$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json) Hash identifier: fjINpM6qw0WcEa36PD6fLf/tTMyGhtnZugjkP7zzjQQ= Subject key identifier: DC:40:CA:2C:A2:77:B2:EF:5B:70:CC:2C:A6:83:6C:FF:62:E7:7B:D7 Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Certificate serial: 5805AEABF408697E34EF49FF3A16F043FAAA1C5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft Manifest number: 0155 Signing time: Fri 22 Aug 2025 22:01:05 +0000 Manifest this update: Fri 22 Aug 2025 21:56:05 +0000 Manifest next update: Tue 26 Aug 2025 05:23:05 +0000 Files and hashes: 1: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8=) 2: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: sANpgX6NDmR0Tp3ZFk0qdcMX5MamMRryXycDm69DaSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:05:ae:ab:f4:08:69:7e:34:ef:49:ff:3a:16:f0:43:fa:aa:1c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Validity Not Before: Aug 22 21:56:05 2025 GMT Not After : Aug 26 05:23:05 2025 GMT Subject: CN=DC40CA2CA277B2EF5B70CC2CA6836CFF62E77BD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:52:57:41:9c:23:69:5d:d1:4e:00:00:05: 8c:f3:68:20:db:a4:09:4c:1d:ed:42:0c:e6:4d:0a: be:19:28:55:5f:88:14:60:ff:78:6c:36:3e:75:a8: 85:74:09:3b:41:8a:ee:56:0b:b6:7e:30:b6:70:3e: 7d:4f:67:a0:20:c9:fa:b7:df:7c:42:01:ab:cd:fd: ba:d6:7c:94:71:d9:8e:03:e1:1f:3d:80:96:29:14: 99:07:bb:c2:41:d4:b6:ac:4c:3d:31:c2:0b:9f:a6: dc:33:54:3b:23:9c:2e:a1:a5:96:3e:02:3d:e7:9a: d9:3e:a3:79:93:ab:35:a8:a7:a5:9d:de:b7:ca:a0: 00:fd:95:78:c7:7c:89:26:96:6e:16:b8:0e:b2:74: fd:3e:23:3c:5e:a6:a4:ad:e7:a5:2e:b1:b0:0c:9d: 68:3a:00:cb:d4:ae:76:1c:b0:a0:33:ef:74:85:17: 5d:fd:14:06:16:d8:79:3b:d4:bb:ad:06:e0:48:1b: 64:c2:9e:77:4b:78:d8:79:17:a1:66:52:fd:9e:a2: 7f:2e:72:07:80:74:ef:a1:1d:ac:a6:88:b1:8a:03: 3c:ed:4d:58:c0:94:19:a5:28:52:b7:90:ef:f7:4e: 6a:97:80:73:90:60:22:e6:af:c8:16:52:c9:ca:48: 3f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:40:CA:2C:A2:77:B2:EF:5B:70:CC:2C:A6:83:6C:FF:62:E7:7B:D7 X509v3 Authority Key Identifier: keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1d:ac:54:46:70:1c:f6:a1:e0:29:71:b0:cb:95:69:61:9c: f5:e8:30:8e:0d:22:56:58:80:03:40:c1:71:9f:19:71:c6:fe: c7:ea:a9:ce:7a:38:2d:1d:24:5a:59:74:ca:f1:83:40:5e:ab: 60:7f:92:50:84:08:f3:cc:a1:5c:16:c5:bc:96:fb:be:29:e5: 5a:32:1a:5f:43:58:5a:28:2a:09:a6:0f:98:30:d2:2e:64:3b: 80:6e:4d:54:06:ab:77:2a:5c:84:33:57:65:61:61:e6:3e:4f: e3:55:72:1a:14:28:17:e0:f6:76:87:1f:44:d9:9b:de:5c:0b: e3:41:07:9c:ab:e5:e8:6a:2d:7a:63:41:35:e0:ab:c3:f7:15: ef:3e:3c:04:d1:c1:4a:d4:cf:1c:c4:03:67:7f:a2:6a:25:f0: e4:9c:32:4a:1b:a1:d6:79:75:98:54:b4:44:d8:00:fc:29:20: 82:cd:cd:3e:98:28:aa:3c:1c:62:29:72:cd:db:c9:55:5f:ab: cb:78:c5:07:e8:4c:0f:b7:54:8a:c4:07:7c:76:65:8a:90:62: 05:e4:f1:05:94:f1:dc:ef:60:17:dc:e4:4d:e6:b2:e0:86:b3: c5:74:05:df:d9:91:b6:8d:e2:56:e6:2d:96:b7:89:23:27:00: e2:38:4c:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAWuq/QIaX4070n/OhbwQ/qqHFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB QkI3MjMzNTAeFw0yNTA4MjIyMTU2MDVaFw0yNTA4MjYwNTIzMDVaMDMxMTAvBgNV BAMTKERDNDBDQTJDQTI3N0IyRUY1QjcwQ0MyQ0E2ODM2Q0ZGNjJFNzdCRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXFJXQZwjaV3RTgAABYzzaCDb pAlMHe1CDOZNCr4ZKFVfiBRg/3hsNj51qIV0CTtBiu5WC7Z+MLZwPn1PZ6Agyfq3 33xCAavN/brWfJRx2Y4D4R89gJYpFJkHu8JB1LasTD0xwgufptwzVDsjnC6hpZY+ Aj3nmtk+o3mTqzWop6Wd3rfKoAD9lXjHfIkmlm4WuA6ydP0+IzxepqSt56UusbAM nWg6AMvUrnYcsKAz73SFF139FAYW2Hk71LutBuBIG2TCnndLeNh5F6FmUv2eon8u cgeAdO+hHaymiLGKAzztTVjAlBmlKFK3kO/3TmqXgHOQYCLmr8gWUsnKSD8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3EDKLKJ3su9bcMwspoNs/2Lne9cwHwYDVR0j BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1 REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3 MjMzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQz QUVBQkI3MjMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUdrFRGcBz2oeApcbDLlWlhnPXoMI4NIlZY gANAwXGfGXHG/sfqqc56OC0dJFpZdMrxg0Beq2B/klCECPPMoVwWxbyW+74p5Voy Gl9DWFooKgmmD5gw0i5kO4BuTVQGq3cqXIQzV2VhYeY+T+NVchoUKBfg9naHH0TZ m95cC+NBB5yr5ehqLXpjQTXgq8P3Fe8+PATRwUrUzxzEA2d/omol8OScMkobodZ5 dZhUtETYAPwpIILNzT6YKKo8HGIpcs3byVVfq8t4xQfoTA+3VIrEB3x2ZYqQYgXk 8QWU8dzvYBfc5E3msuCGs8V0Bd/ZkbaN4lbmLZa3iSMnAOI4TFI= -----END CERTIFICATE-----Generated at Sat Aug 23 19:46:51 2025 by rpki-client