$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: DRXpiLVnsnLxkuLtZBK3DVNOjMrYNa0Lq7DMzm5q0Qs= Subject key identifier: 87:68:53:54:8C:1E:AB:70:23:8D:A2:B0:9F:38:22:BF:FB:FD:17:8D Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 6343E9E973B0C7DF5BF7387DB773B280EFB6E375 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 0192 Signing time: Sun 15 Jun 2025 07:20:58 +0000 Manifest this update: Sun 15 Jun 2025 07:15:58 +0000 Manifest next update: Wed 18 Jun 2025 09:24:58 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: dR9F5GOB/nADBotEL28uOWPTu53uGgj/nkvtB4VrMDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:43:e9:e9:73:b0:c7:df:5b:f7:38:7d:b7:73:b2:80:ef:b6:e3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: Jun 15 07:15:58 2025 GMT Not After : Jun 18 09:24:58 2025 GMT Subject: CN=876853548C1EAB70238DA2B09F3822BFFBFD178D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:54:ca:39:2e:d2:2f:d8:e2:78:3b:1f:18:30: 4c:66:ca:f9:09:4d:0d:33:a2:f8:d7:e4:62:d9:1a: 74:2c:fe:14:46:1a:cf:cb:92:a4:24:20:84:12:0f: 41:b8:d0:4d:18:2d:fc:bd:04:26:8c:a2:c3:d6:84: ec:f3:2c:71:17:a7:3c:62:68:99:ea:a4:87:fe:53: af:ac:31:8a:53:6a:22:b0:1b:83:0b:96:a2:6e:6f: 1e:d6:ed:69:39:6e:cc:9e:46:cd:d1:15:01:d7:e6: 26:0e:20:04:fc:56:2f:4a:71:f2:de:07:57:84:da: 0f:4f:66:da:67:99:e9:04:72:93:16:c0:0c:fd:19: 99:b0:a5:34:bf:c0:7b:5d:5a:6c:7c:2b:23:66:0f: 20:4c:94:0d:8b:9f:35:67:5c:c7:69:f1:df:f7:23: 28:47:87:a9:2d:a5:af:e1:e8:11:69:cd:5f:b4:bf: 57:94:22:56:7a:d5:9a:09:a6:ac:ea:38:5a:29:c0: a4:44:2c:ef:55:1d:ac:89:9d:cd:6b:4a:d8:1f:a6: 41:a9:a6:4f:dc:ab:4b:8f:30:a8:71:12:d7:4d:d1: 41:eb:db:1b:08:1c:a4:cb:d8:8b:66:fe:db:a7:00: 75:ef:b1:84:8f:a2:61:7c:f5:4e:d1:2b:a4:a0:2e: 80:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:53:54:8C:1E:AB:70:23:8D:A2:B0:9F:38:22:BF:FB:FD:17:8D X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:7b:b0:b6:fa:51:3c:30:6f:6f:28:3a:84:4a:d3:e5:1e:58: 4e:4b:bd:09:29:12:3a:d6:6c:45:4d:98:4f:02:57:36:9b:9a: 59:dd:93:40:42:5a:b2:bf:62:35:f3:93:63:cf:f7:4d:09:1d: e6:0b:af:05:03:70:91:11:27:5e:2e:c4:b6:cd:fb:bb:b2:60: dc:64:1c:95:3e:29:6a:c8:56:6e:d2:bd:83:81:4c:cf:c8:29: 57:2b:5d:68:1e:05:92:64:67:76:ed:95:40:52:81:49:0a:0f: 47:db:04:32:87:1c:00:24:fa:2b:05:7c:58:69:fc:2d:c1:4c: c2:32:10:c2:12:81:9c:24:ed:3e:b2:e8:18:60:d9:08:d3:e7: 6c:e4:cb:45:34:11:3f:20:b8:aa:12:15:4e:33:f5:dd:11:b7: 67:da:c8:5a:c5:d6:9a:8d:ee:2f:f5:e9:79:89:c7:bd:94:1f: c1:11:e6:d0:35:04:4e:e0:48:a7:b7:1f:ee:5a:c9:66:f6:f9: 9b:89:18:ec:fc:b5:09:0c:32:25:e9:fd:13:46:d4:f5:2f:cb: b4:26:67:e1:4f:dd:a1:83:ec:ab:fd:09:8c:21:ff:2c:3e:73: 37:60:59:e9:07:2b:18:9a:5c:46:3e:1d:b0:db:52:52:af:6e: bb:ef:0d:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0Pp6XOwx99b9zh9t3OygO+243UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNTA2MTUwNzE1NThaFw0yNTA2MTgwOTI0NThaMDMxMTAvBgNV BAMTKDg3Njg1MzU0OEMxRUFCNzAyMzhEQTJCMDlGMzgyMkJGRkJGRDE3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3VMo5LtIv2OJ4Ox8YMExmyvkJ TQ0zovjX5GLZGnQs/hRGGs/LkqQkIIQSD0G40E0YLfy9BCaMosPWhOzzLHEXpzxi aJnqpIf+U6+sMYpTaiKwG4MLlqJubx7W7Wk5bsyeRs3RFQHX5iYOIAT8Vi9KcfLe B1eE2g9PZtpnmekEcpMWwAz9GZmwpTS/wHtdWmx8KyNmDyBMlA2LnzVnXMdp8d/3 IyhHh6ktpa/h6BFpzV+0v1eUIlZ61ZoJpqzqOFopwKRELO9VHayJnc1rStgfpkGp pk/cq0uPMKhxEtdN0UHr2xsIHKTL2Itm/tunAHXvsYSPomF89U7RK6SgLoBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh2hTVIweq3AjjaKwnzgiv/v9F40wHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAN7sLb6UTwwb28oOoRK0+UeWE5LvQkpEjrW bEVNmE8CVzabmlndk0BCWrK/YjXzk2PP900JHeYLrwUDcJERJ14uxLbN+7uyYNxk HJU+KWrIVm7SvYOBTM/IKVcrXWgeBZJkZ3btlUBSgUkKD0fbBDKHHAAk+isFfFhp /C3BTMIyEMISgZwk7T6y6Bhg2QjT52zky0U0ET8guKoSFU4z9d0Rt2fayFrF1pqN 7i/16XmJx72UH8ER5tA1BE7gSKe3H+5ayWb2+ZuJGOz8tQkMMiXp/RNG1PUvy7Qm Z+FP3aGD7Kv9CYwh/yw+czdgWekHKxiaXEY+HbDbUlKvbrvvDT4= -----END CERTIFICATE-----Generated at Sun Jun 15 23:56:29 2025 by rpki-client