$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: yfcR/kD7j+iRT87oWvwMCnGyBiCu0C52Ok8RGLtYMPQ= Subject key identifier: F8:EE:35:5A:CA:14:AB:19:B5:65:70:9E:32:6C:60:CA:6E:48:36:8A Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 3BFF659624A08978971B6DC843783898A05E80AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 01AA Signing time: Fri 22 Aug 2025 03:00:41 +0000 Manifest this update: Fri 22 Aug 2025 02:55:41 +0000 Manifest next update: Mon 25 Aug 2025 03:07:41 +0000 Files and hashes: 1: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: 1urt7xQMv77erDeUIECaqrLKucZfl8WxybZfYUf3NGc=) 2: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: 7hIWIHKno7PiHvmjGBuu+/aANbhFL48J5Kq/HKp2pAg=) 3: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: ACcQhRapf6vFaEKyZOGhIMBvmGfyYoXYYy4Y4s548qg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ff:65:96:24:a0:89:78:97:1b:6d:c8:43:78:38:98:a0:5e:80:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Aug 22 02:55:41 2025 GMT Not After : Aug 25 03:07:41 2025 GMT Subject: CN=F8EE355ACA14AB19B565709E326C60CA6E48368A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:39:7a:4c:b3:76:f9:3d:3e:e9:33:43:7a:9b: bc:67:41:b6:63:94:10:7b:a6:38:08:53:38:dc:5c: dd:84:01:e9:e4:59:ee:30:b4:02:6d:6b:72:05:90: bb:e7:d9:ff:33:ef:09:01:4f:dd:ba:09:9a:1d:02: f8:9f:06:6e:52:31:76:37:70:bb:b1:3b:11:ed:06: c5:13:18:b2:4b:f0:a0:64:cc:37:d6:44:c0:2a:70: 42:fc:c0:c4:08:48:20:a4:5c:f8:c0:fa:b7:85:6d: 21:c1:0f:15:b6:7a:cd:4b:55:e7:fa:62:7c:45:01: 5c:f9:69:46:7d:9a:1e:82:d0:47:a3:d0:ed:a9:06: db:5e:85:96:27:92:9b:8f:7f:ae:33:d8:24:96:ba: fd:c0:ec:42:e9:71:6c:ff:0f:a3:04:5f:be:99:60: af:f1:35:d5:04:1f:2b:38:c0:fe:07:7c:47:71:57: 66:76:1c:4c:64:18:d4:2c:92:87:a9:61:cd:a3:02: 43:49:af:b6:34:ac:65:3f:e1:d8:ce:bd:1f:84:bb: b3:76:cf:fb:0d:d4:1a:5c:91:ea:c3:2c:2c:65:63: 8b:85:2d:01:b7:78:5d:ca:d1:db:40:e7:1e:8b:12: 2e:a2:2f:0a:0f:15:d4:e6:e4:0d:c8:1b:a4:e7:7c: f1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EE:35:5A:CA:14:AB:19:B5:65:70:9E:32:6C:60:CA:6E:48:36:8A X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:76:70:1f:fe:91:0c:58:b9:07:85:15:95:0d:ea:77:28:eb: 55:0d:72:06:ad:03:22:22:bc:3e:3d:d4:ac:47:a5:e2:b8:e6: 83:df:bb:53:7c:66:1b:34:7e:95:bb:0d:ec:f7:1a:31:62:5b: 9e:e1:11:73:bb:5d:eb:b5:a0:e8:25:ee:a7:82:42:41:11:9d: c4:4d:1a:19:63:3e:b1:8d:47:47:4e:df:8a:90:71:29:93:0a: 2e:1d:96:dd:db:05:71:dc:5c:68:1c:68:f4:ce:3e:2c:9f:56: 58:48:ec:3f:0f:98:ab:ae:74:a7:45:ab:84:dc:eb:01:1d:0c: bd:24:97:53:89:6c:8c:5f:cb:68:f9:86:38:e3:63:10:5b:10: fd:32:97:e6:30:f3:b9:12:b7:06:07:ca:c2:ff:dd:be:0d:05: 82:26:cb:80:e4:28:de:ac:c7:db:3f:1f:49:33:e9:f0:5e:43: ce:6d:80:e3:76:3f:b5:b2:4b:ef:47:b3:ce:95:04:59:5b:ec: 52:98:3c:9e:df:da:36:f7:bf:a6:90:9b:b3:11:4b:9e:7b:4e: a4:f6:5e:74:5f:c8:db:e3:4f:42:31:1f:82:ca:47:97:2d:a5: cf:f1:e9:7b:af:03:61:6e:91:59:95:f8:eb:c8:50:d7:59:d6: 30:ff:5e:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/9lliSgiXiXG23IQ3g4mKBegK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNTA4MjIwMjU1NDFaFw0yNTA4MjUwMzA3NDFaMDMxMTAvBgNV BAMTKEY4RUUzNTVBQ0ExNEFCMTlCNTY1NzA5RTMyNkM2MENBNkU0ODM2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOXpMs3b5PT7pM0N6m7xnQbZj lBB7pjgIUzjcXN2EAenkWe4wtAJta3IFkLvn2f8z7wkBT926CZodAvifBm5SMXY3 cLuxOxHtBsUTGLJL8KBkzDfWRMAqcEL8wMQISCCkXPjA+reFbSHBDxW2es1LVef6 YnxFAVz5aUZ9mh6C0Eej0O2pBttehZYnkpuPf64z2CSWuv3A7ELpcWz/D6MEX76Z YK/xNdUEHys4wP4HfEdxV2Z2HExkGNQskoepYc2jAkNJr7Y0rGU/4djOvR+Eu7N2 z/sN1BpckerDLCxlY4uFLQG3eF3K0dtA5x6LEi6iLwoPFdTm5A3IG6TnfPFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+O41WsoUqxm1ZXCeMmxgym5INoowHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJ2cB/+kQxYuQeFFZUN6nco61UNcgatAyIi vD491KxHpeK45oPfu1N8Zhs0fpW7Dez3GjFiW57hEXO7Xeu1oOgl7qeCQkERncRN GhljPrGNR0dO34qQcSmTCi4dlt3bBXHcXGgcaPTOPiyfVlhI7D8PmKuudKdFq4Tc 6wEdDL0kl1OJbIxfy2j5hjjjYxBbEP0yl+Yw87kStwYHysL/3b4NBYImy4DkKN6s x9s/H0kz6fBeQ85tgON2P7WyS+9Hs86VBFlb7FKYPJ7f2jb3v6aQm7MRS557TqT2 XnRfyNvjT0IxH4LKR5ctpc/x6XuvA2FukVmV+OvIUNdZ1jD/Xpk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:45 2025 by rpki-client