$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: bNZyhRJ9WUxZjmAe/Ywn8nsi26y1M4mci8Boi4o5eLw= Subject key identifier: A0:A7:39:6C:67:2A:BF:F0:22:04:53:73:FB:BF:7E:AC:88:6C:16:25 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 1CF3AF537282C48AAA85A657D302CAD89547C489 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 0160 Signing time: Sat 28 Jun 2025 03:00:55 +0000 Manifest this update: Sat 28 Jun 2025 02:55:55 +0000 Manifest next update: Tue 01 Jul 2025 10:35:55 +0000 Files and hashes: 1: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=) 2: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: gR3BJi70EOFz/u+lHFpebtaUFEzAjHra9jWl56iQgSk=) 3: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=) 4: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=) 5: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=) 6: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=) 7: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=) 8: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=) 9: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=) 10: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=) 11: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 10:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f3:af:53:72:82:c4:8a:aa:85:a6:57:d3:02:ca:d8:95:47:c4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Jun 28 02:55:55 2025 GMT Not After : Jul 1 10:35:55 2025 GMT Subject: CN=A0A7396C672ABFF022045373FBBF7EAC886C1625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:d8:59:0a:b7:fe:6c:11:13:ca:3f:a5:b6: f9:2d:77:38:4a:19:3d:75:84:d7:0e:93:bf:9b:8e: aa:8b:ce:f0:66:f3:a0:bb:ee:51:6c:a1:ee:c4:70: fb:d5:87:b8:35:f9:29:c2:b6:18:ca:9d:58:8f:15: 86:80:3c:37:99:75:25:1f:90:28:c7:c9:ee:bf:d8: 75:c7:ca:71:93:a1:f9:f8:c4:3c:cd:52:0c:12:6f: ea:c2:bb:b6:f9:10:7c:2a:91:7d:17:12:9c:93:21: 3f:31:1a:8e:70:4a:1e:43:ca:9c:d8:3b:ac:e1:bb: 21:a6:8a:d2:09:8f:cf:6e:50:86:b2:9a:ac:c6:97: f6:5a:bb:a5:54:e7:1d:0d:29:f0:26:eb:6a:15:c3: 58:d8:e7:94:e6:2b:3b:b5:3e:0f:ba:7e:a4:6d:b4: 18:23:51:64:dc:52:c8:90:35:b6:cb:da:64:83:47: 97:0b:66:43:c9:b4:42:90:00:4c:bb:56:49:ef:82: eb:c4:35:99:aa:53:a0:ac:e8:f9:30:73:b0:fd:86: 83:9f:ef:b2:2c:2b:12:36:75:ea:7b:2f:1b:7a:f6: fc:f7:f4:94:93:48:ba:60:88:35:ec:c5:fa:50:c3: 8e:5a:4a:11:7c:31:53:01:04:c4:eb:61:bf:e6:ca: da:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A7:39:6C:67:2A:BF:F0:22:04:53:73:FB:BF:7E:AC:88:6C:16:25 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:db:76:0a:bf:e3:c7:a2:c1:16:2c:50:81:b1:91:12:f1:fa: 89:11:1a:71:87:09:e1:95:f2:d3:16:d6:68:13:55:ae:5b:f1: d3:b8:d0:a2:6f:6f:d6:67:77:d3:6e:78:11:ac:0b:ec:9f:b8: b8:22:86:00:e7:98:71:d8:98:f4:3e:8d:e8:0a:47:6c:88:ae: ca:b8:b3:5b:0a:60:ba:f0:f2:88:17:b4:55:54:dc:6d:83:74: c7:27:02:73:d2:1e:e1:eb:7a:6f:3f:a3:7a:1f:af:4d:e6:0c: 6b:c3:d6:6e:8e:37:b6:85:25:f8:5b:1f:15:7f:b5:10:e4:01: cf:b9:03:5a:00:d4:77:03:d9:07:8d:d9:a1:c1:1e:53:94:c0: 92:20:28:11:f9:91:9b:e8:b2:93:a8:43:53:a7:4b:d8:4e:53: 90:91:a1:70:2a:f7:62:98:af:f9:3c:64:5f:11:a4:74:2f:0a: 71:81:3a:27:7b:42:0b:25:0d:42:6e:40:bf:6f:ed:ca:21:3b: 05:83:86:43:91:2c:87:f2:42:5b:41:eb:f7:23:78:1c:3c:b5: 8b:9f:87:d4:d3:f3:9f:7e:4f:b5:cc:dd:37:25:81:3a:f8:77: 3d:8e:ff:d1:8f:d4:9a:54:5b:24:b1:40:07:9c:2f:ef:54:32: 01:16:6d:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHPOvU3KCxIqqhaZX0wLK2JVHxIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNTA2MjgwMjU1NTVaFw0yNTA3MDExMDM1NTVaMDMxMTAvBgNV BAMTKEEwQTczOTZDNjcyQUJGRjAyMjA0NTM3M0ZCQkY3RUFDODg2QzE2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0thZCrf+bBETyj+ltvktdzhK GT11hNcOk7+bjqqLzvBm86C77lFsoe7EcPvVh7g1+SnCthjKnViPFYaAPDeZdSUf kCjHye6/2HXHynGTofn4xDzNUgwSb+rCu7b5EHwqkX0XEpyTIT8xGo5wSh5DypzY O6zhuyGmitIJj89uUIaymqzGl/Zau6VU5x0NKfAm62oVw1jY55TmKzu1Pg+6fqRt tBgjUWTcUsiQNbbL2mSDR5cLZkPJtEKQAEy7VknvguvENZmqU6Cs6Pkwc7D9hoOf 77IsKxI2dep7Lxt69vz39JSTSLpgiDXsxfpQw45aShF8MVMBBMTrYb/mytqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoKc5bGcqv/AiBFNz+79+rIhsFiUwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTbdgq/48eiwRYsUIGxkRLx+okRGnGHCeGV 8tMW1mgTVa5b8dO40KJvb9Znd9NueBGsC+yfuLgihgDnmHHYmPQ+jegKR2yIrsq4 s1sKYLrw8ogXtFVU3G2DdMcnAnPSHuHrem8/o3ofr03mDGvD1m6ON7aFJfhbHxV/ tRDkAc+5A1oA1HcD2QeN2aHBHlOUwJIgKBH5kZvospOoQ1OnS9hOU5CRoXAq92KY r/k8ZF8RpHQvCnGBOid7QgslDUJuQL9v7cohOwWDhkORLIfyQltB6/cjeBw8tYuf h9TT859+T7XM3TclgTr4dz2O/9GP1JpUWySxQAecL+9UMgEWbZw= -----END CERTIFICATE-----Generated at Sun Jun 29 19:56:39 2025 by rpki-client