$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: FD4fFRn0/98spqWOBwQ62qBhCnRETOb0d5WuwTo/9Y0= Subject key identifier: CD:F7:AC:BA:94:C3:C6:D7:3C:1E:10:29:31:D5:5A:AB:2C:E9:59:15 Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 6B97191D555AC04F2B4B91E7764F85DA34080079 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: EF Signing time: Mon 02 Jun 2025 23:53:28 +0000 Manifest this update: Mon 02 Jun 2025 23:48:28 +0000 Manifest next update: Fri 06 Jun 2025 02:07:28 +0000 Files and hashes: 1: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: XEtaeHbKg4NIZiIxGDaqrpfxvsFvKCtCFnkUmoRs++A=) 2: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: GFPR2JsX0IBoAaGsgaGWjAOgLfdHuDR0oC/bNj7kO2M=) 3: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: NpakJrPB/wc7qdqjNhAbEhaZgiQnrQQiG5gQ5GEaMnQ=) 4: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: L+8SrkY6511c5DJDsz7fYxyef0XtUXzTGXOzwD+HTeU=) 5: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: egnrAxySdNzwkvZG7pgW2GfPGQmn/8OQ66XKF6zUyrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 02:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:97:19:1d:55:5a:c0:4f:2b:4b:91:e7:76:4f:85:da:34:08:00:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Jun 2 23:48:28 2025 GMT Not After : Jun 6 02:07:28 2025 GMT Subject: CN=CDF7ACBA94C3C6D73C1E102931D55AAB2CE95915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:92:e6:92:2a:ae:0a:4b:32:d8:2c:39:7e:31: 9e:63:d6:71:9c:63:fb:1a:6d:79:8f:5b:83:ab:b1: a7:c7:43:9f:f4:c8:0e:4e:1f:14:43:76:77:38:74: fb:3e:79:ba:1f:69:38:42:84:49:20:9f:f9:54:24: 3e:db:bd:fb:5d:08:65:19:7a:a7:e4:be:f4:f3:3a: f5:69:03:33:f4:21:4b:fb:7b:e3:77:a4:39:98:d4: a3:9a:1a:6b:6d:63:80:50:a5:ca:04:8e:21:57:96: 26:0a:b0:96:49:ac:f9:67:b9:12:f9:46:63:1a:cf: da:c1:97:f1:0a:82:12:d0:9c:ca:4e:5e:b1:d1:ef: d2:cc:a6:3c:0e:4d:14:a1:b2:b0:f0:99:0f:48:c8: 03:2f:c3:f7:6e:70:61:cf:f0:35:c7:d0:d7:29:c1: 84:02:35:8d:fc:f8:8b:1c:f0:07:ba:d3:33:11:f2: 0c:8a:91:e9:76:a8:80:9b:53:46:db:67:e0:8f:38: a7:c1:25:94:be:f1:e2:52:a0:aa:02:30:4c:88:de: 45:bb:68:b6:e9:35:3a:e9:4f:e9:b4:85:c8:92:00: bb:d2:83:cb:29:b2:39:75:a8:76:28:8b:9c:c8:46: 18:6e:92:f9:78:94:53:4e:c7:b9:8c:cf:b9:3f:40: 33:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F7:AC:BA:94:C3:C6:D7:3C:1E:10:29:31:D5:5A:AB:2C:E9:59:15 X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c2:95:4f:bf:a8:93:32:a5:57:f8:31:6e:39:8e:91:17:37: b0:d4:de:b2:7f:75:fb:e9:89:e2:a6:a7:d6:5e:ad:f3:bf:53: 9e:8e:d0:05:9f:c6:4c:37:4f:64:52:4a:18:e1:c6:9e:74:14: 51:77:d8:be:f9:32:1f:3b:2e:23:bf:0a:c1:5c:6e:93:75:b5: 0e:34:d4:41:aa:2c:b4:b3:90:c5:94:a4:fd:d5:3b:4b:bc:e4: e0:45:64:36:60:d6:0f:81:82:b8:d5:dc:f3:02:f3:41:49:0b: 53:c7:9a:7a:a6:fb:ca:72:98:c1:32:bb:47:80:14:e6:56:31: 74:07:08:3f:1e:6c:00:97:00:04:7f:f2:ac:27:e4:fe:a3:7b: 2b:8e:ef:25:70:f7:9c:43:50:6f:e2:3c:69:86:4c:49:f9:9e: e9:a4:8e:d9:f0:4c:a5:98:50:35:9f:2b:b3:c6:87:1e:ba:b4: 65:b4:f0:1e:ce:dc:ec:77:94:5d:99:d0:82:28:b0:f5:1c:79: d9:ee:37:65:af:30:bd:df:b3:c4:74:4a:61:24:ad:d5:73:0f: 0e:1c:12:a4:8f:f3:a6:30:d2:cf:54:17:f7:9a:6c:04:6c:c7: 91:95:4c:9c:ed:61:97:76:8e:39:cb:fb:e4:cc:52:9e:64:dc: 11:af:79:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa5cZHVVawE8rS5Hndk+F2jQIAHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNTA2MDIyMzQ4MjhaFw0yNTA2MDYwMjA3MjhaMDMxMTAvBgNV BAMTKENERjdBQ0JBOTRDM0M2RDczQzFFMTAyOTMxRDU1QUFCMkNFOTU5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkuaSKq4KSzLYLDl+MZ5j1nGc Y/sabXmPW4OrsafHQ5/0yA5OHxRDdnc4dPs+ebofaThChEkgn/lUJD7bvftdCGUZ eqfkvvTzOvVpAzP0IUv7e+N3pDmY1KOaGmttY4BQpcoEjiFXliYKsJZJrPlnuRL5 RmMaz9rBl/EKghLQnMpOXrHR79LMpjwOTRShsrDwmQ9IyAMvw/ducGHP8DXH0Ncp wYQCNY38+Isc8Ae60zMR8gyKkel2qICbU0bbZ+CPOKfBJZS+8eJSoKoCMEyI3kW7 aLbpNTrpT+m0hciSALvSg8spsjl1qHYoi5zIRhhukvl4lFNOx7mMz7k/QDM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzfesupTDxtc8HhApMdVaqyzpWRUwHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvClU+/qJMypVf4MW45jpEXN7DU3rJ/dfvp ieKmp9ZerfO/U56O0AWfxkw3T2RSShjhxp50FFF32L75Mh87LiO/CsFcbpN1tQ40 1EGqLLSzkMWUpP3VO0u85OBFZDZg1g+BgrjV3PMC80FJC1PHmnqm+8pymMEyu0eA FOZWMXQHCD8ebACXAAR/8qwn5P6jeyuO7yVw95xDUG/iPGmGTEn5numkjtnwTKWY UDWfK7PGhx66tGW08B7O3Ox3lF2Z0IIosPUcednuN2WvML3fs8R0SmEkrdVzDw4c EqSP86Yw0s9UF/eabARsx5GVTJztYZd2jjnL++TMUp5k3BGveUU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:39:17 2025 by rpki-client