$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: 0tZPNw2r5+OyRMC9D8/fKd8bpKJVei2J9rwKYk+NNVQ= Subject key identifier: 87:60:A7:14:05:9B:5E:16:6E:BB:0D:90:9F:B5:37:46:34:7C:85:6C Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 142162763B70A73C5B39133548090E542BEEC06A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: 0119 Signing time: Fri 05 Sep 2025 02:52:19 +0000 Manifest this update: Fri 05 Sep 2025 02:47:19 +0000 Manifest next update: Mon 08 Sep 2025 03:11:19 +0000 Files and hashes: 1: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: GFPR2JsX0IBoAaGsgaGWjAOgLfdHuDR0oC/bNj7kO2M=) 2: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: EbIZROOkiCkTQyrRHmHBDEa6yeAy3Ijw/9Od9lvP4Wg=) 3: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: egnrAxySdNzwkvZG7pgW2GfPGQmn/8OQ66XKF6zUyrM=) 4: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: NpakJrPB/wc7qdqjNhAbEhaZgiQnrQQiG5gQ5GEaMnQ=) 5: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: L+8SrkY6511c5DJDsz7fYxyef0XtUXzTGXOzwD+HTeU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 03:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:21:62:76:3b:70:a7:3c:5b:39:13:35:48:09:0e:54:2b:ee:c0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Sep 5 02:47:19 2025 GMT Not After : Sep 8 03:11:19 2025 GMT Subject: CN=8760A714059B5E166EBB0D909FB53746347C856C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ca:ae:95:c0:b5:96:09:fa:c8:9a:dd:17:7c: 2c:89:7d:be:eb:a1:27:6d:70:44:f6:cc:7a:7b:26: 4a:4f:b0:49:60:6a:d8:55:26:56:42:01:d5:ab:ec: dc:89:b9:20:99:63:da:99:f5:31:a5:ed:ed:c9:69: 64:d0:0c:e8:68:9b:98:f1:f0:5c:92:56:7c:7e:3d: 57:27:30:b9:d9:d3:53:38:1a:ba:fc:3e:17:08:f0: 52:0d:0e:4c:32:1b:d5:9e:61:65:b2:4c:1d:4f:18: d0:a0:21:64:6f:00:6b:61:2a:38:79:46:89:42:4d: 46:3a:71:30:e5:d2:39:e5:3c:13:24:5f:fb:02:2d: 00:69:ad:9e:bd:b0:72:0e:c6:a7:3b:f6:ad:c3:7f: d2:bc:8a:b5:ad:4a:c9:5e:88:48:ef:fd:5e:32:bc: 63:8c:45:9c:29:38:08:be:4d:25:f8:03:2f:cf:08: a2:f4:05:56:06:00:28:6b:3f:58:89:00:83:ff:65: 81:71:4b:db:5c:c8:66:ac:e0:85:5a:d8:c3:a5:f3: 33:2e:4b:37:12:01:bb:da:28:22:29:f2:98:ec:8a: d8:e3:f1:7d:32:56:34:57:44:68:49:e9:1b:a8:13: d7:58:78:d0:05:bb:59:34:78:62:d6:ef:a1:ae:60: af:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:60:A7:14:05:9B:5E:16:6E:BB:0D:90:9F:B5:37:46:34:7C:85:6C X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d5:bf:82:eb:0f:a9:8d:39:84:99:64:43:d6:40:a2:96:5d: ab:50:4d:88:c1:21:d5:7f:18:1f:28:91:65:5a:62:87:c5:bc: 2e:3e:7c:42:78:62:de:98:56:58:68:0c:9f:ea:a7:12:01:29: d7:09:af:2c:35:04:81:8f:53:30:fb:4b:88:d2:50:ae:66:df: f3:bc:23:8e:47:43:86:29:68:23:91:12:ab:04:8c:3d:91:77: ff:b5:c9:a9:e4:47:cd:d9:5c:5b:48:fc:f8:85:81:fb:d4:13: 58:69:9c:1b:c3:16:91:be:01:48:ae:fe:6f:fc:96:e2:c7:b3: 6a:58:15:a8:1e:9b:99:5a:1d:e4:a1:db:fe:d7:76:24:5e:b0: 42:db:19:97:73:0e:00:27:49:cd:12:8c:8d:6f:db:de:06:ff: 1e:ef:56:da:3d:5f:e1:b8:ed:bc:3a:94:df:8c:ff:4e:8e:1f: 07:cc:6a:87:c9:dc:97:b4:61:83:f8:83:89:82:8b:9e:20:17: 33:3b:78:fa:33:13:4a:65:5b:8d:8e:ae:49:4e:03:76:c2:fa: f5:dd:9b:e7:37:8f:08:86:33:5d:22:cf:72:4b:f3:1d:45:90: f4:7a:ec:4b:39:11:ff:37:a8:a7:01:69:0f:3d:92:9a:30:f4: db:a0:68:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFCFidjtwpzxbORM1SAkOVCvuwGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNTA5MDUwMjQ3MTlaFw0yNTA5MDgwMzExMTlaMDMxMTAvBgNV BAMTKDg3NjBBNzE0MDU5QjVFMTY2RUJCMEQ5MDlGQjUzNzQ2MzQ3Qzg1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfyq6VwLWWCfrImt0XfCyJfb7r oSdtcET2zHp7JkpPsElgathVJlZCAdWr7NyJuSCZY9qZ9TGl7e3JaWTQDOhom5jx 8FySVnx+PVcnMLnZ01M4Grr8PhcI8FINDkwyG9WeYWWyTB1PGNCgIWRvAGthKjh5 RolCTUY6cTDl0jnlPBMkX/sCLQBprZ69sHIOxqc79q3Df9K8irWtSsleiEjv/V4y vGOMRZwpOAi+TSX4Ay/PCKL0BVYGAChrP1iJAIP/ZYFxS9tcyGas4IVa2MOl8zMu SzcSAbvaKCIp8pjsitjj8X0yVjRXRGhJ6RuoE9dYeNAFu1k0eGLW76GuYK8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh2CnFAWbXhZuuw2Qn7U3RjR8hWwwHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHVv4LrD6mNOYSZZEPWQKKWXatQTYjBIdV/ GB8okWVaYofFvC4+fEJ4Yt6YVlhoDJ/qpxIBKdcJryw1BIGPUzD7S4jSUK5m3/O8 I45HQ4YpaCOREqsEjD2Rd/+1yankR83ZXFtI/PiFgfvUE1hpnBvDFpG+AUiu/m/8 luLHs2pYFagem5laHeSh2/7XdiResELbGZdzDgAnSc0SjI1v294G/x7vVto9X+G4 7bw6lN+M/06OHwfMaofJ3Je0YYP4g4mCi54gFzM7ePozE0plW42OrklOA3bC+vXd m+c3jwiGM10iz3JL8x1FkPR67Es5Ef83qKcBaQ89kpow9NugaF0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:41 2025 by rpki-client