$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft File: 38A92419EE1289455FCB1B71F9420F05CA334C15.mft (raw, json) Hash identifier: cnk4SOMDtp9pEIyndvsIKqf0/ChSPdhv6VXVqFQMLaE= Subject key identifier: 15:29:03:DE:EA:8F:AB:DF:9C:52:E2:12:23:BA:03:AB:84:BE:99:26 Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 Certificate issuer: /CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Certificate serial: 586880CF69FA33BCB7E39DC229FDDC2F6AD9C4DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft Manifest number: 0220 Signing time: Mon 03 Nov 2025 13:30:00 +0000 Manifest this update: Mon 03 Nov 2025 13:25:00 +0000 Manifest next update: Fri 07 Nov 2025 00:27:00 +0000 Files and hashes: 1: 38A92419EE1289455FCB1B71F9420F05CA334C15.crl (hash: die+g4Z62NU9+bMJ1Arpvy2hxU0blGHJo9uyOa0e628=) 2: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: /4y0i2UIqC94Q9jjKOVg3BHE03KUaQHXxOynS0oUshc=) 3: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: FHb4F7lq3vcwTbWDvi1X4f5+wy1PMf7axFDD1qokmPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:68:80:cf:69:fa:33:bc:b7:e3:9d:c2:29:fd:dc:2f:6a:d9:c4:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Validity Not Before: Nov 3 13:25:00 2025 GMT Not After : Nov 7 00:27:00 2025 GMT Subject: CN=152903DEEA8FABDF9C52E21223BA03AB84BE9926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:97:2b:6e:43:ae:2b:16:e5:90:ed:cd:40: 88:4c:ec:43:25:b5:17:2e:09:10:73:e6:81:fa:c3: b7:36:9c:cd:c2:ee:dc:a6:15:6f:8d:ac:95:b6:58: a0:ea:21:48:9f:9a:66:e3:9d:9e:98:8b:5c:bc:a2: 70:25:e4:37:e4:3a:e7:51:d2:de:30:4b:21:8c:82: ed:63:de:71:5c:1a:2a:c1:71:4e:d7:ea:85:f3:c2: 04:f7:b0:a1:d0:f5:8d:4b:ea:54:0d:28:93:0d:b4: f4:58:7f:52:0b:84:44:f0:5c:2e:48:55:27:42:34: 71:a6:d0:c9:83:d9:a5:19:d4:cb:ef:f7:04:6c:9c: 8a:06:79:9b:89:d4:a8:1f:73:72:aa:a3:a7:07:af: 91:11:fd:87:ca:4e:0c:11:2a:65:da:75:b8:b3:6d: 23:c3:8c:20:21:46:96:f3:56:3d:0e:03:c8:0a:57: 1a:c1:4c:ac:fe:f5:7e:7a:03:5f:40:54:89:6b:4a: fb:d1:93:5a:bb:d2:dd:4a:4d:80:dd:30:ab:21:ea: 74:04:c1:3b:b1:33:0b:91:b0:ae:18:c7:70:6d:91: 3b:db:4a:c2:4b:b5:eb:00:ab:fe:98:52:f1:77:d4: b9:3a:77:93:54:58:37:ac:7f:2d:82:5e:19:51:f8: 04:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:29:03:DE:EA:8F:AB:DF:9C:52:E2:12:23:BA:03:AB:84:BE:99:26 X509v3 Authority Key Identifier: keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:60:77:cc:4d:6c:71:3e:e7:7c:02:bb:d3:35:14:08:9f:25: 45:6d:74:36:d5:e2:2a:27:c5:46:6c:41:b5:c3:e1:9f:7c:af: 52:79:66:3e:49:c4:49:86:de:c8:de:77:7c:37:19:03:58:ad: 8f:8b:d2:e8:c4:e7:fd:18:6a:db:50:fa:0b:3a:72:42:c4:a7: 99:dc:5a:ba:7d:a4:16:3c:af:5e:0b:53:2b:16:93:44:4d:de: c4:58:0c:4c:05:b8:da:6a:ff:8a:53:13:c0:4d:ab:c7:27:5d: ff:49:d4:52:5f:06:88:7f:dc:2f:4a:1f:dc:b0:1e:6d:81:63: c0:dd:98:d1:60:b7:f4:8a:0c:47:64:c1:36:9f:12:2c:89:92: 30:5d:4a:d4:92:14:57:43:73:85:96:de:d8:ae:5f:13:78:d7: bd:a8:3e:94:f5:a2:3b:83:e1:4d:c0:e5:20:d8:5f:8a:97:44: a1:29:bb:b5:df:87:5c:78:7e:64:7c:56:7c:8e:bc:b3:49:43: 85:43:c9:56:40:13:fb:08:6a:b4:92:da:bf:86:25:65:7e:6d: b2:ef:c5:a3:d9:fe:a5:ba:ec:f8:7f:20:b9:8a:a1:7e:5f:c8: d8:31:4c:4b:c1:81:e9:70:53:89:d3:c4:6b:6d:52:02:79:2f: 9d:c4:af:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGiAz2n6M7y3453CKf3cL2rZxN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVD QTMzNEMxNTAeFw0yNTExMDMxMzI1MDBaFw0yNTExMDcwMDI3MDBaMDMxMTAvBgNV BAMTKDE1MjkwM0RFRUE4RkFCREY5QzUyRTIxMjIzQkEwM0FCODRCRTk5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7pcrbkOuKxblkO3NQIhM7EMl tRcuCRBz5oH6w7c2nM3C7tymFW+NrJW2WKDqIUifmmbjnZ6Yi1y8onAl5DfkOudR 0t4wSyGMgu1j3nFcGirBcU7X6oXzwgT3sKHQ9Y1L6lQNKJMNtPRYf1ILhETwXC5I VSdCNHGm0MmD2aUZ1Mvv9wRsnIoGeZuJ1Kgfc3Kqo6cHr5ER/YfKTgwRKmXadbiz bSPDjCAhRpbzVj0OA8gKVxrBTKz+9X56A19AVIlrSvvRk1q70t1KTYDdMKsh6nQE wTuxMwuRsK4Yx3BtkTvbSsJLtesAq/6YUvF31Lk6d5NUWDesfy2CXhlR+ATjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFSkD3uqPq9+cUuISI7oDq4S+mSYwHwYDVR0j BBgwFoAUOKkkGe4SiUVfyxtx+UIPBcozTBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRhZDhjYi1hNTM3LTRjNTAtYWY2YS1hYWJhNWYxZTc2NDQvMC8zOEE5MjQxOUVF MTI4OTQ1NUZDQjFCNzFGOTQyMEYwNUNBMzM0QzE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVDQTMz NEMxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkYWQ4Y2ItYTUzNy00YzUwLWFm NmEtYWFiYTVmMWU3NjQ0LzAvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBG MDVDQTMzNEMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1gd8xNbHE+53wCu9M1FAifJUVtdDbV4ion xUZsQbXD4Z98r1J5Zj5JxEmG3sjed3w3GQNYrY+L0ujE5/0YattQ+gs6ckLEp5nc Wrp9pBY8r14LUysWk0RN3sRYDEwFuNpq/4pTE8BNq8cnXf9J1FJfBoh/3C9KH9yw Hm2BY8DdmNFgt/SKDEdkwTafEiyJkjBdStSSFFdDc4WW3tiuXxN4172oPpT1ojuD 4U3A5SDYX4qXRKEpu7Xfh1x4fmR8VnyOvLNJQ4VDyVZAE/sIarSS2r+GJWV+bbLv xaPZ/qW67Ph/ILmKoX5fyNgxTEvBgelwU4nTxGttUgJ5L53Er90= -----END CERTIFICATE-----Generated at Tue Nov 4 16:08:39 2025 by rpki-client