$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: NGl6l4n3IF9aXVL61hocdEWLmXaggXMFQ9hC63jG3ww= Subject key identifier: A3:C7:D9:5A:EB:99:84:7F:A3:28:DE:73:98:94:24:53:BA:CD:73:14 Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 7BAC625B60B7C0C37F0EC7399B29F15C104D6C44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 031C Signing time: Mon 03 Nov 2025 21:00:50 +0000 Manifest this update: Mon 03 Nov 2025 20:55:50 +0000 Manifest next update: Fri 07 Nov 2025 07:27:50 +0000 Files and hashes: 1: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: u4aBEtuM2QHTp7BELhEUw3EMWzsVzmaE71DRbevw9IE=) 2: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: umMXNYB5RwjlwGFC5Wpd2rzxhTLaoa08yJ2/wNUcpx0=) 3: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: tU2O/OAH1O/qSyyJqDlWC4HBTQpL06kLsKSpR1jZ5rg=) 4: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: wesud4Ud3HCpFz3TbmwbzTcWOeds/1nSTc4iWrxHtOo=) 5: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: dA3NVoe7D4IA106rVYDH/w+9MSXHjRuqO/A8hLNAY+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ac:62:5b:60:b7:c0:c3:7f:0e:c7:39:9b:29:f1:5c:10:4d:6c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Nov 3 20:55:50 2025 GMT Not After : Nov 7 07:27:50 2025 GMT Subject: CN=A3C7D95AEB99847FA328DE7398942453BACD7314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:86:f3:ac:b5:b1:49:16:07:51:06:da:4e:fa: ef:08:8e:14:ef:ad:0f:ee:41:a6:3c:e3:6d:2e:b1: be:8d:e2:51:93:fc:0a:4d:9c:b9:00:16:4f:f7:a3: c1:22:f9:46:e2:70:59:71:8e:b7:bc:a5:4c:a0:2c: 80:c8:8f:43:51:35:9c:ba:b6:4e:5a:a0:af:4c:23: 80:dc:67:a3:5f:ad:95:60:74:b6:8f:b3:28:2c:1c: cc:02:04:9d:02:26:91:79:9e:a3:5d:f3:73:b2:c6: 36:ea:e0:81:01:af:f3:9e:75:86:d6:d2:62:86:47: e7:67:64:48:0d:4f:8e:ef:f3:8a:55:47:91:ba:65: fb:fe:c3:78:7e:07:6f:3c:65:69:ea:79:ed:6a:b3: 69:5a:12:3e:68:a9:05:36:74:49:06:17:ef:b7:34: 01:bb:4d:c7:0c:23:63:99:c8:c8:64:e0:18:93:f8: 17:26:13:8b:5e:4b:63:cb:0d:93:c7:54:95:aa:35: 73:f1:1d:07:a3:85:43:bb:4b:2f:83:bb:79:ac:04: 78:77:07:21:de:d2:ff:3f:3c:a0:ba:d0:b8:7b:f5: 31:4f:21:3a:d4:53:e3:0b:c8:13:18:08:ea:ce:f0: fd:4e:ca:f6:b2:18:0e:da:90:a5:a0:c5:be:07:d2: ce:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C7:D9:5A:EB:99:84:7F:A3:28:DE:73:98:94:24:53:BA:CD:73:14 X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e0:35:55:f4:42:63:88:c1:8b:0b:dc:fe:9a:d4:da:2a:9c: a6:5e:a8:d1:52:0e:a3:61:2a:93:39:bc:e3:05:15:81:7e:f4: bd:e1:a6:58:de:56:bb:30:80:23:3c:68:ed:5c:15:58:d7:9a: ca:14:20:7d:39:e6:a3:a3:59:1d:61:7e:fe:c3:01:a2:3f:36: 57:cb:96:7d:b1:45:26:f0:54:3c:27:0b:e9:18:7e:a4:0e:ed: a5:bc:38:88:03:14:35:0e:5d:72:63:ab:19:62:08:22:2a:7b: 66:2c:26:d0:af:dd:3b:f9:3c:a1:96:96:d9:2c:97:65:e4:f1: aa:58:25:ef:75:da:4a:fe:6b:e1:7b:81:be:79:3a:6c:be:7c: 3d:09:aa:62:4c:99:09:a8:b0:37:6f:ae:77:b1:83:cf:f8:fb: 1d:17:9e:34:bc:a3:35:9a:7e:e7:40:cf:4d:6b:1a:f7:e1:df: 7d:ae:55:a6:2c:26:e4:ee:3a:a5:ef:de:a1:b6:ee:32:9a:3d: 10:ec:c0:9d:06:ed:8c:b8:b6:ef:d1:3e:2f:83:12:46:49:0a: c4:b3:e3:6e:ba:25:cc:ee:d0:ea:86:5b:d5:82:0a:16:bf:89: a5:39:19:9d:bf:62:c3:12:f1:ce:86:a8:08:d3:05:dc:5d:b2: b5:e3:44:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6xiW2C3wMN/Dsc5mynxXBBNbEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNTExMDMyMDU1NTBaFw0yNTExMDcwNzI3NTBaMDMxMTAvBgNV BAMTKEEzQzdEOTVBRUI5OTg0N0ZBMzI4REU3Mzk4OTQyNDUzQkFDRDczMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxhvOstbFJFgdRBtpO+u8IjhTv rQ/uQaY8420usb6N4lGT/ApNnLkAFk/3o8Ei+UbicFlxjre8pUygLIDIj0NRNZy6 tk5aoK9MI4DcZ6NfrZVgdLaPsygsHMwCBJ0CJpF5nqNd83Oyxjbq4IEBr/OedYbW 0mKGR+dnZEgNT47v84pVR5G6Zfv+w3h+B288ZWnqee1qs2laEj5oqQU2dEkGF++3 NAG7TccMI2OZyMhk4BiT+BcmE4teS2PLDZPHVJWqNXPxHQejhUO7Sy+Du3msBHh3 ByHe0v8/PKC60Lh79TFPITrUU+MLyBMYCOrO8P1OyvayGA7akKWgxb4H0s61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo8fZWuuZhH+jKN5zmJQkU7rNcxQwHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHgNVX0QmOIwYsL3P6a1NoqnKZeqNFSDqNh KpM5vOMFFYF+9L3hpljeVrswgCM8aO1cFVjXmsoUIH055qOjWR1hfv7DAaI/NlfL ln2xRSbwVDwnC+kYfqQO7aW8OIgDFDUOXXJjqxliCCIqe2YsJtCv3Tv5PKGWltks l2Xk8apYJe912kr+a+F7gb55Omy+fD0JqmJMmQmosDdvrnexg8/4+x0XnjS8ozWa fudAz01rGvfh332uVaYsJuTuOqXv3qG27jKaPRDswJ0G7Yy4tu/RPi+DEkZJCsSz 4266Jczu0OqGW9WCCha/iaU5GZ2/YsMS8c6GqAjTBdxdsrXjRNw= -----END CERTIFICATE-----Generated at Wed Nov 5 01:03:30 2025 by rpki-client