$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: Gfvf4+JH7YxYQ0GwBBSOTbct0L3MvKTsOXs4mGqp6rQ= Subject key identifier: B6:EE:6B:4D:E8:04:26:69:BE:CD:48:AB:68:27:23:C3:92:61:C0:B6 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 0FD62A19155755D834BE76847BA44357F041357C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 017F Signing time: Sat 06 Sep 2025 21:40:55 +0000 Manifest this update: Sat 06 Sep 2025 21:35:55 +0000 Manifest next update: Tue 09 Sep 2025 22:10:55 +0000 Files and hashes: 1: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=) 2: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=) 3: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=) 4: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=) 5: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=) 6: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=) 7: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=) 8: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=) 9: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=) 10: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=) 11: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: 4iH76IE0rSWw0TPsoB7x+O7+ZhYhDSVDATYeFbxR0gQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d6:2a:19:15:57:55:d8:34:be:76:84:7b:a4:43:57:f0:41:35:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Sep 6 21:35:55 2025 GMT Not After : Sep 9 22:10:55 2025 GMT Subject: CN=B6EE6B4DE8042669BECD48AB682723C39261C0B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:7b:30:09:2e:a5:b0:dc:c8:74:ae:a4:72: cc:00:f3:bb:dc:f4:a5:25:39:92:bf:4f:9a:35:a1: 80:e9:f9:df:1a:02:53:cd:62:82:c7:73:29:2b:30: 5d:a4:f6:1b:07:43:99:0a:57:22:42:24:0a:44:f5: 63:b9:03:0e:c8:e7:b9:50:c3:d7:50:05:4e:f9:4d: 52:74:69:b3:81:40:b5:c2:b0:57:20:f1:3b:e8:f7: 43:94:58:ac:4a:f7:84:1c:34:38:ba:9a:f8:06:5d: d9:f9:59:77:c2:7e:48:e7:00:a2:cb:4b:81:ef:65: 0b:81:50:ad:6b:f8:60:bb:18:14:1e:27:2f:bf:9b: 7d:18:d6:e3:74:1d:ec:9d:28:b1:3a:0d:f3:89:16: fc:10:ab:cd:88:96:ee:93:74:9c:fa:e0:4f:ad:c2: 44:59:1a:35:92:3f:fc:7b:7c:f3:6e:08:03:af:bc: 0a:e2:b5:98:93:8e:d9:36:54:49:ec:d3:2e:ff:0b: f6:e2:29:ca:9f:cc:34:9c:d3:39:8e:30:b6:64:52: 31:c6:c9:c5:24:04:5f:b4:3f:7c:de:01:cf:09:ab: 2a:35:81:f8:a9:d1:9b:0e:0b:95:15:b0:c7:97:8a: 46:0f:a9:a0:7d:18:4a:0e:51:14:ed:6e:de:5c:fd: e4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EE:6B:4D:E8:04:26:69:BE:CD:48:AB:68:27:23:C3:92:61:C0:B6 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:39:96:0a:2c:a3:9e:54:47:f8:d4:91:29:2a:9e:bb:07:31: 59:a1:1c:fb:fc:90:26:42:b7:3f:77:26:b2:2d:0a:0e:01:1f: cc:65:15:ae:eb:85:68:e2:62:b7:75:af:dc:c8:97:f5:53:f4: f9:7e:ba:20:92:c3:0b:f8:a8:4d:3d:bc:6f:b2:70:8d:0c:93: 16:04:92:bf:eb:7b:33:26:e5:e4:ff:77:60:a6:3d:74:f6:1f: 0d:85:3f:85:e2:1e:c0:66:88:1a:88:28:81:53:d7:d4:f7:a3: 30:36:a3:f3:2a:03:5c:18:02:31:37:37:03:a2:94:d8:a2:c9: 19:3b:98:97:24:95:28:88:91:53:4d:41:3a:63:b2:af:f4:ea: d2:bd:eb:3e:96:7f:3f:54:4d:e8:11:ab:b9:bd:52:8a:ea:dc: 6e:c2:94:ec:a3:6d:c3:3f:5a:f7:ad:15:8f:0b:a0:2c:d4:a4: 6c:23:84:35:be:5b:3b:56:4b:96:04:1a:a6:0a:45:98:6e:bd: 43:96:d4:02:bd:6a:9c:8b:ba:55:80:5b:f4:d0:56:7d:7b:32: 10:bc:1f:b3:8c:ee:f6:bb:f0:5c:c7:3c:f5:a8:93:b6:25:f1: 43:03:38:13:d1:8a:20:a1:57:bb:88:2f:20:99:e6:01:64:51: 6b:6c:93:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9YqGRVXVdg0vnaEe6RDV/BBNXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNTA5MDYyMTM1NTVaFw0yNTA5MDkyMjEwNTVaMDMxMTAvBgNV BAMTKEI2RUU2QjRERTgwNDI2NjlCRUNENDhBQjY4MjcyM0MzOTI2MUMwQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45nswCS6lsNzIdK6kcswA87vc 9KUlOZK/T5o1oYDp+d8aAlPNYoLHcykrMF2k9hsHQ5kKVyJCJApE9WO5Aw7I57lQ w9dQBU75TVJ0abOBQLXCsFcg8Tvo90OUWKxK94QcNDi6mvgGXdn5WXfCfkjnAKLL S4HvZQuBUK1r+GC7GBQeJy+/m30Y1uN0HeydKLE6DfOJFvwQq82Ilu6TdJz64E+t wkRZGjWSP/x7fPNuCAOvvAritZiTjtk2VEns0y7/C/biKcqfzDSc0zmOMLZkUjHG ycUkBF+0P3zeAc8Jqyo1gfip0ZsOC5UVsMeXikYPqaB9GEoOURTtbt5c/eSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtu5rTegEJmm+zUiraCcjw5JhwLYwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAU5lgoso55UR/jUkSkqnrsHMVmhHPv8kCZC tz93JrItCg4BH8xlFa7rhWjiYrd1r9zIl/VT9Pl+uiCSwwv4qE09vG+ycI0MkxYE kr/rezMm5eT/d2CmPXT2Hw2FP4XiHsBmiBqIKIFT19T3ozA2o/MqA1wYAjE3NwOi lNiiyRk7mJcklSiIkVNNQTpjsq/06tK96z6Wfz9UTegRq7m9Uorq3G7ClOyjbcM/ WvetFY8LoCzUpGwjhDW+WztWS5YEGqYKRZhuvUOW1AK9apyLulWAW/TQVn17MhC8 H7OM7va78FzHPPWok7Yl8UMDOBPRiiChV7uILyCZ5gFkUWtskzA= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:48 2025 by rpki-client