$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: 0A0yH/uHRShFDPSjYGOelKaH+d8LRIKMfJIhT+/3mGE= Subject key identifier: 46:64:6B:C7:5C:A6:D8:0C:3A:44:EA:B5:6A:2E:8F:1F:75:17:B6:5E Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 32C0CC64CD6482C8C8B3B0A1366A0C48FFD0030C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: F5 Signing time: Mon 16 Jun 2025 11:53:35 +0000 Manifest this update: Mon 16 Jun 2025 11:48:35 +0000 Manifest next update: Thu 19 Jun 2025 13:45:35 +0000 Files and hashes: 1: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: egnrAxySdNzwkvZG7pgW2GfPGQmn/8OQ66XKF6zUyrM=) 2: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: L+8SrkY6511c5DJDsz7fYxyef0XtUXzTGXOzwD+HTeU=) 3: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: NpakJrPB/wc7qdqjNhAbEhaZgiQnrQQiG5gQ5GEaMnQ=) 4: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: GFPR2JsX0IBoAaGsgaGWjAOgLfdHuDR0oC/bNj7kO2M=) 5: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: mAXv3QNB/iZq+6lb9bUp/6/hgo4YlgkeMuOU2lOYPT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 13:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c0:cc:64:cd:64:82:c8:c8:b3:b0:a1:36:6a:0c:48:ff:d0:03:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Jun 16 11:48:35 2025 GMT Not After : Jun 19 13:45:35 2025 GMT Subject: CN=46646BC75CA6D80C3A44EAB56A2E8F1F7517B65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:80:09:a9:f7:33:19:1e:d4:65:9d:60:a7: 4d:af:41:92:16:3b:62:1e:83:80:eb:b8:9c:46:ed: 57:5c:c6:ba:5f:8a:9a:c0:b3:b7:35:fa:37:60:04: c8:8c:5d:6e:50:29:a0:85:5c:dd:a3:fd:57:80:ff: b2:bb:6c:3f:35:01:ef:97:ed:58:e2:0b:18:41:02: 8e:ae:75:33:13:86:6d:cc:f2:8e:49:af:e4:f5:aa: 8d:26:44:86:64:83:63:90:26:d8:6b:c1:8b:0c:00: 79:05:1d:55:ff:e5:06:d7:01:61:41:26:3f:63:8c: c8:0b:41:c1:df:e3:c7:f5:a6:b4:15:23:8d:e4:e8: a8:b6:26:32:61:3a:15:1b:fb:ca:f0:c4:06:7d:cd: 50:79:c3:63:3d:28:45:b3:0e:cb:b8:2e:ae:d4:17: f5:f5:16:d2:11:73:9f:73:91:be:a3:31:e5:52:82: c0:5e:90:60:cb:23:d9:8c:30:20:00:20:1c:a7:0b: 56:f9:3b:79:cc:00:31:f9:27:02:44:b5:e3:b1:c3: 39:42:ef:01:89:0b:f0:5c:a7:eb:1c:51:2a:dc:dc: f7:aa:9c:f4:8f:fc:67:34:e0:b8:96:1c:fe:aa:fb: 9d:37:ab:62:3d:29:eb:79:70:08:78:9a:d5:e5:9b: 42:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:64:6B:C7:5C:A6:D8:0C:3A:44:EA:B5:6A:2E:8F:1F:75:17:B6:5E X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:aa:24:9a:e3:e8:e9:23:3c:18:09:c9:7f:41:ab:f3:c8:27: b7:01:da:a1:68:ea:54:40:77:02:f7:84:38:85:5a:08:a1:7f: bf:8e:b3:f2:09:fa:df:73:40:23:23:fa:2b:56:b7:39:0a:21: fc:53:5d:34:28:cf:a9:58:cf:01:84:2f:be:23:00:e0:1b:35: 4d:ea:4f:fe:41:cd:be:c5:4a:c5:78:b1:2b:55:4d:76:cd:08: 27:49:0d:9e:90:d2:d2:18:95:e3:42:eb:0a:f6:e7:59:61:a2: 2a:b3:e1:7c:ff:ca:6a:e2:7d:66:95:e0:fe:63:a1:84:6d:c8: 9f:93:b3:3d:3e:cb:76:2a:28:db:76:15:98:dc:a3:98:df:bf: 95:95:72:da:0b:a9:f0:29:18:85:d0:fa:45:c2:a6:71:47:b1: 12:6b:f6:72:49:62:f7:3d:47:11:60:89:bf:78:dd:bf:4e:50: 08:81:6d:1a:bb:46:99:a8:e0:cb:30:d8:3b:ed:41:76:57:1e: ba:2b:24:60:93:e9:8b:a5:2d:b7:5d:a2:20:e4:95:99:4c:27: 6a:18:21:01:3c:d8:80:02:7a:25:23:58:84:10:48:99:c1:5f: e4:08:97:e7:01:32:d8:50:74:a7:1a:ab:8e:76:8b:aa:95:11: 3c:eb:d8:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsDMZM1kgsjIs7ChNmoMSP/QAwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNTA2MTYxMTQ4MzVaFw0yNTA2MTkxMzQ1MzVaMDMxMTAvBgNV BAMTKDQ2NjQ2QkM3NUNBNkQ4MEMzQTQ0RUFCNTZBMkU4RjFGNzUxN0I2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUM4AJqfczGR7UZZ1gp02vQZIW O2Ieg4DruJxG7VdcxrpfiprAs7c1+jdgBMiMXW5QKaCFXN2j/VeA/7K7bD81Ae+X 7VjiCxhBAo6udTMThm3M8o5Jr+T1qo0mRIZkg2OQJthrwYsMAHkFHVX/5QbXAWFB Jj9jjMgLQcHf48f1prQVI43k6Ki2JjJhOhUb+8rwxAZ9zVB5w2M9KEWzDsu4Lq7U F/X1FtIRc59zkb6jMeVSgsBekGDLI9mMMCAAIBynC1b5O3nMADH5JwJEteOxwzlC 7wGJC/Bcp+scUSrc3PeqnPSP/Gc04LiWHP6q+503q2I9Ket5cAh4mtXlm0LnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURmRrx1ym2Aw6ROq1ai6PH3UXtl4wHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWqJJrj6OkjPBgJyX9Bq/PIJ7cB2qFo6lRA dwL3hDiFWgihf7+Os/IJ+t9zQCMj+itWtzkKIfxTXTQoz6lYzwGEL74jAOAbNU3q T/5Bzb7FSsV4sStVTXbNCCdJDZ6Q0tIYleNC6wr251lhoiqz4Xz/ymrifWaV4P5j oYRtyJ+Tsz0+y3YqKNt2FZjco5jfv5WVctoLqfApGIXQ+kXCpnFHsRJr9nJJYvc9 RxFgib943b9OUAiBbRq7Rpmo4Msw2DvtQXZXHrorJGCT6YulLbddoiDklZlMJ2oY IQE82IACeiUjWIQQSJnBX+QIl+cBMthQdKcaq452i6qVETzr2As= -----END CERTIFICATE-----Generated at Tue Jun 17 03:36:34 2025 by rpki-client