$ rpki-client -vvf repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft File: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft (raw, json) Hash identifier: G9L9VfmpU6WFMuyn+XNnXAjF1hJZMZNGWHF6HcP+cOs= Subject key identifier: 5A:D4:87:D8:BE:31:FA:B7:AB:6A:E7:C1:00:90:62:A1:35:C8:D0:DE Authority key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 Certificate issuer: /CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Certificate serial: 5904A480F1B5E11F3A70665C6945189FFDEB1C26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft Manifest number: C9 Signing time: Thu 21 Aug 2025 17:20:49 +0000 Manifest this update: Thu 21 Aug 2025 17:15:49 +0000 Manifest next update: Mon 25 Aug 2025 01:35:49 +0000 Files and hashes: 1: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl (hash: 5+tqGrbZjZy5gVysbJHy3KdrWdKXgxEuThi98fY1PN8=) 2: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: 5Tt3RRAons/MpLAKdI+nVYdG1EV4O6aC9q3gMfZTySg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:04:a4:80:f1:b5:e1:1f:3a:70:66:5c:69:45:18:9f:fd:eb:1c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Validity Not Before: Aug 21 17:15:49 2025 GMT Not After : Aug 25 01:35:49 2025 GMT Subject: CN=5AD487D8BE31FAB7AB6AE7C1009062A135C8D0DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:4e:3c:c2:40:54:75:1f:66:4f:fb:10:5a: 76:8d:b4:af:83:13:c3:4e:97:d0:48:14:74:db:58: d1:0e:2b:cf:e0:ff:d5:0c:25:4b:9c:02:4b:92:87: 4e:0c:dd:ff:2b:90:7f:fa:ad:75:95:7b:62:a6:9a: e5:77:28:44:26:ba:d9:2b:c1:19:29:80:30:78:99: ee:dc:53:19:30:55:07:d4:8d:f8:14:6c:b6:5d:46: 7a:75:f8:c1:3a:e3:9b:f9:be:b6:00:43:ca:13:bc: 51:da:60:a1:0e:b3:1d:62:0d:7d:34:4d:65:c5:23: d2:b1:d0:20:da:00:41:94:8b:c8:f6:1f:52:03:54: 3d:f2:be:c2:2c:42:67:28:85:1e:ea:97:1e:a9:20: 27:6f:aa:15:74:f8:d2:11:9f:2c:54:7a:25:ce:b2: d3:7a:f6:94:2d:76:2d:3f:dd:c2:34:c8:5e:27:3b: 66:9b:c3:25:ef:85:3f:9c:fe:93:ef:f0:42:5c:b9: e6:49:91:a0:9c:e5:b6:1f:60:2e:1a:f8:e6:19:0f: a3:a8:f8:da:a6:de:a8:f5:bf:b2:89:96:7b:51:e5: cd:7d:dc:5f:f4:a8:34:b8:11:e6:90:e9:7e:9e:3a: ca:99:ec:91:08:77:c0:e5:fb:85:06:a5:0d:15:fd: fa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D4:87:D8:BE:31:FA:B7:AB:6A:E7:C1:00:90:62:A1:35:C8:D0:DE X509v3 Authority Key Identifier: keyid:39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:40:78:8e:92:90:67:6e:01:1b:78:53:9b:f9:81:81:1e:0a: 0b:05:4d:aa:0b:62:88:b4:95:30:ca:e2:d8:64:88:a7:5a:0f: bd:f0:e5:51:8c:a7:44:d9:e8:95:d6:f5:06:2e:31:22:41:4c: 10:7a:14:11:d7:91:26:c2:6c:34:24:e2:14:9e:1d:97:84:cf: f2:b1:fd:7f:ac:08:d3:1d:93:78:ce:b7:74:6f:59:f1:a7:cd: 37:3f:45:35:88:b0:77:e2:08:1c:eb:79:f7:cd:92:b0:d9:fd: a5:c4:0f:72:77:bf:24:8e:7e:0a:ca:55:89:93:3c:b0:18:d1: 55:b8:5c:37:88:3b:f4:0a:57:d0:78:16:e6:6c:5e:d9:72:43: 98:27:fe:5d:1e:ec:d7:0f:37:15:de:14:b9:37:92:f9:44:f4: 7a:ec:3f:9c:fa:16:e3:55:34:ff:cf:f1:52:b8:39:d3:b1:2b: 2c:d6:90:6a:d0:22:e6:8b:db:bc:74:2e:ed:c6:7d:8e:79:cb: a7:b1:7d:1c:fe:49:2d:14:2c:02:20:13:f4:dd:e6:fa:8f:21: 32:05:35:dc:1b:98:ba:08:10:38:6e:a1:89:33:c6:45:88:17: da:9b:41:d5:d5:fc:5c:cc:39:db:25:e8:9e:47:45:c1:e0:03: 4c:49:ab:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQSkgPG14R86cGZcaUUYn/3rHCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZE QjQyMUQ4ODAeFw0yNTA4MjExNzE1NDlaFw0yNTA4MjUwMTM1NDlaMDMxMTAvBgNV BAMTKDVBRDQ4N0Q4QkUzMUZBQjdBQjZBRTdDMTAwOTA2MkExMzVDOEQwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm1E48wkBUdR9mT/sQWnaNtK+D E8NOl9BIFHTbWNEOK8/g/9UMJUucAkuSh04M3f8rkH/6rXWVe2KmmuV3KEQmutkr wRkpgDB4me7cUxkwVQfUjfgUbLZdRnp1+ME645v5vrYAQ8oTvFHaYKEOsx1iDX00 TWXFI9Kx0CDaAEGUi8j2H1IDVD3yvsIsQmcohR7qlx6pICdvqhV0+NIRnyxUeiXO stN69pQtdi0/3cI0yF4nO2abwyXvhT+c/pPv8EJcueZJkaCc5bYfYC4a+OYZD6Oo +Nqm3qj1v7KJlntR5c193F/0qDS4EeaQ6X6eOsqZ7JEId8Dl+4UGpQ0V/fq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWtSH2L4x+reraufBAJBioTXI0N4wHwYDVR0j BBgwFoAUOUvMXAMQ2wEX3cHcGhdgJttCHYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NzEzNGYxOC0xMWUxLTQxYWUtYmIwNS05ZmJmNDgyMTJiN2QvMC8zOTRCQ0M1QzAz MTBEQjAxMTdEREMxREMxQTE3NjAyNkRCNDIxRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZEQjQy MUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTcxMzRmMTgtMTFlMS00MWFlLWJi MDUtOWZiZjQ4MjEyYjdkLzAvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYw MjZEQjQyMUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRAeI6SkGduARt4U5v5gYEeCgsFTaoLYoi0 lTDK4thkiKdaD73w5VGMp0TZ6JXW9QYuMSJBTBB6FBHXkSbCbDQk4hSeHZeEz/Kx /X+sCNMdk3jOt3RvWfGnzTc/RTWIsHfiCBzreffNkrDZ/aXED3J3vySOfgrKVYmT PLAY0VW4XDeIO/QKV9B4FuZsXtlyQ5gn/l0e7NcPNxXeFLk3kvlE9HrsP5z6FuNV NP/P8VK4OdOxKyzWkGrQIuaL27x0Lu3GfY55y6exfRz+SS0ULAIgE/Td5vqPITIF NdwbmLoIEDhuoYkzxkWIF9qbQdXV/FzMOdsl6J5HRcHgA0xJq0g= -----END CERTIFICATE-----Generated at Sat Aug 23 19:47:21 2025 by rpki-client