$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: 9Q4wcd2QBs597zXto3klsY5fb26ObLYREPHA2wxo9mk= Subject key identifier: 88:81:1F:91:8B:1F:A9:97:54:17:64:17:A7:4A:1D:F3:4A:90:A7:42 Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 5DEB63B68707F0E627E484DCDC0A5FCC6FD942BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 01CB Signing time: Sun 19 Oct 2025 02:21:00 +0000 Manifest this update: Sun 19 Oct 2025 02:16:00 +0000 Manifest next update: Wed 22 Oct 2025 13:16:00 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: 6ppFcBqvrapwdRwVNjlhIKLUO9/WpIZ7YyryDQF+iZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:eb:63:b6:87:07:f0:e6:27:e4:84:dc:dc:0a:5f:cc:6f:d9:42:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: Oct 19 02:16:00 2025 GMT Not After : Oct 22 13:16:00 2025 GMT Subject: CN=88811F918B1FA99754176417A74A1DF34A90A742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:34:c7:50:82:da:e0:e9:f7:dd:a4:72:0e: c9:76:14:bc:60:6a:db:9f:a4:79:5a:73:51:2b:95: d5:68:7f:ea:3e:bf:f6:96:5a:36:8a:54:4b:6a:76: f1:72:90:46:f3:1e:27:cb:29:47:c4:7b:78:8d:18: 4d:7f:c7:1b:40:ed:55:40:1d:59:90:f8:50:44:c9: 5b:29:2d:d8:84:57:49:bd:89:99:a3:a2:7f:ef:80: 50:a4:ac:f3:d7:e7:3e:ae:e6:68:5f:70:41:00:6b: 96:11:39:e7:33:9d:24:f3:dd:1d:bf:ba:95:5a:47: 02:94:93:fd:38:eb:c0:fc:c2:ed:26:9c:d7:f9:7c: fe:e5:eb:94:0c:7e:be:21:5b:ba:00:23:be:c6:a0: 09:a3:3c:fb:5e:21:39:a8:8a:a5:e1:ec:55:e6:ca: 58:ab:bd:db:30:5f:1d:1c:d7:d5:9c:8e:a8:81:5f: e7:3a:8c:5b:25:55:33:ed:85:9f:f1:1d:d4:5e:80: a6:f0:16:6a:e5:ee:4d:78:82:57:45:d3:7b:5a:33: 92:0e:60:19:5b:0d:ae:b5:78:c3:28:d4:13:59:2a: c6:ef:04:ff:bf:8e:0f:e5:e8:40:94:55:75:f4:a7: 88:d3:05:3f:25:aa:e7:98:7f:da:62:34:1f:11:fd: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:81:1F:91:8B:1F:A9:97:54:17:64:17:A7:4A:1D:F3:4A:90:A7:42 X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fb:99:04:02:70:fb:46:ce:6c:d6:d5:d9:83:c3:ad:9b:ee: 0e:94:bb:83:2c:1f:47:e1:4d:9d:0a:27:eb:62:92:fb:5f:05: b9:c7:a0:b6:92:2f:15:f9:50:00:35:c7:8c:f9:20:af:3f:b8: e8:0e:9d:08:41:59:0e:25:6b:78:09:1e:b3:15:bb:c9:b7:6d: ff:fc:71:1f:b9:63:78:8f:ee:d9:22:cf:8b:12:d7:a6:29:69: c8:d7:6d:78:3a:87:39:06:b5:88:9c:4a:b1:f9:9c:80:d9:01: ca:e4:ec:10:ef:24:53:73:e6:96:62:35:ff:d6:53:f3:e5:84: 1a:65:8c:52:d1:d5:4a:1f:f8:1d:ca:77:ad:d4:e8:ad:5a:88: 43:7f:86:c2:fb:e5:89:fc:46:98:ef:a8:49:de:5a:a0:84:9e: 94:84:5d:01:d9:bd:13:b0:06:f4:b1:ed:da:89:e7:2c:c8:a1: 2b:8f:0a:fa:ae:9a:51:79:8e:2e:c3:91:36:ad:34:b3:13:ba: a3:7b:86:f5:74:94:59:39:ba:c6:76:53:8c:4e:a0:2f:98:14: f1:95:66:1e:cd:a1:e4:2f:a2:f6:75:a0:f8:63:96:dd:48:13: df:cd:da:08:c4:9e:2a:ca:09:22:6d:1d:19:d1:44:57:ee:b6: 50:17:74:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXetjtocH8OYn5ITc3ApfzG/ZQr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNTEwMTkwMjE2MDBaFw0yNTEwMjIxMzE2MDBaMDMxMTAvBgNV BAMTKDg4ODExRjkxOEIxRkE5OTc1NDE3NjQxN0E3NEExREYzNEE5MEE3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7UTTHUILa4On33aRyDsl2FLxg atufpHlac1ErldVof+o+v/aWWjaKVEtqdvFykEbzHifLKUfEe3iNGE1/xxtA7VVA HVmQ+FBEyVspLdiEV0m9iZmjon/vgFCkrPPX5z6u5mhfcEEAa5YROecznSTz3R2/ upVaRwKUk/0468D8wu0mnNf5fP7l65QMfr4hW7oAI77GoAmjPPteITmoiqXh7FXm ylirvdswXx0c19WcjqiBX+c6jFslVTPthZ/xHdRegKbwFmrl7k14gldF03taM5IO YBlbDa61eMMo1BNZKsbvBP+/jg/l6ECUVXX0p4jTBT8lqueYf9piNB8R/WKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiIEfkYsfqZdUF2QXp0od80qQp0IwHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFn7mQQCcPtGzmzW1dmDw62b7g6Uu4MsH0fh TZ0KJ+tikvtfBbnHoLaSLxX5UAA1x4z5IK8/uOgOnQhBWQ4la3gJHrMVu8m3bf/8 cR+5Y3iP7tkiz4sS16YpacjXbXg6hzkGtYicSrH5nIDZAcrk7BDvJFNz5pZiNf/W U/PlhBpljFLR1Uof+B3Kd63U6K1aiEN/hsL75Yn8RpjvqEneWqCEnpSEXQHZvROw BvSx7dqJ5yzIoSuPCvqumlF5ji7DkTatNLMTuqN7hvV0lFk5usZ2U4xOoC+YFPGV Zh7NoeQvovZ1oPhjlt1IE9/N2gjEnirKCSJtHRnRRFfutlAXdI0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:27:21 2025 by rpki-client