$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: uaoZOXXQeWaVC1NRsqJ22cqWs9eqZ0vPQVnL74KejN0= Subject key identifier: 01:FA:48:48:82:8F:66:E4:AF:17:B7:35:8F:90:3B:9E:A0:46:F0:8C Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 3A492A09451BDEBB4AB95DFF0233AC41A57E03F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 01CB Signing time: Sun 02 Nov 2025 16:00:42 +0000 Manifest this update: Sun 02 Nov 2025 15:55:42 +0000 Manifest next update: Wed 05 Nov 2025 16:08:42 +0000 Files and hashes: 1: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: wpZ3DSkIszu2bAAgGGXcTnRPp7JQ2wifTFFyYcuENEE=) 2: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: kHcd0PiR+avo06lt/QU/A5Sa1D2RSw2rXV6RMIKGIO8=) 3: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: d6Adr6ZZkYn4Jq27NkWDxIH+Fg4wpxOILm0JtNJ0Cfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:49:2a:09:45:1b:de:bb:4a:b9:5d:ff:02:33:ac:41:a5:7e:03:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Nov 2 15:55:42 2025 GMT Not After : Nov 5 16:08:42 2025 GMT Subject: CN=01FA4848828F66E4AF17B7358F903B9EA046F08C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:c4:ba:35:c5:12:65:39:98:3d:6c:08:9a: 57:19:34:ae:1d:d0:66:eb:f7:2f:79:09:ac:1f:ba: 8d:8f:d7:da:18:aa:3a:b8:a3:2c:d3:27:c9:70:13: 78:6e:5b:2e:b9:af:5d:e4:7d:38:07:ff:aa:1c:06: 46:06:3c:31:b1:04:01:7d:ff:a9:05:65:ce:ce:23: c2:c2:6c:c2:1c:b4:a7:ff:13:88:66:66:92:0e:fd: c5:86:ff:b6:e7:c7:f8:88:e9:8f:47:42:32:af:80: e1:a5:55:d3:37:aa:8d:f4:69:da:77:c3:24:c3:f3: 9a:a7:f7:59:34:42:66:d3:00:d8:d9:60:0c:9c:21: b9:30:2f:a4:66:04:81:12:65:7e:75:c7:dd:8b:71: 11:75:e8:0c:60:d9:c5:35:ab:9e:50:4c:07:87:9d: db:e8:f7:63:cf:19:f7:b1:9c:79:41:8b:ef:94:98: f0:73:4d:7c:90:48:31:2c:1b:6a:76:e4:96:d1:5f: 9e:2e:e1:71:3e:dd:ef:25:98:e1:20:83:53:0f:a7: 6a:22:ef:ea:4a:22:58:af:f4:4e:5e:5e:02:55:88: 1e:ef:1b:81:64:e1:2e:2d:1c:83:27:90:d7:0b:79: da:93:0a:81:68:e2:52:d3:f5:e0:e8:98:80:b3:ca: 6c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FA:48:48:82:8F:66:E4:AF:17:B7:35:8F:90:3B:9E:A0:46:F0:8C X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b8:91:fa:95:f9:2b:3b:0e:9b:87:37:ee:ce:93:19:40:fa: 2a:d8:e5:94:1d:f1:29:c9:4a:70:53:29:b2:71:f1:59:9d:da: 7f:a2:08:27:ca:f4:15:f5:aa:81:d1:83:b8:b2:79:be:db:93: 95:25:4b:34:a8:d6:3b:54:ab:5d:13:d9:f6:a9:4e:72:b0:a2: ca:05:b4:04:c6:79:f1:00:eb:d7:25:e2:fe:70:97:79:2c:92: cd:1d:2d:61:cd:cf:de:80:86:4e:85:9e:4c:57:80:a6:8d:5d: 5e:5f:23:36:04:95:ab:96:39:ad:80:db:04:77:cc:e0:92:7d: ff:ba:6d:59:5a:e8:94:0c:fe:bb:74:ed:c5:43:0e:74:d0:c3: a9:68:17:78:60:ce:73:c7:87:d8:5d:78:5a:fe:5b:45:73:82: ab:85:71:26:35:0c:d7:c3:85:ff:62:5b:f0:93:cf:f7:49:b2: 2a:2f:83:07:46:f1:a8:c2:40:82:a9:64:92:53:e7:92:1b:85: 60:bd:7a:35:df:28:10:cc:9d:5b:fa:ca:74:7f:78:92:8d:21: 92:d5:9e:bf:77:81:09:32:20:90:58:2f:7c:ba:29:11:bb:1e: d3:8b:91:92:6b:50:ed:81:f9:2b:f1:3d:75:0e:42:b9:48:a9: ab:9d:17:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOkkqCUUb3rtKuV3/AjOsQaV+A/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNTExMDIxNTU1NDJaFw0yNTExMDUxNjA4NDJaMDMxMTAvBgNV BAMTKDAxRkE0ODQ4ODI4RjY2RTRBRjE3QjczNThGOTAzQjlFQTA0NkYwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtMS6NcUSZTmYPWwImlcZNK4d 0Gbr9y95Cawfuo2P19oYqjq4oyzTJ8lwE3huWy65r13kfTgH/6ocBkYGPDGxBAF9 /6kFZc7OI8LCbMIctKf/E4hmZpIO/cWG/7bnx/iI6Y9HQjKvgOGlVdM3qo30adp3 wyTD85qn91k0QmbTANjZYAycIbkwL6RmBIESZX51x92LcRF16Axg2cU1q55QTAeH ndvo92PPGfexnHlBi++UmPBzTXyQSDEsG2p25JbRX54u4XE+3e8lmOEgg1MPp2oi 7+pKIliv9E5eXgJViB7vG4Fk4S4tHIMnkNcLedqTCoFo4lLT9eDomICzymzPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAfpISIKPZuSvF7c1j5A7nqBG8IwwHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy4kfqV+Ss7DpuHN+7OkxlA+irY5ZQd8SnJ SnBTKbJx8Vmd2n+iCCfK9BX1qoHRg7iyeb7bk5UlSzSo1jtUq10T2fapTnKwosoF tATGefEA69cl4v5wl3ksks0dLWHNz96Ahk6FnkxXgKaNXV5fIzYElauWOa2A2wR3 zOCSff+6bVla6JQM/rt07cVDDnTQw6loF3hgznPHh9hdeFr+W0VzgquFcSY1DNfD hf9iW/CTz/dJsiovgwdG8ajCQIKpZJJT55IbhWC9ejXfKBDMnVv6ynR/eJKNIZLV nr93gQkyIJBYL3y6KRG7HtOLkZJrUO2B+SvxPXUOQrlIqaudF+g= -----END CERTIFICATE-----Generated at Tue Nov 4 08:16:15 2025 by rpki-client