$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json) Hash identifier: 7vb+3aFuxtkaRGqohqhaJ1GGDWGlMaJyJ7bxIritRso= Subject key identifier: F9:DB:1B:57:7E:AA:76:6D:2A:6C:30:7B:7F:65:99:BB:1A:DC:B6:2C Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Certificate serial: 1D564C7B735A62782080C2467F16429C73A66A8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft Manifest number: 0123 Signing time: Mon 05 May 2025 00:51:02 +0000 Manifest this update: Mon 05 May 2025 00:46:02 +0000 Manifest next update: Thu 08 May 2025 01:55:02 +0000 Files and hashes: 1: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: mYSkVHWKx3nbIXjN2oAPrUbGmOKA+CS0hkgq0FKlCBY=) 2: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: 62rd3FUJwE7MtsLHsNReu31ZunUIfE3yDFRFsNJNUSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 01:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:56:4c:7b:73:5a:62:78:20:80:c2:46:7f:16:42:9c:73:a6:6a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Validity Not Before: May 5 00:46:02 2025 GMT Not After : May 8 01:55:02 2025 GMT Subject: CN=F9DB1B577EAA766D2A6C307B7F6599BB1ADCB62C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:1e:b7:29:69:de:6e:9b:b0:04:dd:c6:ca: d4:4e:07:b3:33:25:7d:86:82:9b:b5:15:b7:c5:c8: 2a:e3:c4:42:ac:86:c3:06:4a:12:6d:dd:7a:28:7c: 1d:36:18:16:39:96:15:02:6b:af:9a:f3:81:95:41: e2:9d:f4:a1:03:b3:a0:92:d4:8a:49:90:fa:06:17: b5:f3:55:9d:4a:b2:e7:82:5b:83:62:fb:24:5d:50: b6:73:cd:80:08:5a:a9:03:67:3d:10:7f:c5:a0:6a: 8a:80:51:14:8e:38:3d:45:be:37:4d:da:be:13:b5: 5d:80:40:2e:31:d4:72:7f:4e:87:51:3c:01:e2:e2: 74:87:25:b5:8b:ff:da:34:f1:63:3d:d8:e9:55:97: e8:96:4d:e1:6d:fa:ed:c6:b9:20:f7:4f:e0:7c:4b: 13:ac:9a:85:c0:69:f5:f0:57:92:79:f2:b7:21:cc: 2b:c2:a0:78:dc:99:06:5e:b4:96:14:10:2c:f0:a1: 8b:cf:56:3e:5a:dd:bc:3b:ad:24:60:ce:db:e1:09: 0f:7d:54:8a:90:be:9f:d7:bd:cd:1f:6c:6e:90:8f: 91:15:ab:fe:33:00:42:5a:ab:30:21:57:29:c6:a3: 70:15:2e:36:7d:b6:a0:f1:4a:b0:07:c3:d3:e8:ab: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DB:1B:57:7E:AA:76:6D:2A:6C:30:7B:7F:65:99:BB:1A:DC:B6:2C X509v3 Authority Key Identifier: keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:65:a0:8f:b3:c6:3e:37:4c:17:2e:e8:60:df:e5:52:4c:cb: b3:b9:aa:43:ad:79:cd:fe:2a:4d:e0:76:62:25:0e:0c:d0:4f: 5f:f2:99:a5:a0:42:ce:d4:10:d0:55:3f:cb:7d:af:f6:52:85: 11:9f:5b:c2:6b:eb:9b:e3:c2:82:15:14:3a:41:72:39:91:39: 57:1c:46:a1:79:a5:92:1e:fb:63:a3:fc:21:2d:36:c7:a7:b6: 38:0f:a9:6f:d7:7d:4c:3f:f8:08:33:0b:12:e0:32:6e:a6:df: 19:d7:6e:b2:d1:ee:0a:3c:9d:58:ac:4f:25:43:d3:05:bf:e5: 01:6b:ad:85:95:21:95:cb:3b:41:80:74:7c:67:a6:c1:53:48: 59:0b:b7:7d:35:2b:0f:07:89:d8:ba:10:ef:8c:aa:0d:a3:87: 53:b3:23:3f:d7:f3:9a:f1:59:d5:59:8f:12:65:b7:4b:66:04: 53:02:95:03:4d:b7:1d:40:24:38:33:9f:99:ac:63:63:41:77: 8e:e8:35:c7:ed:3c:97:80:87:8d:13:6b:f3:a6:f3:44:2d:0c: 51:4d:fc:6e:59:55:ac:73:d1:d8:7c:fe:43:f4:b6:49:8e:ef: 1e:5e:76:f4:c2:01:68:72:0d:a9:80:0e:b4:c2:9b:38:ad:31: 76:13:71:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHVZMe3NaYngggMJGfxZCnHOmao8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB QkI3MjMzNTAeFw0yNTA1MDUwMDQ2MDJaFw0yNTA1MDgwMTU1MDJaMDMxMTAvBgNV BAMTKEY5REIxQjU3N0VBQTc2NkQyQTZDMzA3QjdGNjU5OUJCMUFEQ0I2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqB63KWnebpuwBN3GytROB7Mz JX2Ggpu1FbfFyCrjxEKshsMGShJt3XoofB02GBY5lhUCa6+a84GVQeKd9KEDs6CS 1IpJkPoGF7XzVZ1KsueCW4Ni+yRdULZzzYAIWqkDZz0Qf8WgaoqAURSOOD1FvjdN 2r4TtV2AQC4x1HJ/TodRPAHi4nSHJbWL/9o08WM92OlVl+iWTeFt+u3GuSD3T+B8 SxOsmoXAafXwV5J58rchzCvCoHjcmQZetJYUECzwoYvPVj5a3bw7rSRgztvhCQ99 VIqQvp/Xvc0fbG6Qj5EVq/4zAEJaqzAhVynGo3AVLjZ9tqDxSrAHw9Poq/DlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+dsbV36qdm0qbDB7f2WZuxrctiwwHwYDVR0j BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1 REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3 MjMzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQz QUVBQkI3MjMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNloI+zxj43TBcu6GDf5VJMy7O5qkOtec3+ Kk3gdmIlDgzQT1/ymaWgQs7UENBVP8t9r/ZShRGfW8Jr65vjwoIVFDpBcjmROVcc RqF5pZIe+2Oj/CEtNsentjgPqW/XfUw/+AgzCxLgMm6m3xnXbrLR7go8nVisTyVD 0wW/5QFrrYWVIZXLO0GAdHxnpsFTSFkLt301Kw8Hidi6EO+Mqg2jh1OzIz/X85rx WdVZjxJlt0tmBFMClQNNtx1AJDgzn5msY2NBd47oNcftPJeAh40Ta/Om80QtDFFN /G5ZVaxz0dh8/kP0tkmO7x5edvTCAWhyDamADrTCmzitMXYTcdw= -----END CERTIFICATE-----Generated at Tue May 6 18:51:54 2025 by rpki-client