$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: kg4Mzn61ZQVdtfaG4ac91KPoIjvuMMKT+KaYla5u8ws= Subject key identifier: D1:4C:97:1C:2B:2E:52:1C:B0:B7:13:A2:B1:DA:B5:9D:17:63:92:F1 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 10B4E34F536E7868E0B294594249493BA61A839E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 01D9 Signing time: Tue 24 Mar 2026 06:51:02 +0000 Manifest this update: Tue 24 Mar 2026 06:46:02 +0000 Manifest next update: Fri 27 Mar 2026 17:18:02 +0000 Files and hashes: 1: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: R/+SdUeMHaNBR1C6Noij92D1vdIlLLSJ4jqbELkUbGw=) 2: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: dRJS7uROXD+8OrePczzV74g/Ovnmamj5hrSj2kmHNWY=) 3: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: pzNkLG5550K6niPVhjn2lFGp5tmDU271y+wQUgja3O4=) 4: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: M+08VWH7IMnc5EimyxyBsiNgkubt8AigK4DN84smiCk=) 5: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: KmS/dz3+11zX3fNHd3kC7GuAtCCakiSkUbzI+cUQ3nc=) 6: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: pOcown3jT3h6K97fXVcJoCFnUnMhcxvWCGk/yhaw/BA=) 7: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: bqgcJ4WcL/qUF3TOomQ6qI1u/7pKQo9ovuu/3Kq5nZg=) 8: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: ETkKS9VsDoQRjfo7XaGH4n7CzRFRoBuPEhzcOfMjns0=) 9: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: OWW18ITJldyqVjtkq8MGwz0R36P6p5kX0KmqqIy9WL4=) 10: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: OyCnOgi9DF6ImFMB1rT6WHy4zvSLECF/37ABilSCMZo=) 11: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: GBDiH/ZssX0EIYoemKzDZFG2u4fkDEOvHZXbsj6YXMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b4:e3:4f:53:6e:78:68:e0:b2:94:59:42:49:49:3b:a6:1a:83:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Mar 24 06:46:02 2026 GMT Not After : Mar 27 17:18:02 2026 GMT Subject: CN=D14C971C2B2E521CB0B713A2B1DAB59D176392F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:d0:26:f2:d1:e5:46:98:14:3d:a4:6b:38: 41:b9:3d:31:08:f1:e2:37:19:b7:b1:9d:62:43:9b: 05:95:05:77:b9:a1:7b:a2:6b:0f:58:e8:6f:ca:62: 44:04:ac:8c:78:b4:98:ff:04:72:24:b3:38:7e:d9: ad:a0:79:6c:ac:e4:b2:5a:38:30:13:ba:75:3b:a7: cf:e3:5d:e8:79:15:66:68:5a:54:c0:52:3a:d3:aa: 58:80:a2:60:db:f7:e1:da:03:6b:b3:fa:1d:5c:b8: 29:db:94:c0:ac:d3:8f:b6:e8:c6:52:33:e8:ba:73: 51:77:e9:fc:78:4b:16:d7:63:6a:c8:a9:42:47:b0: 1d:5f:33:34:6c:b2:0c:16:f3:56:ba:81:79:22:5e: 84:b2:41:8b:53:8f:1c:9a:74:d2:f1:3a:92:51:ea: 9b:97:ae:5f:f1:5e:d9:9d:3d:8d:31:99:3d:28:75: a7:b6:b5:00:6e:ee:8f:72:6c:a0:d5:a2:25:51:1e: 3e:76:08:64:fe:f4:61:ea:26:2f:23:74:cc:9c:dc: e7:94:11:9d:88:fd:10:b2:85:95:5b:44:bf:1b:44: 2b:bf:d5:df:bc:78:20:01:fb:bd:25:34:4f:88:d5: d8:06:b1:94:f6:00:61:6f:a5:69:b0:9b:a2:3c:d3: dd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4C:97:1C:2B:2E:52:1C:B0:B7:13:A2:B1:DA:B5:9D:17:63:92:F1 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:fa:49:33:58:95:44:d0:78:7c:ff:d5:77:e1:65:81:c5:08: c8:89:c2:1c:da:d9:46:c0:52:86:9a:fc:55:45:97:88:43:30: 3c:fa:f0:5f:8a:84:c7:19:3f:b2:0a:83:08:ea:29:58:8c:fb: 03:38:ed:64:fe:fc:9c:7b:46:9b:ea:fd:b0:16:dc:12:c9:0b: 51:a0:d9:b7:1d:11:28:5f:ff:80:13:4d:bc:8e:3e:5d:df:08: b9:67:28:10:f3:ea:10:bb:17:91:52:98:7f:c3:c1:58:0e:a8: fa:b7:44:7b:ec:b2:a5:95:c7:16:17:aa:d5:54:92:44:ac:44: 5f:f5:31:d2:c6:6a:b1:ca:ec:b8:05:e3:8d:5e:74:01:2e:0b: 47:36:87:6b:18:3c:09:f0:a0:be:b0:7b:4d:1e:13:d7:b8:ea: 31:a6:41:91:b1:f5:5c:ad:74:40:f5:6d:1f:10:40:b4:64:4f: 38:9c:ee:42:5f:f4:58:20:d4:8a:a8:36:f2:8b:47:6a:bf:74: b1:4b:e3:c5:36:77:d6:e9:bb:3c:fc:9c:44:88:5f:49:8c:46: 59:78:82:a0:71:b8:58:3b:d9:6f:92:7e:90:1f:0d:9e:4c:17: ff:e9:bb:31:0a:39:25:b0:ff:62:00:91:4a:cd:b8:f2:58:64: 88:9c:75:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELTjT1NueGjgspRZQklJO6Yag54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNjAzMjQwNjQ2MDJaFw0yNjAzMjcxNzE4MDJaMDMxMTAvBgNV BAMTKEQxNEM5NzFDMkIyRTUyMUNCMEI3MTNBMkIxREFCNTlEMTc2MzkyRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo19Am8tHlRpgUPaRrOEG5PTEI 8eI3GbexnWJDmwWVBXe5oXuiaw9Y6G/KYkQErIx4tJj/BHIkszh+2a2geWys5LJa ODATunU7p8/jXeh5FWZoWlTAUjrTqliAomDb9+HaA2uz+h1cuCnblMCs04+26MZS M+i6c1F36fx4SxbXY2rIqUJHsB1fMzRssgwW81a6gXkiXoSyQYtTjxyadNLxOpJR 6puXrl/xXtmdPY0xmT0odae2tQBu7o9ybKDVoiVRHj52CGT+9GHqJi8jdMyc3OeU EZ2I/RCyhZVbRL8bRCu/1d+8eCAB+70lNE+I1dgGsZT2AGFvpWmwm6I8092dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0UyXHCsuUhywtxOisdq1nRdjkvEwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADr6STNYlUTQeHz/1XfhZYHFCMiJwhza2UbA Uoaa/FVFl4hDMDz68F+KhMcZP7IKgwjqKViM+wM47WT+/Jx7Rpvq/bAW3BLJC1Gg 2bcdEShf/4ATTbyOPl3fCLlnKBDz6hC7F5FSmH/DwVgOqPq3RHvssqWVxxYXqtVU kkSsRF/1MdLGarHK7LgF441edAEuC0c2h2sYPAnwoL6we00eE9e46jGmQZGx9Vyt dED1bR8QQLRkTzic7kJf9Fgg1IqoNvKLR2q/dLFL48U2d9bpuzz8nESIX0mMRll4 gqBxuFg72W+SfpAfDZ5MF//puzEKOSWw/2IAkUrNuPJYZIicdTQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:18:55 2026 by rpki-client