$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: tRortk3sNw0HwTkXmcMaMoFvt6Ay+khaVarap9byPoc= Subject key identifier: 14:82:04:D2:51:DE:55:E7:7B:32:5E:6E:64:3F:2E:11:98:5E:92:17 Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 5D9D8AA8CA039BF44BEC0083C00B36AFD7A2ADFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 018A Signing time: Tue 10 Jun 2025 08:20:40 +0000 Manifest this update: Tue 10 Jun 2025 08:15:40 +0000 Manifest next update: Fri 13 Jun 2025 18:12:40 +0000 Files and hashes: 1: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: 10oI8CHQqYdkLuwNKGwOO6zfkO5JTi82txb49cvXQ7s=) 2: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: ACcQhRapf6vFaEKyZOGhIMBvmGfyYoXYYy4Y4s548qg=) 3: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: 1urt7xQMv77erDeUIECaqrLKucZfl8WxybZfYUf3NGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 18:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9d:8a:a8:ca:03:9b:f4:4b:ec:00:83:c0:0b:36:af:d7:a2:ad:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Jun 10 08:15:40 2025 GMT Not After : Jun 13 18:12:40 2025 GMT Subject: CN=148204D251DE55E77B325E6E643F2E11985E9217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:97:4b:12:96:bd:bb:9f:b6:69:b1:64:11: d1:b3:70:9c:75:0d:d0:d5:33:b9:35:d3:60:6d:08: 7c:b3:24:4b:15:78:5b:87:0b:53:d6:13:f5:f4:dd: 48:5e:94:5d:d4:ac:2f:75:49:67:57:c8:98:73:f0: be:71:4b:00:90:2f:8a:43:33:bb:e9:cb:45:5d:2b: 42:4c:d8:ca:92:98:1b:a8:85:ec:c7:be:08:cb:6d: 21:50:6d:cf:cc:59:d3:0b:ad:c3:d7:a7:a8:a4:39: 67:6d:49:cd:ac:f8:c4:38:70:11:3b:2b:6e:8d:b2: ce:84:48:33:11:9c:ae:42:33:b9:12:fa:24:1c:e4: 9f:f8:2a:97:ff:bb:32:fb:7e:c6:a8:12:1a:a3:9d: 41:d5:26:d5:c3:de:d2:1c:7d:fe:29:25:6b:d8:eb: 3d:a7:37:cc:26:a7:29:cc:7f:53:fa:73:13:7f:ac: 90:ba:48:7c:47:c3:e1:69:13:e4:e2:69:28:2c:30: e9:41:bd:34:e3:44:4d:92:ea:fa:c6:d3:8d:1c:c9: bc:66:a3:13:13:4d:e0:4b:21:e1:6c:d9:9e:1c:c1: 94:16:fb:08:bd:b5:95:83:13:67:15:47:73:b2:38: 71:67:e7:a8:1c:f8:c4:f8:84:f2:06:90:d6:8b:f8: cd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:82:04:D2:51:DE:55:E7:7B:32:5E:6E:64:3F:2E:11:98:5E:92:17 X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:46:a5:1b:76:f8:6e:cc:92:f6:ff:5f:5f:f6:bd:77:62:0b: 57:3e:5d:d3:b5:a4:b9:b1:e8:dd:d0:21:f3:30:9c:a0:bb:b8: 72:79:06:7c:9b:49:3d:36:6d:3a:53:9b:0d:17:b3:4b:ad:e0: d4:2e:7d:f5:b5:09:49:11:ac:a7:68:ca:59:65:a5:f0:43:13: 8f:8d:da:d9:78:82:f9:1b:71:e5:77:67:01:66:d5:83:57:20: 73:f6:38:f4:9e:e6:93:92:92:95:b9:79:70:ab:d4:b6:49:a2: ed:ad:5f:d7:82:05:3a:cd:65:17:db:7f:22:58:39:aa:33:10: 35:09:b8:1e:49:e1:09:8f:75:f0:72:4c:20:be:32:c5:32:5a: 5b:0f:63:90:a5:3c:65:85:ca:41:1f:92:64:26:2b:1b:19:26: 39:88:30:95:0d:35:07:b0:05:5c:e9:7d:85:29:47:55:53:02: 14:21:8a:3e:f6:ba:e4:bf:10:15:02:69:dc:fb:41:47:72:f7: f0:48:05:82:bd:71:5e:c7:ec:81:c4:ec:f9:95:d7:39:01:20: 72:79:8f:cc:78:10:7d:d4:45:15:ef:c9:45:1b:22:c4:b9:84: 2d:84:8f:e8:66:55:a8:27:3b:81:3d:23:a5:a1:e0:e9:5d:0e: 69:de:ad:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZ2KqMoDm/RL7ACDwAs2r9eirf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNTA2MTAwODE1NDBaFw0yNTA2MTMxODEyNDBaMDMxMTAvBgNV BAMTKDE0ODIwNEQyNTFERTU1RTc3QjMyNUU2RTY0M0YyRTExOTg1RTkyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdZdLEpa9u5+2abFkEdGzcJx1 DdDVM7k102BtCHyzJEsVeFuHC1PWE/X03UhelF3UrC91SWdXyJhz8L5xSwCQL4pD M7vpy0VdK0JM2MqSmBuohezHvgjLbSFQbc/MWdMLrcPXp6ikOWdtSc2s+MQ4cBE7 K26Nss6ESDMRnK5CM7kS+iQc5J/4Kpf/uzL7fsaoEhqjnUHVJtXD3tIcff4pJWvY 6z2nN8wmpynMf1P6cxN/rJC6SHxHw+FpE+TiaSgsMOlBvTTjRE2S6vrG040cybxm oxMTTeBLIeFs2Z4cwZQW+wi9tZWDE2cVR3OyOHFn56gc+MT4hPIGkNaL+M23AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFIIE0lHeVed7Ml5uZD8uEZhekhcwHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtGpRt2+G7Mkvb/X1/2vXdiC1c+XdO1pLmx 6N3QIfMwnKC7uHJ5BnybST02bTpTmw0Xs0ut4NQuffW1CUkRrKdoylllpfBDE4+N 2tl4gvkbceV3ZwFm1YNXIHP2OPSe5pOSkpW5eXCr1LZJou2tX9eCBTrNZRfbfyJY OaozEDUJuB5J4QmPdfByTCC+MsUyWlsPY5ClPGWFykEfkmQmKxsZJjmIMJUNNQew BVzpfYUpR1VTAhQhij72uuS/EBUCadz7QUdy9/BIBYK9cV7H7IHE7PmV1zkBIHJ5 j8x4EH3URRXvyUUbIsS5hC2Ej+hmVagnO4E9I6Wh4OldDmnerTA= -----END CERTIFICATE-----Generated at Wed Jun 11 11:47:35 2025 by rpki-client