$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json) Hash identifier: +Qezwx0jKzDH7ZhnMeaClT1C1POWeEd5otGBpWNd7X8= Subject key identifier: 84:FB:63:54:2E:EC:C2:AE:E3:0F:D7:B3:15:43:2B:9A:E5:56:97:42 Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Certificate serial: 5D2F8E9702B9B187C11B80E62BC944362AF6C238 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft Manifest number: 016F Signing time: Mon 20 Oct 2025 09:41:06 +0000 Manifest this update: Mon 20 Oct 2025 09:36:06 +0000 Manifest next update: Thu 23 Oct 2025 21:15:06 +0000 Files and hashes: 1: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: H+8I5Pjx3INR+ig1fzTZoO47mrLhKmyNjuiN7VtGm8k=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2f:8e:97:02:b9:b1:87:c1:1b:80:e6:2b:c9:44:36:2a:f6:c2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Validity Not Before: Oct 20 09:36:06 2025 GMT Not After : Oct 23 21:15:06 2025 GMT Subject: CN=84FB63542EECC2AEE30FD7B315432B9AE5569742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:79:d5:e4:4b:0f:7a:38:73:7b:7b:88:2b:78: 1b:d5:1d:19:09:ee:8e:4d:99:3f:83:a5:66:95:86: 2f:72:f1:c1:6f:6e:a4:24:57:c1:4c:22:7c:08:52: 35:2d:71:33:89:e4:59:e6:38:4e:42:cc:5e:a6:81: 21:d2:e5:db:91:7a:51:96:c9:f9:66:c3:78:ea:55: 4a:8b:8c:e8:46:0e:88:c2:cc:07:55:e6:ac:0e:bc: 9d:b6:9b:d5:e0:72:30:38:8d:4f:c3:5e:b4:39:e4: d8:ac:e0:85:81:e1:9e:2f:6c:4b:69:2a:62:5c:31: 67:74:da:c2:a8:94:34:93:42:af:d5:c1:e6:96:f0: 78:08:40:fc:31:cd:a0:cc:94:13:b2:37:db:50:8d: 92:a1:ba:53:b2:1b:3c:36:b4:64:cb:43:87:5c:83: 47:a8:2f:a7:d7:0e:60:d3:9c:43:e4:d1:e8:46:b8: 6d:67:28:00:c2:37:0d:bd:b4:84:d9:ee:6a:d5:80: 9f:b6:64:4b:de:74:37:7e:ff:d1:1f:94:76:9a:21: 7f:ce:b7:f2:38:2f:9c:7a:3c:41:27:62:12:88:00: 68:6c:ab:23:16:0a:9f:24:a0:9e:34:06:6e:b8:ea: 54:d7:b3:7a:66:85:59:bd:c2:eb:d7:ce:57:9e:33: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FB:63:54:2E:EC:C2:AE:E3:0F:D7:B3:15:43:2B:9A:E5:56:97:42 X509v3 Authority Key Identifier: keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:50:90:ae:2b:08:6f:91:bc:14:50:aa:da:82:f8:fd:16:7f: c1:97:b6:fc:9d:d5:92:09:25:39:44:dd:da:1c:c8:35:8e:25: 52:ea:13:a6:4d:a3:30:33:ed:0a:6b:b2:9a:5b:0d:18:21:30: 0b:3b:42:eb:ac:db:bc:f1:f1:e0:d5:89:15:16:de:ef:a8:63: 69:be:32:75:75:c2:96:51:bb:6a:60:19:9a:85:68:60:3e:8d: 13:62:7d:b7:b1:c7:0f:d2:9a:00:88:55:fd:d0:b5:b7:87:54: c7:15:d9:5b:bd:28:1c:c4:ae:e4:c7:55:1d:6e:c0:c5:d0:de: f3:6e:03:49:39:01:2f:86:e9:c7:df:cd:1d:aa:9f:f6:b0:3c: a7:bb:e6:e7:9f:ad:1c:c5:5d:d0:41:46:26:c0:bf:b5:57:a9: a3:07:4b:3c:f5:a3:ee:7a:23:d1:c8:32:4f:68:15:d4:77:9d: 3b:6b:d2:ed:41:89:16:a6:36:41:87:fe:37:80:cc:57:6f:1c: 33:cf:0c:05:ca:fa:de:10:f6:c5:31:9d:17:4f:a3:37:d3:3d: 23:ff:bc:f9:79:64:db:7c:43:26:ba:ae:de:9f:5f:d2:dd:c8: bd:22:fa:df:ea:83:da:09:91:3c:a6:e2:a0:6e:e5:02:66:23: 6c:a0:4e:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXS+OlwK5sYfBG4DmK8lENir2wjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB QkI3MjMzNTAeFw0yNTEwMjAwOTM2MDZaFw0yNTEwMjMyMTE1MDZaMDMxMTAvBgNV BAMTKDg0RkI2MzU0MkVFQ0MyQUVFMzBGRDdCMzE1NDMyQjlBRTU1Njk3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXedXkSw96OHN7e4greBvVHRkJ 7o5NmT+DpWaVhi9y8cFvbqQkV8FMInwIUjUtcTOJ5FnmOE5CzF6mgSHS5duRelGW yflmw3jqVUqLjOhGDojCzAdV5qwOvJ22m9XgcjA4jU/DXrQ55Nis4IWB4Z4vbEtp KmJcMWd02sKolDSTQq/VweaW8HgIQPwxzaDMlBOyN9tQjZKhulOyGzw2tGTLQ4dc g0eoL6fXDmDTnEPk0ehGuG1nKADCNw29tITZ7mrVgJ+2ZEvedDd+/9EflHaaIX/O t/I4L5x6PEEnYhKIAGhsqyMWCp8koJ40Bm646lTXs3pmhVm9wuvXzleeM77HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhPtjVC7swq7jD9ezFUMrmuVWl0IwHwYDVR0j BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1 REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3 MjMzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQz QUVBQkI3MjMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZQkK4rCG+RvBRQqtqC+P0Wf8GXtvyd1ZIJ JTlE3docyDWOJVLqE6ZNozAz7QprsppbDRghMAs7Quus27zx8eDViRUW3u+oY2m+ MnV1wpZRu2pgGZqFaGA+jRNifbexxw/SmgCIVf3QtbeHVMcV2Vu9KBzEruTHVR1u wMXQ3vNuA0k5AS+G6cffzR2qn/awPKe75uefrRzFXdBBRibAv7VXqaMHSzz1o+56 I9HIMk9oFdR3nTtr0u1BiRamNkGH/jeAzFdvHDPPDAXK+t4Q9sUxnRdPozfTPSP/ vPl5ZNt8Qya6rt6fX9LdyL0i+t/qg9oJkTym4qBu5QJmI2ygTqU= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:47 2025 by rpki-client