$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json) Hash identifier: FEIy9J4bVuPfMe2YbJO3PeDluLzcflp03JAeZGdqAm0= Subject key identifier: 92:1F:2A:B5:C7:90:12:58:AD:77:92:56:F8:38:25:F9:58:59:C2:9C Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 5EAC562D69F21D849A94ADFF115DA42B9C44DD68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft Manifest number: 0352 Signing time: Sun 29 Jun 2025 17:40:01 +0000 Manifest this update: Sun 29 Jun 2025 17:35:01 +0000 Manifest next update: Thu 03 Jul 2025 01:15:01 +0000 Files and hashes: 1: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: uQ2lNYFZctQjtseGT/wzHT4giq7wlDo/uVXWwYPTnAY=) 2: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: HtvdbgNzbep41tsSwxpJVENDrPCo93IVN9YGCXSL+Js=) 3: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: OO7NPqoTg0GxWZYOR4XcJpqjY+xIELjcEZZDEnYM9zc=) 4: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 4RAEHcKydfbmdG7JZ2oBClEPFrTNelxiK32dkCNM718=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 01:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ac:56:2d:69:f2:1d:84:9a:94:ad:ff:11:5d:a4:2b:9c:44:dd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Jun 29 17:35:01 2025 GMT Not After : Jul 3 01:15:01 2025 GMT Subject: CN=921F2AB5C7901258AD779256F83825F95859C29C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:a4:5b:57:2e:b6:64:e8:32:66:4d:5b:4d: c5:c0:4e:96:66:a7:30:21:ad:e2:70:06:b0:37:b0: d1:44:02:d1:4e:9d:6d:f8:9b:2b:2f:8e:50:7a:3d: 98:5a:cb:b5:74:9f:41:21:21:8f:62:be:a8:ce:72: fc:cd:6f:05:24:fa:e8:dd:29:7b:67:00:78:b3:86: 56:88:09:4a:e6:c9:8d:27:bc:50:56:fa:00:85:99: 68:35:08:19:a2:6d:30:bf:90:01:7f:54:24:cb:86: 51:73:31:2d:51:ed:78:ea:b7:3c:81:7d:9c:0f:4d: ea:94:60:0e:62:87:de:7d:92:77:8d:60:48:02:d1: ca:e9:7a:54:aa:8d:0b:41:5e:54:09:b4:7e:46:73: 66:3f:ab:97:bf:68:3c:38:1c:a4:81:57:f9:f8:eb: ec:85:5a:4d:74:ff:dc:08:9e:70:84:b7:94:d6:09: 93:07:c3:3d:31:58:8a:25:41:48:34:6c:ee:2b:d7: 09:ea:f5:2d:41:51:39:5d:be:fd:81:54:37:0c:af: e0:af:1a:d0:24:5a:eb:ea:76:35:d2:13:bd:3e:19: 9f:86:cb:59:19:be:4f:b0:a5:8c:26:b6:9d:8a:6c: 23:f6:0e:b9:86:89:c7:a1:50:ef:2b:7e:61:c0:f6: 17:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1F:2A:B5:C7:90:12:58:AD:77:92:56:F8:38:25:F9:58:59:C2:9C X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:e3:69:b1:f5:b7:6d:00:fd:f7:ba:b8:b4:a7:1d:d0:76:c0: ec:45:9f:94:20:6f:ca:1c:82:51:1d:12:87:b9:41:f8:a9:cd: ca:ac:fc:fc:2b:81:a6:56:8c:d4:2b:fa:f4:8a:c9:86:e1:e0: d6:be:0a:70:e9:92:ab:90:ce:ff:b2:65:fe:3e:2f:8c:b7:bd: 27:ee:e7:39:26:4b:ad:0e:00:15:1a:8f:f4:0d:30:be:07:18: 55:5d:e3:16:a9:01:f6:2a:bb:9f:9c:ed:c5:d1:dc:3a:80:81: 27:cd:de:6d:bf:b2:70:f8:3c:f9:3c:e3:3d:90:fe:70:1b:02: f4:d0:20:42:21:4a:2a:67:4c:55:31:8e:0c:9b:57:f0:a0:f8: 7c:d2:f8:0d:c4:10:1f:0a:3a:b8:da:ec:e1:91:7a:09:59:d8: d8:3f:a6:fc:77:6a:9d:cc:c2:e1:7d:fe:d4:e2:53:f6:eb:91: 8c:dd:23:c9:fe:77:d1:c9:40:bf:d4:68:e7:81:a2:32:94:ed: 08:55:8d:70:84:d7:07:19:4e:3f:87:ab:94:1f:bd:65:a6:1c: a8:f7:c5:6b:f9:18:93:86:8c:73:a1:84:38:2f:18:5c:bf:c9: d1:b2:ed:95:2d:bb:6f:96:ee:68:7e:23:e7:78:f7:e9:3a:7d: 80:94:9b:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqxWLWnyHYSalK3/EV2kK5xE3WgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNTA2MjkxNzM1MDFaFw0yNTA3MDMwMTE1MDFaMDMxMTAvBgNV BAMTKDkyMUYyQUI1Qzc5MDEyNThBRDc3OTI1NkY4MzgyNUY5NTg1OUMyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4haRbVy62ZOgyZk1bTcXATpZm pzAhreJwBrA3sNFEAtFOnW34mysvjlB6PZhay7V0n0EhIY9ivqjOcvzNbwUk+ujd KXtnAHizhlaICUrmyY0nvFBW+gCFmWg1CBmibTC/kAF/VCTLhlFzMS1R7XjqtzyB fZwPTeqUYA5ih959kneNYEgC0crpelSqjQtBXlQJtH5Gc2Y/q5e/aDw4HKSBV/n4 6+yFWk10/9wInnCEt5TWCZMHwz0xWIolQUg0bO4r1wnq9S1BUTldvv2BVDcMr+Cv GtAkWuvqdjXSE70+GZ+Gy1kZvk+wpYwmtp2KbCP2DrmGicehUO8rfmHA9hdjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkh8qtceQElitd5JW+Dgl+VhZwpwwHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEz RDQ2MTc1NThBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvjabH1t20A/fe6uLSnHdB2wOxFn5Qgb8oc glEdEoe5Qfipzcqs/PwrgaZWjNQr+vSKyYbh4Na+CnDpkquQzv+yZf4+L4y3vSfu 5zkmS60OABUaj/QNML4HGFVd4xapAfYqu5+c7cXR3DqAgSfN3m2/snD4PPk84z2Q /nAbAvTQIEIhSipnTFUxjgybV/Cg+HzS+A3EEB8KOrja7OGReglZ2Ng/pvx3ap3M wuF9/tTiU/brkYzdI8n+d9HJQL/UaOeBojKU7QhVjXCE1wcZTj+Hq5QfvWWmHKj3 xWv5GJOGjHOhhDgvGFy/ydGy7ZUtu2+W7mh+I+d49+k6fYCUm+M= -----END CERTIFICATE-----Generated at Tue Jul 1 17:19:24 2025 by rpki-client