$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: M57bLc1GhPEeZTPUswIca3+olv6WcUHNpt1n379IUJ8= Subject key identifier: A7:6A:C9:51:28:42:1B:AE:1F:29:1F:83:31:48:74:8E:78:12:4E:25 Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 07957E685B79B911D6CC49CB0C1C9F9BE9E2E6DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 01D0 Signing time: Sat 28 Jun 2025 16:30:50 +0000 Manifest this update: Sat 28 Jun 2025 16:25:50 +0000 Manifest next update: Tue 01 Jul 2025 19:36:50 +0000 Files and hashes: 1: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: nK/GcLfFPwVeRAxYKLsnqIf64+MLAjuWWo44X4IOFzU=) 2: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) 3: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) 4: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 19:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:95:7e:68:5b:79:b9:11:d6:cc:49:cb:0c:1c:9f:9b:e9:e2:e6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Jun 28 16:25:50 2025 GMT Not After : Jul 1 19:36:50 2025 GMT Subject: CN=A76AC95128421BAE1F291F833148748E78124E25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:19:a4:38:55:2d:fc:e5:74:6f:31:89:84: cb:38:6f:c7:02:09:5b:13:dc:0b:1d:e6:58:3d:29: a3:af:cc:69:1c:46:0a:4d:b7:f9:94:2e:37:ab:39: a0:7c:65:4d:ff:d8:fd:bf:b1:b2:a7:97:10:27:7a: 31:0c:ec:32:1f:07:7c:b6:83:9d:68:6d:32:ec:e5: c7:1d:aa:8d:5c:dc:05:a1:f6:d8:59:53:60:21:72: 34:f4:70:48:59:6f:00:c9:0a:74:ff:f4:92:ab:a2: 96:e3:ab:7d:13:a1:03:52:77:91:31:ba:ac:d6:cd: e6:31:10:d6:31:8e:c5:80:25:be:6f:16:04:e3:c4: e3:9a:04:ae:19:7d:e5:94:94:f4:76:6b:aa:61:21: 75:88:21:69:fe:a1:09:63:6e:be:39:a4:02:49:1a: ed:00:3d:9e:af:8e:c9:ee:f2:a4:f7:6c:c5:46:fc: 15:f9:75:3d:10:bc:9f:7a:2a:29:9a:da:6e:36:c3: e8:67:71:14:e0:2e:3d:40:1e:f0:48:4e:3a:75:54: a1:1b:89:96:c8:5f:36:81:09:cf:a7:b8:b8:80:c8: b8:fc:18:b3:e4:bc:71:ac:aa:ff:69:4d:34:42:2c: e2:9e:15:70:9a:5e:17:6f:62:8b:0e:7f:62:e1:20: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6A:C9:51:28:42:1B:AE:1F:29:1F:83:31:48:74:8E:78:12:4E:25 X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:71:81:ad:9c:f7:50:cf:c7:da:a5:47:0b:d5:26:b8:7a:d4: 94:ea:c7:a0:6a:9b:8e:9a:a5:04:ab:ca:2c:74:ea:ea:09:f8: 40:16:0b:fb:d7:39:58:8c:1d:42:02:71:19:95:cb:ac:82:f0: 90:50:20:86:b0:7a:fe:41:12:96:c9:1f:f0:a6:9a:ce:c2:c7: 3e:39:bb:9e:6f:04:df:a3:20:c7:c4:77:7e:3e:f8:31:d0:d1: 8c:37:e3:b4:83:bb:4e:db:9a:c8:16:76:39:bf:fa:45:ad:a3: 79:de:54:b6:c5:79:88:f7:fc:a6:1c:d1:6f:23:2d:17:c6:c2: f3:df:f0:24:1a:94:f0:27:d4:bd:1d:db:0b:57:27:20:c8:89: 7f:e5:51:fe:06:1a:eb:ff:aa:24:28:ef:60:24:9d:7f:14:a3: ef:3d:d1:fa:38:b5:93:0a:f8:ec:88:f3:9f:86:5d:65:14:da: d6:91:38:ce:ec:8e:60:ba:b2:2a:59:9c:13:1f:36:71:98:81: c9:63:79:ff:84:cf:be:75:98:8e:bc:78:5c:a9:b0:71:9f:1a: 07:c6:07:95:2e:56:3b:1c:c4:3b:99:94:57:89:f9:71:17:b2: 22:67:46:9d:f3:5e:a1:4f:de:fc:37:59:19:d9:18:6a:4b:8a: 1c:b7:d9:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB5V+aFt5uRHWzEnLDByfm+ni5twwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNTA2MjgxNjI1NTBaFw0yNTA3MDExOTM2NTBaMDMxMTAvBgNV BAMTKEE3NkFDOTUxMjg0MjFCQUUxRjI5MUY4MzMxNDg3NDhFNzgxMjRFMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRxmkOFUt/OV0bzGJhMs4b8cC CVsT3Asd5lg9KaOvzGkcRgpNt/mULjerOaB8ZU3/2P2/sbKnlxAnejEM7DIfB3y2 g51obTLs5ccdqo1c3AWh9thZU2AhcjT0cEhZbwDJCnT/9JKropbjq30ToQNSd5Ex uqzWzeYxENYxjsWAJb5vFgTjxOOaBK4ZfeWUlPR2a6phIXWIIWn+oQljbr45pAJJ Gu0APZ6vjsnu8qT3bMVG/BX5dT0QvJ96Kima2m42w+hncRTgLj1AHvBITjp1VKEb iZbIXzaBCc+nuLiAyLj8GLPkvHGsqv9pTTRCLOKeFXCaXhdvYosOf2LhICJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp2rJUShCG64fKR+DMUh0jngSTiUwHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1xga2c91DPx9qlRwvVJrh61JTqx6Bqm46a pQSryix06uoJ+EAWC/vXOViMHUICcRmVy6yC8JBQIIawev5BEpbJH/Cmms7Cxz45 u55vBN+jIMfEd34++DHQ0Yw347SDu07bmsgWdjm/+kWto3neVLbFeYj3/KYc0W8j LRfGwvPf8CQalPAn1L0d2wtXJyDIiX/lUf4GGuv/qiQo72AknX8Uo+890fo4tZMK +OyI85+GXWUU2taROM7sjmC6sipZnBMfNnGYgcljef+Ez751mI68eFypsHGfGgfG B5UuVjscxDuZlFeJ+XEXsiJnRp3zXqFP3vw3WRnZGGpLihy32bY= -----END CERTIFICATE-----Generated at Sun Jun 29 18:55:37 2025 by rpki-client