$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json) Hash identifier: 0a/HGq4q8sVyThuBcgUykJ0annt4k8Ujw3Ij7KYGVT4= Subject key identifier: E4:EF:75:25:ED:34:65:BD:1B:C7:10:6C:12:39:42:80:D1:BB:21:17 Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Certificate serial: 28AA97923EC000DECFC66AC63729FCF6B9BC72EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft Manifest number: 0132 Signing time: Thu 05 Jun 2025 12:01:03 +0000 Manifest this update: Thu 05 Jun 2025 11:56:03 +0000 Manifest next update: Sun 08 Jun 2025 13:31:03 +0000 Files and hashes: 1: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: 9yMujIrmq4RcN3422PMB74jFadYKwF3CYoMMQxoF24k=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 13:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:aa:97:92:3e:c0:00:de:cf:c6:6a:c6:37:29:fc:f6:b9:bc:72:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Validity Not Before: Jun 5 11:56:03 2025 GMT Not After : Jun 8 13:31:03 2025 GMT Subject: CN=E4EF7525ED3465BD1BC7106C12394280D1BB2117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:32:05:10:d1:bc:32:21:b8:35:36:53:78: 89:a3:b5:1e:b8:fa:d1:c0:31:f1:c8:1c:25:68:35: 60:bf:73:32:e7:e2:b4:33:40:e2:30:1f:e0:4e:0e: c8:dd:98:9d:bd:76:98:4f:a5:11:ba:92:83:e5:87: 95:53:36:d6:df:57:b2:86:81:09:0c:bc:fe:2a:07: d6:28:7f:85:23:e4:1d:7d:69:6e:6c:dc:68:4e:64: b5:63:e5:09:c4:f4:06:8e:88:fd:cb:a1:6b:47:e9: e9:36:21:e2:92:c0:3a:a9:0a:53:0f:13:d1:15:9d: 5a:3c:70:a8:36:b7:27:ff:2a:29:e3:84:3e:26:2f: e3:96:0d:33:41:3f:52:65:22:b3:ae:33:4a:03:82: cc:a7:e2:9f:61:90:86:57:45:c6:7d:cd:5c:5d:19: e1:71:1b:b0:cd:76:46:98:30:0b:db:c6:05:a5:46: ec:36:cd:5c:2f:6d:33:66:c1:fa:d8:38:50:85:7e: 77:69:ea:20:8b:ef:ef:57:39:3d:5a:d7:56:46:54: ca:10:04:d5:52:db:d7:75:35:d8:64:46:74:8d:fa: 4d:ab:60:b2:63:f1:e8:c3:fd:78:fa:04:17:d0:e0: 61:e4:3f:fd:d7:f3:0a:fb:3d:9e:88:57:b9:5f:21: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EF:75:25:ED:34:65:BD:1B:C7:10:6C:12:39:42:80:D1:BB:21:17 X509v3 Authority Key Identifier: keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1c:a8:de:9b:35:3c:bc:9b:e9:25:d3:d9:ff:f2:a7:06:77: 04:ce:9b:63:bc:4e:6f:cc:9d:f2:b7:d7:a1:d3:1b:ca:26:9a: 4d:ef:54:e6:a9:bc:91:ac:6b:54:e7:a0:45:6e:2e:cf:4c:de: e4:2c:f5:47:a5:35:59:0a:aa:76:48:40:51:ac:b6:fa:54:5f: 8e:33:5c:4d:f7:48:5d:43:c6:66:62:a9:54:1d:6f:49:55:b1: cf:e8:8d:b0:88:ea:99:89:02:bd:ca:c8:9d:a2:39:37:24:11: 42:a8:46:8d:54:e8:76:f3:89:7e:91:c5:63:58:dc:21:a5:d3: 9b:bb:54:be:46:49:b9:dd:39:07:e0:0a:5f:50:2d:b7:8d:3d: 23:6a:4a:54:5e:17:92:0a:8f:ec:d6:3a:fc:b6:7f:f3:88:b1: d1:34:63:0d:fd:6f:21:c6:f4:44:d7:d9:8e:89:5a:d2:be:ec: c4:56:ba:eb:5b:48:16:4c:ec:b5:3f:6c:61:74:f9:4a:6b:d2: 0c:c3:6e:8e:44:a8:7c:1a:23:db:db:7c:30:0f:ee:b2:3a:c2: 7d:a8:f0:21:37:63:97:d1:fa:57:87:e0:57:42:e2:50:f4:9b: 9b:7c:11:d6:31:d7:6e:c3:85:93:2b:70:05:50:61:c3:a6:cc: 03:db:ee:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKqXkj7AAN7PxmrGNyn89rm8cuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB QkI3MjMzNTAeFw0yNTA2MDUxMTU2MDNaFw0yNTA2MDgxMzMxMDNaMDMxMTAvBgNV BAMTKEU0RUY3NTI1RUQzNDY1QkQxQkM3MTA2QzEyMzk0MjgwRDFCQjIxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi8jIFENG8MiG4NTZTeImjtR64 +tHAMfHIHCVoNWC/czLn4rQzQOIwH+BODsjdmJ29dphPpRG6koPlh5VTNtbfV7KG gQkMvP4qB9Yof4Uj5B19aW5s3GhOZLVj5QnE9AaOiP3LoWtH6ek2IeKSwDqpClMP E9EVnVo8cKg2tyf/KinjhD4mL+OWDTNBP1JlIrOuM0oDgsyn4p9hkIZXRcZ9zVxd GeFxG7DNdkaYMAvbxgWlRuw2zVwvbTNmwfrYOFCFfndp6iCL7+9XOT1a11ZGVMoQ BNVS29d1NdhkRnSN+k2rYLJj8ejD/Xj6BBfQ4GHkP/3X8wr7PZ6IV7lfIfmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5O91Je00Zb0bxxBsEjlCgNG7IRcwHwYDVR0j BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1 REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3 MjMzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQz QUVBQkI3MjMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgcqN6bNTy8m+kl09n/8qcGdwTOm2O8Tm/M nfK316HTG8ommk3vVOapvJGsa1TnoEVuLs9M3uQs9UelNVkKqnZIQFGstvpUX44z XE33SF1DxmZiqVQdb0lVsc/ojbCI6pmJAr3KyJ2iOTckEUKoRo1U6HbziX6RxWNY 3CGl05u7VL5GSbndOQfgCl9QLbeNPSNqSlReF5IKj+zWOvy2f/OIsdE0Yw39byHG 9ETX2Y6JWtK+7MRWuutbSBZM7LU/bGF0+Upr0gzDbo5EqHwaI9vbfDAP7rI6wn2o 8CE3Y5fR+leH4FdC4lD0m5t8EdYx127DhZMrcAVQYcOmzAPb7iE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:15 2025 by rpki-client