: fe:83:80:b2:d6:14:9a:af:4e:67:f5:8e:c3:1c:eb:d3:cc:f4: 7c:b9:70:d5:9a:63:37:81:a0:e2:61:58:5e:d3:57:ff:37:bc: b0:4a:9d:07:26:6b:39:76:d5:db:d3:62:09:1b:16:3a:89:8a: f1:0d:77:c6:58:42:ec:f8:df:ab:6a:47:af:f8:27:c9:d3:99: 5a:a4:79:a0:3d:27:b3:ba:92:36:e1:5b:ea:f8:a7:06:32:8b: e4:26:37:a6:05:8e:fe:b9:24:78:5b:f1:e3:8d:fe:2d:7e:50: 53:b9:91:86:f9:db:18:14:20:a5:38:d7:2f:71:00:66:39:8b: 59:8b:7b:3f:02:d5:44:ab:c9:ea:e6:13:a4:31:32:7e:ff:a4: 65:47:5c:26:e3:34:6f:c9:39:2e:e1:97:66:25:35:b2:54:1c: 8a:ca:ce:ed:8b:8c:55:31:03:1b:c7:ab:24:75:dd:cb:be:0d: 1a:b0:14:56:82:4f:d4:b4:08:0d:b1:da:01:97:4f:d8:5b:45: 86:68:90:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhY77C58DBHdRHVLI0CKOWrMU5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNjAzMjQxNTI1MDBaFw0yNjAzMjcxOTQ5MDBaMDMxMTAvBgNV BAMTKDBEOEJGQjU2MjczQUM0RjFEQzIyMzk0OUEwQzRFQ0VGRTFBRjJCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVg98iCV+ViUe9mXuc5Nf5Bqwg 4WhIizqsRzYZqSN6I1dLqW0V64kKmVZw+eW0OLYeiZOuSDOb0sl0kGZ+DmAcbMXG 0LCg4Qr4CqpI3zebUe+GG1f47YGPB0h0PpZLRiprzL+4vkufoaKJsTolstb3RUKE rt92wGpQUV3uIz77NhfNuloQhWz2GWj4XopYWzeG7yhnZDW92xqlxgidRp2EB/7b HAAnVWCGna9O37c2pvD0QOx3DXlDyAY2Tqv2qIP/W8KuyW+2RCr+vvRUzp5zRvgS HSaKGxcNmuvRyQtk2UIGxAUDryzWb7yYl9Q+EhPbRqh2U74AvWr+pyjOMx6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDYv7Vic6xPHcIjlJoMTs7+GvK0gwHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKRDMG5qqzqHOhn9XJRZ3FfJmAGWx1htHji rggTd41QjvrXDZYrzIlwZKJ+DmI5FgbvHXCP+/6DgLLWFJqvTmf1jsMc69PM9Hy5 cNWaYzeBoOJhWF7TV/83vLBKnQcmazl21dvTYgkbFjqJivENd8ZYQuz436tqR6/4 J8nTmVqkeaA9J7O6kjbhW+r4pwYyi+QmN6YFjv65JHhb8eON/i1+UFO5kYb52xgU IKU41y9xAGY5i1mLez8C1USryermE6QxMn7/pGVHXCbjNG/JOS7hl2YlNbJUHIrK zu2LjFUxAxvHqyR13cu+DRqwFFaCT9S0CA2x2gGXT9hbRYZokKc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:28 2026 by rpki-client