$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft File: 38A92419EE1289455FCB1B71F9420F05CA334C15.mft (raw, json) Hash identifier: 5cX0VmYBCgcciKWc6rtWiRRKih5D6aJ77HUq3PW2BmI= Subject key identifier: 7B:BC:D2:37:DF:7A:A3:45:80:39:FD:6F:72:36:42:68:2B:25:62:9D Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 Certificate issuer: /CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Certificate serial: 4D28262EFB5AC05F715329455D286856CDDBAF37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft Manifest number: 01F1 Signing time: Mon 21 Jul 2025 15:50:00 +0000 Manifest this update: Mon 21 Jul 2025 15:45:00 +0000 Manifest next update: Thu 24 Jul 2025 17:24:00 +0000 Files and hashes: 1: 38A92419EE1289455FCB1B71F9420F05CA334C15.crl (hash: 00zRxty4bV8v0RtClNrgw9o2wJE4ZKZBA92CWs2Wf6I=) 2: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: FHb4F7lq3vcwTbWDvi1X4f5+wy1PMf7axFDD1qokmPs=) 3: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: /4y0i2UIqC94Q9jjKOVg3BHE03KUaQHXxOynS0oUshc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 17:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:28:26:2e:fb:5a:c0:5f:71:53:29:45:5d:28:68:56:cd:db:af:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Validity Not Before: Jul 21 15:45:00 2025 GMT Not After : Jul 24 17:24:00 2025 GMT Subject: CN=7BBCD237DF7AA3458039FD6F723642682B25629D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cf:a1:2c:17:34:be:5f:f7:a0:83:3e:c7:82: b6:8c:42:15:1c:49:69:ce:85:46:1d:5d:eb:2d:2b: 8f:36:13:56:f3:fa:1c:e5:01:71:6a:70:94:80:95: 43:35:1b:b9:e9:0e:82:e2:d9:e7:0d:06:5f:84:2b: b0:6a:db:1b:01:32:e6:c3:9b:14:19:96:49:55:02: 96:75:73:26:c2:36:24:88:43:87:93:60:7b:15:53: 31:10:bd:01:db:03:49:b5:da:89:a8:18:d5:b2:c7: 37:de:74:ca:d5:91:59:76:c3:fb:98:62:9d:36:b4: d4:91:39:a2:5b:c5:5d:7c:a9:c2:14:c4:37:08:5f: c3:79:a2:e0:31:86:e3:69:9f:5c:72:79:08:e6:a4: 77:05:74:25:bc:61:2a:d7:42:41:3e:4f:cf:d8:63: cb:1b:b4:93:54:48:2b:b7:2c:ac:db:b1:75:11:8f: 75:e7:d9:f6:79:ee:3c:cc:2f:b0:ff:58:c0:59:ec: fb:3a:bc:ee:0b:8c:8e:c7:25:72:f3:53:f0:19:cc: be:7d:6a:c8:68:2b:f1:bf:50:42:59:06:28:15:ee: 53:a4:14:10:31:b2:d5:71:7f:54:74:56:b5:69:b1: d5:1e:5a:cc:5f:e2:09:60:8d:c5:ed:48:39:21:19: 13:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BC:D2:37:DF:7A:A3:45:80:39:FD:6F:72:36:42:68:2B:25:62:9D X509v3 Authority Key Identifier: keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:37:d4:77:0a:fd:8c:c4:18:37:9d:fa:cc:39:bf:82:86:cc: 53:5d:ad:c1:8e:74:5a:3f:18:9b:57:12:95:b8:ff:5c:38:c8: 00:8c:78:9c:34:1c:22:57:39:ac:d5:3c:dc:41:70:89:ec:7b: 4e:8b:de:84:5f:12:9b:c0:f1:19:8b:f4:35:a6:77:d9:36:eb: eb:9a:b9:63:35:96:44:ef:35:a0:4d:78:85:6c:6a:71:73:da: 02:02:68:3a:56:45:2c:5e:1f:2b:95:cd:d8:94:62:7a:94:98: 46:ee:12:86:03:64:ea:8e:6b:7c:44:54:96:26:f7:bd:a9:11: 96:1e:7f:d1:8d:43:71:fc:d4:69:8f:45:c5:86:da:04:7b:bf: 17:14:99:06:dd:90:9f:7e:a9:2e:29:f8:71:34:e5:ad:81:3f: c6:64:82:9e:23:dc:97:22:2e:10:b8:f9:e5:4c:30:a3:28:54: cf:fd:5a:b1:44:31:10:fa:3e:b7:4d:ed:fe:81:54:69:f2:45: f2:5c:ae:aa:81:58:8f:51:9e:2b:e5:86:a9:c6:de:3e:69:41: b0:c2:27:c0:e8:04:9f:b8:b3:b3:ef:ab:50:35:c7:40:a0:de: 65:3d:23:51:08:d7:03:47:fa:83:7c:ca:7d:89:30:00:c5:53: ac:7e:bd:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSgmLvtawF9xUylFXShoVs3brzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVD QTMzNEMxNTAeFw0yNTA3MjExNTQ1MDBaFw0yNTA3MjQxNzI0MDBaMDMxMTAvBgNV BAMTKDdCQkNEMjM3REY3QUEzNDU4MDM5RkQ2RjcyMzY0MjY4MkIyNTYyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQz6EsFzS+X/eggz7HgraMQhUc SWnOhUYdXestK482E1bz+hzlAXFqcJSAlUM1G7npDoLi2ecNBl+EK7Bq2xsBMubD mxQZlklVApZ1cybCNiSIQ4eTYHsVUzEQvQHbA0m12omoGNWyxzfedMrVkVl2w/uY Yp02tNSROaJbxV18qcIUxDcIX8N5ouAxhuNpn1xyeQjmpHcFdCW8YSrXQkE+T8/Y Y8sbtJNUSCu3LKzbsXURj3Xn2fZ57jzML7D/WMBZ7Ps6vO4LjI7HJXLzU/AZzL59 ashoK/G/UEJZBigV7lOkFBAxstVxf1R0VrVpsdUeWsxf4glgjcXtSDkhGRMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe7zSN996o0WAOf1vcjZCaCslYp0wHwYDVR0j BBgwFoAUOKkkGe4SiUVfyxtx+UIPBcozTBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRhZDhjYi1hNTM3LTRjNTAtYWY2YS1hYWJhNWYxZTc2NDQvMC8zOEE5MjQxOUVF MTI4OTQ1NUZDQjFCNzFGOTQyMEYwNUNBMzM0QzE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVDQTMz NEMxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkYWQ4Y2ItYTUzNy00YzUwLWFm NmEtYWFiYTVmMWU3NjQ0LzAvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBG MDVDQTMzNEMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEE31HcK/YzEGDed+sw5v4KGzFNdrcGOdFo/ GJtXEpW4/1w4yACMeJw0HCJXOazVPNxBcInse06L3oRfEpvA8RmL9DWmd9k26+ua uWM1lkTvNaBNeIVsanFz2gICaDpWRSxeHyuVzdiUYnqUmEbuEoYDZOqOa3xEVJYm 972pEZYef9GNQ3H81GmPRcWG2gR7vxcUmQbdkJ9+qS4p+HE05a2BP8Zkgp4j3Jci LhC4+eVMMKMoVM/9WrFEMRD6PrdN7f6BVGnyRfJcrqqBWI9RnivlhqnG3j5pQbDC J8DoBJ+4s7Pvq1A1x0Cg3mU9I1EI1wNH+oN8yn2JMADFU6x+vaE= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:31 2025 by rpki-client