$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: rShA+9HGauvoOre3yFFBj6EeYkRh9UXU3QDeWzPHJ0U= Subject key identifier: FD:D5:DB:94:A2:D7:D9:2D:FC:DA:21:75:51:D8:5B:B8:14:60:DC:B2 Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 1BBBD981E3C37352D3D7D698EE77D897ACA9CD78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 0202 Signing time: Sun 19 Oct 2025 07:20:51 +0000 Manifest this update: Sun 19 Oct 2025 07:15:51 +0000 Manifest next update: Wed 22 Oct 2025 10:22:51 +0000 Files and hashes: 1: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) 2: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) 3: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: o9m3wtztVk6j1dEaA6ZyTcubDl7CTLIGU88clMN+QAU=) 4: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:bb:d9:81:e3:c3:73:52:d3:d7:d6:98:ee:77:d8:97:ac:a9:cd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Oct 19 07:15:51 2025 GMT Not After : Oct 22 10:22:51 2025 GMT Subject: CN=FDD5DB94A2D7D92DFCDA217551D85BB81460DCB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:15:a7:56:43:b9:94:99:cf:34:da:ca:94: f3:92:7d:81:8d:52:42:7d:a2:b3:5d:5d:44:ce:5d: 78:6e:58:00:87:30:4f:f0:d5:58:b4:97:c6:12:84: 12:82:ea:bb:a3:d7:57:aa:d9:4b:59:e6:66:b7:dc: 73:80:d7:fb:d3:6d:83:9b:cf:06:b4:5c:39:85:9f: e1:c9:2c:cf:61:68:fc:97:f8:97:7d:b4:5a:71:04: 5b:ad:93:d6:d9:12:2a:71:4a:1d:59:d3:58:ba:a3: 67:75:d7:6b:75:1c:a9:c3:68:9d:8e:c4:f0:58:ed: 4f:e4:98:c4:de:4a:da:3b:cf:fb:37:90:d2:44:12: e6:d2:0f:ca:00:66:e6:6f:6b:a9:ab:83:ae:4d:55: 03:10:d9:c1:28:63:74:5c:00:4d:07:d9:8d:7c:f3: b2:80:1c:35:e6:89:b6:24:2b:78:d2:f1:55:0e:2f: d7:15:5c:64:44:89:41:3c:5e:3c:b9:ae:1a:f9:d8: 41:cf:0b:f7:ef:39:3e:43:9e:b0:2c:8a:f2:15:e7: a6:71:2b:8b:91:1b:88:25:5e:d4:2a:ac:c3:84:58: 1f:80:90:e8:08:ec:88:a2:c3:d8:12:d0:7d:4e:d1: a7:e6:98:b4:fd:2c:8a:be:28:e5:bd:96:85:8d:de: 27:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D5:DB:94:A2:D7:D9:2D:FC:DA:21:75:51:D8:5B:B8:14:60:DC:B2 X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:2e:cf:cc:85:19:93:a0:94:5f:93:25:d6:fc:0b:0b:3e:3b: c6:64:34:60:25:af:cf:ea:87:19:96:c4:61:18:14:03:34:79: 33:a3:11:80:7b:7f:b2:16:8b:1b:35:97:68:cf:a8:94:2d:b5: e0:29:98:a5:35:a0:80:0e:46:86:cc:ca:be:a6:81:4d:c1:93: 82:87:76:5f:e8:e9:08:cf:54:95:1a:d5:cc:9a:58:c0:c3:ce: b7:35:88:8d:69:36:5d:e7:1b:d4:c9:a8:3d:78:dd:2f:59:e2: b3:b6:ae:fe:a3:dd:de:30:9a:32:57:7b:70:33:b3:b6:d6:90: 00:75:1a:25:f6:e6:48:bc:7b:e4:31:9d:d9:00:e4:0d:c7:6e: 28:6b:b7:21:96:0e:a0:4a:ea:3b:0c:f9:21:d2:f9:35:12:ed: 1a:5f:c8:61:41:b5:b1:89:eb:e7:d4:33:a7:98:da:0a:50:a0: a3:b7:9e:04:b8:8b:47:be:0d:7d:79:f8:f2:6a:14:e6:ec:64: db:43:b9:02:67:2a:2b:e8:50:57:d3:16:94:ff:a1:6a:1f:09: 2b:8e:af:07:62:cd:b1:3e:2a:e4:3e:8c:f0:9f:be:90:94:be: 82:c5:9f:f6:1e:22:57:d8:e5:58:1f:ca:1c:db:8b:af:0b:ba: 2f:f2:91:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG7vZgePDc1LT19aY7nfYl6ypzXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNTEwMTkwNzE1NTFaFw0yNTEwMjIxMDIyNTFaMDMxMTAvBgNV BAMTKEZERDVEQjk0QTJEN0Q5MkRGQ0RBMjE3NTUxRDg1QkI4MTQ2MERDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH0RWnVkO5lJnPNNrKlPOSfYGN UkJ9orNdXUTOXXhuWACHME/w1Vi0l8YShBKC6ruj11eq2UtZ5ma33HOA1/vTbYOb zwa0XDmFn+HJLM9haPyX+Jd9tFpxBFutk9bZEipxSh1Z01i6o2d112t1HKnDaJ2O xPBY7U/kmMTeSto7z/s3kNJEEubSD8oAZuZva6mrg65NVQMQ2cEoY3RcAE0H2Y18 87KAHDXmibYkK3jS8VUOL9cVXGREiUE8Xjy5rhr52EHPC/fvOT5DnrAsivIV56Zx K4uRG4glXtQqrMOEWB+AkOgI7Iiiw9gS0H1O0afmmLT9LIq+KOW9loWN3ifbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/dXblKLX2S382iF1UdhbuBRg3LIwHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAuz8yFGZOglF+TJdb8Cws+O8ZkNGAlr8/q hxmWxGEYFAM0eTOjEYB7f7IWixs1l2jPqJQtteApmKU1oIAORobMyr6mgU3Bk4KH dl/o6QjPVJUa1cyaWMDDzrc1iI1pNl3nG9TJqD143S9Z4rO2rv6j3d4wmjJXe3Az s7bWkAB1GiX25ki8e+QxndkA5A3HbihrtyGWDqBK6jsM+SHS+TUS7RpfyGFBtbGJ 6+fUM6eY2gpQoKO3ngS4i0e+DX15+PJqFObsZNtDuQJnKivoUFfTFpT/oWofCSuO rwdizbE+KuQ+jPCfvpCUvoLFn/YeIlfY5Vgfyhzbi68Lui/ykRk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:27 2025 by rpki-client