$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: yQTseSaCaYY9ENAFXlDgAMyf9sjKZc8IxlC6BX4fPU0= Subject key identifier: B6:45:FC:3E:00:2C:CC:1C:CF:D5:61:0A:CA:BB:D2:3B:D3:32:F8:43 Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 0983AC8527B5AA68B4597538E4446F9D946CF6C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 0193 Signing time: Tue 01 Jul 2025 07:50:40 +0000 Manifest this update: Tue 01 Jul 2025 07:45:40 +0000 Manifest next update: Fri 04 Jul 2025 09:30:40 +0000 Files and hashes: 1: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: ACcQhRapf6vFaEKyZOGhIMBvmGfyYoXYYy4Y4s548qg=) 2: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: DjbRBSXF+VVwIWFf3zWvFLOvfyC4M5pQddaOaS33StM=) 3: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: 1urt7xQMv77erDeUIECaqrLKucZfl8WxybZfYUf3NGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:83:ac:85:27:b5:aa:68:b4:59:75:38:e4:44:6f:9d:94:6c:f6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Jul 1 07:45:40 2025 GMT Not After : Jul 4 09:30:40 2025 GMT Subject: CN=B645FC3E002CCC1CCFD5610ACABBD23BD332F843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:da:c8:d1:a2:dc:9f:1b:7c:28:4f:db:06:d0: fa:06:6d:78:44:77:ad:6c:23:5b:74:f5:10:4b:7d: 96:9c:bb:ea:36:29:60:56:f3:e8:be:69:71:95:cf: 90:20:9c:e1:0e:8b:04:50:85:f4:c9:f1:c9:9c:98: ea:d5:01:e6:2d:02:13:ff:da:30:db:7b:24:23:d2: 54:d5:43:86:53:bf:96:5d:c6:ad:fa:ca:4b:2c:40: 9d:76:14:c4:d7:4b:08:a2:ea:ce:f1:94:ff:52:f7: 52:d3:63:ab:3a:d2:a2:e8:23:79:22:db:62:01:e6: 1c:b0:28:83:df:43:fe:71:85:5a:e7:23:df:49:34: 24:d4:0d:2f:38:cf:28:7e:e9:4e:26:42:af:4f:96: 96:bc:04:fb:a3:45:c9:c4:e9:6f:c6:a2:22:61:9c: d9:0f:38:0b:d1:95:13:3e:69:c9:c7:6f:4e:46:04: 6d:73:48:92:72:86:3b:80:0a:2f:13:66:74:71:b7: a2:49:40:32:b6:e6:b5:29:4f:96:b4:fa:ee:f5:f8: 0d:10:80:ea:79:d2:d3:d6:3c:45:d2:a1:34:b7:33: 0e:36:bb:ac:e6:9a:f6:ec:3d:74:35:3d:c7:68:27: 59:9f:0e:90:5f:75:f8:73:01:eb:fa:00:11:f3:1f: d2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:45:FC:3E:00:2C:CC:1C:CF:D5:61:0A:CA:BB:D2:3B:D3:32:F8:43 X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:99:7c:e9:aa:67:fb:f3:7b:59:d4:dc:e5:0c:11:dd:b5:6c: 40:bc:c3:0d:db:34:e1:b1:d3:0f:cd:9d:64:a5:77:09:97:30: 19:63:cf:7c:f6:66:0e:ef:34:34:ae:12:01:65:ff:11:7b:ea: 24:ef:af:55:49:6a:e6:c7:e1:d1:65:42:39:fb:c8:b9:66:59: b7:7d:6d:a8:ed:be:b9:77:bb:1c:59:85:12:0c:53:04:62:bc: 83:ad:36:25:a7:39:36:95:92:93:83:bb:5c:59:c6:41:d4:77: a9:98:c9:fc:7b:a6:ca:a9:3a:ae:89:d0:33:58:5d:70:12:39: 70:44:1b:11:d4:d3:cd:60:5f:c3:8a:27:43:73:4f:78:4f:83: fc:83:21:b3:89:ad:11:17:58:84:6a:af:92:e9:a2:cc:9a:3d: 54:b9:3f:27:4e:f3:de:e3:86:2a:ea:54:1c:22:d6:98:2c:17: ef:68:2f:10:4f:3e:3a:97:f3:38:fb:c4:ad:9e:72:9d:c5:44: 1f:7e:81:95:60:7a:c1:b9:93:61:0e:e2:44:e6:2c:a6:58:6b: 9e:d7:41:3b:1c:04:c9:08:fb:50:a8:b9:3b:48:f2:1f:49:d7: 87:a3:9e:08:1c:96:cd:bd:11:f1:90:1d:e9:de:1f:0a:68:71: ee:2b:e8:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYOshSe1qmi0WXU45ERvnZRs9sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNTA3MDEwNzQ1NDBaFw0yNTA3MDQwOTMwNDBaMDMxMTAvBgNV BAMTKEI2NDVGQzNFMDAyQ0NDMUNDRkQ1NjEwQUNBQkJEMjNCRDMzMkY4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa2sjRotyfG3woT9sG0PoGbXhE d61sI1t09RBLfZacu+o2KWBW8+i+aXGVz5AgnOEOiwRQhfTJ8cmcmOrVAeYtAhP/ 2jDbeyQj0lTVQ4ZTv5Zdxq36ykssQJ12FMTXSwii6s7xlP9S91LTY6s60qLoI3ki 22IB5hywKIPfQ/5xhVrnI99JNCTUDS84zyh+6U4mQq9Plpa8BPujRcnE6W/GoiJh nNkPOAvRlRM+acnHb05GBG1zSJJyhjuACi8TZnRxt6JJQDK25rUpT5a0+u71+A0Q gOp50tPWPEXSoTS3Mw42u6zmmvbsPXQ1PcdoJ1mfDpBfdfhzAev6ABHzH9INAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtkX8PgAszBzP1WEKyrvSO9My+EMwHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGZfOmqZ/vze1nU3OUMEd21bEC8ww3bNOGx 0w/NnWSldwmXMBljz3z2Zg7vNDSuEgFl/xF76iTvr1VJaubH4dFlQjn7yLlmWbd9 bajtvrl3uxxZhRIMUwRivIOtNiWnOTaVkpODu1xZxkHUd6mYyfx7psqpOq6J0DNY XXASOXBEGxHU081gX8OKJ0NzT3hPg/yDIbOJrREXWIRqr5LposyaPVS5PydO897j hirqVBwi1pgsF+9oLxBPPjqX8zj7xK2ecp3FRB9+gZVgesG5k2EO4kTmLKZYa57X QTscBMkI+1CouTtI8h9J14ejnggcls29EfGQHeneHwpoce4r6LI= -----END CERTIFICATE-----Generated at Wed Jul 2 16:38:32 2025 by rpki-client