$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: HulgjmMUroMuNu8DNsm8vmdpF2rUa5Sd8mtajBGEnkQ= Subject key identifier: BD:EF:19:E3:DA:E5:BC:37:01:24:33:B3:79:9D:80:22:09:20:C8:0A Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 6B6FA9F26ADF985B24CED7182075A8027370B4CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 02FC Signing time: Fri 22 Aug 2025 15:50:50 +0000 Manifest this update: Fri 22 Aug 2025 15:45:50 +0000 Manifest next update: Tue 26 Aug 2025 00:55:50 +0000 Files and hashes: 1: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: umMXNYB5RwjlwGFC5Wpd2rzxhTLaoa08yJ2/wNUcpx0=) 2: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: tU2O/OAH1O/qSyyJqDlWC4HBTQpL06kLsKSpR1jZ5rg=) 3: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: u4aBEtuM2QHTp7BELhEUw3EMWzsVzmaE71DRbevw9IE=) 4: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: T09a6koq/oEnHowCU9xbdGT4ZJxO7nfSivdEysSzb6Y=) 5: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: wesud4Ud3HCpFz3TbmwbzTcWOeds/1nSTc4iWrxHtOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6f:a9:f2:6a:df:98:5b:24:ce:d7:18:20:75:a8:02:73:70:b4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Aug 22 15:45:50 2025 GMT Not After : Aug 26 00:55:50 2025 GMT Subject: CN=BDEF19E3DAE5BC37012433B3799D80220920C80A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:10:a2:d9:3c:a7:30:d2:a3:f5:ee:55:8d:a1: a4:88:18:1c:95:dc:d4:68:e2:72:c8:ad:0c:a9:e5: 0a:dd:28:29:8a:53:7c:2f:64:94:8d:23:e5:12:53: 8a:de:0a:a4:7b:d3:dc:1e:dd:3c:c0:a9:d1:0e:9a: 64:a6:aa:fa:50:b4:47:25:25:bd:52:2d:38:d2:4d: 5b:cb:81:ed:02:8e:f3:65:40:cd:d9:86:7e:24:e3: b7:1a:66:86:3e:49:d4:fd:38:e6:26:b4:10:36:46: c9:df:61:f7:dd:25:a4:f4:01:87:c9:d8:78:27:4b: 44:0d:0a:e7:31:c7:80:b2:06:02:d7:97:61:bc:f9: ca:44:32:cf:b9:49:17:3b:d2:ec:7f:74:dd:b6:50: 93:46:54:e9:80:b3:31:28:d5:d9:6d:99:3b:36:40: b5:a2:1c:8a:a7:75:57:7b:70:8e:ae:aa:10:d3:c0: a1:12:f6:47:0f:be:63:79:e6:16:4b:25:be:a7:6f: 79:71:fd:eb:6d:f0:5f:a6:74:4a:e5:79:89:10:51: 87:a8:15:3c:ef:11:00:5f:1f:50:58:32:ed:d8:3c: 46:f4:a8:00:c0:74:2f:9a:94:7c:b0:f1:b0:bb:b4: 40:40:dd:36:fa:55:19:b7:5c:15:8b:fc:42:88:d0: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EF:19:E3:DA:E5:BC:37:01:24:33:B3:79:9D:80:22:09:20:C8:0A X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:cd:08:4a:00:7e:54:25:3d:0b:7e:71:9c:77:c7:46:56:86: 82:08:eb:3f:86:50:5e:fb:2b:a4:5e:e3:7b:55:bd:2c:23:64: 6a:52:0a:c2:8c:f4:39:c3:53:97:d2:df:f8:33:ad:c8:37:11: 3c:24:7c:8b:e9:af:e7:06:71:ec:a2:d2:2b:aa:b4:a8:18:82: 4e:77:ea:88:37:d4:a7:e1:70:57:67:4f:0b:2d:f0:0c:de:cb: 94:c2:64:63:8d:9e:67:05:02:72:10:cd:64:0a:80:a2:ea:7e: f3:20:31:db:b7:99:54:7d:a2:d6:06:7e:74:2d:45:37:cd:cc: 84:15:65:e9:cc:7c:b8:d6:f0:a2:06:6a:db:85:d8:8e:1d:44: 30:ad:db:f0:71:2a:57:7b:d8:7d:2d:73:df:b0:fc:4d:57:31: 05:9d:24:69:ea:5a:35:cc:b4:4a:78:bd:f7:1f:10:b8:c8:dc: d7:0e:a8:f2:b3:55:d7:9d:9c:17:34:39:07:b6:f6:99:d7:5f: 3b:c2:2f:0a:65:63:a1:2d:1a:56:ad:d4:30:3a:d4:1a:3a:92: ed:35:fd:f7:4b:e7:4f:c3:d5:1f:28:ea:5d:d3:61:77:5f:e8: 28:7b:e0:1f:f1:16:ec:43:6e:86:f1:70:bf:5f:9c:92:2b:c1: d2:22:01:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2+p8mrfmFskztcYIHWoAnNwtM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNTA4MjIxNTQ1NTBaFw0yNTA4MjYwMDU1NTBaMDMxMTAvBgNV BAMTKEJERUYxOUUzREFFNUJDMzcwMTI0MzNCMzc5OUQ4MDIyMDkyMEM4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClEKLZPKcw0qP17lWNoaSIGByV 3NRo4nLIrQyp5QrdKCmKU3wvZJSNI+USU4reCqR709we3TzAqdEOmmSmqvpQtEcl Jb1SLTjSTVvLge0CjvNlQM3Zhn4k47caZoY+SdT9OOYmtBA2RsnfYffdJaT0AYfJ 2HgnS0QNCucxx4CyBgLXl2G8+cpEMs+5SRc70ux/dN22UJNGVOmAszEo1dltmTs2 QLWiHIqndVd7cI6uqhDTwKES9kcPvmN55hZLJb6nb3lx/ett8F+mdErleYkQUYeo FTzvEQBfH1BYMu3YPEb0qADAdC+alHyw8bC7tEBA3Tb6VRm3XBWL/EKI0LRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUve8Z49rlvDcBJDOzeZ2AIgkgyAowHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHNCEoAflQlPQt+cZx3x0ZWhoII6z+GUF77 K6Re43tVvSwjZGpSCsKM9DnDU5fS3/gzrcg3ETwkfIvpr+cGceyi0iuqtKgYgk53 6og31KfhcFdnTwst8Azey5TCZGONnmcFAnIQzWQKgKLqfvMgMdu3mVR9otYGfnQt RTfNzIQVZenMfLjW8KIGatuF2I4dRDCt2/BxKld72H0tc9+w/E1XMQWdJGnqWjXM tEp4vfcfELjI3NcOqPKzVdednBc0OQe29pnXXzvCLwplY6EtGlat1DA61Bo6ku01 /fdL50/D1R8o6l3TYXdf6Ch74B/xFuxDbobxcL9fnJIrwdIiAZo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:09 2025 by rpki-client