$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: EnHK7V5vlCc2I2qgH/0SFDhCNSPv5lJeIgpFomQ9EvM= Subject key identifier: 13:93:C5:B1:19:0A:16:AA:1E:B3:65:62:E3:1D:7B:C9:ED:44:30:56 Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 24D1E338DB005C253D46E5918A44D26C4C9CE5A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 01C0 Signing time: Wed 25 Mar 2026 20:51:03 +0000 Manifest this update: Wed 25 Mar 2026 20:46:03 +0000 Manifest next update: Sat 28 Mar 2026 22:02:03 +0000 Files and hashes: 1: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) 2: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: Df0dTmIfXJ7Thb5WYsU6spV6H7jdu9sQTgT5uUjq8Ss=) 3: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d1:e3:38:db:00:5c:25:3d:46:e5:91:8a:44:d2:6c:4c:9c:e5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Mar 25 20:46:03 2026 GMT Not After : Mar 28 22:02:03 2026 GMT Subject: CN=1393C5B1190A16AA1EB36562E31D7BC9ED443056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:07:bc:64:71:9a:fd:35:b8:9d:42:3e:8a:aa: 36:ff:6a:84:7b:d7:31:4b:6a:01:c0:f4:78:8d:4e: 08:59:4c:38:56:fc:56:ec:30:d6:6a:32:9d:e2:4d: ad:97:2f:c8:60:48:41:c4:41:d0:f1:da:a7:39:31: 1a:44:01:cd:69:99:ba:e3:62:86:2a:e3:c1:ac:0b: f3:4c:a7:dc:b6:32:17:40:9c:c4:ae:b9:1b:f9:6c: 35:71:f1:53:f7:8e:05:85:80:1f:eb:7f:e1:22:31: c2:81:d5:19:a2:95:58:c5:56:43:57:e9:1f:24:b1: 3c:dd:38:a4:4e:3b:4e:04:0d:3d:90:58:aa:c4:c0: fa:bb:b5:2d:43:d1:a4:9e:a3:d5:22:61:c5:f0:46: 13:d5:22:42:7f:51:81:3c:12:f9:0b:76:4f:15:97: 84:e4:38:b3:5d:1c:08:f1:8d:24:7a:42:bc:97:42: b1:e5:3c:fe:a9:e4:9f:64:df:02:e6:e9:47:53:72: 2b:f0:0d:0c:e1:49:54:69:99:8f:f1:10:7f:a9:c7: b3:f9:21:da:ea:15:eb:a7:ff:3d:89:fe:3e:a5:a6: d8:d4:a8:28:10:1e:d6:13:57:1d:dd:4a:8c:8a:70: 3a:22:38:b6:c6:b0:07:ef:04:14:bf:c4:40:f7:9e: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:93:C5:B1:19:0A:16:AA:1E:B3:65:62:E3:1D:7B:C9:ED:44:30:56 X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:90:03:92:1d:59:d1:bc:d5:fb:5a:1c:ed:c2:f9:35:7d:1d: d8:c9:96:8c:91:27:72:41:b2:76:92:78:f9:3e:22:2a:13:fc: 04:c8:fc:9c:4f:b5:ba:f9:de:49:32:b0:40:ca:47:5d:c0:98: c6:12:cb:76:25:f4:68:dd:e1:17:45:47:dd:41:80:2f:d1:46: c4:16:ec:f8:f3:6f:ac:1d:1a:78:a2:3e:45:64:7c:e9:01:c7: d4:5d:94:ae:59:f3:c5:af:d1:22:ba:72:b8:2d:36:0e:76:d6: c2:18:31:8a:ed:70:9a:61:5a:0e:af:8a:9b:cf:27:65:05:93: bd:af:fd:da:af:97:06:54:c2:95:73:cc:4f:32:ce:38:31:72: 54:f0:b9:50:f8:95:23:0d:53:ee:0a:1f:ee:c6:ed:c1:17:43: 89:02:c9:19:a3:2a:a2:d3:f2:17:22:fd:34:36:08:0f:07:9b: 3a:a0:67:af:f5:6d:4d:cd:f9:4b:1a:f4:19:03:56:72:d3:1b: bf:a8:36:14:2a:66:1e:32:f2:3e:25:2c:9e:05:2d:8f:58:7a: 29:6e:1f:27:50:d8:a6:2a:99:a8:f3:99:1b:cb:30:d0:15:11: 54:17:c5:93:91:b6:29:3d:b3:8e:e3:48:46:2c:27:a3:74:4f: 18:bd:4d:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNHjONsAXCU9RuWRikTSbEyc5agwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNjAzMjUyMDQ2MDNaFw0yNjAzMjgyMjAyMDNaMDMxMTAvBgNV BAMTKDEzOTNDNUIxMTkwQTE2QUExRUIzNjU2MkUzMUQ3QkM5RUQ0NDMwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrB7xkcZr9NbidQj6Kqjb/aoR7 1zFLagHA9HiNTghZTDhW/FbsMNZqMp3iTa2XL8hgSEHEQdDx2qc5MRpEAc1pmbrj YoYq48GsC/NMp9y2MhdAnMSuuRv5bDVx8VP3jgWFgB/rf+EiMcKB1RmilVjFVkNX 6R8ksTzdOKROO04EDT2QWKrEwPq7tS1D0aSeo9UiYcXwRhPVIkJ/UYE8EvkLdk8V l4TkOLNdHAjxjSR6QryXQrHlPP6p5J9k3wLm6UdTcivwDQzhSVRpmY/xEH+px7P5 IdrqFeun/z2J/j6lptjUqCgQHtYTVx3dSoyKcDoiOLbGsAfvBBS/xED3nlTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE5PFsRkKFqoes2Vi4x17ye1EMFYwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuQA5IdWdG81ftaHO3C+TV9HdjJloyRJ3JB snaSePk+IioT/ATI/JxPtbr53kkysEDKR13AmMYSy3Yl9Gjd4RdFR91BgC/RRsQW 7Pjzb6wdGniiPkVkfOkBx9RdlK5Z88Wv0SK6crgtNg521sIYMYrtcJphWg6vipvP J2UFk72v/dqvlwZUwpVzzE8yzjgxclTwuVD4lSMNU+4KH+7G7cEXQ4kCyRmjKqLT 8hci/TQ2CA8HmzqgZ6/1bU3N+Usa9BkDVnLTG7+oNhQqZh4y8j4lLJ4FLY9Yeilu HydQ2KYqmajzmRvLMNAVEVQXxZORtik9s47jSEYsJ6N0Txi9Tfc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:26 2026 by rpki-client