$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft File: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft (raw, json) Hash identifier: vzCbjoK0ynDmClR35I2Fzh7iwGKB5VkNETGs6/4jP1g= Subject key identifier: B6:C9:B7:7A:E3:E6:0E:2B:5D:61:FD:34:20:8D:BA:09:75:42:6F:6D Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C Certificate issuer: /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Certificate serial: 164305BAFA06C61E626C34B6AAD5E6AAB39751FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft Manifest number: 0521 Signing time: Tue 04 Nov 2025 12:22:07 +0000 Manifest this update: Tue 04 Nov 2025 12:17:07 +0000 Manifest next update: Fri 07 Nov 2025 14:32:07 +0000 Files and hashes: 1: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: nLub1P+aFMPWReFe8FfiX+yqIND5D1X2l5ebLcrAixg=) 2: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl (hash: wK3R8rawJupZ8MjeCSfA/jwcRHUCf5mJIQ9F2mqYpPI=) 3: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: ShEOWvu/KCYTTrKo5vrKeCwlexfHyDbC4uTV8yZtzEM=) 4: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: /yhg5qr+BfUwCEkWIHjx5Xurv6fbCx8q1w5UII3HZ8w=) 5: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: lX37Ym1HtH8/+BNNZ7vVVvmLTRPAVgTV6qXoJU01xNo=) 6: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: TuOuwC+HTY3+zsq30NoK3C4u4uR9Kt6tuzw+MAyTb4o=) 7: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: wlegEJoNWqrWT2tySFrwLRqLsXDXFl0OFT0Nuvvp7LI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:43:05:ba:fa:06:c6:1e:62:6c:34:b6:aa:d5:e6:aa:b3:97:51:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Validity Not Before: Nov 4 12:17:07 2025 GMT Not After : Nov 7 14:32:07 2025 GMT Subject: CN=B6C9B77AE3E60E2B5D61FD34208DBA0975426F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:5e:e4:fb:ce:45:71:9f:55:e1:02:67:44: 6f:49:1a:33:30:33:ed:08:40:69:7d:26:9a:1b:14: 2f:c1:19:08:48:5e:a4:92:f9:37:8b:fc:93:85:3e: 34:cf:69:68:ad:9f:d7:29:d1:cb:74:7f:d6:31:89: 9d:f1:d9:bb:e1:c3:36:db:3f:9a:2e:51:be:c0:01: 4f:f7:86:cd:c1:11:1e:2d:52:5f:83:a3:ae:7a:41: 48:c8:54:07:b3:c0:ad:e1:89:11:ff:ed:f0:5d:d6: 71:95:fe:5e:ca:80:11:92:90:9c:f2:d4:9d:ea:08: a2:48:24:29:06:35:cb:c7:be:2d:fc:14:96:0a:53: 46:bd:e6:58:1a:db:2f:b0:1f:fa:41:16:3f:18:fb: c1:8e:f6:58:0a:30:f8:96:1d:83:10:bc:92:ed:b9: 0b:f0:00:1f:61:0f:f0:24:b7:7c:48:e5:e6:48:4d: 76:4c:e6:a6:bb:fb:31:9e:13:49:80:e3:c0:56:e7: af:45:7f:ce:d8:d0:36:9b:61:aa:86:6f:49:72:6d: b9:4d:09:7b:ca:b9:f9:87:2a:44:42:bd:1f:12:01: db:91:40:b9:cc:2b:d7:cc:4f:80:2f:3a:1e:63:f9: 2f:75:17:c1:62:d6:0f:51:c5:96:9d:36:73:c4:fd: 1e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C9:B7:7A:E3:E6:0E:2B:5D:61:FD:34:20:8D:BA:09:75:42:6F:6D X509v3 Authority Key Identifier: keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5e:71:61:2c:22:f3:e6:9b:b6:07:2c:e7:79:ca:ca:1e:0e: 99:28:06:3d:d1:4d:96:2e:9d:22:94:f9:d6:d9:af:e1:f3:7b: 88:8c:b3:cc:f0:0a:b9:7e:8a:96:23:57:b5:45:51:d1:c2:c5: 11:d2:03:08:e1:3b:85:02:82:9e:44:a0:a7:fe:a3:d6:50:2a: 0e:eb:0f:f2:1c:f4:ec:84:8b:f8:c4:fc:b7:4f:ff:0b:33:02: 8a:4e:d3:31:f0:86:ab:40:d4:5a:6b:94:ef:b4:ab:e9:23:53: b5:e7:df:f7:59:d5:91:fa:94:10:ad:b3:c7:76:90:71:a2:fe: c5:ed:19:08:9d:a6:e3:39:4d:23:ab:e7:7a:66:80:09:8b:99: e3:f4:54:9a:25:cb:48:6f:d1:9a:96:46:d2:53:66:01:21:4a: e5:2b:04:75:6f:cf:fc:04:4c:e4:d8:be:30:80:4f:96:08:f7: bd:3f:21:a6:f8:3a:61:4c:24:fa:83:68:30:6c:ea:63:5a:a2: a9:36:37:d6:b8:ab:7c:67:ff:f7:44:cd:48:3b:a6:95:ac:dd: 8f:b7:fe:96:8e:ab:f0:df:6e:a6:43:4b:fc:7f:b5:58:0d:a0: 0c:eb:e9:e7:72:14:cf:9c:46:97:bb:b5:41:53:c9:d7:51:31: c4:0e:c0:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkMFuvoGxh5ibDS2qtXmqrOXUf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw MTI1MkE1QzAeFw0yNTExMDQxMjE3MDdaFw0yNTExMDcxNDMyMDdaMDMxMTAvBgNV BAMTKEI2QzlCNzdBRTNFNjBFMkI1RDYxRkQzNDIwOERCQTA5NzU0MjZGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLl7k+85FcZ9V4QJnRG9JGjMw M+0IQGl9JpobFC/BGQhIXqSS+TeL/JOFPjTPaWitn9cp0ct0f9YxiZ3x2bvhwzbb P5ouUb7AAU/3hs3BER4tUl+Do656QUjIVAezwK3hiRH/7fBd1nGV/l7KgBGSkJzy 1J3qCKJIJCkGNcvHvi38FJYKU0a95lga2y+wH/pBFj8Y+8GO9lgKMPiWHYMQvJLt uQvwAB9hD/Akt3xI5eZITXZM5qa7+zGeE0mA48BW569Ff87Y0DabYaqGb0lybblN CXvKufmHKkRCvR8SAduRQLnMK9fMT4AvOh5j+S91F8Fi1g9RxZadNnPE/R5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtsm3euPmDitdYf00II26CXVCb20wHwYDVR0j BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1 MkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0 Y2QtNjJmMTI0MTI2ZWFjLzAvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3 OTQwMTI1MkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJecWEsIvPmm7YHLOd5ysoeDpkoBj3RTZYu nSKU+dbZr+Hze4iMs8zwCrl+ipYjV7VFUdHCxRHSAwjhO4UCgp5EoKf+o9ZQKg7r D/Ic9OyEi/jE/LdP/wszAopO0zHwhqtA1FprlO+0q+kjU7Xn3/dZ1ZH6lBCts8d2 kHGi/sXtGQidpuM5TSOr53pmgAmLmeP0VJoly0hv0ZqWRtJTZgEhSuUrBHVvz/wE TOTYvjCAT5YI970/Iab4OmFMJPqDaDBs6mNaoqk2N9a4q3xn//dEzUg7ppWs3Y+3 /paOq/DfbqZDS/x/tVgNoAzr6edyFM+cRpe7tUFTyddRMcQOwNk= -----END CERTIFICATE-----Generated at Tue Nov 4 19:28:14 2025 by rpki-client