$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: hSnLCj38C1FVMYl3K13BX8mOPfKPUe91Zy2uvVUtpek= Subject key identifier: E2:96:AC:1D:36:D8:F8:B9:6F:A1:57:1A:E4:7F:7A:F0:CF:36:CF:B0 Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 6B643C7B34061DFB2ED1FD07E38E22EF5515BCF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 018D Signing time: Wed 04 Jun 2025 03:51:00 +0000 Manifest this update: Wed 04 Jun 2025 03:46:00 +0000 Manifest next update: Sat 07 Jun 2025 08:58:00 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: SnZdX5pxuu6lRfRm+6UmzdiDrZHsp7DCd73lqYfnMXk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 08:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:64:3c:7b:34:06:1d:fb:2e:d1:fd:07:e3:8e:22:ef:55:15:bc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: Jun 4 03:46:00 2025 GMT Not After : Jun 7 08:58:00 2025 GMT Subject: CN=E296AC1D36D8F8B96FA1571AE47F7AF0CF36CFB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:27:b1:f7:fb:c8:30:aa:2d:e1:49:6e:bc: 34:1b:95:74:2b:37:84:44:d4:ee:6c:ba:43:24:bd: e4:da:d5:72:ba:c6:98:f8:73:3b:50:06:82:60:95: f2:44:2c:06:99:8f:de:b9:e9:e9:52:ad:11:f7:7f: b5:2d:49:30:ac:c5:f4:82:6a:34:be:7e:4f:1d:12: 42:00:ba:b9:27:27:83:2e:88:bc:63:d1:e2:49:e5: d0:71:76:ff:c5:fa:b5:34:f7:a9:da:fa:da:2e:3f: 53:7f:40:e0:fa:2b:17:4d:8f:3c:09:bb:05:c8:2e: 97:ac:41:db:3a:c3:75:e7:4b:0d:42:83:f3:cd:82: 9d:80:d1:2f:a2:a7:70:22:9b:02:96:2a:0f:70:71: b0:e2:2a:ac:d2:14:95:a2:77:4d:b5:ae:e4:2d:7d: d0:0e:40:2a:b8:ff:b1:3e:55:8a:79:8f:84:af:42: 03:2b:ab:b5:d3:e7:4b:17:06:08:3b:21:b2:73:0e: 25:fc:2d:03:aa:75:7b:72:b6:7d:51:94:ea:38:7d: 9a:e1:62:b5:96:45:6e:cc:d6:38:f2:00:16:39:01: 80:e6:91:8b:ad:a2:3c:98:c4:d4:91:85:2b:55:09: bd:b8:69:24:cc:04:9d:bb:44:37:94:68:e0:fe:d6: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:96:AC:1D:36:D8:F8:B9:6F:A1:57:1A:E4:7F:7A:F0:CF:36:CF:B0 X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:50:85:58:89:b9:29:2a:b5:c6:b1:e7:c5:53:65:65:64:f2: 55:43:e3:a7:32:a0:e8:2e:9b:c7:42:94:b5:7b:7e:88:8d:02: 0a:bc:0d:3c:3b:ee:09:70:ec:66:d4:75:05:36:e2:67:ff:fe: 1b:bf:b6:37:37:8a:21:2f:3e:5a:f9:ec:27:ac:18:55:9f:40: 0a:af:28:77:41:ac:23:f5:e1:38:07:f0:c4:17:a3:fd:e8:d3: c7:fe:7d:75:85:ad:5b:3c:94:ec:a1:54:b1:78:0c:e2:f4:65: e2:99:8c:6c:dc:93:08:31:ce:b1:16:2b:a1:54:4d:4f:8a:bd: 00:6f:7e:e3:40:02:59:e9:2f:8f:c3:ff:a1:1e:db:13:39:27: 12:f3:93:e5:09:30:92:fe:88:42:34:53:ba:89:06:a3:c3:08: 0d:ca:cd:3c:a2:e1:0d:67:5f:94:74:87:5f:d8:44:46:f2:b3: a1:48:39:b6:1f:08:46:5e:d5:a3:07:21:7c:7d:d0:17:ff:e9: 74:d4:b6:71:c5:5f:89:f6:a1:26:b3:76:83:c0:6b:c5:ae:15: dd:46:2e:aa:b7:87:d6:aa:07:e7:5f:d8:c3:2a:07:03:db:46: a4:a2:e0:92:37:ac:de:84:01:f7:47:bb:f9:bc:24:47:85:b6: 27:c8:53:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2Q8ezQGHfsu0f0H444i71UVvPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNTA2MDQwMzQ2MDBaFw0yNTA2MDcwODU4MDBaMDMxMTAvBgNV BAMTKEUyOTZBQzFEMzZEOEY4Qjk2RkExNTcxQUU0N0Y3QUYwQ0YzNkNGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBSex9/vIMKot4UluvDQblXQr N4RE1O5sukMkveTa1XK6xpj4cztQBoJglfJELAaZj9656elSrRH3f7UtSTCsxfSC ajS+fk8dEkIAurknJ4MuiLxj0eJJ5dBxdv/F+rU096na+touP1N/QOD6KxdNjzwJ uwXILpesQds6w3XnSw1Cg/PNgp2A0S+ip3AimwKWKg9wcbDiKqzSFJWid021ruQt fdAOQCq4/7E+VYp5j4SvQgMrq7XT50sXBgg7IbJzDiX8LQOqdXtytn1RlOo4fZrh YrWWRW7M1jjyABY5AYDmkYutojyYxNSRhStVCb24aSTMBJ27RDeUaOD+1pD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4pasHTbY+LlvoVca5H968M82z7AwHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBQhViJuSkqtcax58VTZWVk8lVD46cyoOgu m8dClLV7foiNAgq8DTw77glw7GbUdQU24mf//hu/tjc3iiEvPlr57CesGFWfQAqv KHdBrCP14TgH8MQXo/3o08f+fXWFrVs8lOyhVLF4DOL0ZeKZjGzckwgxzrEWK6FU TU+KvQBvfuNAAlnpL4/D/6Ee2xM5JxLzk+UJMJL+iEI0U7qJBqPDCA3KzTyi4Q1n X5R0h1/YREbys6FIObYfCEZe1aMHIXx90Bf/6XTUtnHFX4n2oSazdoPAa8WuFd1G Lqq3h9aqB+df2MMqBwPbRqSi4JI3rN6EAfdHu/m8JEeFtifIU0A= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:31 2025 by rpki-client