$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json) Hash identifier: 0RFOLpepgKexhpDsgkp7IxJryfgB68tu/1I61HeOV80= Subject key identifier: 77:FA:6A:72:A1:63:D4:7F:17:95:4B:54:C4:C6:AE:D1:CC:D7:EF:10 Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Certificate serial: 522534006DE1D6BD58602149592ECDB5526296F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft Manifest number: 0146 Signing time: Sat 19 Jul 2025 13:21:03 +0000 Manifest this update: Sat 19 Jul 2025 13:16:03 +0000 Manifest next update: Tue 22 Jul 2025 22:41:03 +0000 Files and hashes: 1: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: JET4o/5qzt0d5JQyZTfA0GPvF1IWl3ZUikcdUcD/6TA=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:25:34:00:6d:e1:d6:bd:58:60:21:49:59:2e:cd:b5:52:62:96:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Validity Not Before: Jul 19 13:16:03 2025 GMT Not After : Jul 22 22:41:03 2025 GMT Subject: CN=77FA6A72A163D47F17954B54C4C6AED1CCD7EF10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:6e:17:8f:fa:e7:63:b7:aa:5e:d9:17:8f: f2:2a:2d:7f:56:5f:57:37:96:bd:d0:2c:42:9d:fa: 74:5f:1c:5b:9d:6a:62:41:1a:4b:85:00:e2:c8:97: 44:7b:26:d3:05:a6:10:02:f7:d2:3c:72:84:32:43: 3c:48:00:02:42:01:a0:b1:02:00:5e:01:a1:4c:b1: 37:29:d1:1b:5e:8b:17:b4:08:37:08:cd:24:87:fe: f4:f6:f7:b6:6e:ad:46:de:7f:df:34:1c:65:31:05: f0:0b:c8:e1:0f:51:48:d1:dc:48:86:19:aa:70:1e: e8:94:a8:8b:75:85:4a:83:eb:6a:5d:a3:a9:4c:0d: 61:43:d1:c1:0e:45:ca:27:31:0a:2f:00:0c:38:46: 47:32:3a:f2:d0:7a:cb:5e:0f:82:10:fd:7d:b2:10: 76:2f:a2:a9:71:16:a2:0a:ef:d2:b2:3a:3a:d2:98: 7b:8e:ef:c3:a3:58:8e:d1:ac:19:b0:91:13:35:7e: b6:b3:f4:6b:4e:26:8b:1f:c5:07:df:ee:25:ff:cb: af:86:fa:1a:20:33:73:7d:37:27:c6:25:24:5f:6d: ed:00:2d:36:8e:5b:ef:db:12:50:35:37:bb:87:8d: c3:c4:e6:27:2d:22:4a:7c:52:8c:32:ca:b4:3d:e6: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FA:6A:72:A1:63:D4:7F:17:95:4B:54:C4:C6:AE:D1:CC:D7:EF:10 X509v3 Authority Key Identifier: keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e7:f2:0b:52:a3:84:95:d2:9e:21:fc:62:45:7b:ef:49:1a: 11:6c:d6:42:b3:a9:b2:a0:79:36:b7:f2:8d:c1:44:08:83:8b: 78:fc:6a:ac:d1:58:7c:e9:b0:d9:f4:13:a1:5d:8b:90:01:d6: af:07:2b:e3:f6:c9:b5:5f:2c:69:f6:27:bb:26:bb:2f:5c:fe: 96:cc:1e:2a:6c:3b:30:a9:b2:15:9c:11:18:df:a9:60:aa:30: fe:1e:9c:15:a2:6a:4e:6a:ec:f7:8b:0b:ed:29:34:e0:c5:8c: 4d:d9:4b:8e:c1:c9:fd:4e:30:fd:3f:b9:60:24:ee:1b:2c:2a: 8e:77:5c:18:3f:d7:61:96:cd:43:48:6b:a1:a6:70:17:f2:c3: 36:0c:43:03:39:dc:30:49:8f:ce:97:ac:12:23:bb:eb:5f:4d: fb:42:e4:df:90:9e:db:41:aa:f0:d6:b1:8f:50:a7:7c:27:6b: de:77:9a:f9:56:20:92:7c:28:1b:24:00:a4:6c:fb:68:ea:23: d8:b3:8a:99:38:54:5f:3c:f6:6f:79:20:f1:95:d4:35:64:d4: aa:ff:93:eb:be:65:93:6c:5f:4b:48:15:22:0e:4d:fd:07:98: 75:93:6e:89:49:ec:13:55:8a:19:20:17:c8:b9:92:2d:9a:7f: e8:c1:e2:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUiU0AG3h1r1YYCFJWS7NtVJilvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB QkI3MjMzNTAeFw0yNTA3MTkxMzE2MDNaFw0yNTA3MjIyMjQxMDNaMDMxMTAvBgNV BAMTKDc3RkE2QTcyQTE2M0Q0N0YxNzk1NEI1NEM0QzZBRUQxQ0NEN0VGMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/m4Xj/rnY7eqXtkXj/IqLX9W X1c3lr3QLEKd+nRfHFudamJBGkuFAOLIl0R7JtMFphAC99I8coQyQzxIAAJCAaCx AgBeAaFMsTcp0Rteixe0CDcIzSSH/vT297ZurUbef980HGUxBfALyOEPUUjR3EiG GapwHuiUqIt1hUqD62pdo6lMDWFD0cEORconMQovAAw4RkcyOvLQesteD4IQ/X2y EHYvoqlxFqIK79KyOjrSmHuO78OjWI7RrBmwkRM1fraz9GtOJosfxQff7iX/y6+G +hogM3N9NyfGJSRfbe0ALTaOW+/bElA1N7uHjcPE5ictIkp8UowyyrQ95u1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd/pqcqFj1H8XlUtUxMau0czX7xAwHwYDVR0j BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1 REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3 MjMzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQz QUVBQkI3MjMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3n8gtSo4SV0p4h/GJFe+9JGhFs1kKzqbKg eTa38o3BRAiDi3j8aqzRWHzpsNn0E6Fdi5AB1q8HK+P2ybVfLGn2J7smuy9c/pbM HipsOzCpshWcERjfqWCqMP4enBWiak5q7PeLC+0pNODFjE3ZS47Byf1OMP0/uWAk 7hssKo53XBg/12GWzUNIa6GmcBfywzYMQwM53DBJj86XrBIju+tfTftC5N+QnttB qvDWsY9Qp3wna953mvlWIJJ8KBskAKRs+2jqI9izipk4VF889m95IPGV1DVk1Kr/ k+u+ZZNsX0tIFSIOTf0HmHWTbolJ7BNVihkgF8i5ki2af+jB4oE= -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:39 2025 by rpki-client