$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: UQZD3cq6/y5cvylAsF4ywSrpWhTQjKmYKXIkBRYm2ro= Subject key identifier: FA:5A:90:06:11:B3:39:22:18:BC:D8:C9:B0:F1:DE:AE:15:00:F0:64 Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 241F8AE834128696BE48D5D2D341962A5CDF8515 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: E5 Signing time: Sun 11 May 2025 17:32:18 +0000 Manifest this update: Sun 11 May 2025 17:27:18 +0000 Manifest next update: Wed 14 May 2025 22:32:18 +0000 Files and hashes: 1: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: QoZ59/p0QRraCK4XJE6zZaAjLlSitUZnXKe3LOdQZwo=) 2: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: GFPR2JsX0IBoAaGsgaGWjAOgLfdHuDR0oC/bNj7kO2M=) 3: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: NpakJrPB/wc7qdqjNhAbEhaZgiQnrQQiG5gQ5GEaMnQ=) 4: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: L+8SrkY6511c5DJDsz7fYxyef0XtUXzTGXOzwD+HTeU=) 5: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: egnrAxySdNzwkvZG7pgW2GfPGQmn/8OQ66XKF6zUyrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 21:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1f:8a:e8:34:12:86:96:be:48:d5:d2:d3:41:96:2a:5c:df:85:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: May 11 17:27:18 2025 GMT Not After : May 14 22:32:18 2025 GMT Subject: CN=FA5A900611B3392218BCD8C9B0F1DEAE1500F064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:5f:58:d0:ff:e0:23:f2:38:ee:c6:a7:c8: f5:0a:ad:32:43:2d:c2:b7:00:e4:5d:56:2f:e7:9f: 98:c7:b6:aa:ca:2e:cb:b9:27:3c:ac:7b:bf:66:aa: 80:5c:e2:4c:3b:64:f6:be:4e:33:5c:e8:45:af:dd: dc:e0:ed:d7:56:85:8f:87:e2:4e:9b:84:1d:fd:86: fd:da:36:5f:e5:ee:3b:a2:5b:76:d1:be:6b:f4:fe: 1d:08:a6:f5:08:b3:d9:1d:d7:85:c7:f7:bb:13:05: 99:0c:a4:8d:77:88:ae:50:d8:5e:7b:29:8d:20:7a: 4c:1e:66:aa:3b:95:b6:eb:67:91:5d:cd:12:97:53: 9f:61:d8:d0:7b:90:93:65:71:8c:57:36:da:e2:be: a8:cd:0c:ac:8a:e5:db:1a:1f:da:cf:f8:9f:1b:29: fc:6c:2a:b1:1a:84:73:1e:f8:d4:5c:ae:a6:41:96: 08:e6:a6:f6:2b:36:99:00:7d:ba:0a:13:6d:50:8e: 89:67:7b:e2:23:1d:bf:1d:77:6a:78:e0:31:2c:94: 8c:e2:59:9b:23:52:33:96:4f:a6:56:08:6f:fc:8d: aa:22:df:03:55:27:9f:88:82:6d:70:7b:2c:cd:76: 96:06:c3:16:21:bb:36:9d:92:3f:37:bc:4f:73:e1: fb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5A:90:06:11:B3:39:22:18:BC:D8:C9:B0:F1:DE:AE:15:00:F0:64 X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:48:1b:2a:60:44:3b:77:f4:ab:12:1e:47:92:9c:61:10:1f: a5:f8:52:0d:7b:0c:eb:91:ff:ec:d6:ec:c1:7a:92:69:d3:ef: 52:53:a2:03:9e:76:e3:7b:33:47:7c:2c:7a:cb:f0:db:c1:f7: 3a:b4:f1:98:fe:75:58:d6:c3:ff:ac:85:bf:3c:6d:7e:5f:15: b5:8f:2f:ca:78:a8:41:25:8d:28:02:9c:a2:fb:f0:94:b1:39: 7b:1f:42:75:db:06:7a:e1:03:12:f0:1d:ae:6e:20:74:25:e2: be:8f:f1:f1:a3:70:a2:0a:08:b8:8d:1c:b0:cb:77:12:37:91: 2e:27:f9:8c:73:f3:4b:80:cc:12:e9:2e:46:dc:55:f7:37:af: 39:d9:52:a9:38:5b:18:a9:26:7e:64:3a:68:57:f2:4e:e6:78: 0f:89:56:c3:e9:ab:2d:9a:b2:09:57:59:ff:5c:b2:ea:64:f2: f0:09:32:71:26:61:d2:75:d8:8b:b9:4a:b0:07:45:6d:19:ab: 73:96:2d:36:42:ac:43:c7:dc:f3:6b:40:a2:8f:77:b7:6f:f4: ab:88:1a:f0:e2:8a:a5:e3:b7:5b:68:a6:b9:71:4a:89:85:fb: ec:76:41:09:f8:48:40:0c:df:c6:4a:35:38:b9:e3:9b:eb:95: 5b:49:69:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJB+K6DQShpa+SNXS00GWKlzfhRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNTA1MTExNzI3MThaFw0yNTA1MTQyMjMyMThaMDMxMTAvBgNV BAMTKEZBNUE5MDA2MTFCMzM5MjIxOEJDRDhDOUIwRjFERUFFMTUwMEYwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8P19Y0P/gI/I47sanyPUKrTJD LcK3AORdVi/nn5jHtqrKLsu5Jzyse79mqoBc4kw7ZPa+TjNc6EWv3dzg7ddWhY+H 4k6bhB39hv3aNl/l7juiW3bRvmv0/h0IpvUIs9kd14XH97sTBZkMpI13iK5Q2F57 KY0gekweZqo7lbbrZ5FdzRKXU59h2NB7kJNlcYxXNtrivqjNDKyK5dsaH9rP+J8b KfxsKrEahHMe+NRcrqZBlgjmpvYrNpkAfboKE21Qjolne+IjHb8dd2p44DEslIzi WZsjUjOWT6ZWCG/8jaoi3wNVJ5+Igm1weyzNdpYGwxYhuzadkj83vE9z4fu/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lqQBhGzOSIYvNjJsPHerhUA8GQwHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNIGypgRDt39KsSHkeSnGEQH6X4Ug17DOuR /+zW7MF6kmnT71JTogOeduN7M0d8LHrL8NvB9zq08Zj+dVjWw/+shb88bX5fFbWP L8p4qEEljSgCnKL78JSxOXsfQnXbBnrhAxLwHa5uIHQl4r6P8fGjcKIKCLiNHLDL dxI3kS4n+Yxz80uAzBLpLkbcVfc3rznZUqk4WxipJn5kOmhX8k7meA+JVsPpqy2a sglXWf9csupk8vAJMnEmYdJ12Iu5SrAHRW0Zq3OWLTZCrEPH3PNrQKKPd7dv9KuI GvDiiqXjt1toprlxSomF++x2QQn4SEAM38ZKNTi545vrlVtJadA= -----END CERTIFICATE-----Generated at Mon May 12 00:06:14 2025 by rpki-client