$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: LNeCokUt3Oi+xkZw5VuiqeACWjQ8NnHlttwZ7FCwwBk= Subject key identifier: 8E:24:F1:2F:5D:E2:C9:AC:9C:80:26:4D:CB:1D:51:66:1A:18:AE:0B Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 02DA53009BFFA4D7E5333A4E533EEBDC90F1873A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 01B8 Signing time: Sun 07 Sep 2025 00:30:59 +0000 Manifest this update: Sun 07 Sep 2025 00:25:58 +0000 Manifest next update: Wed 10 Sep 2025 02:16:58 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: 4q94aNx53j+lmPWbdmLhuJS8gxBsNAbcONkk9RLZIQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:da:53:00:9b:ff:a4:d7:e5:33:3a:4e:53:3e:eb:dc:90:f1:87:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: Sep 7 00:25:58 2025 GMT Not After : Sep 10 02:16:58 2025 GMT Subject: CN=8E24F12F5DE2C9AC9C80264DCB1D51661A18AE0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:5e:fd:aa:59:bb:c5:09:11:47:eb:54:2a: d5:09:61:78:28:1e:c9:9d:2d:48:c0:25:f0:85:41: 6e:ba:99:86:79:e2:eb:59:61:cc:54:0b:88:40:30: ce:03:9d:cd:24:77:9d:b4:f9:f8:db:5f:2d:3b:84: 64:ab:b6:22:af:6e:de:2e:31:2c:11:bc:1f:8c:25: cb:0f:da:08:4c:86:3a:76:00:98:1b:7b:45:d7:e1: f1:59:cc:b6:38:11:39:1f:c0:f3:f1:8f:72:29:ae: ab:17:85:4f:e1:15:ae:f2:85:c7:b0:8c:20:e9:74: 9f:b2:87:c0:f5:4b:cd:36:7f:5f:8c:91:d8:5d:6e: d8:99:ff:b5:e0:65:f6:e4:91:99:08:ab:06:4a:3b: 99:99:ac:95:e4:20:e1:ed:4a:ab:b7:d7:ce:eb:38: a2:46:87:04:84:c2:e0:05:e4:c0:85:45:9e:e4:0c: 17:92:99:15:c0:f1:c6:06:db:39:9c:b8:29:fb:19: 9d:41:04:57:5d:e9:45:71:6f:77:6d:6f:89:d3:64: ea:23:91:69:23:7b:77:8a:0f:33:e1:38:fd:aa:01: 21:08:4c:2e:95:06:18:91:ee:89:76:28:70:86:a5: c3:f3:86:04:c2:bc:d1:45:0a:2f:06:ce:f0:a0:50: 9f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:24:F1:2F:5D:E2:C9:AC:9C:80:26:4D:CB:1D:51:66:1A:18:AE:0B X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:24:26:cd:16:3e:ff:b6:e4:21:e5:0d:dc:08:92:df:e3:7a: 00:e9:38:13:b4:5c:12:7f:e8:d8:15:e1:8a:b7:b1:63:cd:4d: 6b:2c:9f:e2:8e:cd:09:29:99:29:d1:e3:97:b2:8d:18:97:8f: 38:16:1a:77:67:9e:4f:8a:dd:ef:65:a3:a6:7d:f6:e3:ce:b8: 0a:0b:db:14:1a:7e:58:4a:bd:b0:fa:ff:94:df:34:3b:0b:3d: 26:5a:6c:77:35:ae:5b:95:99:89:8c:d0:81:71:79:0a:3f:f4: 5b:aa:fb:57:e3:12:8b:2c:4b:5f:99:73:ca:a8:91:e8:4f:b7: 96:73:24:46:0c:1b:97:7f:a1:6d:49:44:cf:f5:aa:2c:ff:89: de:b4:49:d3:11:4d:d0:34:71:db:97:36:15:87:90:ad:31:6f: f6:e3:5b:9c:a7:90:e3:7b:96:19:6c:7c:74:3c:c1:fb:38:5e: 10:f4:cd:de:50:3c:cc:a6:d9:3f:47:e5:10:2b:f0:25:83:1d: 1b:78:e3:54:b0:37:29:cd:ee:ee:19:22:fa:f0:48:6c:54:36: fd:30:1a:c5:00:ed:40:b5:86:b5:40:4b:ef:88:75:5d:00:9e: e1:95:19:63:30:49:4a:89:06:0e:26:ba:86:b9:cd:5f:24:05: 18:73:f4:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtpTAJv/pNflMzpOUz7r3JDxhzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNTA5MDcwMDI1NThaFw0yNTA5MTAwMjE2NThaMDMxMTAvBgNV BAMTKDhFMjRGMTJGNURFMkM5QUM5QzgwMjY0RENCMUQ1MTY2MUExOEFFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZF79qlm7xQkRR+tUKtUJYXgo HsmdLUjAJfCFQW66mYZ54utZYcxUC4hAMM4Dnc0kd520+fjbXy07hGSrtiKvbt4u MSwRvB+MJcsP2ghMhjp2AJgbe0XX4fFZzLY4ETkfwPPxj3IprqsXhU/hFa7yhcew jCDpdJ+yh8D1S802f1+MkdhdbtiZ/7XgZfbkkZkIqwZKO5mZrJXkIOHtSqu3187r OKJGhwSEwuAF5MCFRZ7kDBeSmRXA8cYG2zmcuCn7GZ1BBFdd6UVxb3dtb4nTZOoj kWkje3eKDzPhOP2qASEITC6VBhiR7ol2KHCGpcPzhgTCvNFFCi8GzvCgUJ8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjiTxL13iyaycgCZNyx1RZhoYrgswHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAkJs0WPv+25CHlDdwIkt/jegDpOBO0XBJ/ 6NgV4Yq3sWPNTWssn+KOzQkpmSnR45eyjRiXjzgWGndnnk+K3e9lo6Z99uPOuAoL 2xQaflhKvbD6/5TfNDsLPSZabHc1rluVmYmM0IFxeQo/9Fuq+1fjEossS1+Zc8qo kehPt5ZzJEYMG5d/oW1JRM/1qiz/id60SdMRTdA0cduXNhWHkK0xb/bjW5ynkON7 lhlsfHQ8wfs4XhD0zd5QPMym2T9H5RAr8CWDHRt441SwNynN7u4ZIvrwSGxUNv0w GsUA7UC1hrVAS++IdV0AnuGVGWMwSUqJBg4muoa5zV8kBRhz9Pg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:24 2025 by rpki-client