$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: B34lx4uga1eSu4qMCZtag6e58jUIl8fRkNT6Ud1qx2o= Subject key identifier: 84:CC:73:DA:7D:70:CC:60:91:E3:AE:28:0F:9E:D6:D6:FD:D9:4F:07 Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 2D9791F23A7DEBC1DCB23AF26885DCD45462F5C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 014A Signing time: Sun 29 Jun 2025 11:50:53 +0000 Manifest this update: Sun 29 Jun 2025 11:45:53 +0000 Manifest next update: Wed 02 Jul 2025 22:34:53 +0000 Files and hashes: 1: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: m9RXBLL68BBuudmkViQ6cijvRqNyl4qs9VSXla7nlKw=) 2: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) 3: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:97:91:f2:3a:7d:eb:c1:dc:b2:3a:f2:68:85:dc:d4:54:62:f5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Jun 29 11:45:53 2025 GMT Not After : Jul 2 22:34:53 2025 GMT Subject: CN=84CC73DA7D70CC6091E3AE280F9ED6D6FDD94F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:58:b8:b7:60:47:90:ac:18:ff:39:f4:1c: be:e9:91:8e:a3:82:36:04:e7:85:6a:3b:64:89:c0: 0c:3f:dd:3c:1e:54:72:50:72:f4:20:30:6f:ab:c4: 2c:ed:eb:31:9e:4d:41:63:0b:c1:b3:89:64:1e:e6: fc:24:a0:47:73:af:78:b6:fc:7c:14:6f:d5:2f:60: 45:7b:33:f8:c1:84:21:7d:40:09:c0:ab:a2:8d:d3: 69:8a:3b:bf:69:18:f6:97:5b:48:c8:b8:93:a3:57: e4:a6:22:57:42:91:86:b7:1d:56:f0:a7:d0:14:c1: 43:3c:02:37:d1:9f:ff:b6:99:a1:a6:90:e5:99:c3: 8f:6e:1e:34:a7:e0:65:ad:2e:96:52:ac:e1:98:d0: 5d:1b:14:5c:a8:d9:f0:3d:2d:64:72:55:95:d4:e6: c7:f8:90:95:4d:84:66:5f:04:7d:6e:4a:8b:b7:47: bc:f1:ec:33:96:01:c6:f1:d6:bf:ae:db:35:e3:5d: e1:f7:11:63:ae:c3:7a:ad:0c:8f:c9:1a:cf:6a:3d: b4:f6:3c:a9:2a:a1:49:de:fa:3b:1b:f9:19:77:ed: f4:6a:a2:b2:37:d7:b4:22:c4:7d:d0:84:a0:dc:8f: fe:92:b0:a3:a5:04:9e:77:48:1a:be:13:b0:cf:f0: 7b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CC:73:DA:7D:70:CC:60:91:E3:AE:28:0F:9E:D6:D6:FD:D9:4F:07 X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:79:e5:19:32:29:9a:ad:99:f0:ce:61:b0:65:11:ea:63:1d: a5:18:1e:6f:be:94:30:b0:fb:d9:2f:f0:4d:16:1e:c8:85:f1: fd:6c:37:91:df:38:9b:cf:92:d9:85:a3:dd:8e:66:07:f1:6e: 22:0c:c2:b7:ea:a3:6f:fd:92:6e:1d:41:a3:94:71:13:d4:e0: 4b:c5:38:49:8c:33:d5:0c:74:3d:03:26:b2:60:8d:10:3b:51: e4:91:0d:95:67:3e:66:24:ef:c1:69:9d:0d:c4:2c:17:77:8e: 7c:a2:95:2d:a7:92:ad:eb:53:52:15:42:eb:83:58:22:5e:c0: 17:f7:41:df:e0:e2:c1:dc:cf:a7:95:33:0f:dd:bd:4a:42:8f: 18:af:03:cf:4c:0f:ec:23:49:a2:22:c1:c2:6f:e9:23:4c:af: 42:41:52:16:59:3c:d3:4c:23:9c:81:6a:0a:ae:29:10:c7:11: 0c:a3:0e:c2:49:9f:5e:50:1f:eb:13:93:b8:a4:ad:84:fd:47: 39:73:0c:b1:aa:9a:b5:56:b6:c7:c6:c5:21:35:ff:af:6b:2e: 24:86:de:ca:3f:fc:44:65:cd:15:3a:68:b5:30:4e:f7:b6:de: 19:22:3c:06:34:c6:7a:73:9a:0b:e4:b4:79:06:22:a0:9b:85: 5b:b7:e3:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZeR8jp968HcsjryaIXc1FRi9cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNTA2MjkxMTQ1NTNaFw0yNTA3MDIyMjM0NTNaMDMxMTAvBgNV BAMTKDg0Q0M3M0RBN0Q3MENDNjA5MUUzQUUyODBGOUVENkQ2RkREOTRGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4KVi4t2BHkKwY/zn0HL7pkY6j gjYE54VqO2SJwAw/3TweVHJQcvQgMG+rxCzt6zGeTUFjC8GziWQe5vwkoEdzr3i2 /HwUb9UvYEV7M/jBhCF9QAnAq6KN02mKO79pGPaXW0jIuJOjV+SmIldCkYa3HVbw p9AUwUM8AjfRn/+2maGmkOWZw49uHjSn4GWtLpZSrOGY0F0bFFyo2fA9LWRyVZXU 5sf4kJVNhGZfBH1uSou3R7zx7DOWAcbx1r+u2zXjXeH3EWOuw3qtDI/JGs9qPbT2 PKkqoUne+jsb+Rl37fRqorI317QixH3QhKDcj/6SsKOlBJ53SBq+E7DP8HuRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhMxz2n1wzGCR464oD57W1v3ZTwcwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKR55RkyKZqtmfDOYbBlEepjHaUYHm++lDCw +9kv8E0WHsiF8f1sN5HfOJvPktmFo92OZgfxbiIMwrfqo2/9km4dQaOUcRPU4EvF OEmMM9UMdD0DJrJgjRA7UeSRDZVnPmYk78FpnQ3ELBd3jnyilS2nkq3rU1IVQuuD WCJewBf3Qd/g4sHcz6eVMw/dvUpCjxivA89MD+wjSaIiwcJv6SNMr0JBUhZZPNNM I5yBagquKRDHEQyjDsJJn15QH+sTk7ikrYT9RzlzDLGqmrVWtsfGxSE1/69rLiSG 3so//ERlzRU6aLUwTve23hkiPAY0xnpzmgvktHkGIqCbhVu343U= -----END CERTIFICATE-----Generated at Mon Jun 30 01:04:39 2025 by rpki-client