$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: K+4ZDpbdog87h+/DRdvJe7xHBmJ0YHXGoIrhdfjvGW0= Subject key identifier: 9C:5A:60:9C:9A:34:F9:EE:E2:FF:FF:AA:90:4D:49:0B:EB:A4:0A:BA Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 2603502316B9E8CF579389778D206D78A31935E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 01EF Signing time: Sat 06 Sep 2025 02:10:50 +0000 Manifest this update: Sat 06 Sep 2025 02:05:50 +0000 Manifest next update: Tue 09 Sep 2025 08:14:50 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) 2: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) 3: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: ifyIB5slieFOBfrdLZ1IEEK1ZYv43tNIORXDebbIfog=) 4: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:03:50:23:16:b9:e8:cf:57:93:89:77:8d:20:6d:78:a3:19:35:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Sep 6 02:05:50 2025 GMT Not After : Sep 9 08:14:50 2025 GMT Subject: CN=9C5A609C9A34F9EEE2FFFFAA904D490BEBA40ABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:c1:07:65:69:98:62:68:98:12:f7:e2:d7: f0:34:11:a4:9f:3b:57:12:09:f8:ad:b5:8d:83:55: db:46:3b:77:ef:80:ec:4c:43:0b:7a:97:fb:2e:98: db:3e:da:5f:22:06:17:59:4b:eb:37:72:d2:72:3d: 01:ee:05:99:ef:0f:d9:c5:70:d2:3b:bd:dd:f6:5b: 26:c9:14:2b:a3:13:6b:06:4c:c2:e8:ea:f9:a4:10: 9c:07:c2:de:16:f5:89:96:6c:e7:e3:25:55:b0:13: 5e:e5:d2:93:95:e8:30:48:65:f6:51:32:2d:d1:77: b3:47:62:cd:60:dc:a9:2b:9d:d3:9c:94:e7:e9:c8: 45:0d:74:13:7d:df:43:7c:90:01:71:ff:82:65:f2: de:da:e0:84:48:df:30:73:17:64:75:14:e8:e9:d6: bc:b1:92:b1:e6:88:47:89:3c:dd:ad:4d:f1:a2:36: af:33:b5:45:11:d0:fc:4d:ff:4c:15:63:78:57:bf: 51:7a:5d:bf:2f:5e:61:c4:5d:a1:9b:c3:53:3d:5b: 6d:f0:2c:08:3f:e8:4b:7e:f9:d2:6f:c2:4a:81:84: a0:de:04:14:93:cf:1d:4b:64:ab:1b:cd:9a:ba:fc: ae:35:e2:d9:54:22:a6:31:2d:19:fa:fe:5b:94:7a: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5A:60:9C:9A:34:F9:EE:E2:FF:FF:AA:90:4D:49:0B:EB:A4:0A:BA X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:02:60:07:bd:35:01:bf:87:25:ec:e5:33:39:f7:bb:dd:01: f2:41:b1:ef:75:0a:91:11:41:18:76:4a:3e:8c:8d:6b:62:6f: cb:0e:ae:2c:18:66:a8:6d:88:76:51:62:41:a8:7d:e4:f0:56: ba:71:89:8e:9d:3b:20:85:a2:1b:3e:8a:84:16:7b:00:3a:5f: 7e:7a:8f:44:36:4e:bb:1f:9a:30:a8:44:10:50:0e:20:f1:4e: 7d:7b:b5:3e:99:5b:0c:49:54:5b:dc:6f:f8:8a:1d:03:c7:44: 28:d7:29:85:d5:23:b3:d2:09:f1:66:64:71:12:17:5a:1c:22: f5:00:33:0b:0e:f8:58:4e:ea:5a:62:3f:25:d3:c7:6e:f9:f7: 8c:75:80:93:9c:e4:12:7b:62:f8:6f:52:b7:1f:70:31:6d:bc: 1c:a5:48:8d:36:a2:75:04:1c:17:66:60:2e:e7:9a:8e:b2:e1: a2:c5:7b:26:8b:5e:3f:34:37:7d:5b:69:f0:0a:ad:a8:8e:29: a6:3e:73:4e:e7:f6:c2:4d:08:d6:59:31:40:a7:e1:ac:bd:42: 07:d5:58:ac:d6:2d:bf:f4:c2:5d:92:86:1a:f5:be:ff:97:47: 71:74:c2:66:11:02:c5:cc:0f:c6:f8:95:cb:6e:16:ce:f1:8b: bc:29:0f:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgNQIxa56M9Xk4l3jSBteKMZNekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNTA5MDYwMjA1NTBaFw0yNTA5MDkwODE0NTBaMDMxMTAvBgNV BAMTKDlDNUE2MDlDOUEzNEY5RUVFMkZGRkZBQTkwNEQ0OTBCRUJBNDBBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4G8EHZWmYYmiYEvfi1/A0EaSf O1cSCfittY2DVdtGO3fvgOxMQwt6l/sumNs+2l8iBhdZS+s3ctJyPQHuBZnvD9nF cNI7vd32WybJFCujE2sGTMLo6vmkEJwHwt4W9YmWbOfjJVWwE17l0pOV6DBIZfZR Mi3Rd7NHYs1g3KkrndOclOfpyEUNdBN930N8kAFx/4Jl8t7a4IRI3zBzF2R1FOjp 1ryxkrHmiEeJPN2tTfGiNq8ztUUR0PxN/0wVY3hXv1F6Xb8vXmHEXaGbw1M9W23w LAg/6Et++dJvwkqBhKDeBBSTzx1LZKsbzZq6/K414tlUIqYxLRn6/luUelW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnFpgnJo0+e7i//+qkE1JC+ukCrowHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4CYAe9NQG/hyXs5TM597vdAfJBse91CpER QRh2Sj6MjWtib8sOriwYZqhtiHZRYkGofeTwVrpxiY6dOyCFohs+ioQWewA6X356 j0Q2TrsfmjCoRBBQDiDxTn17tT6ZWwxJVFvcb/iKHQPHRCjXKYXVI7PSCfFmZHES F1ocIvUAMwsO+FhO6lpiPyXTx27594x1gJOc5BJ7YvhvUrcfcDFtvBylSI02onUE HBdmYC7nmo6y4aLFeyaLXj80N31bafAKraiOKaY+c07n9sJNCNZZMUCn4ay9QgfV WKzWLb/0wl2Shhr1vv+XR3F0wmYRAsXMD8b4lctuFs7xi7wpD84= -----END CERTIFICATE-----Generated at Sun Sep 7 15:16:51 2025 by rpki-client