$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: sleXt0yPXBHCY3mAaEra/uPWirO24vI9lxKqU10SnwY= Subject key identifier: D2:CA:F5:42:32:19:E8:86:CD:87:A8:3A:6A:9D:02:DA:4C:52:B7:7A Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 490665B6F76120646DBEE59E0D200BA1C2FCBF18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 0140 Signing time: Thu 17 Apr 2025 09:10:55 +0000 Manifest this update: Thu 17 Apr 2025 09:05:55 +0000 Manifest next update: Sun 20 Apr 2025 15:10:55 +0000 Files and hashes: 1: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: QBqVui7nbdPqIXFR/eopnqfOC0yb54tGiT/3isOiwX0=) 2: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=) 3: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=) 4: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=) 5: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=) 6: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=) 7: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=) 8: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=) 9: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=) 10: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=) 11: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 15:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:06:65:b6:f7:61:20:64:6d:be:e5:9e:0d:20:0b:a1:c2:fc:bf:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Apr 17 09:05:55 2025 GMT Not After : Apr 20 15:10:55 2025 GMT Subject: CN=D2CAF5423219E886CD87A83A6A9D02DA4C52B77A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:a3:0a:1a:b2:0d:d9:73:5a:57:ae:4a:41: b7:29:53:0e:db:fd:b8:cd:20:65:16:7f:39:70:ee: be:81:ec:9d:eb:db:95:b7:cd:1a:09:c6:98:08:11: e5:3d:a8:07:f6:98:d4:ad:06:fd:84:d9:d2:c2:e4: 64:1d:b8:cf:29:1b:c5:85:c1:cd:c1:77:34:ed:d1: f0:c2:e9:7f:dc:ad:10:c3:94:42:b2:1d:de:77:34: 06:01:1b:35:f1:c3:85:5b:29:e6:a2:6d:7c:16:47: 32:3b:db:05:b9:42:95:f0:ce:40:41:63:6a:4b:3b: 2a:3f:99:27:63:a1:bb:92:b0:e2:e1:8e:5b:2c:01: 17:99:e8:70:bf:4e:42:e5:e9:c5:0e:db:ce:16:a4: a0:9d:c8:e3:74:a5:fd:a9:2a:ce:38:7b:67:97:d2: 50:6c:06:6a:79:b0:be:7e:07:a7:04:6d:d0:2b:bc: 14:68:9b:a2:8e:1a:02:b3:bf:2f:e5:1b:f0:97:56: 94:cd:33:1c:0c:df:fb:86:78:f6:49:09:1d:5a:17: 74:6d:83:e0:fe:9e:d6:04:26:76:99:5c:9c:19:ce: a4:48:b8:2a:a8:fb:cf:63:c9:f5:eb:95:7b:ed:11: 9f:18:e5:40:e3:92:3c:72:04:03:d1:d4:ca:5d:23: 60:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CA:F5:42:32:19:E8:86:CD:87:A8:3A:6A:9D:02:DA:4C:52:B7:7A X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:23:cf:f9:82:8e:32:93:8b:fd:7a:3c:b2:6a:64:7f:f6:8c: c3:e3:ba:28:52:1f:28:d6:a7:34:da:43:b3:47:6d:90:a6:27: 88:03:57:ba:a2:88:eb:b6:a5:84:9d:d1:44:14:ef:51:f6:02: f7:6c:7e:8e:3a:47:c6:35:f9:12:50:25:af:c9:04:9f:f8:d7: 28:3f:85:81:1b:5b:07:c7:89:23:e4:09:07:07:83:61:ba:d8: 78:b5:50:54:7b:a5:55:c8:3a:20:ec:25:d3:2e:a3:89:f4:cb: 9d:7c:b9:c2:6f:64:7a:bc:a4:14:79:66:b0:b4:2f:1e:14:b2: b7:22:8c:0c:32:c5:32:aa:4a:b9:bd:c7:59:1c:a2:c6:99:92: 71:3d:15:86:f8:af:39:d9:a7:2b:83:5b:87:55:1a:cb:21:a6: a4:6f:11:bd:f9:f3:05:5a:2c:9f:9f:ce:a1:ee:ef:73:4a:93: 19:3a:f2:68:4a:9e:99:51:f2:0a:f2:d8:c2:09:c8:6d:24:aa: e9:26:85:61:72:77:1c:7f:7d:5c:e4:f0:7f:0b:c1:98:d3:2f: 16:84:02:82:f2:db:29:7c:0e:59:1b:65:28:bd:85:db:37:4b: 0e:da:62:42:aa:63:19:50:b4:0a:b6:01:4e:05:ea:c2:f0:00: 07:94:15:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQZltvdhIGRtvuWeDSALocL8vxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNTA0MTcwOTA1NTVaFw0yNTA0MjAxNTEwNTVaMDMxMTAvBgNV BAMTKEQyQ0FGNTQyMzIxOUU4ODZDRDg3QTgzQTZBOUQwMkRBNEM1MkI3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfwqMKGrIN2XNaV65KQbcpUw7b /bjNIGUWfzlw7r6B7J3r25W3zRoJxpgIEeU9qAf2mNStBv2E2dLC5GQduM8pG8WF wc3BdzTt0fDC6X/crRDDlEKyHd53NAYBGzXxw4VbKeaibXwWRzI72wW5QpXwzkBB Y2pLOyo/mSdjobuSsOLhjlssAReZ6HC/TkLl6cUO284WpKCdyON0pf2pKs44e2eX 0lBsBmp5sL5+B6cEbdArvBRom6KOGgKzvy/lG/CXVpTNMxwM3/uGePZJCR1aF3Rt g+D+ntYEJnaZXJwZzqRIuCqo+89jyfXrlXvtEZ8Y5UDjkjxyBAPR1MpdI2DfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0sr1QjIZ6IbNh6g6ap0C2kxSt3owHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8jz/mCjjKTi/16PLJqZH/2jMPjuihSHyjW pzTaQ7NHbZCmJ4gDV7qiiOu2pYSd0UQU71H2Avdsfo46R8Y1+RJQJa/JBJ/41yg/ hYEbWwfHiSPkCQcHg2G62Hi1UFR7pVXIOiDsJdMuo4n0y518ucJvZHq8pBR5ZrC0 Lx4UsrcijAwyxTKqSrm9x1kcosaZknE9FYb4rznZpyuDW4dVGsshpqRvEb358wVa LJ+fzqHu73NKkxk68mhKnplR8gry2MIJyG0kqukmhWFydxx/fVzk8H8LwZjTLxaE AoLy2yl8DlkbZSi9hds3Sw7aYkKqYxlQtAq2AU4F6sLwAAeUFdQ= -----END CERTIFICATE-----Generated at Thu Apr 17 22:34:49 2025 by rpki-client