$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: FVKmr0djScC+9KsYbac1ivcV0M3mT7+FSKEqcUACODE= Subject key identifier: 99:8A:9B:19:D6:5E:65:30:7A:19:F7:7C:4B:CE:39:81:EC:47:D9:CC Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 6C94DF0F88030BB67AE66CA2E21BA58E338916AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 0206 Signing time: Tue 28 Oct 2025 08:30:51 +0000 Manifest this update: Tue 28 Oct 2025 08:25:51 +0000 Manifest next update: Fri 31 Oct 2025 19:18:51 +0000 Files and hashes: 1: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: x4isa6KBdTMCLxh+Agt+JWH8m4qxYC2y4RNymDCpdHQ=) 2: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: exnV2in0lMY4Abx7/bcqLUFJk6DG/znMQfleVx5p9FM=) 3: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: Ef88gL2i03irobp5ZP/X9ru7ObHhZljwJfbQzBpUyHw=) 4: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: J4NiRzqR7OJJpZcBvTEqABRnGVn4+G6RK0nifMHQkIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 19:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:94:df:0f:88:03:0b:b6:7a:e6:6c:a2:e2:1b:a5:8e:33:89:16:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Oct 28 08:25:51 2025 GMT Not After : Oct 31 19:18:51 2025 GMT Subject: CN=998A9B19D65E65307A19F77C4BCE3981EC47D9CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:73:64:92:33:4a:2c:b4:31:f2:ac:e2:7b: 5f:97:7d:e1:f4:e2:50:44:38:0f:b7:4c:ac:ba:8e: 21:d8:ca:e8:dd:b1:de:8c:ce:ee:00:5f:07:b7:3e: 31:28:2a:4e:9f:81:e6:ac:f1:43:da:41:0f:65:bb: fa:ec:fd:94:46:65:33:a0:86:67:23:85:d6:a5:60: 2f:44:b7:25:66:07:b8:38:85:73:e2:2e:43:15:96: 85:e6:55:3d:5a:cf:9b:7d:dc:d0:af:2e:7c:98:de: 62:9d:c5:ad:3f:f1:0b:14:a6:c7:44:b3:cb:9d:06: 47:ad:52:cd:18:9d:fb:29:4b:02:20:88:83:c2:83: 98:61:13:a6:8c:4f:41:93:3e:14:c5:a3:8c:fa:da: 16:6e:a0:a0:d8:5d:37:ea:1c:83:44:fb:55:52:1b: 67:c2:40:d4:d9:97:61:fd:37:29:52:bd:01:01:5c: d2:0f:58:b5:e9:09:4b:3a:d1:83:1d:54:69:05:f8: a9:07:b7:d7:96:a8:8a:06:5e:3c:b1:ae:72:21:56: 25:93:ee:af:d8:fb:ea:e1:27:39:fb:f3:05:8d:31: f2:96:93:ea:e1:ef:b9:6e:72:a6:de:df:c6:0e:44: ed:0b:26:cd:e6:60:b4:4d:f1:1d:db:05:34:6e:6a: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8A:9B:19:D6:5E:65:30:7A:19:F7:7C:4B:CE:39:81:EC:47:D9:CC X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:6b:b1:ed:20:7b:cb:ba:dd:8c:5f:f6:6a:f1:b6:6f:c4:55: e1:b4:53:ed:9a:4c:5b:ae:89:a5:d0:b4:e2:6d:75:99:ae:3b: f9:3e:89:20:6e:21:c9:e0:99:b9:77:5b:a4:c5:b1:ea:a7:ac: 1d:fe:c6:52:ec:38:3f:f5:82:5d:f5:0e:87:79:54:37:52:89: 31:3d:ac:3d:69:07:da:08:98:ec:9e:a0:26:0b:1a:24:d1:e9: 85:3a:0b:a0:5c:26:8c:05:35:7f:1c:f4:72:30:d6:51:2d:b4: 4b:b0:62:1c:b1:4a:d3:02:6e:8b:b7:0e:4a:51:a3:d4:d0:76: e9:c6:f6:82:be:a1:ee:25:82:b0:ab:47:d9:d6:69:01:ec:62: 36:05:be:54:a5:88:80:da:fb:e8:61:48:74:fd:07:d7:9d:50: 4e:ed:99:a7:a9:9b:25:17:0f:2b:ad:91:67:a0:78:78:c8:fc: 1b:03:b9:33:f3:76:4c:01:d0:00:f4:5c:d5:26:a6:da:2a:25: f0:5a:cb:3f:fb:95:9d:9d:29:84:31:c2:d6:0e:ff:8f:86:d5: 8e:30:ff:6a:36:9b:3c:bd:d5:85:36:96:57:cc:df:ca:f5:5b: 80:8e:2a:38:55:a4:d3:c1:de:64:9b:97:ec:4e:37:9b:ad:63: 1c:5b:0a:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbJTfD4gDC7Z65myi4huljjOJFqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNTEwMjgwODI1NTFaFw0yNTEwMzExOTE4NTFaMDMxMTAvBgNV BAMTKDk5OEE5QjE5RDY1RTY1MzA3QTE5Rjc3QzRCQ0UzOTgxRUM0N0Q5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqknNkkjNKLLQx8qzie1+XfeH0 4lBEOA+3TKy6jiHYyujdsd6Mzu4AXwe3PjEoKk6fgeas8UPaQQ9lu/rs/ZRGZTOg hmcjhdalYC9EtyVmB7g4hXPiLkMVloXmVT1az5t93NCvLnyY3mKdxa0/8QsUpsdE s8udBketUs0YnfspSwIgiIPCg5hhE6aMT0GTPhTFo4z62hZuoKDYXTfqHINE+1VS G2fCQNTZl2H9NylSvQEBXNIPWLXpCUs60YMdVGkF+KkHt9eWqIoGXjyxrnIhViWT 7q/Y++rhJzn78wWNMfKWk+rh77lucqbe38YORO0LJs3mYLRN8R3bBTRuat/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmYqbGdZeZTB6Gfd8S845gexH2cwwHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFrse0ge8u63Yxf9mrxtm/EVeG0U+2aTFuu iaXQtOJtdZmuO/k+iSBuIcngmbl3W6TFseqnrB3+xlLsOD/1gl31Dod5VDdSiTE9 rD1pB9oImOyeoCYLGiTR6YU6C6BcJowFNX8c9HIw1lEttEuwYhyxStMCbou3DkpR o9TQdunG9oK+oe4lgrCrR9nWaQHsYjYFvlSliIDa++hhSHT9B9edUE7tmaepmyUX DyutkWegeHjI/BsDuTPzdkwB0AD0XNUmptoqJfBayz/7lZ2dKYQxwtYO/4+G1Y4w /2o2mzy91YU2llfM38r1W4COKjhVpNPB3mSbl+xON5utYxxbCt0= -----END CERTIFICATE-----Generated at Thu Oct 30 15:10:15 2025 by rpki-client