$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft File: A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft (raw, json) Hash identifier: sjpetsua3vAdOnBklcOSz35qiP0roOBQ9zqxsE37dJM= Subject key identifier: 76:07:6E:6A:DD:4D:E0:CE:B9:91:E5:53:B6:32:BB:6D:0F:F9:A8:CF Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 203197C250280A80D853D16E2431EDF9788DCF1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft Manifest number: 0371 Signing time: Sun 07 Sep 2025 12:10:01 +0000 Manifest this update: Sun 07 Sep 2025 12:05:01 +0000 Manifest next update: Wed 10 Sep 2025 12:50:01 +0000 Files and hashes: 1: A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl (hash: cfEohFjTaDwA47oJI0zJT+xDl821GVYYeDXuQbe792o=) 2: 3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (hash: HtvdbgNzbep41tsSwxpJVENDrPCo93IVN9YGCXSL+Js=) 3: 3130332e3135382e3136332e302f32342d3234203d3e203137393935.roa (hash: 4RAEHcKydfbmdG7JZ2oBClEPFrTNelxiK32dkCNM718=) 4: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (hash: uQ2lNYFZctQjtseGT/wzHT4giq7wlDo/uVXWwYPTnAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 12:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:31:97:c2:50:28:0a:80:d8:53:d1:6e:24:31:ed:f9:78:8d:cf:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Sep 7 12:05:01 2025 GMT Not After : Sep 10 12:50:01 2025 GMT Subject: CN=76076E6ADD4DE0CEB991E553B632BB6D0FF9A8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:d5:8f:5e:9b:33:ac:9d:b7:18:25:14:d2: ed:50:c5:ed:1f:fd:e6:eb:5c:9b:83:f7:f8:81:e4: ad:c9:ea:42:43:81:84:5d:68:d5:9f:d8:aa:29:8b: 9f:2c:d3:dd:10:1d:01:d1:c1:32:55:8d:27:dc:e3: 11:56:a6:2f:b0:3e:b2:c2:8a:b5:fb:f5:ce:b3:d4: d7:fd:2d:aa:2c:39:1b:69:12:cc:2d:5b:dc:b0:21: 33:63:bc:4f:62:98:05:f0:8f:58:c9:08:be:31:b8: 49:5e:64:9c:9b:c0:10:9e:6b:29:40:f8:b3:a9:1c: 84:21:de:6b:9e:cd:42:de:99:10:b0:f0:04:8c:8c: cc:a3:f5:d6:e7:66:ad:af:2a:2a:8b:d2:e0:de:8e: 6a:e4:ff:54:23:28:a7:0c:e4:d3:95:df:7e:78:af: f1:91:dc:35:97:80:80:91:57:84:37:27:a1:a0:94: 74:fa:52:a0:a3:39:d3:9f:67:39:70:01:a9:66:6f: d4:06:be:d6:8c:6f:ba:d5:43:da:2c:e8:64:93:23: 30:b9:a1:5e:da:c7:8c:38:9e:6b:e4:e3:c0:b5:e5: ce:df:1b:77:63:40:3e:82:4a:14:52:9b:99:c7:1c: 91:c7:a2:8c:e3:05:98:c2:d6:69:46:1a:7d:9b:56: 2e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:07:6E:6A:DD:4D:E0:CE:B9:91:E5:53:B6:32:BB:6D:0F:F9:A8:CF X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:c6:08:1e:1a:4b:33:be:9e:e1:c5:a6:16:32:eb:51:4c:94: f7:4a:57:d9:4c:00:9c:e3:98:c1:20:3e:d6:52:6a:c5:ce:28: 20:30:1d:36:d6:72:c6:cd:0e:36:50:f1:74:67:4c:d7:97:73: fd:54:f8:2b:e5:6c:e7:6d:21:9b:56:eb:ce:0f:9a:15:63:10: 79:15:5e:6e:8e:55:e6:e4:eb:04:1b:11:dc:4c:30:c6:89:65: cb:f0:b3:41:79:4f:b3:8b:f1:2f:62:88:30:70:23:cf:21:cf: b6:f6:09:9e:94:88:2a:50:1a:8b:b6:b3:1f:1f:e4:83:a8:11: 3b:81:e8:59:9d:90:74:8d:06:7a:30:a9:3b:5f:8d:a3:b0:2f: a8:f8:99:91:05:88:d2:7a:b7:da:c7:55:3c:e3:c5:46:db:8d: 5e:f6:6a:21:73:64:b1:92:a5:2d:57:67:b8:08:82:89:93:b2: 89:8d:ef:5f:8d:ed:77:8f:07:4f:e7:68:ab:de:8c:f5:ad:ba: ec:49:f1:0f:c1:8f:94:19:93:f8:d7:03:fa:5f:e7:f0:c4:77: cb:f8:b4:a3:30:c4:a1:64:30:0b:46:48:98:70:f7:85:80:d1: a0:7e:dc:19:e6:c7:50:ab:1e:18:58:ff:88:f7:a8:6f:e4:77: 2a:34:66:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDGXwlAoCoDYU9FuJDHt+XiNzxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNTA5MDcxMjA1MDFaFw0yNTA5MTAxMjUwMDFaMDMxMTAvBgNV BAMTKDc2MDc2RTZBREQ0REUwQ0VCOTkxRTU1M0I2MzJCQjZEMEZGOUE4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfdWPXpszrJ23GCUU0u1Qxe0f /ebrXJuD9/iB5K3J6kJDgYRdaNWf2Kopi58s090QHQHRwTJVjSfc4xFWpi+wPrLC irX79c6z1Nf9LaosORtpEswtW9ywITNjvE9imAXwj1jJCL4xuEleZJybwBCeaylA +LOpHIQh3muezULemRCw8ASMjMyj9dbnZq2vKiqL0uDejmrk/1QjKKcM5NOV3354 r/GR3DWXgICRV4Q3J6GglHT6UqCjOdOfZzlwAalmb9QGvtaMb7rVQ9os6GSTIzC5 oV7ax4w4nmvk48C15c7fG3djQD6CShRSm5nHHJHHoozjBZjC1mlGGn2bVi7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdgduat1N4M65keVTtjK7bQ/5qM8wHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMWM1MjktNjI0NC00NTAzLWFm NTYtNjk0NTllNGE3NjBmLzAvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEz RDQ2MTc1NThBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTGCB4aSzO+nuHFphYy61FMlPdKV9lMAJzj mMEgPtZSasXOKCAwHTbWcsbNDjZQ8XRnTNeXc/1U+CvlbOdtIZtW684PmhVjEHkV Xm6OVebk6wQbEdxMMMaJZcvws0F5T7OL8S9iiDBwI88hz7b2CZ6UiCpQGou2sx8f 5IOoETuB6FmdkHSNBnowqTtfjaOwL6j4mZEFiNJ6t9rHVTzjxUbbjV72aiFzZLGS pS1XZ7gIgomTsomN71+N7XePB0/naKvejPWtuuxJ8Q/Bj5QZk/jXA/pf5/DEd8v4 tKMwxKFkMAtGSJhw94WA0aB+3Bnmx1CrHhhY/4j3qG/kdyo0ZiQ= -----END CERTIFICATE-----Generated at Tue Sep 9 05:21:26 2025 by rpki-client