$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: HbGQvWPPGfDwyxVjBHkluRn89xTSpeOOlXeprAjZB4c= Subject key identifier: 09:C3:FB:BD:D4:D4:89:D6:EA:DB:93:B0:3E:DF:29:83:4C:E1:FC:BE Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 52A1B1B6C27E848A3C69CA784CAB38E973B3F0D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 013F Signing time: Wed 04 Jun 2025 05:30:52 +0000 Manifest this update: Wed 04 Jun 2025 05:25:52 +0000 Manifest next update: Sat 07 Jun 2025 11:43:52 +0000 Files and hashes: 1: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: rISMWTFAOXAgE+ekm8fFSVyID0aNzMLuNOPxwru7IZM=) 2: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) 3: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a1:b1:b6:c2:7e:84:8a:3c:69:ca:78:4c:ab:38:e9:73:b3:f0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Jun 4 05:25:52 2025 GMT Not After : Jun 7 11:43:52 2025 GMT Subject: CN=09C3FBBDD4D489D6EADB93B03EDF29834CE1FCBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:d2:ed:82:e9:b4:18:16:79:6f:6b:37:66: bf:2b:13:02:63:9e:02:46:40:02:2c:7f:84:c2:35: c0:00:e0:2f:55:ea:65:dd:d2:65:53:ae:db:62:30: 5b:4e:b0:ae:07:48:c1:ae:12:3c:5f:88:c4:d9:36: c2:45:89:34:9c:19:60:7b:d5:7c:15:23:25:c4:29: 01:5f:6e:a1:77:98:83:53:88:53:c7:c2:1a:b0:95: d5:09:ef:53:4a:21:86:2d:8c:7d:75:a9:0c:1c:fa: c4:3f:b2:8d:b5:ae:f4:57:37:1b:05:94:d7:5f:d5: 44:ba:36:11:25:e5:29:11:9c:f2:2b:4f:71:c5:eb: d1:7f:65:c2:f5:e8:0c:55:52:56:db:59:99:2a:ad: cf:95:d6:59:31:2b:a6:0e:cf:c2:a0:ac:ee:85:88: 02:cb:95:0a:1f:a1:03:88:63:d1:1c:14:e3:14:3c: 87:ae:05:25:07:ea:a5:21:74:98:60:10:bd:51:c5: 8e:f3:ac:b5:9a:e3:2a:b3:cb:ed:13:38:c3:3d:a7: 74:c3:03:c4:fd:12:d3:0a:d8:9b:d9:65:75:22:4d: a9:75:11:d6:03:4c:90:4a:0b:af:42:42:fd:91:c2: e3:77:5c:c9:1d:fc:b4:c5:fb:65:78:4b:c7:bc:b9: f7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C3:FB:BD:D4:D4:89:D6:EA:DB:93:B0:3E:DF:29:83:4C:E1:FC:BE X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:56:3b:7b:c8:eb:73:bc:8b:19:fa:8b:da:6f:ad:d4:98:f2: 8f:63:5f:cc:06:ea:1b:2a:85:6e:e1:7d:b4:ec:98:6a:e8:cc: 42:91:b5:91:eb:f1:ae:2f:52:94:3e:5d:3e:e9:08:aa:31:4e: ea:a5:5d:10:3d:2a:20:10:a1:0b:b9:13:8b:b1:27:9b:29:61: bc:e9:8e:62:62:1d:ad:74:0c:5d:6a:21:ee:3a:1d:6e:f2:53: c8:b2:58:9e:fd:b4:74:66:e9:69:09:de:39:46:80:ef:92:d8: 62:07:76:6c:34:f6:26:ed:d5:9f:b5:b6:f9:5b:8e:45:ad:b7: 21:4c:44:89:2f:f6:d3:22:08:52:96:0f:f4:64:53:73:76:6f: 52:69:0a:90:79:54:27:f6:b8:6d:4d:63:af:8f:1d:fa:91:37: 72:2b:21:de:db:2a:d7:d2:fb:31:a0:da:0d:7a:fc:e0:6e:ca: 4f:47:af:93:a2:bb:37:1a:eb:8a:55:8b:58:3e:88:61:69:3e: 96:0f:b7:c2:4d:ab:eb:b1:de:e6:fb:4e:27:77:cd:96:94:da: fc:54:5d:ad:12:b6:b1:30:bd:d1:8d:15:d6:56:fd:92:93:5d: 12:55:2b:72:02:9f:de:ad:e4:af:da:da:7a:6b:0d:9e:63:ed: 9c:e3:ae:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqGxtsJ+hIo8acp4TKs46XOz8NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNTA2MDQwNTI1NTJaFw0yNTA2MDcxMTQzNTJaMDMxMTAvBgNV BAMTKDA5QzNGQkJERDRENDg5RDZFQURCOTNCMDNFREYyOTgzNENFMUZDQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB69Ltgum0GBZ5b2s3Zr8rEwJj ngJGQAIsf4TCNcAA4C9V6mXd0mVTrttiMFtOsK4HSMGuEjxfiMTZNsJFiTScGWB7 1XwVIyXEKQFfbqF3mINTiFPHwhqwldUJ71NKIYYtjH11qQwc+sQ/so21rvRXNxsF lNdf1US6NhEl5SkRnPIrT3HF69F/ZcL16AxVUlbbWZkqrc+V1lkxK6YOz8KgrO6F iALLlQofoQOIY9EcFOMUPIeuBSUH6qUhdJhgEL1RxY7zrLWa4yqzy+0TOMM9p3TD A8T9EtMK2JvZZXUiTal1EdYDTJBKC69CQv2RwuN3XMkd/LTF+2V4S8e8ufdHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCcP7vdTUidbq25OwPt8pg0zh/L4wHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRWO3vI63O8ixn6i9pvrdSY8o9jX8wG6hsq hW7hfbTsmGrozEKRtZHr8a4vUpQ+XT7pCKoxTuqlXRA9KiAQoQu5E4uxJ5spYbzp jmJiHa10DF1qIe46HW7yU8iyWJ79tHRm6WkJ3jlGgO+S2GIHdmw09ibt1Z+1tvlb jkWttyFMRIkv9tMiCFKWD/RkU3N2b1JpCpB5VCf2uG1NY6+PHfqRN3IrId7bKtfS +zGg2g16/OBuyk9Hr5Oiuzca64pVi1g+iGFpPpYPt8JNq+ux3ub7Tid3zZaU2vxU Xa0StrEwvdGNFdZW/ZKTXRJVK3ICn96t5K/a2nprDZ5j7ZzjrqE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:45 2025 by rpki-client