$ rpki-client -vvf repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft File: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft (raw, json) Hash identifier: uUUxnWw43qA/MDmG5zrHimX7TwbMlIaYXRuzokXTVPU= Subject key identifier: 1E:2E:C6:24:96:81:53:1F:B3:EA:88:04:E7:5F:78:5A:82:2E:15:D4 Authority key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 Certificate issuer: /CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Certificate serial: 2D69C989D64B37B42D1ECE00E5581671565EBEDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft Manifest number: E3 Signing time: Sun 19 Oct 2025 07:10:48 +0000 Manifest this update: Sun 19 Oct 2025 07:05:48 +0000 Manifest next update: Wed 22 Oct 2025 15:02:48 +0000 Files and hashes: 1: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: 5Tt3RRAons/MpLAKdI+nVYdG1EV4O6aC9q3gMfZTySg=) 2: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl (hash: isuqNGl3u5/GX+2MxI9hm912p396IGw+BEbUa9bN5Vc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:69:c9:89:d6:4b:37:b4:2d:1e:ce:00:e5:58:16:71:56:5e:be:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Validity Not Before: Oct 19 07:05:48 2025 GMT Not After : Oct 22 15:02:48 2025 GMT Subject: CN=1E2EC6249681531FB3EA8804E75F785A822E15D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:7f:92:e6:9d:18:aa:38:06:cc:3b:ac:92: 86:44:31:1d:c7:d6:3f:e9:52:2a:ba:6c:0b:c4:c5: c3:8f:5a:3f:a5:49:60:ab:2d:be:3c:e9:ef:f0:71: ac:7d:d4:d3:c7:8d:98:c4:f1:35:56:58:98:0b:6b: bb:bc:74:2d:9d:c3:b2:ec:ba:f8:4e:6c:f8:0a:5d: e6:1b:07:23:cc:6f:66:6f:ef:b7:60:a8:7b:d7:e8: e1:50:3c:69:cc:fd:5d:ce:1a:6e:65:ce:b7:21:94: bf:5a:7f:fe:37:a2:85:b0:06:ae:d4:59:66:ef:d4: 0e:43:69:92:c1:79:0b:59:ae:6c:95:46:17:35:fa: 7e:f8:63:0a:5c:f0:3e:60:61:53:90:b3:4a:ce:bc: 6e:1c:ac:fd:46:b2:c8:3a:7c:2a:2d:62:6b:5e:4c: b1:d8:7e:16:78:25:8d:f4:89:a0:48:3e:84:fc:9c: 2f:f7:17:e8:e9:5c:3a:26:b3:64:ce:f0:3e:c7:16: 6e:c0:7d:e2:ca:f5:e9:27:f4:cc:2c:69:5d:2c:43: 0c:eb:81:de:78:d1:58:db:5c:3c:93:ed:6a:5b:d3: 62:5e:87:e9:91:5c:be:2d:47:cb:15:e0:78:8b:4e: a4:13:f7:1e:b4:92:0f:fb:81:d8:08:d8:fa:7d:37: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2E:C6:24:96:81:53:1F:B3:EA:88:04:E7:5F:78:5A:82:2E:15:D4 X509v3 Authority Key Identifier: keyid:39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:98:ed:30:a4:9d:9f:9b:fa:14:aa:d1:62:aa:c3:18:2d:a1: 15:d4:d4:2a:c9:01:a4:cf:ed:69:7a:4c:cc:4a:e3:75:79:ba: c6:a0:99:dc:fa:15:43:aa:03:1f:94:7e:64:50:0e:32:55:05: d3:6d:4d:ea:7a:a1:bf:7e:dd:89:2b:f6:96:27:14:9b:7c:80: 49:3d:39:f0:95:8a:51:cb:ae:21:e7:dc:78:27:a2:90:da:7b: f7:74:be:74:dc:48:d1:fd:a1:d6:2c:e3:6b:8f:72:0c:b0:cd: ab:17:5f:d6:10:20:fc:ac:93:3e:6b:0e:ed:5c:da:df:4d:cd: 50:2c:cd:b8:b2:74:05:34:40:db:5a:43:4f:20:cb:2a:8b:b3: fa:12:55:e5:0d:ac:42:32:41:1e:55:fe:94:4f:b4:4d:3e:98: 08:b4:cb:73:c5:77:5a:3f:9e:34:c4:ab:4c:c3:44:f6:42:7d: df:b7:73:31:9c:9f:53:7a:9b:dd:1a:fc:3a:22:a1:b2:17:02: 92:97:93:14:99:27:2d:46:ec:bd:80:76:3e:e5:09:49:7b:52: ca:42:c0:99:46:f1:f1:10:3b:55:09:b0:66:a2:69:4b:1b:aa: 1a:a2:cb:32:80:08:de:13:e5:66:8c:49:b3:82:03:a3:8b:61: e3:d7:52:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULWnJidZLN7QtHs4A5VgWcVZevtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZE QjQyMUQ4ODAeFw0yNTEwMTkwNzA1NDhaFw0yNTEwMjIxNTAyNDhaMDMxMTAvBgNV BAMTKDFFMkVDNjI0OTY4MTUzMUZCM0VBODgwNEU3NUY3ODVBODIyRTE1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yX+S5p0YqjgGzDuskoZEMR3H 1j/pUiq6bAvExcOPWj+lSWCrLb486e/wcax91NPHjZjE8TVWWJgLa7u8dC2dw7Ls uvhObPgKXeYbByPMb2Zv77dgqHvX6OFQPGnM/V3OGm5lzrchlL9af/43ooWwBq7U WWbv1A5DaZLBeQtZrmyVRhc1+n74Ywpc8D5gYVOQs0rOvG4crP1Gssg6fCotYmte TLHYfhZ4JY30iaBIPoT8nC/3F+jpXDoms2TO8D7HFm7AfeLK9ekn9MwsaV0sQwzr gd540VjbXDyT7Wpb02Jeh+mRXL4tR8sV4HiLTqQT9x60kg/7gdgI2Pp9NwBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHi7GJJaBUx+z6ogE5194WoIuFdQwHwYDVR0j BBgwFoAUOUvMXAMQ2wEX3cHcGhdgJttCHYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NzEzNGYxOC0xMWUxLTQxYWUtYmIwNS05ZmJmNDgyMTJiN2QvMC8zOTRCQ0M1QzAz MTBEQjAxMTdEREMxREMxQTE3NjAyNkRCNDIxRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZEQjQy MUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTcxMzRmMTgtMTFlMS00MWFlLWJi MDUtOWZiZjQ4MjEyYjdkLzAvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYw MjZEQjQyMUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6Y7TCknZ+b+hSq0WKqwxgtoRXU1CrJAaTP 7Wl6TMxK43V5usagmdz6FUOqAx+UfmRQDjJVBdNtTep6ob9+3Ykr9pYnFJt8gEk9 OfCVilHLriHn3HgnopDae/d0vnTcSNH9odYs42uPcgywzasXX9YQIPyskz5rDu1c 2t9NzVAszbiydAU0QNtaQ08gyyqLs/oSVeUNrEIyQR5V/pRPtE0+mAi0y3PFd1o/ njTEq0zDRPZCfd+3czGcn1N6m90a/DoiobIXApKXkxSZJy1G7L2Adj7lCUl7UspC wJlG8fEQO1UJsGaiaUsbqhqiyzKACN4T5WaMSbOCA6OLYePXUr8= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:02 2025 by rpki-client