$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: rQDUPbZW+ue+OjKEd7fRTpoC60qzkzMINEOUu3qUog0= Subject key identifier: 06:EF:F7:21:27:20:72:74:6B:60:1C:6D:2E:D8:08:A1:CC:79:74:5E Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: D3FB2EFAB8DDAC65832F3D92A838AD68AB0E78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 0133 Signing time: Wed 07 May 2025 12:00:52 +0000 Manifest this update: Wed 07 May 2025 11:55:52 +0000 Manifest next update: Sat 10 May 2025 23:07:52 +0000 Files and hashes: 1: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) 2: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: XxF0tu4aCbcJblECR8mN7TIaFSXUygc5bSi1DajmBZE=) 3: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 23:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d3:fb:2e:fa:b8:dd:ac:65:83:2f:3d:92:a8:38:ad:68:ab:0e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: May 7 11:55:52 2025 GMT Not After : May 10 23:07:52 2025 GMT Subject: CN=06EFF721272072746B601C6D2ED808A1CC79745E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:ea:2d:fd:4f:26:82:df:bc:b6:72:db:1a: b5:85:ad:90:15:f9:01:af:0c:62:e9:c1:49:1b:33: 46:0d:5b:ba:57:05:75:b4:d6:bb:b2:e0:76:bd:35: 5e:e6:8c:ea:7c:a6:50:dc:ae:11:35:63:06:d2:f2: ad:ba:42:79:39:20:ea:63:1c:55:a8:27:e6:1a:d4: 07:5a:10:44:74:fc:6d:f4:d9:c0:64:c9:12:a2:4e: 81:1d:8d:5b:5e:c6:c8:1f:e8:b0:5a:b2:8f:e0:80: ba:3b:48:e7:9a:a1:b0:bb:73:3f:71:89:36:dc:16: be:7d:8f:3a:40:cd:74:57:ba:78:2d:21:b3:ba:7a: 63:c6:8c:45:29:49:2e:bf:a1:e5:c9:b2:4b:8e:5c: 8a:05:64:9d:c0:9b:37:49:44:8f:df:95:99:cb:30: 04:0a:25:58:47:37:88:15:d2:fb:30:9d:24:0e:6c: 0f:fe:6b:bb:28:de:d4:a9:a8:2a:5d:d1:40:eb:db: 6e:66:5f:97:8b:b6:fc:bc:fb:47:ed:ae:aa:28:3f: ef:e8:55:6e:8d:6b:95:9b:16:23:5a:f5:f2:e8:1e: 2e:b6:b0:ea:31:e3:8d:39:cf:93:ef:07:09:0d:7b: 85:a5:d9:c2:6a:33:3c:a1:61:bf:25:0e:65:d1:53: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EF:F7:21:27:20:72:74:6B:60:1C:6D:2E:D8:08:A1:CC:79:74:5E X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fd:91:6b:a3:1a:65:12:0a:fc:a5:f6:a0:ac:b0:4e:5f:54: ec:f5:a2:7f:43:e9:dc:f4:0b:92:d4:db:41:57:c3:20:1a:25: cf:de:ef:6e:61:19:46:c8:1d:75:8b:b4:2c:a9:d1:45:03:67: 96:bb:0c:bc:b8:d1:37:b8:d6:d4:b4:34:f7:fc:99:08:83:4e: 71:ed:90:b7:65:18:e5:6f:94:20:4c:1c:64:5b:6b:b6:c5:5f: 8b:34:01:44:67:ad:c8:02:f8:c9:9a:d9:84:90:5f:37:7a:12: 76:9c:2c:5f:e2:24:1d:45:ef:0c:a4:74:26:5c:cf:bb:0b:af: 0e:3f:81:b7:12:fa:b6:ed:47:a5:d4:02:d9:3b:3c:a6:6f:5b: 53:78:b6:fa:41:41:2c:0f:6b:56:26:ba:a1:8c:a4:ba:22:e4: dd:4b:7e:fa:e4:8e:76:f7:70:2f:6e:84:92:d5:b6:e9:b7:1e: 97:a1:26:b0:e6:c4:ec:15:79:6c:93:98:4a:de:72:a2:a7:c3: b3:3c:27:f9:34:e3:59:51:e2:02:c4:ce:a6:ab:e9:fc:08:5a: f4:ff:5d:d3:99:9b:56:6d:40:6b:f6:56:74:4c:02:03:f7:9f: 8a:f5:8b:79:8e:41:00:c0:5c:21:75:f0:c4:6d:52:96:23:83: c8:9c:77:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUANP7Lvq43axlgy89kqg4rWirDngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNTA1MDcxMTU1NTJaFw0yNTA1MTAyMzA3NTJaMDMxMTAvBgNV BAMTKDA2RUZGNzIxMjcyMDcyNzQ2QjYwMUM2RDJFRDgwOEExQ0M3OTc0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk0Oot/U8mgt+8tnLbGrWFrZAV +QGvDGLpwUkbM0YNW7pXBXW01ruy4Ha9NV7mjOp8plDcrhE1YwbS8q26Qnk5IOpj HFWoJ+Ya1AdaEER0/G302cBkyRKiToEdjVtexsgf6LBaso/ggLo7SOeaobC7cz9x iTbcFr59jzpAzXRXungtIbO6emPGjEUpSS6/oeXJskuOXIoFZJ3AmzdJRI/flZnL MAQKJVhHN4gV0vswnSQObA/+a7so3tSpqCpd0UDr225mX5eLtvy8+0ftrqooP+/o VW6Na5WbFiNa9fLoHi62sOox4405z5PvBwkNe4Wl2cJqMzyhYb8lDmXRU3mpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBu/3IScgcnRrYBxtLtgIocx5dF4wHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADD9kWujGmUSCvyl9qCssE5fVOz1on9D6dz0 C5LU20FXwyAaJc/e725hGUbIHXWLtCyp0UUDZ5a7DLy40Te41tS0NPf8mQiDTnHt kLdlGOVvlCBMHGRba7bFX4s0AURnrcgC+Mma2YSQXzd6EnacLF/iJB1F7wykdCZc z7sLrw4/gbcS+rbtR6XUAtk7PKZvW1N4tvpBQSwPa1YmuqGMpLoi5N1Lfvrkjnb3 cC9uhJLVtum3HpehJrDmxOwVeWyTmErecqKnw7M8J/k041lR4gLEzqar6fwIWvT/ XdOZm1ZtQGv2VnRMAgP3n4r1i3mOQQDAXCF18MRtUpYjg8icdyo= -----END CERTIFICATE-----Generated at Thu May 8 15:42:20 2025 by rpki-client