$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: AAz/sR+Bh0oJ/vLhTUGWmEDAcaJ2uJfwhJVd5VfPGyI= Subject key identifier: 4D:D8:68:57:41:BF:79:76:B3:7F:8D:E8:1A:80:59:49:11:05:70:38 Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 6F54494A10280A2BC0A8C408136AF02A9D8979F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: 0173 Signing time: Thu 26 Mar 2026 04:22:39 +0000 Manifest this update: Thu 26 Mar 2026 04:17:39 +0000 Manifest next update: Sun 29 Mar 2026 06:25:39 +0000 Files and hashes: 1: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: ga8wH5rsKuQUVujSS3GZnCocjhl1lP+W7D3mjm+PBiM=) 2: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: E1Zc/UwpXG2NEKaf6TijDRvbu7t9U5+UrKGfBCasGq0=) 3: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: cUGjLzsP6pQOAx8Ui8zdXgQSGKzMT6l2dfGBPWcFc1E=) 4: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: mGyvpkS5yb9JoXFyRjdqknvb4h8/sA38z3cphRqQWHs=) 5: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: WKpH0g+HvEFbYgPlU0dhTh2OjexkmllrEkxX2v0WS8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:54:49:4a:10:28:0a:2b:c0:a8:c4:08:13:6a:f0:2a:9d:89:79:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Mar 26 04:17:39 2026 GMT Not After : Mar 29 06:25:39 2026 GMT Subject: CN=4DD8685741BF7976B37F8DE81A80594911057038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:4a:c2:f0:c7:7f:86:36:83:d9:a4:46:90: 26:b5:08:ea:63:57:09:6e:57:7b:4a:ae:b9:2c:85: da:a1:00:d9:af:61:c1:57:68:ec:23:d0:6f:82:2a: 6d:35:e2:4d:6c:d9:1a:7a:7e:d2:51:6f:5c:78:2c: f2:fb:a4:5c:be:32:b5:09:a7:7e:fe:cf:cb:6e:74: 97:26:ef:1e:e3:bf:c9:4d:13:d0:d3:d5:b5:d7:53: c7:b1:ac:e5:0a:fb:03:85:eb:68:bb:b4:a2:ff:26: 09:9f:68:06:6e:77:67:cd:a6:1e:49:a5:47:02:92: e8:61:11:96:94:eb:e6:b6:66:ac:5e:ee:a2:be:35: d6:61:99:e0:b1:ba:54:82:d1:d9:ed:de:2e:cf:be: 50:fc:0d:ee:1b:7e:f7:16:11:94:d3:d1:41:3b:7f: 6d:0d:00:69:6b:95:8d:2b:2a:e7:96:1f:85:25:a4: 40:f2:3b:ee:1a:7d:78:8b:13:10:0b:50:cb:22:3e: 28:2a:3b:c0:7e:e5:f5:8b:38:4f:ed:80:a4:6e:88: 49:fd:c7:e3:71:76:de:31:5e:df:57:0b:76:83:f7: 25:94:ac:a6:cc:88:28:37:54:ce:c5:2f:07:67:89: 3e:4d:31:5f:71:b4:56:1a:26:ed:f7:6c:56:cc:82: a4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D8:68:57:41:BF:79:76:B3:7F:8D:E8:1A:80:59:49:11:05:70:38 X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7f:9d:fa:71:2c:21:21:23:96:64:03:c3:6a:62:f6:10:79: 4c:e0:ec:2e:6d:84:9b:3d:30:6c:73:d1:91:4c:03:8e:da:64: 52:2d:ed:4e:cf:5d:78:e6:87:c0:0d:fa:54:aa:28:08:46:df: 6d:d5:ac:78:9d:36:10:b7:d9:85:a4:3f:10:1b:40:43:73:df: a3:1d:df:dc:49:f1:6f:1b:4f:f1:35:18:3f:35:9d:d2:bb:84: a0:aa:9f:7e:72:29:e0:48:73:3e:99:7b:f1:66:f3:cb:4e:58: 2e:b6:06:06:32:85:98:17:f7:f6:53:1a:cc:83:e7:23:a4:94: 15:18:65:76:9a:3b:fb:46:28:c9:5a:15:0a:49:6c:6d:33:de: 27:13:e6:19:7f:93:45:68:15:1b:8e:61:39:3b:52:e9:9b:7d: 27:2c:fe:34:e2:cc:c9:a3:d7:c2:15:f7:f5:c1:1f:81:41:00: 34:48:0d:3b:ce:c0:ff:8b:58:09:03:77:fb:3e:08:4f:25:d1: 43:d5:32:75:b4:78:e2:c2:07:4c:6e:16:da:b0:b5:58:67:e7: a0:0b:2f:aa:8c:fd:df:44:80:b3:2a:0a:d9:36:ce:0e:ce:fe: 99:10:53:cf:f5:92:37:fc:29:a5:c4:8b:68:15:e3:ae:95:42: a8:55:99:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1RJShAoCivAqMQIE2rwKp2JefcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNjAzMjYwNDE3MzlaFw0yNjAzMjkwNjI1MzlaMDMxMTAvBgNV BAMTKDRERDg2ODU3NDFCRjc5NzZCMzdGOERFODFBODA1OTQ5MTEwNTcwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8ErC8Md/hjaD2aRGkCa1COpj VwluV3tKrrkshdqhANmvYcFXaOwj0G+CKm014k1s2Rp6ftJRb1x4LPL7pFy+MrUJ p37+z8tudJcm7x7jv8lNE9DT1bXXU8exrOUK+wOF62i7tKL/JgmfaAZud2fNph5J pUcCkuhhEZaU6+a2Zqxe7qK+NdZhmeCxulSC0dnt3i7PvlD8De4bfvcWEZTT0UE7 f20NAGlrlY0rKueWH4UlpEDyO+4afXiLExALUMsiPigqO8B+5fWLOE/tgKRuiEn9 x+Nxdt4xXt9XC3aD9yWUrKbMiCg3VM7FLwdniT5NMV9xtFYaJu33bFbMgqTHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdhoV0G/eXazf43oGoBZSREFcDgwHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt/nfpxLCEhI5ZkA8NqYvYQeUzg7C5thJs9 MGxz0ZFMA47aZFIt7U7PXXjmh8AN+lSqKAhG323VrHidNhC32YWkPxAbQENz36Md 39xJ8W8bT/E1GD81ndK7hKCqn35yKeBIcz6Ze/Fm88tOWC62BgYyhZgX9/ZTGsyD 5yOklBUYZXaaO/tGKMlaFQpJbG0z3icT5hl/k0VoFRuOYTk7UumbfScs/jTizMmj 18IV9/XBH4FBADRIDTvOwP+LWAkDd/s+CE8l0UPVMnW0eOLCB0xuFtqwtVhn56AL L6qM/d9EgLMqCtk2zg7O/pkQU8/1kjf8KaXEi2gV466VQqhVmQQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:50 2026 by rpki-client