$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: T5AM3mOWd0wkcLd07EgKIIRzHRuZ2SVxg4vpYV2dXeg= Subject key identifier: DC:7F:15:DE:87:AD:CB:48:D6:FF:A8:5B:69:4C:BA:BD:4A:7D:5C:D2 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 70CE6D299532A11918A4BBB1EC4C5D30068C7EDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 015A Signing time: Sat 14 Jun 2025 19:00:57 +0000 Manifest this update: Sat 14 Jun 2025 18:55:57 +0000 Manifest next update: Wed 18 Jun 2025 03:08:57 +0000 Files and hashes: 1: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=) 2: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=) 3: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=) 4: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=) 5: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=) 6: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=) 7: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=) 8: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=) 9: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=) 10: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: NHFbmRj113eJzpEci0gWmvd4gJu4+GFefNmOGSQq2Ow=) 11: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ce:6d:29:95:32:a1:19:18:a4:bb:b1:ec:4c:5d:30:06:8c:7e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Jun 14 18:55:57 2025 GMT Not After : Jun 18 03:08:57 2025 GMT Subject: CN=DC7F15DE87ADCB48D6FFA85B694CBABD4A7D5CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:bc:08:2f:6c:fb:8c:b5:8b:48:b2:df:cc: 93:92:3b:8a:21:c4:dc:38:fd:ad:a7:43:e3:b8:15: 3e:00:98:b2:a1:00:2c:91:96:8f:f4:e5:d9:3b:fd: 85:5b:97:63:d1:ec:7f:ac:df:49:58:6b:ce:1c:b2: d6:6f:17:7d:58:1e:69:ed:e8:db:4d:49:f7:eb:23: 42:4d:14:6d:17:3e:25:a4:34:92:99:93:6a:2f:10: 5e:59:97:96:35:fb:a5:86:69:97:c9:08:34:de:20: 12:bc:85:25:2f:6f:3f:de:ec:27:1a:4e:fb:65:c4: 2b:c4:46:90:9d:c8:5e:73:50:09:22:c7:fe:3c:c0: 49:6b:67:6a:df:51:ad:49:52:c5:1e:2e:35:6f:4c: b4:49:33:af:c3:91:99:73:78:91:b0:e5:46:b1:b5: 36:81:45:64:18:b6:d0:2a:ef:b8:e9:2d:75:9c:b3: c4:1d:f3:de:c9:a9:79:30:2c:44:4d:ba:b3:2a:53: ac:db:ca:72:ed:56:ea:69:d0:54:27:c9:5e:83:2c: e9:dd:e8:05:25:49:3b:69:67:12:72:57:88:c1:81: e8:23:2e:19:de:8d:6e:7d:24:1c:92:4a:9b:e7:d6: 48:83:94:9c:2d:0a:d8:df:98:ac:16:c9:b1:0b:cb: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7F:15:DE:87:AD:CB:48:D6:FF:A8:5B:69:4C:BA:BD:4A:7D:5C:D2 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:c9:f2:5d:be:46:d7:59:67:78:a8:e6:fc:73:02:ab:80:6e: e1:56:2b:2c:f8:b7:4e:44:0f:d2:21:b3:fd:5b:34:58:7c:02: 03:95:21:c0:75:04:aa:30:37:df:76:e5:20:b3:fb:0e:e1:01: e3:62:eb:83:8f:68:5f:a8:59:37:55:56:d8:40:9e:84:36:6b: 32:7e:93:61:8e:b5:56:03:4a:35:78:7e:07:d0:e9:46:52:0a: 5b:a7:36:14:68:ff:3f:5d:c9:6d:ce:36:5e:0f:43:32:57:8d: ce:1a:78:77:92:46:30:57:c7:98:cd:a4:52:8a:de:94:35:1a: f4:e7:59:48:2f:48:f2:04:50:4f:e4:2a:66:26:08:3a:78:82: bd:76:92:ed:c3:95:db:41:9b:aa:20:0c:d3:0b:5f:bf:cd:b0: 1c:40:5d:83:bc:d2:d8:54:23:06:18:1f:16:8c:ac:ef:cc:45: 8b:27:cc:7d:d0:a1:5b:df:be:e7:c9:1c:d0:bf:97:d2:22:0c: 7d:37:a7:06:79:1f:24:51:26:c9:8d:f3:27:63:39:2b:23:40: a2:be:5e:00:3d:d6:12:d2:11:ef:12:da:a0:7e:83:89:0f:e6: 72:20:ac:94:9b:f8:9f:86:f6:c8:69:38:e9:0e:80:be:6d:48: 69:04:0e:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcM5tKZUyoRkYpLux7ExdMAaMft8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNTA2MTQxODU1NTdaFw0yNTA2MTgwMzA4NTdaMDMxMTAvBgNV BAMTKERDN0YxNURFODdBRENCNDhENkZGQTg1QjY5NENCQUJENEE3RDVDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrpLwIL2z7jLWLSLLfzJOSO4oh xNw4/a2nQ+O4FT4AmLKhACyRlo/05dk7/YVbl2PR7H+s30lYa84cstZvF31YHmnt 6NtNSffrI0JNFG0XPiWkNJKZk2ovEF5Zl5Y1+6WGaZfJCDTeIBK8hSUvbz/e7Cca TvtlxCvERpCdyF5zUAkix/48wElrZ2rfUa1JUsUeLjVvTLRJM6/DkZlzeJGw5Uax tTaBRWQYttAq77jpLXWcs8Qd897JqXkwLERNurMqU6zbynLtVupp0FQnyV6DLOnd 6AUlSTtpZxJyV4jBgegjLhnejW59JBySSpvn1kiDlJwtCtjfmKwWybELywqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3H8V3oety0jW/6hbaUy6vUp9XNIwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzJ8l2+RtdZZ3io5vxzAquAbuFWKyz4t05E D9Ihs/1bNFh8AgOVIcB1BKowN9925SCz+w7hAeNi64OPaF+oWTdVVthAnoQ2azJ+ k2GOtVYDSjV4fgfQ6UZSClunNhRo/z9dyW3ONl4PQzJXjc4aeHeSRjBXx5jNpFKK 3pQ1GvTnWUgvSPIEUE/kKmYmCDp4gr12ku3DldtBm6ogDNMLX7/NsBxAXYO80thU IwYYHxaMrO/MRYsnzH3QoVvfvufJHNC/l9IiDH03pwZ5HyRRJsmN8ydjOSsjQKK+ XgA91hLSEe8S2qB+g4kP5nIgrJSb+J+G9shpOOkOgL5tSGkEDrM= -----END CERTIFICATE-----Generated at Tue Jun 17 02:19:16 2025 by rpki-client