$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: hmTXhacn11Gf2tkMqPN7zzMs5GCQNs5yD5uPMqz8Bvc= Subject key identifier: CD:2F:56:4D:FC:A1:FA:D7:28:87:21:19:62:36:67:D3:E9:47:E6:BD Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 222778728B7E28C42896AF48B8338046794335B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 0315 Signing time: Sun 19 Oct 2025 00:10:49 +0000 Manifest this update: Sun 19 Oct 2025 00:05:49 +0000 Manifest next update: Wed 22 Oct 2025 04:56:49 +0000 Files and hashes: 1: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: wesud4Ud3HCpFz3TbmwbzTcWOeds/1nSTc4iWrxHtOo=) 2: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: sRP4ZVkg3DGAI6f/qZTzGYcCIduqoOpDagexghZfDJM=) 3: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: u4aBEtuM2QHTp7BELhEUw3EMWzsVzmaE71DRbevw9IE=) 4: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: umMXNYB5RwjlwGFC5Wpd2rzxhTLaoa08yJ2/wNUcpx0=) 5: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: tU2O/OAH1O/qSyyJqDlWC4HBTQpL06kLsKSpR1jZ5rg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:27:78:72:8b:7e:28:c4:28:96:af:48:b8:33:80:46:79:43:35:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Oct 19 00:05:49 2025 GMT Not After : Oct 22 04:56:49 2025 GMT Subject: CN=CD2F564DFCA1FAD728872119623667D3E947E6BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d4:cf:82:84:e7:ee:ad:6e:4d:73:7c:68:a1: 30:90:b2:68:13:e1:dc:76:9e:71:54:5f:2c:ed:3a: 8d:bf:36:d1:82:90:14:ca:cb:b9:9d:c7:4e:15:e4: b2:1d:4e:49:a9:35:14:10:ae:82:5f:a9:f4:42:be: 3b:79:9d:24:c3:52:c0:34:76:01:df:e2:88:5b:9b: 71:2a:64:63:f3:07:18:7b:90:11:e3:59:14:94:69: ba:80:de:f0:d6:65:52:f1:58:6d:00:4b:5e:66:ab: 6b:32:42:8d:e0:f5:72:03:fc:7c:90:40:f3:92:6a: 52:78:da:2d:3b:f3:2b:b6:6c:23:4c:27:f9:7e:33: db:0d:8d:25:54:a7:7d:a6:e6:70:f5:7d:d0:2e:52: d9:d1:5e:4e:2d:e8:c8:de:1e:ca:59:12:b6:8f:fa: b5:fa:85:eb:67:94:2b:cc:87:28:74:a6:1e:b6:f1: a0:5a:89:50:27:5d:8a:70:3b:85:a3:b9:d2:ef:fc: 70:cb:30:d0:27:0c:d7:59:21:a0:15:a3:b5:8a:e3: 25:2a:e2:fa:bf:1b:76:90:47:29:47:d2:7c:64:64: 31:c8:be:37:c9:74:49:ba:d0:a0:e7:37:dc:e0:2d: 6f:d8:ab:cd:a5:ee:1e:9b:c4:b1:9c:9e:de:97:39: 5c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2F:56:4D:FC:A1:FA:D7:28:87:21:19:62:36:67:D3:E9:47:E6:BD X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:45:06:53:6a:66:58:9c:4b:5d:0b:ae:bf:17:43:86:cb:1d: a0:b0:34:a5:16:c1:30:75:3b:e6:51:90:bc:58:02:96:64:17: 51:10:e4:af:98:26:86:dd:e1:d0:da:33:d9:3c:ca:a6:43:d3: f3:0e:0f:51:5f:fb:54:a1:60:7f:be:06:23:84:07:54:29:c7: db:69:2a:7c:fa:9e:91:6a:c7:87:8c:3c:8f:3a:83:ee:70:24: 34:8f:74:56:ec:ba:9a:ac:18:91:50:da:25:fb:b2:07:3d:e5: 81:c6:22:ee:ad:85:09:33:a3:a9:dc:76:c4:31:76:ac:f0:03: 2b:83:7f:49:47:5a:84:4b:7e:f3:b6:df:57:01:ad:53:65:8a: 8c:35:a4:95:f3:5e:63:89:60:2f:8f:bc:70:8e:b0:64:09:86: 22:94:85:f0:f6:e3:31:ab:c2:17:78:10:99:f6:5c:3c:a6:ca: 6f:79:fe:3d:ce:82:8d:82:ae:72:ad:3a:c1:30:be:72:f9:41: 3d:f4:f8:13:b2:a9:cd:de:57:88:34:97:75:36:aa:20:54:b6: 39:43:9e:32:d0:36:b4:ab:9b:8c:81:2c:80:07:70:2a:18:47: 51:9f:3f:34:4f:16:ed:29:87:fe:5a:1a:86:7c:33:b6:9b:c4: b2:27:73:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIid4cot+KMQolq9IuDOARnlDNbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNTEwMTkwMDA1NDlaFw0yNTEwMjIwNDU2NDlaMDMxMTAvBgNV BAMTKENEMkY1NjRERkNBMUZBRDcyODg3MjExOTYyMzY2N0QzRTk0N0U2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD21M+ChOfurW5Nc3xooTCQsmgT 4dx2nnFUXyztOo2/NtGCkBTKy7mdx04V5LIdTkmpNRQQroJfqfRCvjt5nSTDUsA0 dgHf4ohbm3EqZGPzBxh7kBHjWRSUabqA3vDWZVLxWG0AS15mq2syQo3g9XID/HyQ QPOSalJ42i078yu2bCNMJ/l+M9sNjSVUp32m5nD1fdAuUtnRXk4t6MjeHspZEraP +rX6hetnlCvMhyh0ph628aBaiVAnXYpwO4WjudLv/HDLMNAnDNdZIaAVo7WK4yUq 4vq/G3aQRylH0nxkZDHIvjfJdEm60KDnN9zgLW/Yq82l7h6bxLGcnt6XOVzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzS9WTfyh+tcohyEZYjZn0+lH5r0wHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRFBlNqZlicS10Lrr8XQ4bLHaCwNKUWwTB1 O+ZRkLxYApZkF1EQ5K+YJobd4dDaM9k8yqZD0/MOD1Ff+1ShYH++BiOEB1Qpx9tp Knz6npFqx4eMPI86g+5wJDSPdFbsupqsGJFQ2iX7sgc95YHGIu6thQkzo6ncdsQx dqzwAyuDf0lHWoRLfvO231cBrVNliow1pJXzXmOJYC+PvHCOsGQJhiKUhfD24zGr whd4EJn2XDymym95/j3Ogo2CrnKtOsEwvnL5QT30+BOyqc3eV4g0l3U2qiBUtjlD njLQNrSrm4yBLIAHcCoYR1GfPzRPFu0ph/5aGoZ8M7abxLInc0M= -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:20 2025 by rpki-client