$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: Arz/d3acKi9xXjYdoWynkHiGEyYUWHNhUrd5tzlXGrk= Subject key identifier: A7:DF:55:F6:29:31:80:7D:4D:B3:16:27:91:35:F2:E8:95:DF:02:36 Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 3005F98930FE2B60FBFB4AB54175D6DC5272A886 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 02DB Signing time: Fri 13 Jun 2025 20:00:49 +0000 Manifest this update: Fri 13 Jun 2025 19:55:49 +0000 Manifest next update: Tue 17 Jun 2025 02:52:49 +0000 Files and hashes: 1: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: hDB00TLneDpVkLNbe7aAfk3b6UUvF3I8dBjAf/SLFFI=) 2: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: xGtojE5xQ38ofrHeox7psZGSkp6l9QQja9HVSx7iji8=) 3: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: XbIXaBlgITySOhG/uspxxWnRxeiDl4kKWER/oYyIcJ4=) 4: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 8WaehvbTOcF3pzR4s59v/gds3hIUxmrMCC7s3FSug0w=) 5: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: cExHa3VEYQku+5tT+D0CrjD+QxssCbFf6awzjVQiLas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 02:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:05:f9:89:30:fe:2b:60:fb:fb:4a:b5:41:75:d6:dc:52:72:a8:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Jun 13 19:55:49 2025 GMT Not After : Jun 17 02:52:49 2025 GMT Subject: CN=A7DF55F62931807D4DB316279135F2E895DF0236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:c5:bb:99:57:45:fa:45:79:75:6a:26:20: 78:ed:c5:0b:a7:7b:92:b6:0c:3b:cb:84:21:77:4a: aa:6b:a2:f5:87:d5:a8:d7:c4:aa:9b:b7:56:2e:7f: 41:77:4c:b1:80:be:2f:aa:4f:40:65:94:fc:c9:da: 40:40:86:95:ff:41:37:4c:1a:3b:97:63:30:1e:d8: 38:ee:a5:96:80:86:46:17:6f:92:80:ec:df:85:f0: 64:a8:5d:9e:e6:10:b5:41:d6:7d:74:8a:de:bd:91: 9a:f3:b4:45:a7:31:d4:ab:c4:ed:b0:8b:bc:3f:d2: 1e:4b:8a:98:f0:dc:fe:62:01:3a:52:a8:6b:04:a5: 52:15:4b:99:e1:e1:e2:e4:a7:36:c8:e3:de:d5:3e: 0e:60:e4:b2:3f:89:85:b4:be:04:b2:af:71:c8:f9: 67:20:27:b6:b4:83:31:e8:31:7d:c7:4a:82:31:93: d9:21:d2:21:3b:61:93:d9:69:d8:0c:fd:eb:e3:9c: 58:d4:ac:22:3e:5e:da:fd:0b:e6:26:48:2a:bf:f5: 35:d3:52:53:32:cb:1d:86:ba:da:2c:63:78:c6:2f: 84:22:83:8f:1d:58:86:2a:57:fa:03:de:46:76:42: 37:d9:cc:d3:04:af:69:f0:a4:96:72:cf:1f:7e:5d: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DF:55:F6:29:31:80:7D:4D:B3:16:27:91:35:F2:E8:95:DF:02:36 X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:41:41:c8:10:ab:c0:39:41:e1:ac:59:32:c3:66:98:d5:71: 31:22:7e:19:e5:fa:ed:85:1e:e8:87:29:c8:47:74:8d:02:81: bf:3a:d7:ad:27:ed:ff:a9:10:be:5b:73:4d:bf:3d:0d:85:d8: 10:97:59:07:06:11:f8:cc:bc:62:f4:ac:9d:84:e8:f8:69:4f: a2:d1:46:e0:b7:43:72:18:cf:a8:c7:d7:ab:75:b0:ed:30:da: 31:ea:49:27:0f:f0:89:3f:1d:ca:a8:89:57:a2:94:63:3a:ca: a2:aa:40:b7:5e:4f:56:5c:fd:5f:87:0b:cf:17:c1:9f:9e:84: 37:b3:8c:70:0a:af:f8:e4:f5:ce:6e:0b:32:e0:41:09:4d:ae: fd:59:15:d2:b1:06:60:b0:99:67:bf:21:15:1b:3a:23:82:74: 5f:7e:92:c8:3d:28:96:9d:cf:85:e1:39:24:25:70:b7:f2:3c: a6:c3:76:8f:71:af:eb:1b:ec:05:a9:6f:00:cd:c9:09:1b:62: c5:8f:db:13:15:7d:33:2b:af:7a:d9:85:9b:ff:08:4d:30:bb: 74:bb:af:66:f9:11:41:7d:d3:1d:4d:98:d0:fe:b7:30:76:23: 2c:b8:77:b2:af:c3:a4:72:4e:0b:86:16:07:7b:1d:2b:51:27: c5:94:b6:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAX5iTD+K2D7+0q1QXXW3FJyqIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNTA2MTMxOTU1NDlaFw0yNTA2MTcwMjUyNDlaMDMxMTAvBgNV BAMTKEE3REY1NUY2MjkzMTgwN0Q0REIzMTYyNzkxMzVGMkU4OTVERjAyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RsW7mVdF+kV5dWomIHjtxQun e5K2DDvLhCF3SqprovWH1ajXxKqbt1Yuf0F3TLGAvi+qT0BllPzJ2kBAhpX/QTdM GjuXYzAe2DjupZaAhkYXb5KA7N+F8GSoXZ7mELVB1n10it69kZrztEWnMdSrxO2w i7w/0h5Lipjw3P5iATpSqGsEpVIVS5nh4eLkpzbI497VPg5g5LI/iYW0vgSyr3HI +WcgJ7a0gzHoMX3HSoIxk9kh0iE7YZPZadgM/evjnFjUrCI+Xtr9C+YmSCq/9TXT UlMyyx2GutosY3jGL4Qig48dWIYqV/oD3kZ2QjfZzNMEr2nwpJZyzx9+XVhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp99V9ikxgH1NsxYnkTXy6JXfAjYwHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlBQcgQq8A5QeGsWTLDZpjVcTEifhnl+u2F HuiHKchHdI0Cgb86160n7f+pEL5bc02/PQ2F2BCXWQcGEfjMvGL0rJ2E6PhpT6LR RuC3Q3IYz6jH16t1sO0w2jHqSScP8Ik/HcqoiVeilGM6yqKqQLdeT1Zc/V+HC88X wZ+ehDezjHAKr/jk9c5uCzLgQQlNrv1ZFdKxBmCwmWe/IRUbOiOCdF9+ksg9KJad z4XhOSQlcLfyPKbDdo9xr+sb7AWpbwDNyQkbYsWP2xMVfTMrr3rZhZv/CE0wu3S7 r2b5EUF90x1NmND+tzB2Iyy4d7Kvw6RyTguGFgd7HStRJ8WUtkY= -----END CERTIFICATE-----Generated at Mon Jun 16 04:19:28 2025 by rpki-client