$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: dZrQQMLEAAw3eSUYQ6YkXj8lr50Aad+qvGKhuodI/Ww= Subject key identifier: C2:59:E4:92:AA:F9:4C:53:DF:68:34:CF:67:8F:C8:F0:1D:F1:AA:E9 Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 660C00F228F15420EAA1807394AA91927BDC9E49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 0161 Signing time: Thu 21 Aug 2025 23:10:53 +0000 Manifest this update: Thu 21 Aug 2025 23:05:53 +0000 Manifest next update: Mon 25 Aug 2025 03:38:53 +0000 Files and hashes: 1: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: Y7z1A/t+C4/qc+d84/NsKKlwhHwE5W/leP2ijK1OO3o=) 2: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) 3: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0c:00:f2:28:f1:54:20:ea:a1:80:73:94:aa:91:92:7b:dc:9e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Aug 21 23:05:53 2025 GMT Not After : Aug 25 03:38:53 2025 GMT Subject: CN=C259E492AAF94C53DF6834CF678FC8F01DF1AAE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ac:f8:eb:1c:fc:dd:51:0e:dd:05:f8:7b:6b: 4c:be:3b:5d:76:65:5c:b1:7a:66:37:29:a1:38:82: 0a:3a:ed:8c:ff:09:b8:22:8e:41:c3:df:d1:6d:07: 2d:30:0a:8b:f0:3c:b8:58:8b:ba:42:e0:56:bc:8f: 1c:47:6d:90:c4:bf:93:70:b5:9b:d1:75:06:89:3c: 64:89:1d:24:65:7e:da:7e:48:87:00:6c:8a:cc:cf: 0b:67:5a:59:44:48:e2:21:5e:35:73:10:60:16:47: 65:1a:56:3d:95:0f:61:93:bb:fe:e8:87:d9:b6:aa: f1:d5:ed:f9:8e:22:30:39:48:30:b9:e3:0c:2e:fe: ad:6b:9f:4e:e5:50:6c:96:02:58:bb:a3:d4:b4:7c: ee:de:22:e4:ab:0a:ff:2e:b9:24:62:f7:74:2c:0a: 78:dd:c1:b2:69:31:10:65:e0:c5:fe:ea:d2:b3:c5: cb:92:5c:87:2b:b0:5d:a1:d5:18:24:67:ce:1d:83: 79:48:b8:b1:98:0e:82:8a:a1:3d:56:fd:40:bf:41: 34:cb:8b:b0:17:a4:af:88:ba:cb:db:3e:4e:f7:2c: e4:b2:43:df:02:c5:8e:34:3a:01:c4:d5:58:82:d1: 60:25:e5:f5:82:d5:ac:4b:6b:7f:b1:59:d8:5f:7a: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:59:E4:92:AA:F9:4C:53:DF:68:34:CF:67:8F:C8:F0:1D:F1:AA:E9 X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:79:42:0b:30:d3:91:d9:99:2b:b9:bf:a8:d6:3a:bc:d6:e5: 6d:0b:d1:e0:bc:60:04:fd:da:02:28:30:33:b6:5d:e7:93:f2: d5:15:11:46:ad:5b:17:d6:72:1b:f6:32:5c:00:2b:59:f5:50: 91:d2:d4:ad:88:ac:43:61:c3:6a:fe:17:8f:10:ff:1a:88:33: e7:97:44:70:09:3b:cb:ae:dc:45:5c:e2:c7:dc:fe:af:0b:7a: f3:21:e3:81:1b:24:24:00:e4:15:5b:f3:9d:54:d8:f8:c3:8b: df:94:a6:cf:18:b9:aa:8a:4b:f6:69:42:30:13:82:0c:d0:72: 9c:58:39:c6:e0:87:de:a5:e6:1a:8a:86:0f:dc:49:32:2b:40: f3:0d:a3:8b:57:d0:18:e4:4a:b8:2e:d5:86:a9:d9:d5:92:d9: ef:f4:f4:9d:3b:47:4a:80:9f:f9:24:0d:73:69:e6:24:d3:38: c6:12:75:d5:eb:3f:16:b1:c1:a1:3d:14:9e:22:a9:37:ea:3b: cc:5b:1d:c9:45:f3:bd:c9:96:d1:b3:66:5e:ea:25:be:c2:1f: 4e:48:b0:74:e9:9c:d8:b1:05:fc:6e:a1:47:fd:1d:77:1e:bc: a5:f4:74:8a:b9:ef:4b:bf:62:9d:79:86:cb:1b:44:30:60:eb: e1:88:b4:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgwA8ijxVCDqoYBzlKqRknvcnkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNTA4MjEyMzA1NTNaFw0yNTA4MjUwMzM4NTNaMDMxMTAvBgNV BAMTKEMyNTlFNDkyQUFGOTRDNTNERjY4MzRDRjY3OEZDOEYwMURGMUFBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdrPjrHPzdUQ7dBfh7a0y+O112 ZVyxemY3KaE4ggo67Yz/CbgijkHD39FtBy0wCovwPLhYi7pC4Fa8jxxHbZDEv5Nw tZvRdQaJPGSJHSRlftp+SIcAbIrMzwtnWllESOIhXjVzEGAWR2UaVj2VD2GTu/7o h9m2qvHV7fmOIjA5SDC54wwu/q1rn07lUGyWAli7o9S0fO7eIuSrCv8uuSRi93Qs CnjdwbJpMRBl4MX+6tKzxcuSXIcrsF2h1RgkZ84dg3lIuLGYDoKKoT1W/UC/QTTL i7AXpK+IusvbPk73LOSyQ98CxY40OgHE1ViC0WAl5fWC1axLa3+xWdhfevM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwlnkkqr5TFPfaDTPZ4/I8B3xqukwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHt5Qgsw05HZmSu5v6jWOrzW5W0L0eC8YAT9 2gIoMDO2XeeT8tUVEUatWxfWchv2MlwAK1n1UJHS1K2IrENhw2r+F48Q/xqIM+eX RHAJO8uu3EVc4sfc/q8LevMh44EbJCQA5BVb851U2PjDi9+Ups8YuaqKS/ZpQjAT ggzQcpxYOcbgh96l5hqKhg/cSTIrQPMNo4tX0BjkSrgu1Yap2dWS2e/09J07R0qA n/kkDXNp5iTTOMYSddXrPxaxwaE9FJ4iqTfqO8xbHclF873JltGzZl7qJb7CH05I sHTpnNixBfxuoUf9HXcevKX0dIq570u/Yp15hssbRDBg6+GItEQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:45 2025 by rpki-client