$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: WKklCivBbVobiGWdum11l1F13da7cZqIZnmdhWv9HRw= Subject key identifier: C9:90:57:D1:5F:D6:CA:15:E9:5D:45:D1:49:B2:20:15:38:77:86:F3 Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 1B2E2C64700272826B3DF3B29D29027226B9718C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 01DA Signing time: Mon 21 Jul 2025 00:10:51 +0000 Manifest this update: Mon 21 Jul 2025 00:05:51 +0000 Manifest next update: Thu 24 Jul 2025 12:00:51 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) 2: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) 3: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: 0+xhSxV6HbNtLVjT3AIBZPbZHxOR163iDDucPiyu5Ok=) 4: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:2e:2c:64:70:02:72:82:6b:3d:f3:b2:9d:29:02:72:26:b9:71:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Jul 21 00:05:51 2025 GMT Not After : Jul 24 12:00:51 2025 GMT Subject: CN=C99057D15FD6CA15E95D45D149B22015387786F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:21:5c:60:10:45:ba:8d:52:34:d2:21:ab: 5e:de:6a:77:1f:04:26:50:87:24:0e:d6:88:65:94: 28:e5:cc:a0:68:94:59:00:a4:f3:12:94:8a:8b:82: 03:b8:75:d0:69:d8:e6:7b:10:c2:b0:e8:36:38:c0: 2a:26:6b:1f:f2:85:88:66:fe:f8:00:b5:73:38:cc: 49:a8:d7:32:1b:47:f0:4f:c2:da:e6:87:3f:99:05: 9e:58:db:ce:f8:a5:26:27:9d:97:20:e4:1f:17:f2: b9:5b:ab:a8:8d:e8:87:48:34:a1:1e:73:7e:3e:47: d0:29:76:b4:3e:38:2f:14:71:a7:8b:33:1e:26:fd: 54:b4:39:0d:1b:d3:04:b1:d8:f5:8c:be:85:e6:bb: a6:69:b5:83:d0:84:01:c8:48:20:d3:ba:41:db:0a: a3:de:38:cd:b5:14:ee:6b:9d:91:b4:49:d7:08:e8: 59:73:38:8d:82:d9:60:ce:64:c7:cd:4b:7a:ad:47: c9:de:dd:57:0a:6c:7a:e1:e2:43:a3:c0:c6:95:6c: d3:42:88:d4:4d:69:bd:39:f0:1f:a0:7a:f1:7e:fc: cb:31:19:cf:68:66:e6:0e:28:4f:e8:f1:d7:67:ed: ff:da:be:96:2e:3d:71:a4:10:82:1f:c2:40:4c:6d: 84:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:90:57:D1:5F:D6:CA:15:E9:5D:45:D1:49:B2:20:15:38:77:86:F3 X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f0:2a:cd:0e:d0:f4:7f:3c:92:26:e2:d3:28:01:2a:b3:2d: b1:cc:2b:10:8c:13:36:c8:32:eb:7e:92:3e:a1:2a:3a:f9:62: 0c:e9:08:24:74:84:9f:d1:8d:99:fb:27:af:72:51:f3:9f:3d: fe:36:62:49:3b:46:a9:1f:26:06:90:73:41:40:b6:e8:a6:9d: 4c:68:43:95:b0:af:58:e7:d4:9c:52:dc:53:2c:5c:a7:1e:f5: dc:75:be:7c:64:e3:1d:1b:45:d2:92:4e:0c:f6:cd:43:1d:ac: a4:f5:f4:1e:2b:30:16:fb:f6:80:c5:74:83:9b:3d:3d:7f:86: c8:10:33:74:9a:49:2a:80:b3:fe:6d:ea:66:08:ad:b2:38:8a: 88:6d:d2:82:c7:7e:b7:d9:53:15:b7:71:47:47:ff:fa:e9:d6: 40:b1:f4:7e:ae:1b:e4:a5:2e:9d:01:63:85:b7:c5:2d:da:69: 9a:ce:94:85:65:51:a7:f2:78:b7:e9:2a:46:49:43:1f:fd:77: cd:14:63:99:a0:2e:79:fb:05:84:8c:bb:9a:80:c5:55:25:07: 55:49:6d:1e:88:b8:0b:58:3d:eb:07:b5:0f:d7:e9:0a:1b:08: c6:f0:b4:70:c7:31:e5:e6:9b:2a:19:e5:26:f5:38:ff:d1:53: 97:cd:5d:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGy4sZHACcoJrPfOynSkCcia5cYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNTA3MjEwMDA1NTFaFw0yNTA3MjQxMjAwNTFaMDMxMTAvBgNV BAMTKEM5OTA1N0QxNUZENkNBMTVFOTVENDVEMTQ5QjIyMDE1Mzg3Nzg2RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2SFcYBBFuo1SNNIhq17eancf BCZQhyQO1ohllCjlzKBolFkApPMSlIqLggO4ddBp2OZ7EMKw6DY4wComax/yhYhm /vgAtXM4zEmo1zIbR/BPwtrmhz+ZBZ5Y2874pSYnnZcg5B8X8rlbq6iN6IdINKEe c34+R9ApdrQ+OC8UcaeLMx4m/VS0OQ0b0wSx2PWMvoXmu6ZptYPQhAHISCDTukHb CqPeOM21FO5rnZG0SdcI6FlzOI2C2WDOZMfNS3qtR8ne3VcKbHrh4kOjwMaVbNNC iNRNab058B+gevF+/MsxGc9oZuYOKE/o8ddn7f/avpYuPXGkEIIfwkBMbYSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyZBX0V/WyhXpXUXRSbIgFTh3hvMwHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3wKs0O0PR/PJIm4tMoASqzLbHMKxCMEzbI Mut+kj6hKjr5YgzpCCR0hJ/RjZn7J69yUfOfPf42Ykk7RqkfJgaQc0FAtuimnUxo Q5Wwr1jn1JxS3FMsXKce9dx1vnxk4x0bRdKSTgz2zUMdrKT19B4rMBb79oDFdIOb PT1/hsgQM3SaSSqAs/5t6mYIrbI4ioht0oLHfrfZUxW3cUdH//rp1kCx9H6uG+Sl Lp0BY4W3xS3aaZrOlIVlUafyeLfpKkZJQx/9d80UY5mgLnn7BYSMu5qAxVUlB1VJ bR6IuAtYPesHtQ/X6QobCMbwtHDHMeXmmyoZ5Sb1OP/RU5fNXWA= -----END CERTIFICATE-----Generated at Mon Jul 21 01:34:07 2025 by rpki-client