$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: lafc/lC1WZ+5XPyq9ElFod20F5XQIyEtFvhNOEp1tgA= Subject key identifier: 42:7C:DE:8C:F7:48:D7:88:03:42:51:67:F3:DB:EB:0D:40:9F:D7:D5 Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 56CEBBDA43465896A0AB654C8ACFF12A56BBE074 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: 010C Signing time: Thu 07 Aug 2025 03:32:21 +0000 Manifest this update: Thu 07 Aug 2025 03:27:21 +0000 Manifest next update: Sun 10 Aug 2025 06:41:21 +0000 Files and hashes: 1: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: wKbkpFZ1mnt0eXciXvq2yHgK6ChBJxqLAWbZsVWsojk=) 2: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: NpakJrPB/wc7qdqjNhAbEhaZgiQnrQQiG5gQ5GEaMnQ=) 3: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: L+8SrkY6511c5DJDsz7fYxyef0XtUXzTGXOzwD+HTeU=) 4: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: GFPR2JsX0IBoAaGsgaGWjAOgLfdHuDR0oC/bNj7kO2M=) 5: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: egnrAxySdNzwkvZG7pgW2GfPGQmn/8OQ66XKF6zUyrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ce:bb:da:43:46:58:96:a0:ab:65:4c:8a:cf:f1:2a:56:bb:e0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Aug 7 03:27:21 2025 GMT Not After : Aug 10 06:41:21 2025 GMT Subject: CN=427CDE8CF748D78803425167F3DBEB0D409FD7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:55:a5:d9:1a:74:98:ab:54:3d:97:64:6e:7c: b3:3a:a9:ce:fc:e7:c9:9d:54:d3:f8:5c:8b:86:ec: 26:60:df:de:cf:57:02:95:61:a0:41:cc:fa:8c:e5: 8e:d8:c0:4c:ff:61:85:de:34:97:3f:0b:54:00:cb: ae:35:08:d3:5a:3e:56:95:b6:d1:55:52:fc:96:e2: 80:58:e3:f9:1d:1e:e4:90:be:93:7d:0b:63:23:0d: c4:81:15:1c:91:52:37:f8:77:99:5b:39:71:6c:9a: e9:23:0b:3c:9f:d8:81:af:6b:2e:aa:9d:05:c7:ce: 72:d3:88:69:b3:dc:3c:3b:39:a0:5a:45:75:59:c4: 87:82:aa:f6:5a:34:b8:a1:a2:84:37:f1:91:bb:b7: a3:71:04:08:09:11:74:90:17:31:c2:86:88:35:8f: 72:d1:49:3b:e0:9f:56:4a:45:f9:ec:81:9e:99:85: d0:b8:f1:f5:87:ca:dc:4c:26:ef:ce:3a:94:0e:d0: 14:e6:16:b9:d4:df:20:c7:32:04:50:a1:64:85:cc: e2:20:aa:99:cc:3b:fd:d1:43:27:10:56:78:3e:65: a3:dd:42:68:30:b7:7e:de:cc:dd:4c:34:13:2c:67: d6:f4:7f:2a:eb:f5:70:e8:fa:67:99:4b:cd:9b:de: 49:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7C:DE:8C:F7:48:D7:88:03:42:51:67:F3:DB:EB:0D:40:9F:D7:D5 X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:8c:95:42:8a:fa:36:10:36:e0:ff:09:92:33:07:da:85:92: 57:41:70:4a:7a:95:37:44:1a:a3:95:09:f8:9b:7b:f1:6b:b0: 4c:bd:01:db:e2:8f:a0:3c:b4:8d:2e:1c:11:c8:24:08:1b:8b: da:e6:91:65:40:b4:44:19:7e:12:4c:ee:5b:d0:76:93:22:60: 9a:3d:e0:1a:9c:ef:af:e1:df:79:ce:99:fe:b0:2c:ab:04:34: 63:bc:a7:29:06:7b:1e:28:d7:93:95:88:b2:8a:ee:7f:ee:f6: 83:35:90:52:05:18:42:99:22:07:40:87:9c:83:90:69:06:55: 72:57:a0:6d:df:f1:05:06:74:f1:fc:b8:4b:59:b4:af:6d:f2: 03:ef:72:44:8b:e1:67:de:74:d7:c6:80:2c:00:34:6d:1d:c6: 7a:07:39:83:e3:b9:52:31:bc:6b:bf:93:11:62:bb:32:07:bf: 04:a5:a2:ba:87:0a:de:2e:38:5f:20:20:65:7d:a8:c6:19:56: 4a:8f:b0:23:f0:54:1e:90:e9:e0:f1:d4:27:f0:a1:5e:1b:f3: 59:d7:d0:a1:31:db:c3:7b:59:46:62:7d:12:b3:b8:0f:3b:e6: ff:49:4b:47:4d:29:53:2f:d2:b9:f2:39:d6:b0:b1:17:57:60: 58:60:de:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVs672kNGWJagq2VMis/xKla74HQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNTA4MDcwMzI3MjFaFw0yNTA4MTAwNjQxMjFaMDMxMTAvBgNV BAMTKDQyN0NERThDRjc0OEQ3ODgwMzQyNTE2N0YzREJFQjBENDA5RkQ3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYVaXZGnSYq1Q9l2RufLM6qc78 58mdVNP4XIuG7CZg397PVwKVYaBBzPqM5Y7YwEz/YYXeNJc/C1QAy641CNNaPlaV ttFVUvyW4oBY4/kdHuSQvpN9C2MjDcSBFRyRUjf4d5lbOXFsmukjCzyf2IGvay6q nQXHznLTiGmz3Dw7OaBaRXVZxIeCqvZaNLihooQ38ZG7t6NxBAgJEXSQFzHChog1 j3LRSTvgn1ZKRfnsgZ6ZhdC48fWHytxMJu/OOpQO0BTmFrnU3yDHMgRQoWSFzOIg qpnMO/3RQycQVng+ZaPdQmgwt37ezN1MNBMsZ9b0fyrr9XDo+meZS82b3kk7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQnzejPdI14gDQlFn89vrDUCf19UwHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESMlUKK+jYQNuD/CZIzB9qFkldBcEp6lTdE GqOVCfibe/FrsEy9Advij6A8tI0uHBHIJAgbi9rmkWVAtEQZfhJM7lvQdpMiYJo9 4Bqc76/h33nOmf6wLKsENGO8pykGex4o15OViLKK7n/u9oM1kFIFGEKZIgdAh5yD kGkGVXJXoG3f8QUGdPH8uEtZtK9t8gPvckSL4WfedNfGgCwANG0dxnoHOYPjuVIx vGu/kxFiuzIHvwSlorqHCt4uOF8gIGV9qMYZVkqPsCPwVB6Q6eDx1CfwoV4b81nX 0KEx28N7WUZifRKzuA875v9JS0dNKVMv0rnyOdawsRdXYFhg3jI= -----END CERTIFICATE-----Generated at Thu Aug 7 11:20:16 2025 by rpki-client