$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: 40Evyd5p8RlMNGgVlvn0szhysgPPvrMkGsiv/e397wk= Subject key identifier: 56:3B:42:0A:CD:4D:83:6B:9B:66:8E:9E:6B:8C:7E:1E:A4:B9:10:F9 Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 666B9615026515CDEA98E500A65F213F21BC115F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 0177 Signing time: Wed 30 Apr 2025 02:50:39 +0000 Manifest this update: Wed 30 Apr 2025 02:45:39 +0000 Manifest next update: Sat 03 May 2025 05:05:39 +0000 Files and hashes: 1: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: 1urt7xQMv77erDeUIECaqrLKucZfl8WxybZfYUf3NGc=) 2: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: Oj5pQ1r8137A6EIVtPV7xHBF7owgrjrszoBy9Y5spgE=) 3: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: ACcQhRapf6vFaEKyZOGhIMBvmGfyYoXYYy4Y4s548qg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 05:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6b:96:15:02:65:15:cd:ea:98:e5:00:a6:5f:21:3f:21:bc:11:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Apr 30 02:45:39 2025 GMT Not After : May 3 05:05:39 2025 GMT Subject: CN=563B420ACD4D836B9B668E9E6B8C7E1EA4B910F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:4e:29:21:0e:f0:f8:7a:1a:8d:de:fa:bb: 0a:15:f4:b0:40:98:4c:b3:67:5a:16:91:38:3d:9a: b7:48:ea:62:ea:80:e6:41:3f:27:5e:89:ae:6c:b6: ba:41:0e:ea:fb:94:3e:57:08:b4:85:07:fb:3b:82: 80:a2:d7:47:46:3d:b1:4d:75:db:a8:64:55:6d:47: 49:a4:79:47:f5:60:77:51:4e:90:77:c9:b8:69:7b: b9:c7:00:b2:cd:71:a9:07:41:b6:64:87:97:2c:b1: bd:ff:22:8f:72:8c:71:32:ab:7a:75:66:39:6c:9a: 35:93:fc:67:82:c4:da:67:c1:fa:2a:4f:c1:70:96: b1:35:d8:af:b4:61:9d:06:a5:1d:c7:46:9e:23:e2: b7:5c:33:52:28:af:73:97:a3:c3:35:b1:b9:82:f4: 70:6a:26:f9:26:be:91:90:ed:cc:6a:dc:af:98:1f: d3:db:ec:aa:bf:af:ce:dc:ce:1a:a2:24:fc:3f:f3: f4:e4:45:6d:be:64:f9:7b:94:aa:2d:5a:53:d4:36: 44:24:8c:44:1e:be:ef:74:76:bb:1e:07:91:ff:95: 72:b2:7e:08:69:1e:7d:fa:92:7b:ba:b0:95:75:90: 36:eb:24:6c:fc:be:62:d2:6a:bf:ef:29:7d:3d:fd: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3B:42:0A:CD:4D:83:6B:9B:66:8E:9E:6B:8C:7E:1E:A4:B9:10:F9 X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:da:53:9c:08:ca:be:d3:26:b0:34:b0:40:3c:8f:e4:cf:68: c1:e8:e3:1c:c7:9e:26:df:e5:34:80:0b:0b:dc:fe:95:8a:9d: 4e:88:88:3e:78:a4:33:c4:23:fa:9a:cb:55:43:8a:5a:b0:71: 58:82:a0:d9:4f:d3:88:8b:77:0f:3d:43:11:18:36:98:6f:b7: 12:34:19:45:38:c5:5b:28:32:fc:7b:9c:bb:b9:7c:1d:6e:2d: bd:92:96:78:9b:1c:2d:5d:6f:bd:7d:8a:1a:1a:f5:dc:e5:c9: e3:dd:86:3e:cc:81:e9:35:26:6a:24:40:e1:3e:4f:db:3a:27: cb:e0:96:5c:62:f3:d8:bb:c2:01:0c:8f:ee:a8:39:9b:0c:dd: 10:0e:8c:2a:c7:c8:33:80:6a:27:ad:5a:5e:d2:0c:42:8a:bc: a1:49:65:26:3c:ec:08:14:bf:83:ea:72:9b:1d:27:d1:66:18: 4a:4d:bc:6d:67:80:f9:22:38:91:86:20:39:32:01:33:47:c1: e3:71:b0:1c:e9:51:c8:0f:43:96:18:f6:7d:d1:8e:b4:9e:88: 63:a6:b8:72:38:86:42:9c:b7:84:55:94:4b:a9:06:95:24:cf: ba:8f:30:05:90:ea:d5:8d:63:a1:92:e7:f7:bc:72:64:3a:eb: d0:35:3d:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZmuWFQJlFc3qmOUApl8hPyG8EV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNTA0MzAwMjQ1MzlaFw0yNTA1MDMwNTA1MzlaMDMxMTAvBgNV BAMTKDU2M0I0MjBBQ0Q0RDgzNkI5QjY2OEU5RTZCOEM3RTFFQTRCOTEwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMBE4pIQ7w+Hoajd76uwoV9LBA mEyzZ1oWkTg9mrdI6mLqgOZBPydeia5strpBDur7lD5XCLSFB/s7goCi10dGPbFN dduoZFVtR0mkeUf1YHdRTpB3ybhpe7nHALLNcakHQbZkh5cssb3/Io9yjHEyq3p1 ZjlsmjWT/GeCxNpnwfoqT8FwlrE12K+0YZ0GpR3HRp4j4rdcM1Ior3OXo8M1sbmC 9HBqJvkmvpGQ7cxq3K+YH9Pb7Kq/r87czhqiJPw/8/TkRW2+ZPl7lKotWlPUNkQk jEQevu90drseB5H/lXKyfghpHn36knu6sJV1kDbrJGz8vmLSar/vKX09/SZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVjtCCs1Ng2ubZo6ea4x+HqS5EPkwHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPaU5wIyr7TJrA0sEA8j+TPaMHo4xzHnibf 5TSACwvc/pWKnU6IiD54pDPEI/qay1VDilqwcViCoNlP04iLdw89QxEYNphvtxI0 GUU4xVsoMvx7nLu5fB1uLb2SlnibHC1db719ihoa9dzlyePdhj7Mgek1JmokQOE+ T9s6J8vgllxi89i7wgEMj+6oOZsM3RAOjCrHyDOAaietWl7SDEKKvKFJZSY87AgU v4PqcpsdJ9FmGEpNvG1ngPkiOJGGIDkyATNHweNxsBzpUcgPQ5YY9n3RjrSeiGOm uHI4hkKct4RVlEupBpUkz7qPMAWQ6tWNY6GS5/e8cmQ669A1PaA= -----END CERTIFICATE-----Generated at Wed Apr 30 12:32:00 2025 by rpki-client