$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: Fy2ed9QEQXub3Ea7SAyrf2ajAw+v1ZTVwmTfDFS0NCs= Subject key identifier: 93:0E:02:91:14:02:EA:3B:B5:C7:96:E4:2E:77:78:BA:C3:51:A0:8E Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 1BA177638AC45B2E988A300E2599F547982C6303 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: DD Signing time: Wed 23 Apr 2025 21:22:20 +0000 Manifest this update: Wed 23 Apr 2025 21:17:20 +0000 Manifest next update: Sun 27 Apr 2025 03:08:20 +0000 Files and hashes: 1: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: egnrAxySdNzwkvZG7pgW2GfPGQmn/8OQ66XKF6zUyrM=) 2: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: KdvVotETb+M2zc51RDT3ZpPM/CVJbk53qJpZlhJ/Zlo=) 3: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: GFPR2JsX0IBoAaGsgaGWjAOgLfdHuDR0oC/bNj7kO2M=) 4: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: NpakJrPB/wc7qdqjNhAbEhaZgiQnrQQiG5gQ5GEaMnQ=) 5: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: L+8SrkY6511c5DJDsz7fYxyef0XtUXzTGXOzwD+HTeU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a1:77:63:8a:c4:5b:2e:98:8a:30:0e:25:99:f5:47:98:2c:63:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Apr 23 21:17:20 2025 GMT Not After : Apr 27 03:08:20 2025 GMT Subject: CN=930E02911402EA3BB5C796E42E7778BAC351A08E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:79:fb:7d:0c:70:8d:fa:29:a4:6b:63:a1: ea:28:7b:54:e6:64:18:4f:ad:a5:bc:05:d6:5f:87: 8a:fd:8d:e3:a1:ab:6f:d0:6e:2f:07:cc:35:3f:9a: 21:4c:7e:f6:74:2f:25:8c:59:97:1f:bc:e8:35:5f: 13:1a:3e:2a:bc:58:60:15:ca:f1:89:45:a0:c1:06: 57:4f:df:0e:e6:1c:8f:e8:8c:a5:62:f1:92:90:d2: c2:88:3b:6f:f8:64:ef:69:89:07:c0:dc:3c:50:9d: 78:58:93:62:97:18:7a:55:21:21:40:eb:6e:8c:3b: e8:75:11:53:a4:e1:76:0c:fe:c1:79:6c:05:4e:8c: 17:7a:10:15:ce:83:f3:bd:5c:ed:09:9b:c7:ae:74: e5:c0:b3:47:24:01:06:db:35:e6:cd:e1:55:5f:0d: 50:4f:e7:49:a2:6e:3a:a9:66:1b:d1:da:35:ef:6f: 1a:56:e0:73:45:fc:b2:0d:35:99:54:2d:55:24:d2: 33:cc:57:2c:4d:73:01:4e:8d:6d:3e:50:b3:20:21: db:57:6e:51:83:76:51:e8:fd:b7:1b:eb:7c:cd:ac: 01:04:09:57:64:2d:d5:25:20:23:5a:4f:a1:07:47: c0:7e:e7:03:a1:ce:79:64:09:34:9d:ed:41:f9:40: 42:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0E:02:91:14:02:EA:3B:B5:C7:96:E4:2E:77:78:BA:C3:51:A0:8E X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:89:d4:40:b9:0d:57:1f:c0:0b:d9:2a:ba:bf:48:5d:e4:8c: 6b:24:4b:0d:00:48:fd:ac:af:d1:d1:da:53:a5:b4:02:46:f2: ac:f1:0c:82:89:28:30:79:38:e0:d8:ef:5d:08:ab:a4:ac:25: a9:6f:0f:a5:84:89:43:53:b6:46:03:2e:a5:d2:46:fa:3b:c4: 0b:be:14:af:cc:f4:fe:e2:8a:94:03:40:6f:b7:2b:20:e9:ec: d2:39:bb:f6:1e:6a:b4:c6:56:ea:ce:12:fd:d2:97:5b:66:0d: 2b:67:6a:5a:03:7c:13:59:ff:55:bd:d4:da:b9:ea:cd:5d:4d: c5:f1:6f:85:76:34:33:73:2f:75:6c:31:9c:33:95:c2:c6:6d: 16:f3:38:ac:8e:4d:58:89:4f:39:06:b6:29:59:72:d6:83:c9: be:18:94:24:66:42:93:4d:01:53:d6:23:c3:27:4b:16:8e:0e: df:7d:4d:60:e7:aa:55:36:56:90:a0:16:4c:38:37:68:05:38: ba:cc:be:a3:a3:ac:ba:83:fe:1e:81:04:39:f8:53:8f:65:f8: e8:e0:d3:f6:cb:7e:0f:f6:e4:df:64:29:d9:69:38:d2:8b:14: c6:0a:01:02:8f:c4:97:2a:bd:b2:f0:4b:7d:ab:0d:61:92:14: 84:ad:d1:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6F3Y4rEWy6YijAOJZn1R5gsYwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNTA0MjMyMTE3MjBaFw0yNTA0MjcwMzA4MjBaMDMxMTAvBgNV BAMTKDkzMEUwMjkxMTQwMkVBM0JCNUM3OTZFNDJFNzc3OEJBQzM1MUEwOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQ3n7fQxwjfoppGtjoeooe1Tm ZBhPraW8BdZfh4r9jeOhq2/Qbi8HzDU/miFMfvZ0LyWMWZcfvOg1XxMaPiq8WGAV yvGJRaDBBldP3w7mHI/ojKVi8ZKQ0sKIO2/4ZO9piQfA3DxQnXhYk2KXGHpVISFA 626MO+h1EVOk4XYM/sF5bAVOjBd6EBXOg/O9XO0Jm8eudOXAs0ckAQbbNebN4VVf DVBP50mibjqpZhvR2jXvbxpW4HNF/LINNZlULVUk0jPMVyxNcwFOjW0+ULMgIdtX blGDdlHo/bcb63zNrAEECVdkLdUlICNaT6EHR8B+5wOhznlkCTSd7UH5QELRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkw4CkRQC6ju1x5bkLnd4usNRoI4wHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmJ1EC5DVcfwAvZKrq/SF3kjGskSw0ASP2s r9HR2lOltAJG8qzxDIKJKDB5OODY710Iq6SsJalvD6WEiUNTtkYDLqXSRvo7xAu+ FK/M9P7iipQDQG+3KyDp7NI5u/YearTGVurOEv3Sl1tmDStnaloDfBNZ/1W91Nq5 6s1dTcXxb4V2NDNzL3VsMZwzlcLGbRbzOKyOTViJTzkGtilZctaDyb4YlCRmQpNN AVPWI8MnSxaODt99TWDnqlU2VpCgFkw4N2gFOLrMvqOjrLqD/h6BBDn4U49l+Ojg 0/bLfg/25N9kKdlpONKLFMYKAQKPxJcqvbLwS32rDWGSFISt0aA= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:10 2025 by rpki-client on console.sobornost.net