$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: rqxUjCrW27dx1uo1Mj8qm3VZ+5pIFwSiutFF1zXVH4U= Subject key identifier: 42:64:99:BB:13:08:A0:FD:75:FD:44:6C:7F:59:57:B1:DC:B5:FB:6C Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 04F7527082CA0ACD95E739A536A01C61EBB36046 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 01E8 Signing time: Thu 21 Aug 2025 18:00:51 +0000 Manifest this update: Thu 21 Aug 2025 17:55:51 +0000 Manifest next update: Mon 25 Aug 2025 02:49:51 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) 2: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) 3: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) 4: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: rJPrga06h3PfplDNjhwzwjLFfX19Qx/nQbnicbEzGeg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f7:52:70:82:ca:0a:cd:95:e7:39:a5:36:a0:1c:61:eb:b3:60:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Aug 21 17:55:51 2025 GMT Not After : Aug 25 02:49:51 2025 GMT Subject: CN=426499BB1308A0FD75FD446C7F5957B1DCB5FB6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d5:4e:8e:e3:8a:90:b9:a9:6d:1e:7e:c4:1f: f5:1c:dd:1b:58:35:e7:0a:cf:aa:6b:e5:ed:a7:e0: 05:16:be:ed:42:be:7b:15:cc:a6:22:f7:95:4b:68: 13:bb:bd:7e:cc:03:29:e2:ea:10:91:79:80:4a:1a: 85:57:da:2c:7c:17:71:ea:f7:ef:2b:bd:5a:7d:7e: e8:68:c6:f9:c6:c8:33:14:9c:bb:a8:26:d2:6b:c7: 04:29:94:e6:68:49:03:7e:8f:27:72:27:84:c9:3b: bf:49:66:b4:cf:65:19:81:09:45:95:af:12:1d:3f: e6:51:d2:36:9d:db:14:62:d5:dc:1b:14:1a:52:da: fa:fd:2b:2f:dc:3c:cb:01:21:9d:66:57:90:87:30: 8a:1c:91:65:6e:6e:1e:0b:e8:44:b7:f8:15:48:b7: 2f:8f:a8:c4:30:39:65:ff:79:83:65:da:28:93:cb: da:a6:3d:bc:a3:0b:3a:c9:ff:09:34:b4:93:59:df: e2:b0:e3:8a:70:09:93:de:14:4d:b4:4f:af:34:1b: 3a:b9:84:c7:09:60:d8:26:43:a8:ab:38:c8:db:a8: 72:e1:8d:24:43:3b:18:07:15:0a:08:d1:b8:f2:54: 24:b3:a3:bf:c3:fc:c0:ce:57:66:03:84:8a:46:a0: 8d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:64:99:BB:13:08:A0:FD:75:FD:44:6C:7F:59:57:B1:DC:B5:FB:6C X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4b:66:fa:5e:fa:a6:cc:b0:b3:85:cf:64:a5:11:e0:e9:ca: ce:65:2a:46:6f:42:5e:e2:00:32:4e:27:63:09:08:25:e7:39: ea:bf:89:9d:9b:af:25:2f:e5:08:60:77:70:88:ea:64:47:3b: 87:ae:07:4f:fb:bd:2f:e5:e0:09:f2:8a:18:83:9b:11:03:61: 19:3b:60:5f:6c:fa:eb:1a:f0:b2:80:76:a7:7c:77:ca:53:28: 2e:58:3a:24:1e:18:40:0d:d0:7e:50:d6:04:f4:38:36:ac:5d: 94:93:45:d1:c2:47:9a:be:1c:5a:18:18:9d:b0:9e:1e:3b:75: 01:83:ad:fe:d1:0e:30:dc:c5:b2:55:36:c6:20:18:77:dc:c6: f1:f5:99:f4:0e:70:e5:ec:5a:fa:4b:65:20:9f:26:cd:21:c3: 8f:99:f7:f7:66:73:1c:4a:cc:f4:a6:76:b0:e8:8f:be:39:54: 0d:7a:ff:a9:72:7b:46:96:3f:eb:06:f4:fd:0a:9d:a5:64:59: d9:aa:14:f7:9a:0a:85:d0:81:6e:6b:7c:cd:39:67:e7:c9:42: 96:3d:9e:e2:9f:7a:63:26:46:46:fc:45:ca:ce:e4:59:03:33: 99:59:51:bd:75:30:1c:af:cf:e1:18:9e:9f:28:1f:3e:f7:73: 71:cc:56:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBPdScILKCs2V5zmlNqAcYeuzYEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNTA4MjExNzU1NTFaFw0yNTA4MjUwMjQ5NTFaMDMxMTAvBgNV BAMTKDQyNjQ5OUJCMTMwOEEwRkQ3NUZENDQ2QzdGNTk1N0IxRENCNUZCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv1U6O44qQualtHn7EH/Uc3RtY NecKz6pr5e2n4AUWvu1CvnsVzKYi95VLaBO7vX7MAyni6hCReYBKGoVX2ix8F3Hq 9+8rvVp9fuhoxvnGyDMUnLuoJtJrxwQplOZoSQN+jydyJ4TJO79JZrTPZRmBCUWV rxIdP+ZR0jad2xRi1dwbFBpS2vr9Ky/cPMsBIZ1mV5CHMIockWVubh4L6ES3+BVI ty+PqMQwOWX/eYNl2iiTy9qmPbyjCzrJ/wk0tJNZ3+Kw44pwCZPeFE20T680Gzq5 hMcJYNgmQ6irOMjbqHLhjSRDOxgHFQoI0bjyVCSzo7/D/MDOV2YDhIpGoI13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmSZuxMIoP11/URsf1lXsdy1+2wwHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdLZvpe+qbMsLOFz2SlEeDpys5lKkZvQl7i ADJOJ2MJCCXnOeq/iZ2bryUv5Qhgd3CI6mRHO4euB0/7vS/l4AnyihiDmxEDYRk7 YF9s+usa8LKAdqd8d8pTKC5YOiQeGEAN0H5Q1gT0ODasXZSTRdHCR5q+HFoYGJ2w nh47dQGDrf7RDjDcxbJVNsYgGHfcxvH1mfQOcOXsWvpLZSCfJs0hw4+Z9/dmcxxK zPSmdrDoj745VA16/6lye0aWP+sG9P0KnaVkWdmqFPeaCoXQgW5rfM05Z+fJQpY9 nuKfemMmRkb8RcrO5FkDM5lZUb11MByvz+EYnp8oHz73c3HMVlI= -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:12 2025 by rpki-client