$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: WR4x2tqqzrYy8PUH/oWC4aNqBHmKyDUAD3JksBsLN/k= Subject key identifier: 63:3F:D8:9B:5E:C3:09:F9:F0:76:BC:1F:12:38:EC:4C:7D:42:8F:F3 Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 2F72F2CA0C7C958CE8E83C49238D3CD672F4F0E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 0198 Signing time: Sat 28 Jun 2025 00:20:58 +0000 Manifest this update: Sat 28 Jun 2025 00:15:58 +0000 Manifest next update: Tue 01 Jul 2025 10:11:58 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: MC9CiH9DNX7wpkowSVp+EJXx0IyrH3r5LBQuXRWzyDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 10:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:72:f2:ca:0c:7c:95:8c:e8:e8:3c:49:23:8d:3c:d6:72:f4:f0:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: Jun 28 00:15:58 2025 GMT Not After : Jul 1 10:11:58 2025 GMT Subject: CN=633FD89B5EC309F9F076BC1F1238EC4C7D428FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:62:ab:db:57:a5:55:e1:14:22:f9:8d:5a: 82:f2:76:8c:02:59:8e:d1:75:3f:49:7a:72:37:b4: ea:bf:65:a8:8c:08:23:4d:93:85:5c:f2:6c:61:a0: 26:b6:3d:57:7b:bc:9d:8a:49:48:41:de:d4:e2:6c: aa:59:e7:a1:ed:94:c6:c0:1e:47:7a:e4:1a:b1:f6: 5c:fc:32:34:84:44:2e:28:09:8d:9a:1b:df:d2:08: 5f:af:71:12:f1:4b:3f:4d:e7:5b:ba:c5:a3:a2:86: ee:84:41:d6:44:37:20:f6:58:48:ef:f8:ac:d2:fe: ac:f6:2b:76:da:54:77:30:fc:73:25:60:70:12:36: 6f:ad:5c:9e:73:3f:d5:4c:3c:9b:9a:9f:a0:35:ae: b0:d5:34:81:e2:5c:f5:49:a0:49:85:5d:ae:9c:24: 58:07:52:4b:a8:c7:b1:48:06:d5:a9:be:2d:42:5d: 1d:5a:24:cc:39:47:93:5a:50:27:89:fc:3c:e8:63: 31:e5:43:f9:1f:e4:30:44:36:85:ad:76:b8:38:f3: 4c:8e:09:44:65:64:76:2e:78:01:cc:66:f1:22:a5: 90:4e:7e:c9:65:52:18:9c:bd:79:b1:4d:a2:e5:35: 51:94:fb:d8:5c:ef:66:24:3e:fc:2f:9c:c9:52:33: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3F:D8:9B:5E:C3:09:F9:F0:76:BC:1F:12:38:EC:4C:7D:42:8F:F3 X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5b:85:7f:48:ec:90:17:df:df:fd:33:4a:76:87:84:b3:32: db:66:d4:80:31:17:89:d8:cf:b4:9c:d1:af:41:c9:b3:bf:f1: c7:e1:23:72:9d:fe:9b:46:86:b5:2d:8f:0b:59:21:b1:61:1f: 43:84:be:f8:89:85:4d:2c:e2:6d:6f:6a:a8:a3:d9:33:58:ab: ea:ea:75:e9:7f:00:66:eb:0e:06:ae:ae:bb:b2:d5:78:e9:32: 8e:31:ad:cd:87:c7:ef:be:cc:65:81:6f:1f:1f:c6:aa:2a:a9: 4d:d0:ff:5d:71:c3:35:5d:4f:5e:54:2f:ce:93:f5:8e:2d:61: 1e:2e:6f:7d:22:43:be:76:66:f1:f8:0c:da:3b:1e:8e:12:bd: dd:7a:0b:09:03:15:f3:b0:da:98:a5:d6:40:20:62:3b:88:ac: cd:66:a5:14:29:e9:f8:57:e3:50:70:af:3c:7d:d3:44:0e:09: 70:33:a4:4c:5e:17:36:90:00:cb:82:7a:9d:ab:3a:5b:50:0b: 61:e8:de:1d:1a:2b:ed:99:96:db:7c:b6:7b:bf:ea:f6:a3:2c: f3:ac:df:77:5c:e9:91:ff:c1:57:9f:0c:d9:53:72:33:20:e4: aa:72:6a:96:15:52:17:9e:6f:e5:87:e3:85:46:90:a3:b3:1d: 19:43:f9:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL3Lyygx8lYzo6DxJI4081nL08OgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNTA2MjgwMDE1NThaFw0yNTA3MDExMDExNThaMDMxMTAvBgNV BAMTKDYzM0ZEODlCNUVDMzA5RjlGMDc2QkMxRjEyMzhFQzRDN0Q0MjhGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC82Kr21elVeEUIvmNWoLydowC WY7RdT9JenI3tOq/ZaiMCCNNk4Vc8mxhoCa2PVd7vJ2KSUhB3tTibKpZ56HtlMbA Hkd65Bqx9lz8MjSERC4oCY2aG9/SCF+vcRLxSz9N51u6xaOihu6EQdZENyD2WEjv +KzS/qz2K3baVHcw/HMlYHASNm+tXJ5zP9VMPJuan6A1rrDVNIHiXPVJoEmFXa6c JFgHUkuox7FIBtWpvi1CXR1aJMw5R5NaUCeJ/DzoYzHlQ/kf5DBENoWtdrg480yO CURlZHYueAHMZvEipZBOfsllUhicvXmxTaLlNVGU+9hc72YkPvwvnMlSM9S9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYz/Ym17DCfnwdrwfEjjsTH1Cj/MwHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJbhX9I7JAX39/9M0p2h4SzMttm1IAxF4nY z7Sc0a9BybO/8cfhI3Kd/ptGhrUtjwtZIbFhH0OEvviJhU0s4m1vaqij2TNYq+rq del/AGbrDgaurruy1XjpMo4xrc2Hx+++zGWBbx8fxqoqqU3Q/11xwzVdT15UL86T 9Y4tYR4ub30iQ752ZvH4DNo7Ho4Svd16CwkDFfOw2pil1kAgYjuIrM1mpRQp6fhX 41Bwrzx900QOCXAzpExeFzaQAMuCep2rOltQC2Ho3h0aK+2Zltt8tnu/6vajLPOs 33dc6ZH/wVefDNlTcjMg5KpyapYVUheeb+WH44VGkKOzHRlD+T0= -----END CERTIFICATE-----Generated at Mon Jun 30 00:31:51 2025 by rpki-client