$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: KAEDFPhuq5ClbwM8Vk8+dzAbhVAHtU5jSjpLLSKUByw= Subject key identifier: 80:57:C2:B0:F8:15:93:FC:C7:5C:C5:6A:E4:A8:3D:AE:82:FC:95:1A Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 040C95188630A77DA907CB5EB53B0AFA3FE4DA3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 0168 Signing time: Sat 06 Sep 2025 20:50:53 +0000 Manifest this update: Sat 06 Sep 2025 20:45:53 +0000 Manifest next update: Wed 10 Sep 2025 06:44:53 +0000 Files and hashes: 1: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) 2: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) 3: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: vQjgoGJopRQV3Y4jKiyy2XeKzAo9LsAeFt0s5FGnt+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0c:95:18:86:30:a7:7d:a9:07:cb:5e:b5:3b:0a:fa:3f:e4:da:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Sep 6 20:45:53 2025 GMT Not After : Sep 10 06:44:53 2025 GMT Subject: CN=8057C2B0F81593FCC75CC56AE4A83DAE82FC951A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6a:b4:53:2d:b3:a2:83:cb:ed:de:35:4f:5c: 81:07:bc:42:64:18:e6:fa:0f:bf:62:cb:17:fb:56: 94:bc:6f:90:31:55:62:12:df:6f:dd:b1:75:10:0a: ee:72:6b:34:a4:51:7c:c3:4f:61:46:b3:91:c8:8c: e1:b5:87:55:a2:00:37:5f:3a:cd:39:5e:9b:14:ca: a5:4e:45:f4:4f:ae:c4:05:e1:9e:38:ec:65:73:ee: 0f:a1:7c:d0:88:73:fe:eb:86:a8:64:2c:85:e2:1c: ca:d9:cf:d3:4a:af:70:53:d3:68:77:d5:ae:7d:35: c2:d5:17:55:15:85:e9:e9:f7:80:77:8f:83:46:74: 56:3d:c8:85:45:ba:03:f2:29:da:66:d8:91:3b:6d: d1:96:b6:27:d9:79:51:fc:35:9a:27:5a:b6:73:14: 86:7d:84:81:90:63:af:f5:18:34:2b:5a:93:9f:6d: 4b:34:56:89:8e:78:4e:c3:d4:80:65:a1:9a:33:fb: c6:49:a5:bf:89:10:6e:7a:d6:11:4d:8b:3d:3f:f0: 48:76:d8:88:96:5b:10:7d:4c:c0:7e:8a:2a:b5:19: 70:c5:e4:f3:5c:5a:88:27:02:76:b3:6d:3a:73:4e: 81:4a:72:ca:04:11:57:2a:7c:3a:0a:60:75:7c:ab: c4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:57:C2:B0:F8:15:93:FC:C7:5C:C5:6A:E4:A8:3D:AE:82:FC:95:1A X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:73:d8:ab:c9:23:90:b1:fb:f6:9e:43:7b:07:a0:53:e6:18: 99:96:76:c7:b0:8d:3d:1d:5e:d2:f4:67:35:80:48:5d:0e:c1: 0a:33:67:f4:04:0c:8e:02:ad:30:a9:20:48:85:c3:05:cf:28: da:22:80:5b:9d:03:66:62:cb:51:de:ef:23:fd:86:84:bf:15: e1:4b:23:02:0c:af:9e:c9:8a:30:8f:6f:33:89:d3:8e:c0:12: c7:f6:01:c5:8d:36:54:86:0d:48:3a:6b:1b:1a:ef:7e:92:07: fa:f4:80:87:63:36:2a:6c:ea:9e:f8:3e:25:56:32:e4:61:77: b3:aa:8c:a5:67:87:be:4c:42:fa:f8:24:e1:ba:df:a6:51:85: f5:8c:96:2b:dc:47:4f:64:d3:79:39:f3:fa:c0:f1:20:36:a9: 97:c2:71:19:cc:a8:85:a0:aa:f6:52:b5:ad:e8:03:df:ff:91: 93:8b:05:cb:af:24:ab:aa:4b:a8:22:37:30:30:36:43:92:fb: be:dc:bd:5f:75:e0:1e:f2:64:b3:17:e2:0b:a5:6f:67:4f:3e: 8a:a3:1c:45:bc:04:85:73:7c:79:f9:e2:ff:39:d3:e2:8c:7e: 12:8f:a3:6c:14:d7:41:24:51:e5:29:b3:67:ba:70:45:4d:ee: 0a:b0:df:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBAyVGIYwp32pB8tetTsK+j/k2j4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNTA5MDYyMDQ1NTNaFw0yNTA5MTAwNjQ0NTNaMDMxMTAvBgNV BAMTKDgwNTdDMkIwRjgxNTkzRkNDNzVDQzU2QUU0QTgzREFFODJGQzk1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQarRTLbOig8vt3jVPXIEHvEJk GOb6D79iyxf7VpS8b5AxVWIS32/dsXUQCu5yazSkUXzDT2FGs5HIjOG1h1WiADdf Os05XpsUyqVORfRPrsQF4Z447GVz7g+hfNCIc/7rhqhkLIXiHMrZz9NKr3BT02h3 1a59NcLVF1UVhenp94B3j4NGdFY9yIVFugPyKdpm2JE7bdGWtifZeVH8NZonWrZz FIZ9hIGQY6/1GDQrWpOfbUs0VomOeE7D1IBloZoz+8ZJpb+JEG561hFNiz0/8Eh2 2IiWWxB9TMB+iiq1GXDF5PNcWognAnazbTpzToFKcsoEEVcqfDoKYHV8q8SNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgFfCsPgVk/zHXMVq5Kg9roL8lRowHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNz2KvJI5Cx+/aeQ3sHoFPmGJmWdsewjT0d XtL0ZzWASF0OwQozZ/QEDI4CrTCpIEiFwwXPKNoigFudA2Ziy1He7yP9hoS/FeFL IwIMr57JijCPbzOJ047AEsf2AcWNNlSGDUg6axsa736SB/r0gIdjNips6p74PiVW MuRhd7OqjKVnh75MQvr4JOG636ZRhfWMlivcR09k03k58/rA8SA2qZfCcRnMqIWg qvZSta3oA9//kZOLBcuvJKuqS6giNzAwNkOS+77cvV914B7yZLMX4gulb2dPPoqj HEW8BIVzfHn54v850+KMfhKPo2wU10EkUeUps2e6cEVN7gqw380= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:02 2025 by rpki-client