$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: qDsR7ZMTh772UJDO/WX3MOd5eCf9okMZCD44hCR5E2I= Subject key identifier: F0:EC:1C:0C:89:E1:D2:1B:D5:4E:BD:06:FD:D8:68:B6:6D:42:81:12 Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 7B694A8862B7C1670A602314723A409B390A30BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 02DC Signing time: Fri 22 Aug 2025 13:00:00 +0000 Manifest this update: Fri 22 Aug 2025 12:55:00 +0000 Manifest next update: Mon 25 Aug 2025 18:17:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: eRPgvcXpZidnsyd9uVNvqmygMssomstSjMdiwGR6IH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:69:4a:88:62:b7:c1:67:0a:60:23:14:72:3a:40:9b:39:0a:30:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: Aug 22 12:55:00 2025 GMT Not After : Aug 25 18:17:00 2025 GMT Subject: CN=F0EC1C0C89E1D21BD54EBD06FDD868B66D428112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:86:8f:3a:63:92:94:c4:be:04:b2:2b:1a:c8: ba:a8:9a:a5:76:96:02:93:95:2c:3c:81:f1:8c:a6: 8d:1e:a8:cd:f7:61:c4:3f:86:29:fa:66:dd:a8:ef: 08:8b:27:b7:08:55:d3:e2:de:db:59:ef:32:6a:ed: 4d:b1:b1:e5:cc:22:a1:88:47:ef:cc:9e:bf:bb:b1: 30:0a:c2:69:13:a4:0c:1f:b7:e2:ac:5e:fb:39:22: 03:2d:85:ea:7b:db:ec:72:ef:5a:db:c1:81:b5:41: e8:fd:b9:b0:bd:aa:3a:3d:a5:9e:3e:f6:9f:8c:45: 6a:43:4d:48:c3:ff:0d:de:84:4e:d1:ea:9b:8a:50: f2:fb:81:49:81:00:1d:bc:21:81:b3:b4:d0:d3:ec: 55:02:57:63:f9:90:ce:38:c7:d0:47:4b:ba:e8:ef: 6f:6c:60:d9:f3:0b:f1:9f:12:c6:cd:d3:2a:90:ad: 2a:0c:d2:19:8f:b1:8f:fd:0c:d8:6e:35:6a:a5:86: 99:f9:12:52:05:1f:6a:f8:2c:9c:e9:6f:cf:de:78: 4d:e0:e2:6d:a4:11:2c:fd:e2:3d:45:02:62:e1:b8: 55:ec:32:4a:a9:1a:6b:50:f7:0f:0e:e5:4a:72:2b: 50:e9:86:ad:fd:e8:4a:3c:e2:e9:18:fb:86:06:ff: 81:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EC:1C:0C:89:E1:D2:1B:D5:4E:BD:06:FD:D8:68:B6:6D:42:81:12 X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c3:c1:ff:83:15:e7:19:07:62:db:36:9b:cf:1a:52:25:99: df:4d:dd:30:65:f0:4c:5e:7d:f4:31:7b:e2:6d:ce:74:8d:42: ea:a0:3e:9c:31:4d:dd:0f:f7:88:c3:aa:d6:30:a1:a0:47:d6: d2:0d:71:1c:fa:33:80:11:5e:97:ba:15:df:4f:90:58:17:d1: d0:cb:cb:60:e5:8c:2f:c5:fb:ca:3a:8f:d3:a9:e9:ea:45:91: 27:2f:27:34:c6:6c:66:fa:7d:4d:9d:bb:69:3d:d9:59:db:12: ad:a4:72:73:7a:00:ae:86:c2:4f:06:ba:e3:14:fa:35:f0:01: 91:f5:f5:ea:b7:3e:f8:c3:d6:f4:c4:a2:30:c0:ec:c5:29:9a: 41:34:0e:cc:2e:00:b8:2b:5f:68:5f:4e:4f:ac:c8:75:1b:ad: 13:50:66:9f:13:08:74:8e:41:d0:e8:06:9d:8b:41:29:76:25: d4:0e:b9:ee:32:64:3f:2a:92:f3:86:fa:71:1f:fd:8c:cd:14: a1:8c:c4:2c:53:c4:34:f8:37:88:78:e1:c2:84:4a:4b:d4:24: c9:83:3c:07:13:15:7a:5c:e0:6c:67:2a:55:9e:e5:0e:6a:c5: 33:93:09:ee:1f:d4:7a:ca:a1:79:8d:51:2a:da:7d:98:b4:72: 2a:a8:4d:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe2lKiGK3wWcKYCMUcjpAmzkKMLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNTA4MjIxMjU1MDBaFw0yNTA4MjUxODE3MDBaMDMxMTAvBgNV BAMTKEYwRUMxQzBDODlFMUQyMUJENTRFQkQwNkZERDg2OEI2NkQ0MjgxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdho86Y5KUxL4EsisayLqomqV2 lgKTlSw8gfGMpo0eqM33YcQ/hin6Zt2o7wiLJ7cIVdPi3ttZ7zJq7U2xseXMIqGI R+/Mnr+7sTAKwmkTpAwft+KsXvs5IgMthep72+xy71rbwYG1Qej9ubC9qjo9pZ4+ 9p+MRWpDTUjD/w3ehE7R6puKUPL7gUmBAB28IYGztNDT7FUCV2P5kM44x9BHS7ro 729sYNnzC/GfEsbN0yqQrSoM0hmPsY/9DNhuNWqlhpn5ElIFH2r4LJzpb8/eeE3g 4m2kESz94j1FAmLhuFXsMkqpGmtQ9w8O5UpyK1Dphq396Eo84ukY+4YG/4GNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8OwcDInh0hvVTr0G/dhotm1CgRIwHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTDwf+DFecZB2LbNpvPGlIlmd9N3TBl8Exe ffQxe+JtznSNQuqgPpwxTd0P94jDqtYwoaBH1tINcRz6M4ARXpe6Fd9PkFgX0dDL y2DljC/F+8o6j9Op6epFkScvJzTGbGb6fU2du2k92VnbEq2kcnN6AK6Gwk8GuuMU +jXwAZH19eq3PvjD1vTEojDA7MUpmkE0DswuALgrX2hfTk+syHUbrRNQZp8TCHSO QdDoBp2LQSl2JdQOue4yZD8qkvOG+nEf/YzNFKGMxCxTxDT4N4h44cKESkvUJMmD PAcTFXpc4GxnKlWe5Q5qxTOTCe4f1HrKoXmNUSrafZi0ciqoTTw= -----END CERTIFICATE-----Generated at Sat Aug 23 21:41:49 2025 by rpki-client