$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: QZf/cKvUc5gQkCsxwx20mDzgD9ZjU5lYMQgGzdQDVec= Subject key identifier: 3E:E5:C3:26:2E:2C:B7:C4:E0:2F:1D:19:77:42:38:55:79:F6:F9:C9 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 3665835CA742780641ABCA31F4548BC17EB08372 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 0178 Signing time: Fri 22 Aug 2025 01:00:55 +0000 Manifest this update: Fri 22 Aug 2025 00:55:55 +0000 Manifest next update: Mon 25 Aug 2025 06:06:55 +0000 Files and hashes: 1: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=) 2: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=) 3: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=) 4: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=) 5: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=) 6: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=) 7: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=) 8: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=) 9: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=) 10: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=) 11: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: TyM9fEo91bzOFeDNpfEloQJ6dXafNMj5etOhT/xgmPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:65:83:5c:a7:42:78:06:41:ab:ca:31:f4:54:8b:c1:7e:b0:83:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Aug 22 00:55:55 2025 GMT Not After : Aug 25 06:06:55 2025 GMT Subject: CN=3EE5C3262E2CB7C4E02F1D197742385579F6F9C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9e:e6:c9:26:e1:4b:ff:2a:d2:e0:0d:c7:92: f4:a3:44:87:4a:b3:88:d8:b0:ab:18:b3:f2:02:3f: 39:2b:17:32:20:20:3e:27:41:d1:9b:b7:b2:1f:d2: 76:2d:a4:4e:ef:c4:dd:41:e2:e7:d5:5d:0f:d5:01: 36:11:85:93:f3:ee:76:2f:7f:77:3b:4b:34:ed:ef: 72:c3:f2:36:30:cb:c3:e0:6c:f5:25:10:27:a4:d8: 41:a7:eb:c9:b5:88:a1:08:14:2e:d4:6e:ea:10:46: 89:69:4a:be:32:c7:45:c2:53:9c:7e:4d:f6:0e:3a: ce:89:01:1f:2a:f1:76:48:bf:22:c4:4d:f5:d1:12: 3e:e4:04:9d:e1:6d:e4:19:92:40:ed:69:fb:df:85: ed:0e:bb:05:bd:b8:10:64:f5:35:29:b9:93:da:26: 90:50:fa:a7:0d:c8:67:cd:c6:c6:4b:d4:5f:90:79: 91:fc:2a:6f:1c:cd:94:df:31:21:76:a7:f3:d9:80: c1:26:03:16:46:af:0d:fb:db:d2:3d:49:f0:ef:07: b0:4e:21:0d:dc:40:55:02:ca:03:96:03:81:ac:00: e6:49:4c:97:81:f4:46:cf:c5:03:d6:bd:ed:cd:eb: 28:42:d3:5c:1e:80:ec:42:f8:4c:06:e1:36:fa:8d: 16:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E5:C3:26:2E:2C:B7:C4:E0:2F:1D:19:77:42:38:55:79:F6:F9:C9 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:cf:8c:2e:c0:47:86:11:88:30:64:82:14:cf:bf:44:47:fa: f3:ba:20:87:6a:77:5b:ee:19:0d:ed:83:89:50:65:9b:8d:c6: 8b:c0:8d:29:c7:65:65:96:a0:3f:6f:3e:b6:13:ca:ea:39:34: d9:45:86:a0:cb:a2:b3:a3:cc:9f:55:57:27:da:13:1d:ae:ea: 60:83:90:d5:eb:12:b5:06:c2:71:ab:49:af:7f:41:82:ef:5b: 4f:5a:d4:0a:ac:4e:a1:80:de:6d:9c:18:4b:79:08:8e:1a:49: 70:be:11:6d:82:ae:ab:49:8c:9c:06:15:80:6c:bb:7d:3e:80: 78:ca:a6:0d:4f:ae:5f:fc:d5:77:bc:64:60:88:0c:6f:1a:ca: 9c:ab:22:81:68:05:30:98:bf:27:01:46:b2:9f:5e:d2:5c:d5: 6a:e4:64:60:04:84:de:f5:a7:03:dc:ef:e7:cc:72:4b:52:3c: 71:12:ce:f9:ab:fb:20:9f:69:e5:86:52:5d:b4:4e:1c:74:69: 5d:a1:7c:71:29:86:62:2c:e2:f4:c8:1f:ac:67:1c:33:c7:13: 01:40:e6:8f:e1:7d:c6:3a:ac:4c:e9:2b:21:2e:b8:79:d5:e2: ce:81:e7:3a:37:4c:12:e6:2b:d4:44:6f:e0:02:aa:37:c7:3b: 51:e4:48:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmWDXKdCeAZBq8ox9FSLwX6wg3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNTA4MjIwMDU1NTVaFw0yNTA4MjUwNjA2NTVaMDMxMTAvBgNV BAMTKDNFRTVDMzI2MkUyQ0I3QzRFMDJGMUQxOTc3NDIzODU1NzlGNkY5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnubJJuFL/yrS4A3HkvSjRIdK s4jYsKsYs/ICPzkrFzIgID4nQdGbt7If0nYtpE7vxN1B4ufVXQ/VATYRhZPz7nYv f3c7SzTt73LD8jYwy8PgbPUlECek2EGn68m1iKEIFC7UbuoQRolpSr4yx0XCU5x+ TfYOOs6JAR8q8XZIvyLETfXREj7kBJ3hbeQZkkDtafvfhe0OuwW9uBBk9TUpuZPa JpBQ+qcNyGfNxsZL1F+QeZH8Km8czZTfMSF2p/PZgMEmAxZGrw3729I9SfDvB7BO IQ3cQFUCygOWA4GsAOZJTJeB9EbPxQPWve3N6yhC01wegOxC+EwG4Tb6jRYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPuXDJi4st8TgLx0Zd0I4VXn2+ckwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXPjC7AR4YRiDBkghTPv0RH+vO6IIdqd1vu GQ3tg4lQZZuNxovAjSnHZWWWoD9vPrYTyuo5NNlFhqDLorOjzJ9VVyfaEx2u6mCD kNXrErUGwnGrSa9/QYLvW09a1AqsTqGA3m2cGEt5CI4aSXC+EW2CrqtJjJwGFYBs u30+gHjKpg1Prl/81Xe8ZGCIDG8aypyrIoFoBTCYvycBRrKfXtJc1WrkZGAEhN71 pwPc7+fMcktSPHESzvmr+yCfaeWGUl20Thx0aV2hfHEphmIs4vTIH6xnHDPHEwFA 5o/hfcY6rEzpKyEuuHnV4s6B5zo3TBLmK9REb+ACqjfHO1HkSHM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:33 2025 by rpki-client