$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: SrZUw5aNPqYw13tZI15AkdnfWCMHJs/OXBzJ9FlesYY= Subject key identifier: 2C:54:4F:AE:C0:48:E2:C6:2A:3F:B6:8C:03:13:DF:A3:E2:9F:1E:B8 Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 6F3CD444BBFD8EC7D3D1FF7596B4DFC65B7D0A4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 0123 Signing time: Thu 03 Apr 2025 06:50:52 +0000 Manifest this update: Thu 03 Apr 2025 06:45:52 +0000 Manifest next update: Sun 06 Apr 2025 15:04:52 +0000 Files and hashes: 1: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: bXd2dFSOD0Nasv53s/O1ijhkArJhr8EmnLTYs1H1fiM=) 2: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: Z06476NaHt115mn6/pag0qCNS8otsV8hkdLcQH3kosY=) 3: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: tNa2iWz1Y62lu1NCdufrg6k1iWefHX4gFLjt/Rd+OAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 15:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:3c:d4:44:bb:fd:8e:c7:d3:d1:ff:75:96:b4:df:c6:5b:7d:0a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Apr 3 06:45:52 2025 GMT Not After : Apr 6 15:04:52 2025 GMT Subject: CN=2C544FAEC048E2C62A3FB68C0313DFA3E29F1EB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:dc:ce:43:3e:be:54:ac:80:29:54:8e:db: 4b:1a:b4:17:93:26:a6:cc:a1:92:c0:a4:86:20:fb: 5f:b2:ab:8b:2e:89:74:ec:12:ef:a8:c3:8a:d7:5d: ca:ec:8e:66:86:9a:3f:f8:8f:db:11:06:32:fd:aa: b7:e2:11:91:e6:e8:26:b8:ef:d7:ca:31:bc:37:a6: 03:7e:b4:54:ec:ac:ba:06:a0:f5:71:0e:7e:cf:7c: 22:86:8e:df:5a:c8:7d:46:7b:4a:53:c5:1d:bb:1d: ca:3e:0b:0d:23:4e:7e:00:62:c3:e4:25:0a:92:93: ae:12:ce:b1:d2:dd:0e:e1:f4:5b:c5:59:86:ec:cd: d3:c6:3f:46:b5:ff:85:b2:86:d3:e6:25:af:98:dd: 16:91:54:1b:36:35:4b:3b:4c:6e:04:42:bd:1a:66: 7f:19:ef:20:67:65:70:ea:0a:c1:53:d1:41:05:c3: 29:a0:9c:ce:c2:b5:01:d5:e0:4b:83:68:92:a4:e2: 67:11:93:42:6f:8f:b5:ba:eb:61:42:c1:ac:de:47: e5:82:b9:2b:57:d6:a8:d8:cd:2d:3f:6b:52:44:8d: 30:2b:88:96:b2:e9:5c:ee:38:bd:74:8e:fc:78:bb: 1e:8f:66:fd:80:07:6b:49:23:7e:67:7f:46:0a:4c: 23:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:54:4F:AE:C0:48:E2:C6:2A:3F:B6:8C:03:13:DF:A3:E2:9F:1E:B8 X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:16:f6:27:4f:dd:11:df:63:cc:45:90:ec:e0:72:5e:09:1e: fa:45:3c:ac:fe:fe:de:5a:a2:dc:ef:33:e6:ec:91:6e:ca:98: 14:df:0c:bb:7d:fd:18:ad:6d:4a:b3:21:4a:ed:6f:2a:6a:bf: ce:81:7f:12:70:06:9a:fe:39:da:d6:65:7b:d5:15:40:5d:a2: af:f5:03:b3:bf:86:b2:7a:99:9e:cd:27:c3:a1:1d:ff:c2:b7: d0:2a:d1:dc:8c:1e:54:a2:ee:79:9a:8f:b3:99:ca:3a:ba:ac: c1:c6:64:04:eb:f9:04:37:f7:07:d0:26:6f:82:10:aa:00:24: 89:20:6d:19:9f:f9:f3:6f:e6:ad:63:52:c8:7c:d5:88:92:a9: 03:46:42:05:54:15:e8:71:28:18:33:cc:27:a3:53:13:a8:77: da:f9:cc:00:14:57:c4:c9:12:97:6f:e0:12:52:49:57:e6:e1: b6:a4:db:97:71:70:cc:3b:6d:d8:f3:c4:b7:55:e9:bb:82:ac: fc:50:77:8b:3a:92:91:8d:fc:ea:8d:17:05:c2:73:d7:ec:c3: 20:26:f1:21:e2:cf:6e:69:8d:f6:4c:c3:53:02:7d:09:90:ed: 76:b6:b4:64:6f:aa:17:82:e6:99:eb:b9:40:7b:aa:21:13:b3: 55:03:1f:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzzURLv9jsfT0f91lrTfxlt9Ck0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNTA0MDMwNjQ1NTJaFw0yNTA0MDYxNTA0NTJaMDMxMTAvBgNV BAMTKDJDNTQ0RkFFQzA0OEUyQzYyQTNGQjY4QzAzMTNERkEzRTI5RjFFQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChitzOQz6+VKyAKVSO20satBeT JqbMoZLApIYg+1+yq4suiXTsEu+ow4rXXcrsjmaGmj/4j9sRBjL9qrfiEZHm6Ca4 79fKMbw3pgN+tFTsrLoGoPVxDn7PfCKGjt9ayH1Ge0pTxR27Hco+Cw0jTn4AYsPk JQqSk64SzrHS3Q7h9FvFWYbszdPGP0a1/4WyhtPmJa+Y3RaRVBs2NUs7TG4EQr0a Zn8Z7yBnZXDqCsFT0UEFwymgnM7CtQHV4EuDaJKk4mcRk0Jvj7W662FCwazeR+WC uStX1qjYzS0/a1JEjTAriJay6VzuOL10jvx4ux6PZv2AB2tJI35nf0YKTCNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULFRPrsBI4sYqP7aMAxPfo+KfHrgwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQW9idP3RHfY8xFkOzgcl4JHvpFPKz+/t5a otzvM+bskW7KmBTfDLt9/RitbUqzIUrtbypqv86BfxJwBpr+OdrWZXvVFUBdoq/1 A7O/hrJ6mZ7NJ8OhHf/Ct9Aq0dyMHlSi7nmaj7OZyjq6rMHGZATr+QQ39wfQJm+C EKoAJIkgbRmf+fNv5q1jUsh81YiSqQNGQgVUFehxKBgzzCejUxOod9r5zAAUV8TJ Epdv4BJSSVfm4bak25dxcMw7bdjzxLdV6buCrPxQd4s6kpGN/OqNFwXCc9fswyAm 8SHiz25pjfZMw1MCfQmQ7Xa2tGRvqheC5pnruUB7qiETs1UDH38= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:20 2025 by rpki-client