$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json) Hash identifier: VMl027s3T175lw7kEHi3OB5jKRVaoveIINGfbzWkwac= Subject key identifier: 0C:DD:2D:99:85:57:A8:92:59:6F:63:CF:98:3C:28:72:3B:59:91:0A Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 434C5104B95A25F4DE6EEEECC43F47B9681FEA60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft Manifest number: 0384 Signing time: Sun 19 Oct 2025 05:50:01 +0000 Manifest this update: Sun 19 Oct 2025 05:45:01 +0000 Manifest next update: Wed 22 Oct 2025 10:42:01 +0000 Files and hashes: 1: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 4RAEHcKydfbmdG7JZ2oBClEPFrTNelxiK32dkCNM718=) 2: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: uQ2lNYFZctQjtseGT/wzHT4giq7wlDo/uVXWwYPTnAY=) 3: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: +MCnvcw+GepufqbE+ysXzBIWRSKTDHm31gVdNbZ9ins=) 4: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: HtvdbgNzbep41tsSwxpJVENDrPCo93IVN9YGCXSL+Js=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4c:51:04:b9:5a:25:f4:de:6e:ee:ec:c4:3f:47:b9:68:1f:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Oct 19 05:45:01 2025 GMT Not After : Oct 22 10:42:01 2025 GMT Subject: CN=0CDD2D998557A892596F63CF983C28723B59910A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:03:f1:5f:d1:bd:0b:f1:66:a4:25:a1:5b: 1a:a1:32:3d:70:33:08:bd:c0:a3:a3:13:2a:af:e6: 30:21:8e:a8:ba:ab:59:db:d7:de:de:46:a3:58:65: 3d:d4:97:6c:52:b8:e6:63:76:8f:a4:a3:9d:b6:a2: 15:20:96:37:6f:e3:5c:d2:81:76:3d:f6:ab:b4:da: 58:f1:34:6a:25:f2:8c:e0:5a:e3:dd:6d:4d:8d:df: 2e:93:33:9e:80:71:bc:e6:59:a3:36:cc:d0:28:97: 33:d1:56:ff:1c:52:45:2c:bd:91:3d:19:33:c4:2e: 69:56:88:f6:90:f8:5a:4d:e1:2f:da:61:65:51:53: 94:57:79:35:e5:fb:de:ef:d7:1e:7a:f7:95:f1:b4: 7c:4f:ad:9e:1e:b5:5d:4c:1c:59:ff:24:9b:cd:4d: 95:e0:c4:4c:19:b2:2c:51:d6:ee:ef:86:d8:ae:eb: 15:3f:e2:7b:7c:a7:51:c9:7c:ed:5c:50:fb:18:d0: 6d:7c:9b:56:b6:79:23:5d:5d:47:a7:3e:7c:e6:c6: 44:e2:e9:69:45:32:ba:20:6a:74:0d:84:25:ab:70: 67:38:7d:27:7e:8e:1a:f8:b7:60:6b:97:d0:03:d6: c5:2a:42:37:b0:62:29:ec:6f:0d:ef:79:55:3f:7a: 2d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DD:2D:99:85:57:A8:92:59:6F:63:CF:98:3C:28:72:3B:59:91:0A X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:c8:07:07:e0:09:80:3d:c9:5f:22:bf:b2:75:7f:9e:b6:a8: 5d:65:b8:5e:77:47:95:78:85:cc:7d:18:1c:ee:6a:c7:41:d6: c9:97:6f:08:17:b0:64:1f:81:de:c4:d1:b5:6e:b3:d6:2a:d3: 81:e2:34:53:3b:b2:f0:7e:e0:64:0e:ef:8f:72:82:e6:d0:47: 81:0e:63:e0:5d:d9:5e:65:29:b1:5b:5d:1e:92:38:4b:6a:1f: 6b:09:8b:bd:78:0b:73:f0:24:ce:29:a0:36:e2:03:0f:9a:51: 42:d8:10:2e:e5:1d:91:76:36:f6:52:6f:79:c1:4b:da:fa:31: 87:a4:b0:5a:96:33:47:1d:66:43:3a:3b:6e:dd:7f:e1:f3:aa: 60:02:48:b5:5e:22:3b:e4:ae:1a:9d:29:d1:96:d8:4a:dc:f5: e5:1f:94:cf:5a:d2:ae:ab:b2:d7:61:b0:50:43:d8:0c:20:fb: db:28:ec:8f:93:df:bb:60:92:b4:58:9b:70:06:fb:86:1a:d7: 55:6b:33:a9:a3:2d:8e:95:da:19:9a:84:bc:ed:77:ab:c4:9a: 11:60:61:c3:96:af:e3:1b:a7:44:76:0e:04:3d:08:5a:33:2f: d7:10:cb:2f:17:3f:ab:b1:c5:fc:b1:fd:5e:45:f7:d7:3a:a3: 40:d5:64:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0xRBLlaJfTebu7sxD9HuWgf6mAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNTEwMTkwNTQ1MDFaFw0yNTEwMjIxMDQyMDFaMDMxMTAvBgNV BAMTKDBDREQyRDk5ODU1N0E4OTI1OTZGNjNDRjk4M0MyODcyM0I1OTkxMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnwPxX9G9C/FmpCWhWxqhMj1w Mwi9wKOjEyqv5jAhjqi6q1nb197eRqNYZT3Ul2xSuOZjdo+ko522ohUgljdv41zS gXY99qu02ljxNGol8ozgWuPdbU2N3y6TM56AcbzmWaM2zNAolzPRVv8cUkUsvZE9 GTPELmlWiPaQ+FpN4S/aYWVRU5RXeTXl+97v1x5695XxtHxPrZ4etV1MHFn/JJvN TZXgxEwZsixR1u7vhtiu6xU/4nt8p1HJfO1cUPsY0G18m1a2eSNdXUenPnzmxkTi 6WlFMroganQNhCWrcGc4fSd+jhr4t2Brl9AD1sUqQjewYinsbw3veVU/ei0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDN0tmYVXqJJZb2PPmDwocjtZkQowHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEz RDQ2MTc1NThBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMHIBwfgCYA9yV8iv7J1f562qF1luF53R5V4 hcx9GBzuasdB1smXbwgXsGQfgd7E0bVus9Yq04HiNFM7svB+4GQO749ygubQR4EO Y+Bd2V5lKbFbXR6SOEtqH2sJi714C3PwJM4poDbiAw+aUULYEC7lHZF2NvZSb3nB S9r6MYeksFqWM0cdZkM6O27df+HzqmACSLVeIjvkrhqdKdGW2Erc9eUflM9a0q6r stdhsFBD2Awg+9so7I+T37tgkrRYm3AG+4Ya11VrM6mjLY6V2hmahLztd6vEmhFg YcOWr+Mbp0R2DgQ9CFozL9cQyy8XP6uxxfyx/V5F99c6o0DVZEM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:06 2025 by rpki-client