$ rpki-client -vvf repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft File: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft (raw, json) Hash identifier: SeDkCmpT1DfWXQLZYglwpHqeJe+8OQdO83c1wHdbCB8= Subject key identifier: 2D:42:47:FB:22:75:E1:05:36:E8:BE:9D:1E:52:B7:47:5E:DA:8B:F6 Authority key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 Certificate issuer: /CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Certificate serial: 2E82703440A7FC1AA4E86D592F441198BF250B8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft Manifest number: D0 Signing time: Sat 06 Sep 2025 09:40:48 +0000 Manifest this update: Sat 06 Sep 2025 09:35:48 +0000 Manifest next update: Tue 09 Sep 2025 14:04:48 +0000 Files and hashes: 1: 3135372e36362e3139302e302f32342d3234203d3e20313532373533.roa (hash: 5Tt3RRAons/MpLAKdI+nVYdG1EV4O6aC9q3gMfZTySg=) 2: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl (hash: FzI96fetwaDwFabZz6nrfrKMgK4DlHOSg9dy5rh6Lw0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 14:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:82:70:34:40:a7:fc:1a:a4:e8:6d:59:2f:44:11:98:bf:25:0b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Validity Not Before: Sep 6 09:35:48 2025 GMT Not After : Sep 9 14:04:48 2025 GMT Subject: CN=2D4247FB2275E10536E8BE9D1E52B7475EDA8BF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6a:6a:ca:dc:d4:a8:13:f2:de:b3:fa:8d:51: 4d:c8:ab:b5:4d:ec:b5:58:9c:cf:b4:bc:d7:87:5d: 8a:d8:02:9d:50:e2:1f:d7:4f:57:77:da:1d:3d:a8: 71:41:81:3e:d5:d3:08:cd:67:ac:59:6d:e4:51:26: 7d:9a:79:e2:bd:17:43:1b:01:8c:11:de:cc:01:f0: e2:3f:a3:84:8e:e0:ca:83:5b:84:a1:90:3a:b0:c4: 0c:ba:de:54:03:e4:81:fc:57:89:c9:40:e5:58:d3: 6c:a4:8b:f0:66:fb:43:d9:31:96:18:d1:b0:20:36: d6:ff:7e:29:ed:6d:b7:7c:34:90:e7:64:47:5c:50: b9:e2:f1:e1:40:5e:c7:c5:76:ce:48:c2:1f:ba:58: 56:7e:be:8f:f3:5a:f3:44:e4:d6:bf:ac:d9:4b:f1: c8:da:ab:48:9a:3a:e2:8a:30:f6:86:aa:b6:71:dc: 92:7a:2c:0f:b5:8e:b5:1f:55:32:d0:f1:95:3c:3b: e5:08:b4:57:d8:99:5b:a8:c0:e6:79:e2:47:c4:42: 61:bb:b0:e1:09:e3:56:9d:8d:63:9d:a5:f4:14:3c: 57:2c:62:82:08:a3:a4:45:25:f5:24:6a:ea:16:e2: 3b:56:f2:b9:e0:bc:86:bb:93:54:e2:c7:c0:79:d7: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:42:47:FB:22:75:E1:05:36:E8:BE:9D:1E:52:B7:47:5E:DA:8B:F6 X509v3 Authority Key Identifier: keyid:39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d5:9c:7e:05:8c:27:9f:a7:0e:db:5a:1c:87:35:b5:3d:b8: b9:8e:78:24:97:af:df:2c:20:3f:a7:84:5c:26:05:b5:83:8d: 38:c8:81:30:b9:e3:c3:02:36:6a:a5:14:f5:55:7c:c6:e8:60: 5c:5d:6d:88:e1:39:c4:d3:60:50:07:95:fb:a0:42:06:3f:dd: e6:a4:68:3d:0a:da:c8:d6:81:db:1a:fb:5a:0b:79:61:db:3e: 00:9f:bf:d4:48:ce:96:12:9e:bf:cc:5e:9b:af:f3:a6:65:f4: e8:e5:53:ff:99:5d:42:95:8b:2c:4f:47:12:70:44:70:0f:68: 55:1a:f1:0e:aa:c5:65:37:d9:3f:aa:fb:e0:b5:bd:9b:1d:fc: ed:80:a5:e6:55:2b:9f:29:76:ab:f4:d2:49:66:b5:29:9a:24: 80:26:13:17:30:5c:46:25:f8:22:ec:5e:13:e8:ad:ae:66:32: 30:10:08:b6:7e:86:72:20:ac:0f:2c:15:3d:d2:7f:ff:af:63: 0a:c2:69:2a:ef:26:a9:0c:d9:22:f4:00:3c:35:b0:33:c1:7c: 32:1b:a8:70:ce:fd:ae:dc:4b:8c:22:dd:d7:a2:3f:22:8a:ea: 9c:fa:75:ef:11:63:b4:95:2b:15:9a:64:68:2a:f5:50:f2:a9: f7:a5:d6:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULoJwNECn/Bqk6G1ZL0QRmL8lC48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZE QjQyMUQ4ODAeFw0yNTA5MDYwOTM1NDhaFw0yNTA5MDkxNDA0NDhaMDMxMTAvBgNV BAMTKDJENDI0N0ZCMjI3NUUxMDUzNkU4QkU5RDFFNTJCNzQ3NUVEQThCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlamrK3NSoE/Les/qNUU3Iq7VN 7LVYnM+0vNeHXYrYAp1Q4h/XT1d32h09qHFBgT7V0wjNZ6xZbeRRJn2aeeK9F0Mb AYwR3swB8OI/o4SO4MqDW4ShkDqwxAy63lQD5IH8V4nJQOVY02yki/Bm+0PZMZYY 0bAgNtb/fintbbd8NJDnZEdcULni8eFAXsfFds5Iwh+6WFZ+vo/zWvNE5Na/rNlL 8cjaq0iaOuKKMPaGqrZx3JJ6LA+1jrUfVTLQ8ZU8O+UItFfYmVuowOZ54kfEQmG7 sOEJ41adjWOdpfQUPFcsYoIIo6RFJfUkauoW4jtW8rngvIa7k1Tix8B51+yrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULUJH+yJ14QU26L6dHlK3R17ai/YwHwYDVR0j BBgwFoAUOUvMXAMQ2wEX3cHcGhdgJttCHYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NzEzNGYxOC0xMWUxLTQxYWUtYmIwNS05ZmJmNDgyMTJiN2QvMC8zOTRCQ0M1QzAz MTBEQjAxMTdEREMxREMxQTE3NjAyNkRCNDIxRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYwMjZEQjQy MUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTcxMzRmMTgtMTFlMS00MWFlLWJi MDUtOWZiZjQ4MjEyYjdkLzAvMzk0QkNDNUMwMzEwREIwMTE3RERDMURDMUExNzYw MjZEQjQyMUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzVnH4FjCefpw7bWhyHNbU9uLmOeCSXr98s ID+nhFwmBbWDjTjIgTC548MCNmqlFPVVfMboYFxdbYjhOcTTYFAHlfugQgY/3eak aD0K2sjWgdsa+1oLeWHbPgCfv9RIzpYSnr/MXpuv86Zl9OjlU/+ZXUKViyxPRxJw RHAPaFUa8Q6qxWU32T+q++C1vZsd/O2ApeZVK58pdqv00klmtSmaJIAmExcwXEYl +CLsXhPora5mMjAQCLZ+hnIgrA8sFT3Sf/+vYwrCaSrvJqkM2SL0ADw1sDPBfDIb qHDO/a7cS4wi3deiPyKK6pz6de8RY7SVKxWaZGgq9VDyqfel1vc= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:15 2025 by rpki-client