$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: zC8su+JVVhq/Nm2g7p3kUsn9O2DjvwPJorCp4kP5vCE= Subject key identifier: 7B:10:E4:1A:B6:99:02:32:85:AD:32:CE:3B:41:FD:15:5B:58:3E:F7 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 36581887D2A3D3D40DD477FC28C950F68BFD84C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 0192 Signing time: Sun 19 Oct 2025 22:50:56 +0000 Manifest this update: Sun 19 Oct 2025 22:45:56 +0000 Manifest next update: Thu 23 Oct 2025 06:30:56 +0000 Files and hashes: 1: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=) 2: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=) 3: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=) 4: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=) 5: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=) 6: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=) 7: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: IQ0udknoK5keQKCw7OYy1gWm5Wkb2yy6MEVhyoCQrKM=) 8: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=) 9: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=) 10: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=) 11: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:58:18:87:d2:a3:d3:d4:0d:d4:77:fc:28:c9:50:f6:8b:fd:84:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Oct 19 22:45:56 2025 GMT Not After : Oct 23 06:30:56 2025 GMT Subject: CN=7B10E41AB699023285AD32CE3B41FD155B583EF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:b2:d8:c9:2f:9e:3b:c4:ba:26:d0:19:0d: 9f:3a:c6:59:00:ac:ec:32:e7:ff:a3:46:ba:ed:b5: 43:36:ac:ca:c9:75:66:a3:70:47:a5:f2:17:71:be: cf:58:5d:c8:16:b3:a9:d7:53:d6:17:b7:a7:fc:18: d1:79:a3:93:36:a7:35:ec:14:7a:c4:ed:d2:b1:66: 46:f5:93:74:d2:13:e6:e1:86:3d:dd:6a:a2:73:7e: 27:ed:71:fc:f1:63:1f:42:90:88:79:7c:c7:d2:9d: 45:8f:48:8f:ca:ec:5d:5c:0c:9a:43:97:5b:b5:29: 77:23:59:25:db:d9:87:ee:1f:1b:66:dd:5a:91:37: 47:9c:d2:7b:53:48:62:cc:b1:bf:d2:cd:e2:54:c8: ba:d8:8c:fe:4a:51:ce:aa:be:ff:3e:81:bf:83:6d: 3e:42:a5:d1:b8:88:ad:8f:b5:b2:ee:98:9e:98:d8: 70:ee:88:bf:9a:4c:be:d1:97:c5:46:8e:f3:a1:49: da:88:9b:89:4f:65:b1:1c:17:6a:be:b2:8e:29:7c: 8b:ae:9a:35:dc:b9:3b:7f:6e:c9:de:71:12:44:98: fe:82:9a:04:de:75:c8:cf:53:3d:23:17:a1:ed:4f: 50:37:39:22:91:17:30:c8:2c:51:6e:6a:38:ae:0d: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:10:E4:1A:B6:99:02:32:85:AD:32:CE:3B:41:FD:15:5B:58:3E:F7 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e1:52:b0:f1:85:4a:e3:30:94:6a:fe:ee:f0:42:d2:14:b0: ee:87:e5:2a:64:e8:43:12:7b:3b:05:b8:a0:b7:91:54:8e:bb: 26:34:71:7e:53:1d:3b:bb:b1:29:c2:82:05:4b:df:88:14:68: b4:91:bd:42:3d:51:72:ee:60:74:8b:ae:40:6c:fc:bb:56:c2: fe:3d:a4:c7:23:e4:e3:3f:e2:78:0d:24:af:b7:e0:0c:bc:31: 76:81:6d:77:f2:e2:25:96:47:2a:d1:7c:90:b8:26:ae:d7:c1: b9:2b:86:49:d8:e8:b4:b9:c3:d7:a2:02:16:a1:75:a1:de:23: c9:e9:31:75:36:a0:f7:42:fa:d5:2a:d3:ef:ae:1b:a0:b5:73: 70:b6:eb:97:fe:eb:eb:40:7c:8b:70:b2:52:a5:59:04:c9:01: b8:2f:00:5e:c9:0a:19:cc:4f:64:ac:7c:17:dd:54:6c:e6:12: d8:f4:5a:f9:8c:a4:ba:8c:88:96:03:09:5e:36:6e:03:71:d1: 8d:f0:4a:24:86:ea:db:7b:b9:32:6f:05:f3:63:dd:4b:46:76: 3e:3a:44:49:63:5b:71:6a:8b:aa:61:39:7e:0a:be:bf:18:5e: b1:1d:bb:01:05:c2:69:fc:46:75:b7:10:98:c6:04:10:50:df: cb:2b:72:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNlgYh9Kj09QN1Hf8KMlQ9ov9hMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNTEwMTkyMjQ1NTZaFw0yNTEwMjMwNjMwNTZaMDMxMTAvBgNV BAMTKDdCMTBFNDFBQjY5OTAyMzI4NUFEMzJDRTNCNDFGRDE1NUI1ODNFRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgY7LYyS+eO8S6JtAZDZ86xlkA rOwy5/+jRrrttUM2rMrJdWajcEel8hdxvs9YXcgWs6nXU9YXt6f8GNF5o5M2pzXs FHrE7dKxZkb1k3TSE+bhhj3daqJzfiftcfzxYx9CkIh5fMfSnUWPSI/K7F1cDJpD l1u1KXcjWSXb2YfuHxtm3VqRN0ec0ntTSGLMsb/SzeJUyLrYjP5KUc6qvv8+gb+D bT5CpdG4iK2PtbLumJ6Y2HDuiL+aTL7Rl8VGjvOhSdqIm4lPZbEcF2q+so4pfIuu mjXcuTt/bsnecRJEmP6CmgTedcjPUz0jF6HtT1A3OSKRFzDILFFuajiuDXwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUexDkGraZAjKFrTLOO0H9FVtYPvcwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3hUrDxhUrjMJRq/u7wQtIUsO6H5Spk6EMS ezsFuKC3kVSOuyY0cX5THTu7sSnCggVL34gUaLSRvUI9UXLuYHSLrkBs/LtWwv49 pMcj5OM/4ngNJK+34Ay8MXaBbXfy4iWWRyrRfJC4Jq7XwbkrhknY6LS5w9eiAhah daHeI8npMXU2oPdC+tUq0++uG6C1c3C265f+6+tAfItwslKlWQTJAbgvAF7JChnM T2SsfBfdVGzmEtj0WvmMpLqMiJYDCV42bgNx0Y3wSiSG6tt7uTJvBfNj3UtGdj46 REljW3Fqi6phOX4Kvr8YXrEduwEFwmn8RnW3EJjGBBBQ38srctI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:35 2025 by rpki-client