$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: G6IQqRnQyhjNWpv86UHO0w2QLQsYR2+eixCb23eJta8= Subject key identifier: EF:93:03:5E:2D:CF:E0:FE:F5:2F:02:69:BD:E4:B9:88:F5:EB:53:1F Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 0DB81B61C95D27FDACB718982BD7629B2E90A5FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 01AA Signing time: Wed 06 Aug 2025 21:11:00 +0000 Manifest this update: Wed 06 Aug 2025 21:06:00 +0000 Manifest next update: Sun 10 Aug 2025 00:19:00 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: N9A5VY1LgKmzLsIB23XQteq6vs+Ed2eK5/bYUJix+oQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b8:1b:61:c9:5d:27:fd:ac:b7:18:98:2b:d7:62:9b:2e:90:a5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: Aug 6 21:06:00 2025 GMT Not After : Aug 10 00:19:00 2025 GMT Subject: CN=EF93035E2DCFE0FEF52F0269BDE4B988F5EB531F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:14:50:d6:c6:29:40:b6:a0:0c:77:65:91: ab:04:b5:a6:18:7b:02:d6:40:f5:92:61:ae:ae:f0: ce:bb:87:52:74:c9:01:ca:62:4b:52:59:c8:ac:c5: a5:67:63:2a:bd:d9:fc:f2:e1:df:ac:66:64:50:0d: 70:0c:0a:03:b1:ea:a7:0a:0d:fb:2b:f2:fd:cd:f7: a6:17:51:fe:9c:fa:46:e8:fc:ef:af:82:d3:59:73: bd:0c:74:99:d7:c1:59:f3:41:bd:b4:92:f0:a3:7d: 40:6c:91:63:d4:43:4e:9c:8c:83:da:70:b8:e7:5b: c5:4e:2d:1d:07:44:4c:0e:8c:e7:d5:22:e1:00:97: 5c:0d:a1:3a:4f:bb:65:9c:d9:df:7e:23:44:82:71: 00:6e:52:8b:0c:13:fe:23:fe:29:77:7a:fb:0b:8e: e8:8e:e4:19:52:5c:b8:94:fa:a3:05:a8:e7:7d:8d: c4:78:63:e1:7c:44:95:9f:01:14:8b:a5:e7:28:42: cb:78:74:fe:69:ff:3b:3c:10:f6:4a:09:0b:63:a0: 5d:40:ce:e9:f6:c2:d4:4f:5d:94:28:2c:2f:54:e6: d3:bc:4c:54:93:74:0c:d4:8d:0d:18:46:18:a6:9a: 9e:69:3c:41:62:37:d3:83:d2:da:13:36:01:c0:29: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:93:03:5E:2D:CF:E0:FE:F5:2F:02:69:BD:E4:B9:88:F5:EB:53:1F X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:42:32:d2:7e:b2:cf:bc:6c:36:5d:43:13:73:b3:be:e2:aa: c7:a0:b8:62:d3:3d:99:db:2c:96:0a:f3:06:93:6a:39:a3:da: 42:2e:52:1c:06:2e:0f:b3:f3:47:ac:d1:c8:1e:c1:30:e4:99: a9:21:63:68:d4:67:34:b8:0c:3e:2c:47:91:2e:23:4c:84:0d: 4c:e6:fd:a0:e8:b0:15:1d:8a:56:41:26:31:55:ab:24:2a:c8: a3:03:35:ec:ea:80:13:5c:77:9b:32:20:15:1e:18:87:ce:37: bf:6b:d3:80:23:93:e3:9a:7f:64:f8:c0:ac:4c:ce:6c:fa:27: 2d:10:61:5c:7d:c0:97:f4:92:65:1f:a8:02:83:5f:7f:10:c1: f6:45:d9:b6:4f:20:27:b6:6f:e3:3f:9a:31:50:3d:5d:1c:53: ab:bd:3e:a2:42:81:b6:2a:0c:8b:cc:72:41:7a:48:2b:85:26: fb:b3:df:71:ed:39:aa:2f:dc:5c:0a:e5:58:e8:2b:7d:59:a2: 23:e6:5b:cf:c9:7f:dc:15:92:cd:a0:94:5e:08:f6:73:59:cb: 86:f3:e8:87:46:76:af:00:8c:ef:37:ab:28:da:6c:3b:57:59: f9:70:51:21:67:de:5d:a4:3e:74:86:de:92:51:c8:09:cc:5c: 86:7e:07:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbgbYcldJ/2stxiYK9dimy6QpfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNTA4MDYyMTA2MDBaFw0yNTA4MTAwMDE5MDBaMDMxMTAvBgNV BAMTKEVGOTMwMzVFMkRDRkUwRkVGNTJGMDI2OUJERTRCOTg4RjVFQjUzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaxRQ1sYpQLagDHdlkasEtaYY ewLWQPWSYa6u8M67h1J0yQHKYktSWcisxaVnYyq92fzy4d+sZmRQDXAMCgOx6qcK Dfsr8v3N96YXUf6c+kbo/O+vgtNZc70MdJnXwVnzQb20kvCjfUBskWPUQ06cjIPa cLjnW8VOLR0HREwOjOfVIuEAl1wNoTpPu2Wc2d9+I0SCcQBuUosME/4j/il3evsL juiO5BlSXLiU+qMFqOd9jcR4Y+F8RJWfARSLpecoQst4dP5p/zs8EPZKCQtjoF1A zun2wtRPXZQoLC9U5tO8TFSTdAzUjQ0YRhimmp5pPEFiN9OD0toTNgHAKRoxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU75MDXi3P4P71LwJpveS5iPXrUx8wHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFCMtJ+ss+8bDZdQxNzs77iqseguGLTPZnb LJYK8waTajmj2kIuUhwGLg+z80es0cgewTDkmakhY2jUZzS4DD4sR5EuI0yEDUzm /aDosBUdilZBJjFVqyQqyKMDNezqgBNcd5syIBUeGIfON79r04Ajk+Oaf2T4wKxM zmz6Jy0QYVx9wJf0kmUfqAKDX38QwfZF2bZPICe2b+M/mjFQPV0cU6u9PqJCgbYq DIvMckF6SCuFJvuz33HtOaov3FwK5VjoK31ZoiPmW8/Jf9wVks2glF4I9nNZy4bz 6IdGdq8AjO83qyjabDtXWflwUSFn3l2kPnSG3pJRyAnMXIZ+B88= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:08 2025 by rpki-client