$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json) Hash identifier: 5THX1+6nykklQloRgJt1KWALD6nPmdBYDxR8M4lfbMY= Subject key identifier: F4:72:BC:D8:41:3B:C2:40:D9:6C:6C:D3:E1:DE:5D:8B:A2:31:28:3A Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Certificate serial: 3A932F7989834F3206FD5582D2C9C844A008326F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft Manifest number: 014D Signing time: Mon 04 Aug 2025 22:51:05 +0000 Manifest this update: Mon 04 Aug 2025 22:46:05 +0000 Manifest next update: Fri 08 Aug 2025 03:59:05 +0000 Files and hashes: 1: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: gqVwxhcmJ6d0/vfb6Zip5H4jrj2w22Uqy/mLsMiZMGY=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:93:2f:79:89:83:4f:32:06:fd:55:82:d2:c9:c8:44:a0:08:32:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Validity Not Before: Aug 4 22:46:05 2025 GMT Not After : Aug 8 03:59:05 2025 GMT Subject: CN=F472BCD8413BC240D96C6CD3E1DE5D8BA231283A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:2e:19:71:ff:1f:c5:6e:c8:83:fa:48:7c: 23:8b:6c:86:a8:d8:87:57:6a:ba:d5:82:b8:ef:b1: 7b:2d:4d:f0:5b:a8:ea:bf:72:f2:51:7a:9a:9c:03: 34:7d:b7:b2:d8:59:1e:41:82:6c:8f:ef:c0:c3:aa: 62:2c:f0:7a:45:50:aa:85:c2:63:d3:66:b0:e1:71: 22:86:ac:6e:cd:3c:0f:89:96:93:ac:90:d6:3a:92: bd:2f:b9:7e:64:c6:77:9f:7e:94:07:4e:dc:20:0e: 11:41:83:42:d6:ad:b9:df:2b:a8:0f:2f:04:31:61: c0:22:b0:50:3d:a0:28:af:0f:3d:7f:25:9d:fb:88: c1:ac:80:1d:05:7a:9f:6c:65:49:d3:1f:5a:71:42: 4a:03:79:82:b9:78:b8:e4:8e:0a:e0:18:82:ac:fd: 00:fb:d2:9b:85:32:4e:a1:c7:57:02:55:5d:73:f5: dd:72:bb:04:5c:36:74:8b:c5:0d:7f:8c:c6:3f:ff: d7:16:0b:4e:20:9c:97:ff:a7:d7:7c:bb:b9:90:bd: b7:b9:3d:5e:20:b4:47:76:b3:e7:11:8e:bf:30:f1: 11:2d:5c:3b:c0:bf:43:3f:c1:07:f7:41:fd:0a:8c: 29:a8:44:2e:94:13:21:95:dc:d4:82:a1:47:22:a2: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:72:BC:D8:41:3B:C2:40:D9:6C:6C:D3:E1:DE:5D:8B:A2:31:28:3A X509v3 Authority Key Identifier: keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3f:b1:bc:91:7b:e8:39:0b:7a:ac:35:07:d0:58:e5:d6:72: 89:4e:5a:3c:b7:c6:a4:68:bc:6f:39:95:92:71:e6:a9:b9:f8: fc:55:ed:6f:2f:03:dc:19:1e:19:a9:de:50:d3:c6:73:da:b5: e6:97:4d:df:25:47:f8:00:7a:d9:3c:67:d1:b5:9a:82:96:b6: a2:3f:8d:7f:e2:33:fe:e8:1e:33:83:44:92:88:69:2c:db:91: 37:ad:3f:c0:6b:b9:cb:69:3f:2d:3d:4a:dc:f5:4a:68:ab:2c: 1c:64:d1:bf:76:0e:17:45:ed:3b:81:23:20:1f:29:6d:4e:41: 8c:3a:dc:fc:15:2e:db:c0:d2:ad:08:10:c1:6e:7e:28:8a:79: 23:52:e6:fd:bd:1f:b0:77:6e:01:9f:c8:79:b0:46:22:75:f9: 51:de:ae:71:2e:9d:bc:14:4f:e9:b6:fc:e9:2c:cc:b5:37:d3: ca:cd:f1:25:20:42:e3:e6:72:89:68:f6:e5:79:ca:80:b1:68: cb:95:e2:8b:35:7c:d7:3a:94:ef:c3:01:0d:e9:79:ed:c0:1d: 17:80:eb:30:83:c7:fc:00:5b:14:52:7f:b1:47:41:b7:6e:76: 25:a8:ce:4e:56:fb:37:8e:2f:92:30:40:af:c4:25:b9:7c:c3: 58:37:8c:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOpMveYmDTzIG/VWC0snIRKAIMm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB QkI3MjMzNTAeFw0yNTA4MDQyMjQ2MDVaFw0yNTA4MDgwMzU5MDVaMDMxMTAvBgNV BAMTKEY0NzJCQ0Q4NDEzQkMyNDBEOTZDNkNEM0UxREU1RDhCQTIzMTI4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCluC4Zcf8fxW7Ig/pIfCOLbIao 2IdXarrVgrjvsXstTfBbqOq/cvJRepqcAzR9t7LYWR5BgmyP78DDqmIs8HpFUKqF wmPTZrDhcSKGrG7NPA+JlpOskNY6kr0vuX5kxneffpQHTtwgDhFBg0LWrbnfK6gP LwQxYcAisFA9oCivDz1/JZ37iMGsgB0Fep9sZUnTH1pxQkoDeYK5eLjkjgrgGIKs /QD70puFMk6hx1cCVV1z9d1yuwRcNnSLxQ1/jMY//9cWC04gnJf/p9d8u7mQvbe5 PV4gtEd2s+cRjr8w8REtXDvAv0M/wQf3Qf0KjCmoRC6UEyGV3NSCoUciotU5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9HK82EE7wkDZbGzT4d5di6IxKDowHwYDVR0j BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1 REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3 MjMzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQz QUVBQkI3MjMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFM/sbyRe+g5C3qsNQfQWOXWcolOWjy3xqRo vG85lZJx5qm5+PxV7W8vA9wZHhmp3lDTxnPateaXTd8lR/gAetk8Z9G1moKWtqI/ jX/iM/7oHjODRJKIaSzbkTetP8BructpPy09Stz1SmirLBxk0b92DhdF7TuBIyAf KW1OQYw63PwVLtvA0q0IEMFufiiKeSNS5v29H7B3bgGfyHmwRiJ1+VHernEunbwU T+m2/OkszLU308rN8SUgQuPmcolo9uV5yoCxaMuV4os1fNc6lO/DAQ3pee3AHReA 6zCDx/wAWxRSf7FHQbdudiWozk5W+zeOL5IwQK/EJbl8w1g3jHY= -----END CERTIFICATE-----Generated at Thu Aug 7 00:31:32 2025 by rpki-client