$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: lp4d+5M/TRzBBn8L8BAd0bFwAOZBAzDr9fcIESL3g3I= Subject key identifier: C2:AA:D2:E8:5D:31:89:90:D3:C6:03:17:5A:BD:A4:6F:41:5A:C2:AD Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 476D10352DCB57D54178F4C9C5212035505DC413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 0189 Signing time: Sun 08 Jun 2025 06:10:41 +0000 Manifest this update: Sun 08 Jun 2025 06:05:41 +0000 Manifest next update: Wed 11 Jun 2025 08:13:41 +0000 Files and hashes: 1: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: aC31MQfuRavs4/m6D8bzf3F7mQ1+ujrV8noGLsc6GkU=) 2: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: 1urt7xQMv77erDeUIECaqrLKucZfl8WxybZfYUf3NGc=) 3: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: ACcQhRapf6vFaEKyZOGhIMBvmGfyYoXYYy4Y4s548qg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 08:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6d:10:35:2d:cb:57:d5:41:78:f4:c9:c5:21:20:35:50:5d:c4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Jun 8 06:05:41 2025 GMT Not After : Jun 11 08:13:41 2025 GMT Subject: CN=C2AAD2E85D318990D3C603175ABDA46F415AC2AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1c:03:72:02:2f:21:93:eb:f3:e6:b9:99:e1: b0:16:a0:b4:40:4b:ae:96:d1:dc:4c:6e:6d:e0:6c: f5:52:76:cf:1c:5e:11:31:1e:d8:66:48:8d:e1:e7: c4:6b:91:ae:cd:d3:9f:bf:bd:01:41:dc:d9:a3:7d: 07:af:88:89:5f:85:77:6d:d5:be:61:d1:f8:17:2d: 8c:2f:37:bb:5f:9c:d3:9c:ff:c0:d3:1a:6f:90:1b: e0:d8:a9:17:81:c1:2a:f6:e0:92:0b:4e:c2:dd:11: eb:93:5d:2c:d2:a8:6d:3b:96:4e:2c:bd:5e:be:dc: 30:f4:2e:d4:a8:f9:14:d3:f6:3d:91:22:51:41:0b: 5d:4c:19:df:f5:8a:ef:08:6b:ed:63:a7:8c:7b:15: 21:9d:b0:42:1d:b0:d3:94:ef:d0:a6:2a:2b:6c:e4: e5:e3:e1:e0:3e:c3:79:9f:95:80:5d:09:99:34:9c: 36:dd:07:60:5b:b0:36:88:e4:79:52:e3:27:9f:be: f3:d7:a1:aa:2a:91:47:7a:c5:91:08:b2:86:30:a6: ff:3b:cb:86:b5:a9:e8:2f:c9:88:34:db:a3:1c:0b: 33:35:6d:2c:5c:98:01:6f:71:c1:22:1f:41:1a:6b: 39:1b:bf:dc:1a:ea:87:c5:85:f3:6d:fd:89:c2:ee: 8a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AA:D2:E8:5D:31:89:90:D3:C6:03:17:5A:BD:A4:6F:41:5A:C2:AD X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e3:a1:f0:d6:92:71:2d:08:9f:ec:db:dd:b3:6c:47:b9:99: c7:80:a2:bc:59:bf:97:bc:1f:c7:bb:b5:cd:69:67:75:2b:f5: 54:47:4c:14:02:73:4e:f9:12:da:05:32:16:a1:cd:c9:20:e0: 6a:11:c2:35:60:5e:af:2f:14:ae:d7:3f:99:38:6e:1e:99:3c: 97:a7:ab:67:92:c8:5e:53:41:e9:1d:33:6e:dc:df:c0:61:5f: 8d:07:67:60:cf:4d:ad:b4:72:fb:70:06:47:8e:e3:b5:91:0a: 97:ae:9c:0c:89:13:4b:ec:21:39:bc:3c:25:f0:c0:f2:3b:87: ab:39:06:5b:3d:25:dd:83:2e:b8:01:dc:5d:1e:9d:50:62:d8: 63:60:36:d1:e2:63:31:e9:ba:06:c0:57:99:9f:e1:e3:e0:53: e9:5b:9d:da:07:d6:37:02:30:d0:b7:df:e3:e0:ac:4a:7f:76: ed:0c:87:ee:7f:dc:54:98:2a:47:73:84:8c:f4:15:1b:06:fd: dd:94:f1:21:3c:2d:53:04:ad:bb:59:34:bc:04:7b:ba:2b:82: 58:b1:65:93:f6:ed:af:cf:91:b0:09:ac:f7:a1:2d:53:c8:65: 6f:65:b5:58:ab:b0:ee:69:cc:c6:3b:a4:9f:31:9e:4e:5b:d0: 04:cb:82:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR20QNS3LV9VBePTJxSEgNVBdxBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNTA2MDgwNjA1NDFaFw0yNTA2MTEwODEzNDFaMDMxMTAvBgNV BAMTKEMyQUFEMkU4NUQzMTg5OTBEM0M2MDMxNzVBQkRBNDZGNDE1QUMyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHANyAi8hk+vz5rmZ4bAWoLRA S66W0dxMbm3gbPVSds8cXhExHthmSI3h58Rrka7N05+/vQFB3NmjfQeviIlfhXdt 1b5h0fgXLYwvN7tfnNOc/8DTGm+QG+DYqReBwSr24JILTsLdEeuTXSzSqG07lk4s vV6+3DD0LtSo+RTT9j2RIlFBC11MGd/1iu8Ia+1jp4x7FSGdsEIdsNOU79CmKits 5OXj4eA+w3mflYBdCZk0nDbdB2BbsDaI5HlS4yefvvPXoaoqkUd6xZEIsoYwpv87 y4a1qegvyYg026McCzM1bSxcmAFvccEiH0Eaazkbv9wa6ofFhfNt/YnC7ooFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwqrS6F0xiZDTxgMXWr2kb0Fawq0wHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvjofDWknEtCJ/s292zbEe5mceAorxZv5e8 H8e7tc1pZ3Ur9VRHTBQCc075EtoFMhahzckg4GoRwjVgXq8vFK7XP5k4bh6ZPJen q2eSyF5TQekdM27c38BhX40HZ2DPTa20cvtwBkeO47WRCpeunAyJE0vsITm8PCXw wPI7h6s5Bls9Jd2DLrgB3F0enVBi2GNgNtHiYzHpugbAV5mf4ePgU+lbndoH1jcC MNC33+PgrEp/du0Mh+5/3FSYKkdzhIz0FRsG/d2U8SE8LVMErbtZNLwEe7orglix ZZP27a/PkbAJrPehLVPIZW9ltVirsO5pzMY7pJ8xnk5b0ATLgp8= -----END CERTIFICATE-----Generated at Mon Jun 9 12:58:02 2025 by rpki-client