$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: qdQmb26y1t2sJcXhUxB+6mxotRvnCY43h4gdtAKKcx8= Subject key identifier: 4C:C2:1C:A5:81:3D:AB:AA:D7:5C:D3:AB:BD:08:4A:31:3C:E4:D8:8D Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 3DF546E51CC09CBF545ADC789CFE95EEB944B519 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 0198 Signing time: Sun 02 Nov 2025 22:50:57 +0000 Manifest this update: Sun 02 Nov 2025 22:45:57 +0000 Manifest next update: Thu 06 Nov 2025 02:52:57 +0000 Files and hashes: 1: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: OBJB0h2yHdyYYsqVh6E6OuVm4X0+cZSv+6HcoH9yHUY=) 2: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=) 3: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=) 4: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=) 5: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=) 6: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=) 7: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=) 8: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=) 9: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=) 10: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=) 11: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f5:46:e5:1c:c0:9c:bf:54:5a:dc:78:9c:fe:95:ee:b9:44:b5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Nov 2 22:45:57 2025 GMT Not After : Nov 6 02:52:57 2025 GMT Subject: CN=4CC21CA5813DABAAD75CD3ABBD084A313CE4D88D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0a:92:4c:7f:82:e0:36:5b:85:c6:88:7d:bb: fe:b9:68:51:83:79:47:81:f5:ca:28:3c:e2:76:96: 21:fa:2f:cf:e2:aa:1e:7f:c3:6e:2a:55:6a:c5:30: 27:46:44:95:92:4c:4c:85:ca:89:7d:6c:c1:eb:fc: 0f:2e:12:56:80:ee:cb:a5:f0:c3:bb:28:ae:43:c1: 8f:00:28:f7:49:d7:63:05:56:ca:11:20:79:72:a6: 0b:1b:4f:c6:1a:77:e1:6d:0e:96:b1:a8:27:0b:9f: 56:cc:0a:20:82:73:a3:6a:ac:a4:ac:b3:f9:a7:d1: 32:23:13:e4:e6:30:d6:62:fb:d2:29:38:30:5f:ee: 15:a2:74:de:26:28:a4:de:44:00:56:aa:df:c4:b8: 63:c5:72:24:0d:50:5d:0d:94:d2:37:5a:40:0e:b0: f0:93:2e:91:93:c6:d6:55:90:d1:8d:00:da:0f:d6: 4f:6b:af:c9:1d:cd:87:9a:f5:b1:48:ae:f2:d1:90: bf:d7:4f:79:33:13:fd:2a:04:66:35:63:07:35:60: bf:71:92:99:f1:6d:4c:63:e9:f8:6f:6c:6f:87:bf: ba:3f:a6:9b:9b:b7:d1:84:b3:20:75:2e:f1:c0:a8: 7a:dd:5e:1d:40:8c:2e:c4:0e:02:be:17:95:c3:4f: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C2:1C:A5:81:3D:AB:AA:D7:5C:D3:AB:BD:08:4A:31:3C:E4:D8:8D X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:ec:d5:c9:84:8f:d4:1c:18:bc:96:92:6a:13:a5:a2:60:64: 22:8b:10:c0:67:2b:2f:e5:bd:09:a7:24:0e:05:9b:70:1c:ff: b4:52:c9:b6:98:f8:7c:30:58:7e:43:cc:10:59:40:ce:ec:21: a3:85:b4:5f:6b:3a:fb:f6:61:86:01:73:62:19:53:9c:46:4e: 99:d8:ed:46:9c:4b:38:54:f6:06:34:00:34:94:67:43:bc:d6: f7:29:e0:27:7b:d9:d8:19:6c:ff:28:95:72:2a:c3:0c:08:c9: e0:dc:24:22:eb:61:fd:76:1f:3c:e0:44:4d:ea:06:57:c3:b2: 8d:d7:74:d2:9a:c8:8b:b3:fb:9c:da:5b:57:e8:77:0a:0a:15: ca:1c:d7:a6:9d:3b:5f:75:16:89:53:ad:32:08:ce:ef:f9:2a: 5d:7c:cd:41:be:d1:71:14:e7:53:7d:32:73:23:26:6a:b1:fa: 25:c3:93:30:cb:a2:c6:c0:cb:c1:ab:d4:03:53:08:1f:56:9a: 81:47:24:80:1e:fa:32:ab:56:77:a7:8f:c0:26:d6:bb:99:ec: 8d:34:ba:37:59:99:83:68:6e:7b:84:b1:9f:1b:fb:ab:ca:dc: 6b:26:6b:b8:54:03:11:83:4e:d6:91:59:a5:cc:7e:70:7b:33: 89:9b:b4:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPfVG5RzAnL9UWtx4nP6V7rlEtRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNTExMDIyMjQ1NTdaFw0yNTExMDYwMjUyNTdaMDMxMTAvBgNV BAMTKDRDQzIxQ0E1ODEzREFCQUFENzVDRDNBQkJEMDg0QTMxM0NFNEQ4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCpJMf4LgNluFxoh9u/65aFGD eUeB9cooPOJ2liH6L8/iqh5/w24qVWrFMCdGRJWSTEyFyol9bMHr/A8uElaA7sul 8MO7KK5DwY8AKPdJ12MFVsoRIHlypgsbT8Yad+FtDpaxqCcLn1bMCiCCc6NqrKSs s/mn0TIjE+TmMNZi+9IpODBf7hWidN4mKKTeRABWqt/EuGPFciQNUF0NlNI3WkAO sPCTLpGTxtZVkNGNANoP1k9rr8kdzYea9bFIrvLRkL/XT3kzE/0qBGY1Ywc1YL9x kpnxbUxj6fhvbG+Hv7o/ppubt9GEsyB1LvHAqHrdXh1AjC7EDgK+F5XDT84ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTMIcpYE9q6rXXNOrvQhKMTzk2I0wHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMHs1cmEj9QcGLyWkmoTpaJgZCKLEMBnKy/l vQmnJA4Fm3Ac/7RSybaY+HwwWH5DzBBZQM7sIaOFtF9rOvv2YYYBc2IZU5xGTpnY 7UacSzhU9gY0ADSUZ0O81vcp4Cd72dgZbP8olXIqwwwIyeDcJCLrYf12HzzgRE3q BlfDso3XdNKayIuz+5zaW1fodwoKFcoc16adO191FolTrTIIzu/5Kl18zUG+0XEU 51N9MnMjJmqx+iXDkzDLosbAy8Gr1ANTCB9WmoFHJIAe+jKrVnenj8Am1ruZ7I00 ujdZmYNobnuEsZ8b+6vK3Gsma7hUAxGDTtaRWaXMfnB7M4mbtCc= -----END CERTIFICATE-----Generated at Tue Nov 4 19:26:02 2025 by rpki-client