$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json) Hash identifier: EUvS3ye5JsKaDyPyrSQC9e/RjaTbutiITWzQPJ7x8yg= Subject key identifier: 90:C0:14:3E:E7:D5:67:BA:3C:5A:9A:AA:C8:47:50:A5:59:7C:43:DF Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Certificate serial: 0FE6E7A6ED255BAC926F0449904FD506111085E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft Manifest number: 01B4 Signing time: Wed 25 Mar 2026 08:41:14 +0000 Manifest this update: Wed 25 Mar 2026 08:36:14 +0000 Manifest next update: Sat 28 Mar 2026 10:12:14 +0000 Files and hashes: 1: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: Eovj9SAYEqYHYkCRnL+QaSDcDxmruMrX7LfegtM54Uo=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e6:e7:a6:ed:25:5b:ac:92:6f:04:49:90:4f:d5:06:11:10:85:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Validity Not Before: Mar 25 08:36:14 2026 GMT Not After : Mar 28 10:12:14 2026 GMT Subject: CN=90C0143EE7D567BA3C5A9AAAC84750A5597C43DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:f6:ce:0e:dd:76:57:c2:80:89:9a:9a:ae: fb:68:2d:b8:10:44:a0:24:9d:3c:c9:c2:ac:a8:ef: 94:bc:57:f0:27:b3:d6:f9:67:88:8a:28:f5:ae:e5: e4:d8:77:b1:86:ab:99:1b:f6:7a:b1:31:4b:e6:21: 43:88:84:06:97:62:e8:37:8f:3e:1b:38:2f:11:34: d1:18:10:f6:b9:08:2e:38:60:cf:3c:4c:99:34:76: cd:fe:d0:1c:7b:37:09:11:34:12:78:1c:d7:bf:7b: c3:99:3e:fb:6d:04:6a:82:cc:5e:f5:4e:91:81:92: ed:48:98:cd:65:06:9e:f1:b7:05:56:1d:83:4c:44: 57:40:fc:ac:84:42:01:0d:ac:65:59:f0:58:d7:34: 9b:d8:6c:6c:cc:2a:0f:32:49:2a:e2:b6:a4:6e:9e: 5c:a8:92:14:8e:63:84:8f:47:27:28:c3:69:55:61: 72:10:a6:eb:49:49:78:f9:28:cf:6b:0e:b9:37:9d: 0f:7e:9b:2f:77:da:d0:d5:7a:d7:0d:f3:a3:eb:62: 0b:94:64:e1:1e:e5:db:a0:0c:23:8a:eb:27:dd:97: a5:bf:80:c4:46:e8:f2:69:56:00:0d:6c:12:8f:71: 65:43:2b:38:33:10:e0:3c:29:88:f8:ca:8b:c8:76: 46:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C0:14:3E:E7:D5:67:BA:3C:5A:9A:AA:C8:47:50:A5:59:7C:43:DF X509v3 Authority Key Identifier: keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a2:d3:99:21:1f:02:c8:db:58:a5:c3:a1:ab:a0:33:de:de: 80:39:0a:7b:ea:91:44:80:1b:52:20:de:7d:53:bd:a2:4c:b4: f6:fa:df:c1:66:6b:75:73:b5:ca:2b:6a:be:30:2e:28:49:35: 54:44:21:6f:aa:82:a0:e9:9f:d5:57:27:1b:24:50:37:bb:9b: da:f9:b0:30:57:c7:2e:b1:d9:8b:e6:86:b4:f2:b9:da:82:f8: af:2e:fe:c9:d4:cc:30:fa:28:4a:e2:c4:6a:f0:31:95:0c:87: 93:c9:07:2f:30:9e:3f:6a:c9:f4:1f:cc:21:a3:f3:17:a4:38: 55:3c:c0:ab:cb:26:b2:69:fc:93:bb:47:5a:e0:26:60:0c:ff: 2f:a7:27:ad:5a:8a:87:ef:a5:12:07:58:0e:7e:f5:ef:8a:46: a9:7c:6c:4a:16:15:6c:bf:0c:36:99:2e:bc:be:dc:ac:fd:24: 2b:ce:9a:c4:38:02:d0:aa:40:bb:4f:9d:db:30:fc:2f:08:71: 04:19:d4:98:4f:9c:ef:51:de:e1:c3:46:60:a0:83:ba:68:21: 7a:cf:38:f3:55:a5:94:e6:a9:ae:81:a2:99:f1:d0:a1:df:8a: 4d:86:da:b8:4b:ec:3d:ce:a3:d2:d5:2e:b5:4b:0e:da:07:91: f0:67:b3:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+bnpu0lW6ySbwRJkE/VBhEQhekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB QkI3MjMzNTAeFw0yNjAzMjUwODM2MTRaFw0yNjAzMjgxMDEyMTRaMDMxMTAvBgNV BAMTKDkwQzAxNDNFRTdENTY3QkEzQzVBOUFBQUM4NDc1MEE1NTk3QzQzREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZPbODt12V8KAiZqarvtoLbgQ RKAknTzJwqyo75S8V/Ans9b5Z4iKKPWu5eTYd7GGq5kb9nqxMUvmIUOIhAaXYug3 jz4bOC8RNNEYEPa5CC44YM88TJk0ds3+0Bx7NwkRNBJ4HNe/e8OZPvttBGqCzF71 TpGBku1ImM1lBp7xtwVWHYNMRFdA/KyEQgENrGVZ8FjXNJvYbGzMKg8ySSritqRu nlyokhSOY4SPRycow2lVYXIQputJSXj5KM9rDrk3nQ9+my932tDVetcN86PrYguU ZOEe5dugDCOK6yfdl6W/gMRG6PJpVgANbBKPcWVDKzgzEOA8KYj4yovIdkZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkMAUPufVZ7o8WpqqyEdQpVl8Q98wHwYDVR0j BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1 REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3 MjMzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQz QUVBQkI3MjMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKai05khHwLI21ilw6GroDPe3oA5CnvqkUSA G1Ig3n1TvaJMtPb638Fma3Vztcorar4wLihJNVREIW+qgqDpn9VXJxskUDe7m9r5 sDBXxy6x2YvmhrTyudqC+K8u/snUzDD6KErixGrwMZUMh5PJBy8wnj9qyfQfzCGj 8xekOFU8wKvLJrJp/JO7R1rgJmAM/y+nJ61aiofvpRIHWA5+9e+KRql8bEoWFWy/ DDaZLry+3Kz9JCvOmsQ4AtCqQLtPndsw/C8IcQQZ1JhPnO9R3uHDRmCgg7poIXrP OPNVpZTmqa6Bopnx0KHfik2G2rhL7D3Oo9LVLrVLDtoHkfBns6Y= -----END CERTIFICATE-----Generated at Thu Mar 26 12:18:43 2026 by rpki-client