$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft File: 38A92419EE1289455FCB1B71F9420F05CA334C15.mft (raw, json) Hash identifier: mno4QfcxckCVaabmxBPSaOwbeI7qMVfxGVdsxEN2r+A= Subject key identifier: 8E:73:17:EC:7E:56:8B:95:B6:78:66:44:9B:CD:FD:C5:52:A6:1B:C2 Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 Certificate issuer: /CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Certificate serial: 35E8A5112618958D06C4F14A69A85E837EDFB10A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft Manifest number: 01E9 Signing time: Thu 03 Jul 2025 04:00:00 +0000 Manifest this update: Thu 03 Jul 2025 03:55:00 +0000 Manifest next update: Sun 06 Jul 2025 12:56:00 +0000 Files and hashes: 1: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: /4y0i2UIqC94Q9jjKOVg3BHE03KUaQHXxOynS0oUshc=) 2: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: FHb4F7lq3vcwTbWDvi1X4f5+wy1PMf7axFDD1qokmPs=) 3: 38A92419EE1289455FCB1B71F9420F05CA334C15.crl (hash: G71i/Vn7f712PGT9AKVIoizTGkdUdqEPt7Hkw41viRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 08:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e8:a5:11:26:18:95:8d:06:c4:f1:4a:69:a8:5e:83:7e:df:b1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Validity Not Before: Jul 3 03:55:00 2025 GMT Not After : Jul 6 12:56:00 2025 GMT Subject: CN=8E7317EC7E568B95B67866449BCDFDC552A61BC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:cc:fb:f3:64:c7:ff:5c:01:54:d1:e6:c6: a5:96:33:c8:db:98:4f:52:25:a8:ea:b0:fb:e6:03: ae:8e:04:83:2e:5f:aa:de:2f:63:f8:5d:f7:a4:68: cb:8b:57:81:9c:a8:cb:3c:42:3d:ec:c7:71:80:c3: 0b:d3:3d:4c:cd:d9:a1:3a:64:83:3a:b0:08:08:8d: 65:c1:45:06:16:91:5a:3f:13:1c:fb:35:6f:80:2a: 12:12:4b:6d:79:f2:e1:19:31:a9:09:e2:e1:b4:0f: d5:72:51:82:40:5d:51:8b:d0:c8:93:ab:eb:a8:e3: 3c:12:c4:3a:32:d7:82:c6:4f:ff:07:67:b2:ef:84: 99:a0:4f:8f:cc:d1:10:55:0d:35:c4:67:77:a6:2b: 1e:39:bb:bf:07:ae:2d:bf:16:ef:cc:2f:86:b3:10: fb:a2:9a:f6:f1:2b:a8:4f:a6:6e:40:0a:2a:11:a0: c7:4b:f5:a2:6f:7b:70:c6:45:28:d7:9d:59:c0:1e: 3c:f6:0c:10:83:e5:9d:a9:74:d3:68:87:50:1d:9b: 48:47:03:e3:3c:7b:43:69:ad:84:57:d2:f5:a3:6d: ce:b9:62:c4:0c:f6:71:62:93:74:4f:e7:f2:b6:61: 6b:f2:ed:84:82:12:8d:3b:b6:0e:38:10:03:09:98: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:73:17:EC:7E:56:8B:95:B6:78:66:44:9B:CD:FD:C5:52:A6:1B:C2 X509v3 Authority Key Identifier: keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0b:54:bd:c6:0e:8e:fc:ce:92:9c:d8:25:66:5d:ef:ef:6a: 83:dd:b8:68:63:2c:f0:47:71:1c:d8:01:43:7e:24:29:7d:cb: be:31:68:79:4b:3f:3a:cb:9a:3b:7e:18:41:f7:22:f6:5c:56: ba:d0:66:b1:61:00:18:ab:74:72:48:6d:8b:37:40:a2:79:ad: ed:f5:51:87:1e:b8:48:88:20:f2:f8:b1:07:fc:5b:3d:43:5d: 82:fd:0d:93:40:7a:25:4a:6a:8b:5f:a1:c9:b4:bf:e9:4a:96: 9b:2e:fe:85:d2:50:b8:91:80:e5:df:ac:35:b0:31:65:9f:59: 64:2d:c1:9e:90:03:5f:bf:48:fb:a3:9c:f6:c4:73:41:19:4e: 8c:c3:c6:64:a7:cc:01:cf:ec:89:8f:7c:f4:4c:ea:69:04:10: 44:4e:fb:dc:7a:db:2b:5b:06:42:cd:7c:a5:15:2c:43:24:91: 74:a8:87:64:3c:54:0e:8a:a1:e8:64:5e:1b:b0:80:5c:33:6d: b7:fb:a8:06:93:7c:76:23:81:62:45:95:97:e2:72:57:99:d4: e9:2c:06:91:e1:68:e1:26:50:8d:c4:50:51:08:31:1a:21:b9: 0a:88:97:ea:d4:52:68:19:ab:6b:d4:5f:01:74:ec:32:6b:57: 23:88:cb:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeilESYYlY0GxPFKaaheg37fsQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVD QTMzNEMxNTAeFw0yNTA3MDMwMzU1MDBaFw0yNTA3MDYxMjU2MDBaMDMxMTAvBgNV BAMTKDhFNzMxN0VDN0U1NjhCOTVCNjc4NjY0NDlCQ0RGREM1NTJBNjFCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybsz782TH/1wBVNHmxqWWM8jb mE9SJajqsPvmA66OBIMuX6reL2P4XfekaMuLV4GcqMs8Qj3sx3GAwwvTPUzN2aE6 ZIM6sAgIjWXBRQYWkVo/Exz7NW+AKhISS2158uEZMakJ4uG0D9VyUYJAXVGL0MiT q+uo4zwSxDoy14LGT/8HZ7LvhJmgT4/M0RBVDTXEZ3emKx45u78Hri2/Fu/ML4az EPuimvbxK6hPpm5ACioRoMdL9aJve3DGRSjXnVnAHjz2DBCD5Z2pdNNoh1Adm0hH A+M8e0NprYRX0vWjbc65YsQM9nFik3RP5/K2YWvy7YSCEo07tg44EAMJmG37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjnMX7H5Wi5W2eGZEm839xVKmG8IwHwYDVR0j BBgwFoAUOKkkGe4SiUVfyxtx+UIPBcozTBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRhZDhjYi1hNTM3LTRjNTAtYWY2YS1hYWJhNWYxZTc2NDQvMC8zOEE5MjQxOUVF MTI4OTQ1NUZDQjFCNzFGOTQyMEYwNUNBMzM0QzE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVDQTMz NEMxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkYWQ4Y2ItYTUzNy00YzUwLWFm NmEtYWFiYTVmMWU3NjQ0LzAvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBG MDVDQTMzNEMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKELVL3GDo78zpKc2CVmXe/vaoPduGhjLPBH cRzYAUN+JCl9y74xaHlLPzrLmjt+GEH3IvZcVrrQZrFhABirdHJIbYs3QKJ5re31 UYceuEiIIPL4sQf8Wz1DXYL9DZNAeiVKaotfocm0v+lKlpsu/oXSULiRgOXfrDWw MWWfWWQtwZ6QA1+/SPujnPbEc0EZTozDxmSnzAHP7ImPfPRM6mkEEERO+9x62ytb BkLNfKUVLEMkkXSoh2Q8VA6KoehkXhuwgFwzbbf7qAaTfHYjgWJFlZficleZ1Oks BpHhaOEmUI3EUFEIMRohuQqIl+rUUmgZq2vUXwF07DJrVyOIyyQ= -----END CERTIFICATE-----Generated at Thu Jul 3 06:50:38 2025 by rpki-client