$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: eAIKYgvVRn8OyaW10SsukPCamdgLjMLVqd/lEYnSQpk= Subject key identifier: 24:6E:10:DE:B6:5E:AD:13:DB:E0:8F:58:8A:F9:BF:41:FE:08:F6:DB Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 1795B66B8EDF2A7E163DCAFF009FB525D7506D03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 017B Signing time: Mon 20 Oct 2025 11:10:54 +0000 Manifest this update: Mon 20 Oct 2025 11:05:54 +0000 Manifest next update: Thu 23 Oct 2025 21:23:54 +0000 Files and hashes: 1: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) 2: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) 3: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: fO0tazZbIFxZ30b0FWjC4BBSHQ513lvPfJ5ehHB60h8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:95:b6:6b:8e:df:2a:7e:16:3d:ca:ff:00:9f:b5:25:d7:50:6d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Oct 20 11:05:54 2025 GMT Not After : Oct 23 21:23:54 2025 GMT Subject: CN=246E10DEB65EAD13DBE08F588AF9BF41FE08F6DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:90:c6:e5:71:c5:54:db:80:e6:12:33:ff: ff:16:e3:e7:7f:5a:ed:9b:06:15:98:10:d4:f5:98: 5a:dd:ea:22:7a:d6:d9:6e:fc:48:17:fe:12:78:8c: bd:fd:d7:ba:25:bd:8f:f9:9c:58:3d:5c:94:37:cf: c4:8a:c2:ba:32:8e:b7:ad:98:f2:c4:62:ff:18:8d: 7d:d0:f7:44:fb:7e:24:30:77:89:6e:f6:54:19:62: 3e:c8:4f:12:f4:89:0d:e5:2b:74:93:fc:f5:4f:a1: b7:79:02:a4:f1:b8:1f:a5:6b:93:79:f6:82:27:35: cd:46:ea:2f:7c:29:5c:07:9d:df:07:83:8d:6b:64: 07:2c:ac:d6:c7:68:48:c4:d3:56:c7:70:ed:ff:26: 8f:89:81:54:d1:5d:6f:32:6f:bf:d8:d5:88:a0:50: 20:2f:31:07:4d:8f:49:ad:f4:fc:06:b7:cb:4e:ea: aa:8e:d2:d3:ec:e1:fe:30:cf:82:0f:2a:56:c6:03: 27:12:31:26:e7:f8:5c:91:f3:fa:2a:ae:91:87:4b: 1b:b3:c4:f6:29:01:2e:4d:db:fe:46:fe:5a:2a:64: 6f:0a:18:85:e0:51:a0:8f:e8:27:c5:1f:f3:59:b4: c9:f2:59:9d:54:83:5f:d4:45:24:5c:56:54:93:11: f8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6E:10:DE:B6:5E:AD:13:DB:E0:8F:58:8A:F9:BF:41:FE:08:F6:DB X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:f3:0c:cc:19:d7:3c:49:16:f4:a3:a8:9f:a9:12:83:e4:b7: a0:fb:88:c6:4c:e6:11:f1:9f:34:d8:b4:24:7a:88:86:41:9e: 6c:d0:cd:29:a5:e2:1f:4f:7a:84:bf:1e:48:b1:1f:fe:2d:55: bd:ef:a1:07:b6:39:4c:8a:31:0f:d3:b4:38:33:4a:5f:86:57: 4b:db:3d:1a:52:b8:4d:5a:c9:3e:a4:2b:df:24:da:7f:6d:11: 48:11:67:b2:c2:94:9e:eb:2e:43:d3:2c:e7:8c:26:6e:b2:96: c0:da:c8:81:30:8b:69:0c:c4:53:ff:f1:76:57:87:3d:15:63: 71:c6:77:62:8a:c8:6c:e1:71:09:94:99:9d:cf:4c:bf:fd:2c: 01:4f:b5:f8:d5:5b:63:b3:a8:95:fe:0d:5c:b4:40:71:c6:2e: a4:b8:49:fa:04:57:92:49:f9:eb:0f:35:49:6f:6b:55:b4:e4: e8:ae:4f:e1:8f:15:ac:0b:d7:63:58:05:2a:df:6e:14:bc:97: 9d:f1:a0:28:9b:74:35:81:e4:9a:c7:20:18:21:30:8f:45:d2: e2:80:67:b4:aa:38:62:51:eb:5f:34:1d:3d:d1:31:cc:0e:35: 51:2f:18:11:48:32:48:eb:ae:32:74:2b:33:3a:f6:25:00:b9: 8e:40:a0:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF5W2a47fKn4WPcr/AJ+1JddQbQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNTEwMjAxMTA1NTRaFw0yNTEwMjMyMTIzNTRaMDMxMTAvBgNV BAMTKDI0NkUxMERFQjY1RUFEMTNEQkUwOEY1ODhBRjlCRjQxRkUwOEY2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwz5DG5XHFVNuA5hIz//8W4+d/ Wu2bBhWYENT1mFrd6iJ61tlu/EgX/hJ4jL3917olvY/5nFg9XJQ3z8SKwroyjret mPLEYv8YjX3Q90T7fiQwd4lu9lQZYj7ITxL0iQ3lK3ST/PVPobd5AqTxuB+la5N5 9oInNc1G6i98KVwHnd8Hg41rZAcsrNbHaEjE01bHcO3/Jo+JgVTRXW8yb7/Y1Yig UCAvMQdNj0mt9PwGt8tO6qqO0tPs4f4wz4IPKlbGAycSMSbn+FyR8/oqrpGHSxuz xPYpAS5N2/5G/loqZG8KGIXgUaCP6CfFH/NZtMnyWZ1Ug1/URSRcVlSTEfgZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJG4Q3rZerRPb4I9Yivm/Qf4I9tswHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3zDMwZ1zxJFvSjqJ+pEoPkt6D7iMZM5hHx nzTYtCR6iIZBnmzQzSml4h9PeoS/HkixH/4tVb3voQe2OUyKMQ/TtDgzSl+GV0vb PRpSuE1ayT6kK98k2n9tEUgRZ7LClJ7rLkPTLOeMJm6ylsDayIEwi2kMxFP/8XZX hz0VY3HGd2KKyGzhcQmUmZ3PTL/9LAFPtfjVW2OzqJX+DVy0QHHGLqS4SfoEV5JJ +esPNUlva1W05OiuT+GPFawL12NYBSrfbhS8l53xoCibdDWB5JrHIBghMI9F0uKA Z7SqOGJR6180HT3RMcwONVEvGBFIMkjrrjJ0KzM69iUAuY5AoMM= -----END CERTIFICATE-----Generated at Mon Oct 20 14:36:46 2025 by rpki-client