$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: +gm0o7lHZkT3MeCMVmh5W9jZiML5644CGZpyrvoD3Io= Subject key identifier: 10:1D:5A:2E:17:0A:2D:20:58:2A:21:38:D2:56:58:1B:CD:55:99:6D Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 1EE0F5FBC6AF9BCF2330F9710C2A3CDFC29B57B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 01C4 Signing time: Sat 18 Oct 2025 19:50:42 +0000 Manifest this update: Sat 18 Oct 2025 19:45:42 +0000 Manifest next update: Tue 21 Oct 2025 19:58:42 +0000 Files and hashes: 1: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: ACcQhRapf6vFaEKyZOGhIMBvmGfyYoXYYy4Y4s548qg=) 2: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: 1BLaABNBII60+2UQAZLWhBZwy5iCllMQzCVsYz81f4k=) 3: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: 1urt7xQMv77erDeUIECaqrLKucZfl8WxybZfYUf3NGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e0:f5:fb:c6:af:9b:cf:23:30:f9:71:0c:2a:3c:df:c2:9b:57:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Oct 18 19:45:42 2025 GMT Not After : Oct 21 19:58:42 2025 GMT Subject: CN=101D5A2E170A2D20582A2138D256581BCD55996D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4c:4f:eb:75:18:79:98:8e:e0:c8:a9:2c:e7: 7e:aa:37:85:da:73:18:ad:57:73:69:bd:86:76:27: d7:2f:be:35:46:7b:40:b6:f3:45:b7:f8:9e:a6:83: 80:92:b4:eb:ca:8f:fa:36:25:35:4f:5f:9f:f9:2e: 84:98:29:10:bb:16:63:01:0d:7f:ea:6a:dc:cd:fc: 8e:45:95:08:4c:ee:31:b0:f8:b5:a7:c4:c2:36:fd: bc:20:30:36:b6:08:b5:ca:8a:d4:44:65:c4:1d:51: a1:91:bc:80:9f:32:d6:5a:32:6b:08:5c:19:e4:d7: 26:e7:75:50:1c:af:12:d6:36:f9:44:61:7f:6e:58: e6:c3:5d:ef:db:e4:b3:b9:90:7a:f8:e9:61:02:8e: 38:a6:67:f5:9d:27:b3:c1:86:e1:02:f3:d9:66:48: 43:99:c3:85:ee:f3:2c:fe:e9:f2:6f:fa:ec:b4:51: 08:5b:4b:73:d8:cf:df:c2:e3:24:89:2c:91:d6:43: dc:5b:84:9d:40:31:ea:e2:68:ef:ff:16:10:13:e1: eb:00:35:ad:35:b1:e8:b8:bb:10:a5:18:7d:e0:5f: a6:45:5f:03:77:74:58:71:dd:84:a9:9e:6e:c0:7d: 07:42:3f:8a:7c:23:5a:38:77:2c:75:ba:68:36:7a: f2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1D:5A:2E:17:0A:2D:20:58:2A:21:38:D2:56:58:1B:CD:55:99:6D X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ad:c2:f0:54:b4:a7:c7:a6:0a:dd:80:95:09:98:e0:59:e5: b7:15:42:b3:e0:5b:b5:a8:fa:22:a5:6e:d7:11:e2:6d:35:0c: 2e:d6:49:b6:68:55:31:b9:84:bc:15:9a:5f:cd:0d:0d:be:60: 32:be:0e:db:6f:db:62:dc:23:aa:bf:69:55:74:c4:4c:a8:5d: b0:db:bc:6f:bf:15:ff:8b:7c:9a:8f:ed:f3:e3:a7:5e:55:e1: d1:8e:89:19:08:f3:ea:6e:62:f4:ba:fa:42:4a:a9:3b:94:00: e1:c2:43:02:20:dc:83:10:42:5d:78:2a:e6:da:26:4f:92:01: be:6c:b1:1c:ab:81:0a:ac:1a:64:ca:18:12:ee:a9:9d:50:df: 4b:e0:04:7a:33:b3:cf:b7:71:2e:1c:17:6e:d6:04:7d:53:be: 28:ee:6d:e8:22:4b:87:15:a2:3c:a7:04:48:ef:b7:8e:50:7f: a9:7a:59:36:53:39:87:45:5f:1a:ef:f1:f6:73:34:c9:cc:a8: 00:88:9f:8f:0f:b1:2a:d2:dd:9e:fa:f4:80:d7:0b:9d:ed:a9: bd:7f:df:92:9c:e7:88:1c:c1:d9:8b:59:9e:72:d2:7d:3f:13: a5:34:2e:3c:58:b1:2b:6b:1c:37:8b:bd:67:6a:a1:ed:b6:9c: f6:2c:02:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHuD1+8avm88jMPlxDCo838KbV7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNTEwMTgxOTQ1NDJaFw0yNTEwMjExOTU4NDJaMDMxMTAvBgNV BAMTKDEwMUQ1QTJFMTcwQTJEMjA1ODJBMjEzOEQyNTY1ODFCQ0Q1NTk5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlTE/rdRh5mI7gyKks536qN4Xa cxitV3NpvYZ2J9cvvjVGe0C280W3+J6mg4CStOvKj/o2JTVPX5/5LoSYKRC7FmMB DX/qatzN/I5FlQhM7jGw+LWnxMI2/bwgMDa2CLXKitREZcQdUaGRvICfMtZaMmsI XBnk1ybndVAcrxLWNvlEYX9uWObDXe/b5LO5kHr46WECjjimZ/WdJ7PBhuEC89lm SEOZw4Xu8yz+6fJv+uy0UQhbS3PYz9/C4ySJLJHWQ9xbhJ1AMeriaO//FhAT4esA Na01sei4uxClGH3gX6ZFXwN3dFhx3YSpnm7AfQdCP4p8I1o4dyx1umg2evIxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEB1aLhcKLSBYKiE40lZYG81VmW0wHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6twvBUtKfHpgrdgJUJmOBZ5bcVQrPgW7Wo +iKlbtcR4m01DC7WSbZoVTG5hLwVml/NDQ2+YDK+Dttv22LcI6q/aVV0xEyoXbDb vG+/Ff+LfJqP7fPjp15V4dGOiRkI8+puYvS6+kJKqTuUAOHCQwIg3IMQQl14Kuba Jk+SAb5ssRyrgQqsGmTKGBLuqZ1Q30vgBHozs8+3cS4cF27WBH1TvijubegiS4cV ojynBEjvt45Qf6l6WTZTOYdFXxrv8fZzNMnMqACIn48PsSrS3Z769IDXC53tqb1/ 35Kc54gcwdmLWZ5y0n0/E6U0LjxYsStrHDeLvWdqoe22nPYsAig= -----END CERTIFICATE-----Generated at Mon Oct 20 16:27:07 2025 by rpki-client