$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json) Hash identifier: ucIroyjigLsLrz/VxIZtTF70ZN5qs2JfkHxWFGwiqHs= Subject key identifier: A9:59:EC:9C:25:63:59:E8:96:0F:B2:46:AA:C7:7D:E4:71:96:01:F7 Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 30896037E48BB1FF6D13F167E69C0E1B53A78A3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft Manifest number: 036A Signing time: Fri 22 Aug 2025 09:10:01 +0000 Manifest this update: Fri 22 Aug 2025 09:05:01 +0000 Manifest next update: Mon 25 Aug 2025 11:14:01 +0000 Files and hashes: 1: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 4RAEHcKydfbmdG7JZ2oBClEPFrTNelxiK32dkCNM718=) 2: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: jdbJTx/TNJXLWNMN6kXsXwxwKhrOKyGmqkEQF6645H4=) 3: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: HtvdbgNzbep41tsSwxpJVENDrPCo93IVN9YGCXSL+Js=) 4: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: uQ2lNYFZctQjtseGT/wzHT4giq7wlDo/uVXWwYPTnAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:89:60:37:e4:8b:b1:ff:6d:13:f1:67:e6:9c:0e:1b:53:a7:8a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Aug 22 09:05:01 2025 GMT Not After : Aug 25 11:14:01 2025 GMT Subject: CN=A959EC9C256359E8960FB246AAC77DE4719601F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:26:7d:f9:41:ff:76:b6:52:38:7d:14:58: 2d:85:da:58:27:35:0d:cf:db:5c:d3:4b:6f:dd:47: 45:da:3a:57:55:25:7e:8f:3c:dc:05:06:d0:2d:93: 72:5e:eb:2c:b9:f6:1f:5b:7b:f9:20:19:bd:a0:19: 19:11:1b:9c:6e:f7:7c:8d:da:80:ef:09:e5:87:a0: 46:c9:53:1e:b7:a4:66:08:92:ac:15:aa:7b:37:61: dc:fd:aa:b3:34:d7:82:10:f7:9c:0b:46:04:20:27: c3:e4:94:3a:34:3c:89:22:7c:25:c7:99:97:b2:84: a2:c0:28:7c:51:b0:d3:a9:92:05:21:a0:66:a8:58: 00:8c:e7:cc:62:ec:7d:95:e2:e6:a5:71:1f:d0:c9: 77:2d:b1:13:8a:77:12:11:ee:4c:53:d5:c1:ad:a0: fe:2f:01:fa:13:50:2d:fa:a7:6f:09:e0:8f:4d:f6: 8f:91:8e:40:05:82:ff:c0:c7:c1:0d:b9:73:44:1a: b7:42:d8:0e:1b:0f:52:4a:7d:0b:da:e6:ee:fc:3b: 77:94:77:1c:28:5c:21:50:82:04:bf:c2:96:4f:41: 0a:12:15:2d:61:3e:6f:b8:30:a9:9d:be:96:c0:3c: 0d:a1:dd:cd:07:e0:1c:e9:5f:fb:6a:51:fb:50:4c: a0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:59:EC:9C:25:63:59:E8:96:0F:B2:46:AA:C7:7D:E4:71:96:01:F7 X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f5:93:e1:17:b6:fc:3f:05:4e:8f:0e:cd:3b:f1:f9:8a:dc: 40:91:02:67:01:b8:64:e2:e8:f7:ba:7f:b2:60:f5:8d:30:00: 56:f0:8e:56:a1:c9:d5:ee:4a:02:ed:e1:c7:35:bc:d8:e5:c4: 37:87:e0:38:81:ac:d9:49:5c:b6:32:d8:4f:62:dd:d2:ab:c5: 34:8d:8e:8a:e1:e3:d6:6c:77:ae:a9:57:c3:d3:10:ce:94:9c: df:6b:a0:34:8d:e8:95:3b:06:f9:2d:a0:dd:9c:82:ec:5d:b5: 55:ed:25:63:88:97:88:06:fc:d0:93:e4:73:7c:1c:c0:e5:56: 85:a4:60:55:8b:65:79:3c:8a:c6:6e:e3:b5:98:d8:cb:e7:19: 98:2c:ff:9c:ce:71:82:95:b1:df:04:5e:44:77:81:57:e5:e0: f9:d4:34:0d:99:5a:d3:42:b9:30:e4:12:ae:cc:2d:83:e9:a2: 7b:83:9c:bf:d8:2d:e6:01:68:3a:44:f2:a7:83:6e:47:2b:81: 4f:a0:14:68:40:e3:53:38:ff:4b:c7:34:ea:74:59:83:e3:f7: 85:66:99:af:6c:d1:3f:df:10:25:2b:9a:c7:05:ba:b9:ce:b6: 02:ff:03:8a:9c:47:87:af:67:2e:ef:66:90:21:0a:9d:24:2b: de:df:a1:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMIlgN+SLsf9tE/Fn5pwOG1Onij4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNTA4MjIwOTA1MDFaFw0yNTA4MjUxMTE0MDFaMDMxMTAvBgNV BAMTKEE5NTlFQzlDMjU2MzU5RTg5NjBGQjI0NkFBQzc3REU0NzE5NjAxRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74SZ9+UH/drZSOH0UWC2F2lgn NQ3P21zTS2/dR0XaOldVJX6PPNwFBtAtk3Je6yy59h9be/kgGb2gGRkRG5xu93yN 2oDvCeWHoEbJUx63pGYIkqwVqns3Ydz9qrM014IQ95wLRgQgJ8PklDo0PIkifCXH mZeyhKLAKHxRsNOpkgUhoGaoWACM58xi7H2V4ualcR/QyXctsROKdxIR7kxT1cGt oP4vAfoTUC36p28J4I9N9o+RjkAFgv/Ax8ENuXNEGrdC2A4bD1JKfQva5u78O3eU dxwoXCFQggS/wpZPQQoSFS1hPm+4MKmdvpbAPA2h3c0H4BzpX/tqUftQTKBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqVnsnCVjWeiWD7JGqsd95HGWAfcwHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEz RDQ2MTc1NThBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHn1k+EXtvw/BU6PDs078fmK3ECRAmcBuGTi 6Pe6f7Jg9Y0wAFbwjlahydXuSgLt4cc1vNjlxDeH4DiBrNlJXLYy2E9i3dKrxTSN jorh49Zsd66pV8PTEM6UnN9roDSN6JU7BvktoN2cguxdtVXtJWOIl4gG/NCT5HN8 HMDlVoWkYFWLZXk8isZu47WY2MvnGZgs/5zOcYKVsd8EXkR3gVfl4PnUNA2ZWtNC uTDkEq7MLYPponuDnL/YLeYBaDpE8qeDbkcrgU+gFGhA41M4/0vHNOp0WYPj94Vm ma9s0T/fECUrmscFurnOtgL/A4qcR4evZy7vZpAhCp0kK97fobk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:05 2025 by rpki-client