$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: Eep4BhGaGEoiiCg4Jj37ClQ5EBvDN95J71fqMalMWb4= Subject key identifier: DE:91:88:36:D0:31:E6:F4:7B:6F:12:3F:E6:6A:AB:66:E7:89:8F:0E Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 3A9F834DB19E9D5411ACA07CBFF604F8062BD0DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 0171 Signing time: Wed 06 Aug 2025 06:40:56 +0000 Manifest this update: Wed 06 Aug 2025 06:35:56 +0000 Manifest next update: Sat 09 Aug 2025 13:32:56 +0000 Files and hashes: 1: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: 5VR19FAskyM3aEbieWyWmbLUPoPYftMh/gaMP6t7liE=) 2: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=) 3: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=) 4: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=) 5: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=) 6: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=) 7: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=) 8: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=) 9: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=) 10: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=) 11: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9f:83:4d:b1:9e:9d:54:11:ac:a0:7c:bf:f6:04:f8:06:2b:d0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Aug 6 06:35:56 2025 GMT Not After : Aug 9 13:32:56 2025 GMT Subject: CN=DE918836D031E6F47B6F123FE66AAB66E7898F0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:33:9d:fd:8f:f3:a9:b5:cd:0d:14:3e:16: d4:39:06:1b:7a:e5:15:e1:77:0c:67:5c:6a:49:ed: e3:a2:39:9d:56:70:5b:b8:0b:6d:d0:61:be:a8:aa: f8:bb:d8:21:00:2d:8d:b0:e5:2c:1d:18:93:4a:98: ee:20:2f:e6:0a:1a:d1:a1:0c:bf:5e:05:0c:f1:a6: 07:4d:9d:d2:0d:8f:b3:cc:e8:51:25:be:d1:d0:95: 39:5a:09:e5:fe:de:ae:89:79:60:49:c2:31:35:0d: 11:21:05:2a:ad:10:2a:04:1b:ab:c8:40:79:de:c2: a8:c9:7c:6a:b2:42:cb:47:0d:f2:49:b1:38:a0:31: 93:24:a8:4d:8c:d5:57:3f:98:5d:e1:ca:2f:fe:35: 31:a8:3e:0c:e0:23:c2:e8:e8:09:9d:df:b3:ba:3b: 2f:30:24:5d:d7:dc:70:ff:c3:ff:54:55:cc:33:80: 10:71:46:78:f7:46:a4:4a:99:45:c9:f6:d4:bf:3f: 87:4d:c8:16:01:c4:fa:4f:8d:81:9a:b5:1d:7e:3c: e8:d8:70:f9:4a:b4:3d:ac:55:9e:20:b7:e1:66:be: de:3c:15:1d:1a:26:e9:45:8c:58:5b:37:59:3a:58: 4e:cb:c8:3e:7b:82:57:e9:57:c7:cc:75:15:e7:1c: 02:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:91:88:36:D0:31:E6:F4:7B:6F:12:3F:E6:6A:AB:66:E7:89:8F:0E X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:19:0d:0d:56:29:32:68:8c:03:d0:41:e1:01:0d:60:62:71: 03:01:78:d3:fb:75:7a:e2:37:51:5c:eb:18:02:6c:8e:8f:9f: 47:2e:30:96:71:2c:40:65:b7:bc:12:09:e3:ed:17:fc:9a:c9: 99:e1:23:3b:94:87:d2:79:6d:fe:e0:55:e1:0c:a3:dd:9c:d6: 17:af:d5:3c:d3:ea:09:92:e0:1b:aa:57:98:e6:05:0e:03:26: c0:1f:33:1f:63:99:8a:1a:a8:77:bc:42:d1:9e:d3:d2:2a:bb: fb:7d:e5:b2:f2:33:94:b9:8c:f9:60:13:b6:c9:be:11:6b:d5: e1:17:ee:90:0b:12:1f:8e:be:94:86:0b:51:93:92:a9:7f:33: c1:df:10:7c:05:8f:c5:30:d3:16:dc:bd:d9:66:c1:4e:67:94: 2f:9d:b1:57:69:8e:82:20:31:c4:bb:39:f6:d9:61:56:c9:d3: 4e:94:d2:e9:d0:12:d1:89:a7:55:1d:5e:c4:7c:f9:ed:16:de: 89:a5:e0:71:b0:f2:e0:4c:ef:ad:36:28:2f:06:07:8f:5c:13: 14:10:87:1b:9a:7e:b1:c0:d3:4a:31:a2:e9:2e:0c:7c:f0:af: 27:89:79:56:f5:9e:58:b6:83:bd:75:a0:af:f9:5e:e1:1b:54: 3e:c7:d2:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOp+DTbGenVQRrKB8v/YE+AYr0NwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNTA4MDYwNjM1NTZaFw0yNTA4MDkxMzMyNTZaMDMxMTAvBgNV BAMTKERFOTE4ODM2RDAzMUU2RjQ3QjZGMTIzRkU2NkFBQjY2RTc4OThGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU/TOd/Y/zqbXNDRQ+FtQ5Bht6 5RXhdwxnXGpJ7eOiOZ1WcFu4C23QYb6oqvi72CEALY2w5SwdGJNKmO4gL+YKGtGh DL9eBQzxpgdNndINj7PM6FElvtHQlTlaCeX+3q6JeWBJwjE1DREhBSqtECoEG6vI QHnewqjJfGqyQstHDfJJsTigMZMkqE2M1Vc/mF3hyi/+NTGoPgzgI8Lo6Amd37O6 Oy8wJF3X3HD/w/9UVcwzgBBxRnj3RqRKmUXJ9tS/P4dNyBYBxPpPjYGatR1+POjY cPlKtD2sVZ4gt+Fmvt48FR0aJulFjFhbN1k6WE7LyD57glfpV8fMdRXnHALxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3pGINtAx5vR7bxI/5mqrZueJjw4wHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgZDQ1WKTJojAPQQeEBDWBicQMBeNP7dXri N1Fc6xgCbI6Pn0cuMJZxLEBlt7wSCePtF/yayZnhIzuUh9J5bf7gVeEMo92c1hev 1TzT6gmS4BuqV5jmBQ4DJsAfMx9jmYoaqHe8QtGe09Iqu/t95bLyM5S5jPlgE7bJ vhFr1eEX7pALEh+OvpSGC1GTkql/M8HfEHwFj8Uw0xbcvdlmwU5nlC+dsVdpjoIg McS7OfbZYVbJ006U0unQEtGJp1UdXsR8+e0W3oml4HGw8uBM7602KC8GB49cExQQ hxuafrHA00oxoukuDHzwryeJeVb1nli2g711oK/5XuEbVD7H0pM= -----END CERTIFICATE-----Generated at Thu Aug 7 00:38:09 2025 by rpki-client