$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: Gioory7LhQEj6HTahL+pqDW6CFB7u3xPnoPuVf6D4lI= Subject key identifier: C9:EB:A2:AD:BB:4B:80:6B:0D:75:81:10:E5:22:F2:E4:E1:0A:EC:3B Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 66B48359A4F5B1908ECF550C2F423B977782BA32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 0153 Signing time: Sun 20 Jul 2025 17:50:53 +0000 Manifest this update: Sun 20 Jul 2025 17:45:53 +0000 Manifest next update: Wed 23 Jul 2025 23:47:53 +0000 Files and hashes: 1: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) 2: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) 3: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: 6jLtNoKeFHgYdbhkpgZodWkv0k0Md43OVpwXQgZ9xVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 23:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b4:83:59:a4:f5:b1:90:8e:cf:55:0c:2f:42:3b:97:77:82:ba:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Jul 20 17:45:53 2025 GMT Not After : Jul 23 23:47:53 2025 GMT Subject: CN=C9EBA2ADBB4B806B0D758110E522F2E4E10AEC3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7b:26:11:c7:aa:4a:eb:c7:90:a2:e1:c5:48: c6:cc:90:ce:81:6e:fe:c5:81:c6:5e:6b:d9:63:a5: 55:07:e6:32:09:de:fc:95:db:17:df:37:b0:0c:6b: ec:81:71:c7:df:79:a3:22:e2:f4:df:81:88:32:ad: 43:60:5b:d7:3e:64:4d:fe:9c:15:f1:bc:0f:1e:53: 21:02:93:8d:e3:8b:25:da:b6:cf:88:ed:9a:2e:57: a4:59:c6:f8:1c:a8:73:99:6c:cd:6c:aa:60:6e:a7: a4:3b:19:de:a5:5a:b2:73:57:77:a8:d2:6e:a1:27: 4e:ce:78:e5:d4:d0:7a:18:e3:a1:e1:ea:00:eb:1a: 07:43:d6:bd:b2:f7:f1:16:ab:b1:ba:45:03:81:e1: 66:d3:bd:e3:94:36:f6:de:c0:3a:ba:9d:0c:9b:7a: 50:18:ec:a0:7a:b4:d8:17:91:14:78:34:f3:58:0d: f4:e0:41:75:c8:d0:56:41:39:47:3a:95:4c:6d:12: fe:c0:b0:e3:b6:46:3e:39:a2:dd:62:30:2e:b7:0e: 6a:9a:9b:13:b1:3c:ae:c1:98:a8:78:10:db:8d:64: cd:6c:c5:5a:b6:85:a4:09:49:d9:4b:56:1e:61:81: 91:e8:d1:a4:f0:aa:67:41:32:8f:ac:73:d3:3a:90: 5c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EB:A2:AD:BB:4B:80:6B:0D:75:81:10:E5:22:F2:E4:E1:0A:EC:3B X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:03:51:8f:9e:da:7c:98:83:28:ea:de:66:f7:73:2e:1b:e7: b8:d5:30:4f:ad:7f:d4:aa:27:b7:4d:13:ef:9d:75:95:4e:cb: fc:48:a5:56:fb:fd:e3:c5:c4:9b:9b:69:ff:43:0c:25:b7:b4: 81:4b:c8:b9:f2:d7:5c:4b:fa:ec:17:13:72:b1:cd:d8:ae:b4: ca:8a:3c:fb:fe:a6:a2:d3:af:55:76:f2:78:1f:f9:f8:cc:39: a1:f8:b5:86:c0:24:1d:3a:59:06:65:49:33:f5:93:ec:7a:e2: 9e:85:1f:a0:56:33:aa:71:bb:a0:8f:9f:90:ab:71:dd:53:61: a2:df:d0:b1:00:51:18:bc:d5:bd:e3:81:ed:62:e1:dd:87:b4: 3d:c6:5d:8b:a1:b8:54:4b:e7:be:be:e8:ca:62:45:3a:21:94: c9:cc:1a:2a:e8:3f:14:b0:cf:7c:8c:47:68:1b:fc:5c:f4:d9: 21:92:ef:f8:07:b6:aa:67:1f:a1:f1:cf:41:62:6f:39:33:68: 15:0f:08:3f:35:7b:b5:14:c2:1d:49:6a:6f:b8:2a:80:81:35: 7e:ca:d0:7a:c3:90:9c:8b:c5:8e:91:4e:c0:c3:05:27:1a:36: 17:d0:db:e9:9e:3b:79:0d:40:b3:ef:da:74:eb:83:87:39:bd: 80:3e:98:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZrSDWaT1sZCOz1UML0I7l3eCujIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNTA3MjAxNzQ1NTNaFw0yNTA3MjMyMzQ3NTNaMDMxMTAvBgNV BAMTKEM5RUJBMkFEQkI0QjgwNkIwRDc1ODExMEU1MjJGMkU0RTEwQUVDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjeyYRx6pK68eQouHFSMbMkM6B bv7FgcZea9ljpVUH5jIJ3vyV2xffN7AMa+yBccffeaMi4vTfgYgyrUNgW9c+ZE3+ nBXxvA8eUyECk43jiyXats+I7ZouV6RZxvgcqHOZbM1sqmBup6Q7Gd6lWrJzV3eo 0m6hJ07OeOXU0HoY46Hh6gDrGgdD1r2y9/EWq7G6RQOB4WbTveOUNvbewDq6nQyb elAY7KB6tNgXkRR4NPNYDfTgQXXI0FZBOUc6lUxtEv7AsOO2Rj45ot1iMC63Dmqa mxOxPK7BmKh4ENuNZM1sxVq2haQJSdlLVh5hgZHo0aTwqmdBMo+sc9M6kFxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyeuirbtLgGsNdYEQ5SLy5OEK7DswHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgDUY+e2nyYgyjq3mb3cy4b57jVME+tf9Sq J7dNE++ddZVOy/xIpVb7/ePFxJubaf9DDCW3tIFLyLny11xL+uwXE3KxzdiutMqK PPv+pqLTr1V28ngf+fjMOaH4tYbAJB06WQZlSTP1k+x64p6FH6BWM6pxu6CPn5Cr cd1TYaLf0LEAURi81b3jge1i4d2HtD3GXYuhuFRL576+6MpiRTohlMnMGiroPxSw z3yMR2gb/Fz02SGS7/gHtqpnH6Hxz0FibzkzaBUPCD81e7UUwh1Jam+4KoCBNX7K 0HrDkJyLxY6RTsDDBScaNhfQ2+meO3kNQLPv2nTrg4c5vYA+mGE= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:42 2025 by rpki-client