$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft File: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft (raw, json) Hash identifier: BQKiqG6xzU1a5JbyHpB8UFFAR4dTTMqq4oJdsoHw8yY= Subject key identifier: A8:47:87:97:53:6A:BA:70:B9:EB:39:FE:7F:93:24:BA:74:CF:13:79 Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C Certificate issuer: /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Certificate serial: 076C67930FC49DD91821FCFE9E532F559F5590EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft Manifest number: 0506 Signing time: Wed 03 Sep 2025 17:42:06 +0000 Manifest this update: Wed 03 Sep 2025 17:37:06 +0000 Manifest next update: Sun 07 Sep 2025 05:00:06 +0000 Files and hashes: 1: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: TuOuwC+HTY3+zsq30NoK3C4u4uR9Kt6tuzw+MAyTb4o=) 2: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: nLub1P+aFMPWReFe8FfiX+yqIND5D1X2l5ebLcrAixg=) 3: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl (hash: 7zncrZ4eqxsTJaC/rEUn4bsxmYakdpQ3nCbdWnCujck=) 4: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: /yhg5qr+BfUwCEkWIHjx5Xurv6fbCx8q1w5UII3HZ8w=) 5: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: ShEOWvu/KCYTTrKo5vrKeCwlexfHyDbC4uTV8yZtzEM=) 6: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: wlegEJoNWqrWT2tySFrwLRqLsXDXFl0OFT0Nuvvp7LI=) 7: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: lX37Ym1HtH8/+BNNZ7vVVvmLTRPAVgTV6qXoJU01xNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 05:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6c:67:93:0f:c4:9d:d9:18:21:fc:fe:9e:53:2f:55:9f:55:90:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C Validity Not Before: Sep 3 17:37:06 2025 GMT Not After : Sep 7 05:00:06 2025 GMT Subject: CN=A8478797536ABA70B9EB39FE7F9324BA74CF1379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:33:ea:51:9f:74:c3:2a:a0:9d:e8:f1:8e: 1e:83:96:86:78:34:91:32:69:b5:66:a2:10:56:2d: 71:72:4b:9a:e5:77:2d:97:fa:d9:67:61:f4:47:d0: 32:e7:21:d6:67:95:6f:85:16:95:e9:64:c8:64:4c: cd:10:58:50:85:f0:e2:5c:4c:02:16:9f:1c:b0:5f: 9b:11:c8:29:79:af:38:6e:03:bd:3c:98:ce:cb:af: 04:ae:08:63:69:5b:f8:0c:0d:ad:74:01:d1:48:b0: a6:0d:04:31:83:18:54:9e:61:13:8d:5f:ec:cf:f9: 0d:8d:6d:a5:36:0b:2a:bb:1d:2b:c5:26:f4:28:0d: 66:04:4f:33:78:ff:0d:6f:63:5e:9d:c3:2e:93:fa: f9:e6:f8:8c:39:25:f8:8e:5d:56:b3:60:e1:a9:1a: 3c:11:36:f2:8d:99:99:3b:6c:68:0b:39:5c:7e:ad: f6:56:3d:6d:4c:74:be:9a:e7:58:fe:f4:37:9d:d3: a3:d5:a6:96:01:d6:d4:ae:e2:60:0e:d5:a6:39:16: eb:60:5d:db:ea:be:81:8a:8e:fc:bd:1e:ba:6b:96: 17:68:73:24:90:f8:23:38:22:a9:6b:95:7b:60:6d: 3b:61:15:93:4d:87:66:95:fb:38:90:40:eb:ef:74: 79:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:47:87:97:53:6A:BA:70:B9:EB:39:FE:7F:93:24:BA:74:CF:13:79 X509v3 Authority Key Identifier: keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c5:8b:8d:c5:c4:c8:61:cf:85:e1:23:b5:7f:8b:80:6b:55: 39:b9:4b:64:9d:ff:94:51:3d:a0:7d:70:3e:57:a3:1a:dc:e1: f6:ff:ee:d0:dc:92:45:70:ea:0f:d4:79:53:fb:b5:69:45:d4: 96:a5:d8:c9:23:b3:86:92:44:a8:bf:8b:8d:32:c3:73:2f:bf: f6:0f:59:e2:2c:a0:5c:a0:de:40:14:7b:c6:f1:2c:b4:90:bd: f5:5e:aa:2e:25:ec:04:1b:e7:04:d2:8f:1a:91:85:5b:6e:9a: 75:c3:72:85:d9:c8:4a:d2:36:d1:fc:8d:f3:db:e4:07:1e:ea: 7f:87:4b:b5:92:58:e2:be:f6:47:02:40:f5:42:54:76:83:fd: e5:a6:40:c3:cc:b8:85:01:af:52:29:51:99:2e:0c:b2:1c:3b: 4e:51:60:3d:c6:df:ec:4d:58:7a:ee:b0:bc:9f:c1:57:1a:9a: a8:37:0b:f0:c7:46:70:b2:f4:a0:d4:87:b9:35:6b:ee:a3:67: 68:92:11:71:65:e3:98:5f:7e:22:a7:ad:f5:19:93:71:9e:4f: 33:c2:26:18:fb:42:dc:42:91:7f:8b:2f:a3:93:99:95:4a:5f: a2:9b:dc:ee:93:e2:19:61:50:c5:f1:2d:1b:0b:2b:82:83:ef: 91:d8:9c:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2xnkw/EndkYIfz+nlMvVZ9VkO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw MTI1MkE1QzAeFw0yNTA5MDMxNzM3MDZaFw0yNTA5MDcwNTAwMDZaMDMxMTAvBgNV BAMTKEE4NDc4Nzk3NTM2QUJBNzBCOUVCMzlGRTdGOTMyNEJBNzRDRjEzNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYszPqUZ90wyqgnejxjh6DloZ4 NJEyabVmohBWLXFyS5rldy2X+tlnYfRH0DLnIdZnlW+FFpXpZMhkTM0QWFCF8OJc TAIWnxywX5sRyCl5rzhuA708mM7LrwSuCGNpW/gMDa10AdFIsKYNBDGDGFSeYRON X+zP+Q2NbaU2Cyq7HSvFJvQoDWYETzN4/w1vY16dwy6T+vnm+Iw5JfiOXVazYOGp GjwRNvKNmZk7bGgLOVx+rfZWPW1MdL6a51j+9Ded06PVppYB1tSu4mAO1aY5Futg XdvqvoGKjvy9HrprlhdocySQ+CM4IqlrlXtgbTthFZNNh2aV+ziQQOvvdHn9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqEeHl1NqunC56zn+f5MkunTPE3kwHwYDVR0j BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1 MkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0 Y2QtNjJmMTI0MTI2ZWFjLzAvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3 OTQwMTI1MkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfFi43FxMhhz4XhI7V/i4BrVTm5S2Sd/5RR PaB9cD5Xoxrc4fb/7tDckkVw6g/UeVP7tWlF1Jal2Mkjs4aSRKi/i40yw3Mvv/YP WeIsoFyg3kAUe8bxLLSQvfVeqi4l7AQb5wTSjxqRhVtumnXDcoXZyErSNtH8jfPb 5Ace6n+HS7WSWOK+9kcCQPVCVHaD/eWmQMPMuIUBr1IpUZkuDLIcO05RYD3G3+xN WHrusLyfwVcamqg3C/DHRnCy9KDUh7k1a+6jZ2iSEXFl45hffiKnrfUZk3GeTzPC Jhj7QtxCkX+LL6OTmZVKX6Kb3O6T4hlhUMXxLRsLK4KD75HYnMo= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:36 2025 by rpki-client