$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft File: 38A92419EE1289455FCB1B71F9420F05CA334C15.mft (raw, json) Hash identifier: +rUxrxvVrazzfNmSpsnGFRsRysqzOLQdFCQVeZBWgd8= Subject key identifier: 21:4B:6E:B7:F3:A4:80:89:58:3F:62:16:EB:4D:0D:87:3E:53:2F:8F Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 Certificate issuer: /CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Certificate serial: 2C3953085671F0A887756078166C9B0E64C65160 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft Manifest number: 01C0 Signing time: Fri 04 Apr 2025 12:10:00 +0000 Manifest this update: Fri 04 Apr 2025 12:05:00 +0000 Manifest next update: Mon 07 Apr 2025 17:32:00 +0000 Files and hashes: 1: 38A92419EE1289455FCB1B71F9420F05CA334C15.crl (hash: zHX+Kqkq1BvcsXiSuDCeJ1bhSgKHQ3sxEksYlnVAweI=) 2: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: yoAqIDqNer4XlQ0+ronIuspCUrncotmaV+PV2iSEjzg=) 3: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: pmq7DLjh6be5fXi1p+gF/43ZLVD065kAbAJSDEPJSCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:39:53:08:56:71:f0:a8:87:75:60:78:16:6c:9b:0e:64:c6:51:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Validity Not Before: Apr 4 12:05:00 2025 GMT Not After : Apr 7 17:32:00 2025 GMT Subject: CN=214B6EB7F3A48089583F6216EB4D0D873E532F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:cb:45:a7:bb:05:e9:d9:71:f4:af:e9:a6: 98:81:67:fb:dd:e1:00:67:4d:d1:88:d9:fe:e3:9e: 26:49:02:fb:05:11:96:b1:2e:f0:f3:23:f0:0f:26: 90:d8:5d:c7:ef:90:56:da:5c:fa:f8:cf:9f:d9:94: ee:ca:04:cc:56:66:1a:c4:b0:4b:da:ea:3b:3a:85: ca:70:6e:f0:9d:db:c4:4c:80:9c:02:fa:fe:b1:fa: f6:e6:9f:b5:11:43:a8:ab:4f:b5:ab:8c:47:2f:46: 38:7c:16:8b:50:18:c3:08:bb:63:58:e6:4f:44:67: 6d:6e:91:74:43:08:b5:33:63:2f:53:55:d2:b8:39: 12:2d:9a:6c:9b:29:d9:14:73:48:a2:62:9e:0f:56: be:09:ba:df:cb:a1:00:77:dd:d0:04:cb:77:7c:a5: ca:83:f3:a5:d2:20:13:da:83:a0:bd:2c:2f:67:88: ea:be:99:ab:1c:f7:ff:fe:42:87:dc:2c:b9:66:1b: 91:e0:c2:4d:16:3f:9a:b6:a4:d2:f2:3f:c9:13:18: 96:c7:f4:c4:9d:27:32:ef:a6:0d:39:e0:7f:70:ec: 1d:45:a3:9f:e0:58:1f:39:ee:77:4b:a2:de:d6:0e: b2:07:50:8c:1d:c4:5d:bf:47:43:10:59:15:f4:3b: bf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4B:6E:B7:F3:A4:80:89:58:3F:62:16:EB:4D:0D:87:3E:53:2F:8F X509v3 Authority Key Identifier: keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:5d:3c:64:4d:82:71:c8:7f:9c:ac:9b:b7:8d:77:e2:7f:3c: 3d:ea:8a:d0:96:e2:58:7f:b5:cf:39:07:e1:75:a7:8b:71:99: a1:92:d6:4f:99:4a:ed:0d:85:02:cb:b9:11:2a:69:ba:83:fd: 8c:cb:a7:6a:25:8f:2e:a6:ac:47:d2:47:64:ca:f9:66:21:4a: a8:7b:6c:28:8c:d4:e2:df:33:08:d2:35:ba:9c:dd:44:48:7f: 82:68:36:20:62:1b:02:e1:c6:20:f7:9b:e3:39:0e:89:72:63: 18:e2:c4:43:1b:a8:1b:5b:1d:4e:1f:4b:a7:7e:9f:71:8d:3a: 32:87:36:86:f7:e7:0c:27:88:ce:ef:24:d7:e6:41:10:c7:de: c8:b3:0f:1b:75:b2:1e:be:04:54:3f:07:95:22:7b:30:9d:cc: 5a:18:fd:cf:fb:24:31:e6:30:4b:73:55:14:88:e8:91:6b:87: 99:3b:60:fd:a7:10:39:ff:15:5a:61:11:bf:ea:9a:95:20:1a: d3:f2:63:b4:1e:d6:16:ef:31:fd:bf:c8:c8:20:53:d8:7f:a1: 41:72:0b:fe:98:3e:56:d3:e2:b7:ea:73:8e:94:ec:4d:de:f0: aa:0f:ed:f0:1c:df:dd:30:87:e6:8d:3e:de:bc:5d:dc:8a:ed: cd:28:17:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDlTCFZx8KiHdWB4FmybDmTGUWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVD QTMzNEMxNTAeFw0yNTA0MDQxMjA1MDBaFw0yNTA0MDcxNzMyMDBaMDMxMTAvBgNV BAMTKDIxNEI2RUI3RjNBNDgwODk1ODNGNjIxNkVCNEQwRDg3M0U1MzJGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOctFp7sF6dlx9K/pppiBZ/vd 4QBnTdGI2f7jniZJAvsFEZaxLvDzI/APJpDYXcfvkFbaXPr4z5/ZlO7KBMxWZhrE sEva6js6hcpwbvCd28RMgJwC+v6x+vbmn7URQ6irT7WrjEcvRjh8FotQGMMIu2NY 5k9EZ21ukXRDCLUzYy9TVdK4ORItmmybKdkUc0iiYp4PVr4Jut/LoQB33dAEy3d8 pcqD86XSIBPag6C9LC9niOq+masc9//+QofcLLlmG5Hgwk0WP5q2pNLyP8kTGJbH 9MSdJzLvpg054H9w7B1Fo5/gWB857ndLot7WDrIHUIwdxF2/R0MQWRX0O79BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIUtut/OkgIlYP2IW600Nhz5TL48wHwYDVR0j BBgwFoAUOKkkGe4SiUVfyxtx+UIPBcozTBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRhZDhjYi1hNTM3LTRjNTAtYWY2YS1hYWJhNWYxZTc2NDQvMC8zOEE5MjQxOUVF MTI4OTQ1NUZDQjFCNzFGOTQyMEYwNUNBMzM0QzE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVDQTMz NEMxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkYWQ4Y2ItYTUzNy00YzUwLWFm NmEtYWFiYTVmMWU3NjQ0LzAvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBG MDVDQTMzNEMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBdPGRNgnHIf5ysm7eNd+J/PD3qitCW4lh/ tc85B+F1p4txmaGS1k+ZSu0NhQLLuREqabqD/YzLp2oljy6mrEfSR2TK+WYhSqh7 bCiM1OLfMwjSNbqc3URIf4JoNiBiGwLhxiD3m+M5DolyYxjixEMbqBtbHU4fS6d+ n3GNOjKHNob35wwniM7vJNfmQRDH3sizDxt1sh6+BFQ/B5UiezCdzFoY/c/7JDHm MEtzVRSI6JFrh5k7YP2nEDn/FVphEb/qmpUgGtPyY7Qe1hbvMf2/yMggU9h/oUFy C/6YPlbT4rfqc46U7E3e8KoP7fAc390wh+aNPt68XdyK7c0oF8o= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:52 2025 by rpki-client