$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json) Hash identifier: jLr8dsRr2sR3Abq21zIXHFXpT7Dn9Dup8Ox7imxBLyE= Subject key identifier: 97:BB:7A:BC:64:BC:CD:CA:D6:7B:40:9B:0F:8D:71:AF:FB:BF:FA:CB Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 0C8B595F6A4323E5D6C01CE9A92CDE56A6C868EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft Manifest number: 038A Signing time: Sun 02 Nov 2025 02:50:01 +0000 Manifest this update: Sun 02 Nov 2025 02:45:01 +0000 Manifest next update: Wed 05 Nov 2025 13:02:01 +0000 Files and hashes: 1: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: HtvdbgNzbep41tsSwxpJVENDrPCo93IVN9YGCXSL+Js=) 2: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 4RAEHcKydfbmdG7JZ2oBClEPFrTNelxiK32dkCNM718=) 3: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: uQ2lNYFZctQjtseGT/wzHT4giq7wlDo/uVXWwYPTnAY=) 4: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: ul89v+Wx5i7CgGuoHyauUXYvOE6j3XY7n+1SDj/fph8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 13:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:8b:59:5f:6a:43:23:e5:d6:c0:1c:e9:a9:2c:de:56:a6:c8:68:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Nov 2 02:45:01 2025 GMT Not After : Nov 5 13:02:01 2025 GMT Subject: CN=97BB7ABC64BCCDCAD67B409B0F8D71AFFBBFFACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:b3:1f:fc:c2:de:42:c9:f8:31:8a:c9:8a: ba:e5:9f:f5:fb:1c:80:2b:12:d8:7e:b6:0c:0a:31: 3c:00:f3:86:e9:18:5e:c3:02:68:33:0a:85:82:88: 33:51:b2:2f:a9:54:79:a0:79:77:21:cd:69:6d:0e: ba:ed:7d:86:d6:4d:ab:92:7d:23:17:b1:cd:8b:55: fa:c3:1b:2b:c7:7e:83:0e:1f:e8:58:9e:87:0d:b6: c2:02:47:e2:11:0a:f6:1e:83:a4:30:7d:a7:cf:db: 9a:e2:7a:41:c0:b4:6f:4c:d6:83:6c:38:36:49:03: 14:2a:a1:dd:29:88:8d:27:3e:a6:fb:69:4a:e6:07: 64:22:06:56:ce:3f:7f:dd:b4:84:71:3e:54:f8:0c: 29:15:6d:cf:03:47:e5:9e:89:08:33:3a:16:e2:01: 38:65:8d:4f:c6:34:d7:d9:ec:6d:d8:ba:16:74:ed: 39:00:1e:27:16:6f:fa:2b:1c:1e:75:f4:a1:1e:dd: 3c:ff:ea:f7:54:a7:69:f0:cf:30:78:51:90:25:4a: 40:87:21:6f:b1:c5:23:84:ae:d1:f4:e7:5b:92:4e: bc:f7:c4:1f:1c:12:b7:20:98:3b:3b:9b:c1:30:43: 0b:c6:ad:e7:c1:9a:60:29:e4:69:41:db:9e:aa:14: d4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BB:7A:BC:64:BC:CD:CA:D6:7B:40:9B:0F:8D:71:AF:FB:BF:FA:CB X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a8:95:c8:d2:ce:f1:a2:82:72:0c:66:5b:44:7b:3e:c0:cf: c8:59:ab:a2:0c:cf:34:a7:3b:b9:29:0b:de:9d:53:a4:2d:70: c8:cf:15:80:98:7e:0d:17:dc:da:18:23:70:9a:55:91:85:0d: ba:7a:82:fb:95:11:3a:c8:6d:d8:02:64:f4:09:85:1e:45:4f: e1:d6:cd:31:7a:16:d2:69:de:0b:5a:ed:7f:a1:af:de:20:d9: ea:48:e5:08:86:8c:1e:fe:f5:67:c5:7e:31:98:0f:1d:95:08: c7:5c:11:0f:8c:f7:d7:aa:62:52:25:7c:48:df:c7:f0:05:bb: 5c:0a:05:ad:b6:07:e3:ad:8f:28:6a:7b:ee:5a:03:aa:b3:1c: 46:c5:fe:56:40:7b:40:b1:0f:ac:66:c2:7c:18:36:52:a0:a4: 62:6e:82:43:4b:bf:a0:d3:19:e5:4f:e7:d3:2c:8f:a9:1b:44: e8:f7:b3:9b:f8:f5:be:b5:6b:77:56:4d:46:69:2b:c0:e8:b1: 40:e3:f7:25:44:cd:ed:40:19:d1:ba:f4:b3:d6:69:58:ff:f8: f9:47:3c:f0:24:a3:c4:31:d4:0b:3e:99:e4:81:36:e9:14:74: df:01:35:ac:2f:80:52:79:b4:9d:de:49:bc:77:5b:30:35:0a: af:ee:51:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDItZX2pDI+XWwBzpqSzeVqbIaO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNTExMDIwMjQ1MDFaFw0yNTExMDUxMzAyMDFaMDMxMTAvBgNV BAMTKDk3QkI3QUJDNjRCQ0NEQ0FENjdCNDA5QjBGOEQ3MUFGRkJCRkZBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYSrMf/MLeQsn4MYrJirrln/X7 HIArEth+tgwKMTwA84bpGF7DAmgzCoWCiDNRsi+pVHmgeXchzWltDrrtfYbWTauS fSMXsc2LVfrDGyvHfoMOH+hYnocNtsICR+IRCvYeg6QwfafP25riekHAtG9M1oNs ODZJAxQqod0piI0nPqb7aUrmB2QiBlbOP3/dtIRxPlT4DCkVbc8DR+WeiQgzOhbi AThljU/GNNfZ7G3YuhZ07TkAHicWb/orHB519KEe3Tz/6vdUp2nwzzB4UZAlSkCH IW+xxSOErtH051uSTrz3xB8cErcgmDs7m8EwQwvGrefBmmAp5GlB256qFNQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl7t6vGS8zcrWe0CbD41xr/u/+sswHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEz RDQ2MTc1NThBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuolcjSzvGignIMZltEez7Az8hZq6IMzzSn O7kpC96dU6QtcMjPFYCYfg0X3NoYI3CaVZGFDbp6gvuVETrIbdgCZPQJhR5FT+HW zTF6FtJp3gta7X+hr94g2epI5QiGjB7+9WfFfjGYDx2VCMdcEQ+M99eqYlIlfEjf x/AFu1wKBa22B+Otjyhqe+5aA6qzHEbF/lZAe0CxD6xmwnwYNlKgpGJugkNLv6DT GeVP59Msj6kbROj3s5v49b61a3dWTUZpK8DosUDj9yVEze1AGdG69LPWaVj/+PlH PPAko8Qx1As+meSBNukUdN8BNawvgFJ5tJ3eSbx3WzA1Cq/uUT8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:48:28 2025 by rpki-client