$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: EXs/O0ps+K63k+LILlUV/bZJQ7+A7BCQ3JJ29i2j/FM= Subject key identifier: 5A:AA:17:FF:98:EC:4E:40:7F:80:34:DB:66:34:79:EE:61:86:E1:E0 Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 29FBD0E9A44D12A9BD4D59180AB3442C27B4951D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 01B1 Signing time: Fri 22 Aug 2025 17:51:00 +0000 Manifest this update: Fri 22 Aug 2025 17:46:00 +0000 Manifest next update: Tue 26 Aug 2025 00:28:00 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: jhXwvm76xZEU8Tl7/bB22wkTfk62gu8iDO36yVUUrx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fb:d0:e9:a4:4d:12:a9:bd:4d:59:18:0a:b3:44:2c:27:b4:95:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: Aug 22 17:46:00 2025 GMT Not After : Aug 26 00:28:00 2025 GMT Subject: CN=5AAA17FF98EC4E407F8034DB663479EE6186E1E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:46:1f:32:8c:ce:ed:62:71:55:0f:fa:15:6d: e6:13:be:26:3b:8f:aa:25:00:e6:d8:26:b1:b4:ec: ba:24:7d:5b:9b:27:03:34:33:06:76:07:9b:c6:60: b2:b3:8f:99:e1:a4:98:00:ea:0d:1d:bc:05:03:ef: 9c:23:a9:e4:2c:45:55:0f:23:e9:1f:39:d7:43:55: be:d9:e9:db:16:fe:32:24:f4:75:5b:bf:c8:bc:f3: 5b:35:35:79:48:1c:34:76:7b:7f:d4:ad:a6:ce:62: 96:b4:69:83:71:9b:ba:0f:ce:e0:cb:fc:8d:7c:8d: 27:9a:d3:5d:d9:09:7b:f1:9d:7e:2c:10:e6:29:12: 31:19:5c:60:70:b2:65:92:a7:62:30:a8:b3:11:10: ca:f4:28:51:05:eb:69:56:4d:17:e0:ca:ee:6a:69: bc:5f:1c:71:58:b6:40:8d:8a:9d:34:66:4c:4d:38: 29:af:0d:bf:57:5d:ba:76:e3:c3:ca:a5:4c:e9:d4: 2e:4d:a6:dd:e6:ad:14:42:be:d4:8d:72:ff:16:f9: ed:2d:1e:8c:e8:ec:05:98:a8:e0:4e:a2:e6:d4:1c: fc:8f:6b:c3:9c:80:04:fd:3b:e9:a6:72:b5:e5:eb: 8e:cf:b3:7b:bb:37:d9:47:ff:b7:37:c9:1f:3e:0f: e9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AA:17:FF:98:EC:4E:40:7F:80:34:DB:66:34:79:EE:61:86:E1:E0 X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:07:17:9d:bb:a6:72:4c:09:e1:d7:7c:76:83:fa:ea:8c:7d: 1e:46:c1:11:41:a0:21:7c:34:1b:14:56:63:65:dc:5c:73:f6: dc:9d:e5:6b:0b:2b:16:5c:d4:00:8b:00:59:e5:b2:bc:df:50: bd:5c:96:6e:54:da:04:f5:07:8a:c8:8d:1a:c9:c8:4c:6a:b5: 94:19:8e:88:69:1a:b4:02:00:4d:7e:57:03:4d:3b:74:76:ec: 7a:ca:fa:be:40:a0:03:c5:9a:35:d1:cf:99:51:7f:01:4f:2e: e5:f2:89:31:ad:24:fc:f9:56:a6:39:db:05:07:eb:e7:c5:ad: fe:cb:1f:80:72:78:4b:91:1b:fc:ec:61:1b:a7:b8:e5:d3:77: 53:a5:15:42:bb:3e:7b:14:48:88:e2:31:d4:9f:1e:b1:42:d0: be:94:31:cb:3e:66:39:51:1b:dd:7a:2a:67:59:78:9d:0e:81: d9:06:fc:0d:2b:9e:5d:37:2b:1f:df:19:30:10:2a:9a:ad:b4: 08:0e:cd:61:69:11:84:b2:f4:4e:7d:dd:45:91:ea:ba:c1:31: 72:25:a3:69:4e:96:f5:50:1f:84:76:da:28:1d:f6:ab:fa:b5: a2:ba:c3:ef:bd:2a:db:d9:39:cd:9d:92:a0:98:7c:f8:ac:63: eb:9a:fa:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfvQ6aRNEqm9TVkYCrNELCe0lR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNTA4MjIxNzQ2MDBaFw0yNTA4MjYwMDI4MDBaMDMxMTAvBgNV BAMTKDVBQUExN0ZGOThFQzRFNDA3RjgwMzREQjY2MzQ3OUVFNjE4NkUxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXRh8yjM7tYnFVD/oVbeYTviY7 j6olAObYJrG07LokfVubJwM0MwZ2B5vGYLKzj5nhpJgA6g0dvAUD75wjqeQsRVUP I+kfOddDVb7Z6dsW/jIk9HVbv8i881s1NXlIHDR2e3/UrabOYpa0aYNxm7oPzuDL /I18jSea013ZCXvxnX4sEOYpEjEZXGBwsmWSp2IwqLMREMr0KFEF62lWTRfgyu5q abxfHHFYtkCNip00ZkxNOCmvDb9XXbp248PKpUzp1C5Npt3mrRRCvtSNcv8W+e0t Hozo7AWYqOBOoubUHPyPa8OcgAT9O+mmcrXl647Ps3u7N9lH/7c3yR8+D+mTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWqoX/5jsTkB/gDTbZjR57mGG4eAwHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkHF527pnJMCeHXfHaD+uqMfR5GwRFBoCF8 NBsUVmNl3Fxz9tyd5WsLKxZc1ACLAFnlsrzfUL1clm5U2gT1B4rIjRrJyExqtZQZ johpGrQCAE1+VwNNO3R27HrK+r5AoAPFmjXRz5lRfwFPLuXyiTGtJPz5VqY52wUH 6+fFrf7LH4ByeEuRG/zsYRunuOXTd1OlFUK7PnsUSIjiMdSfHrFC0L6UMcs+ZjlR G916KmdZeJ0OgdkG/A0rnl03Kx/fGTAQKpqttAgOzWFpEYSy9E593UWR6rrBMXIl o2lOlvVQH4R22igd9qv6taK6w++9KtvZOc2dkqCYfPisY+ua+vs= -----END CERTIFICATE-----Generated at Sat Aug 23 13:28:42 2025 by rpki-client