$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft File: 38A92419EE1289455FCB1B71F9420F05CA334C15.mft (raw, json) Hash identifier: 8XnuBwdxALi/vVwSK3xqd4ngI+XwW5ltqVBt3AQvys0= Subject key identifier: 83:59:B5:CA:BA:CD:10:B0:52:BE:15:36:77:1F:72:0E:65:1D:2F:90 Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 Certificate issuer: /CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Certificate serial: 16B1D2C2F5A08DD19F2419BCD9B0055704DD61CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft Manifest number: 025E Signing time: Wed 25 Mar 2026 01:40:01 +0000 Manifest this update: Wed 25 Mar 2026 01:35:01 +0000 Manifest next update: Sat 28 Mar 2026 02:40:01 +0000 Files and hashes: 1: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: gzlae1M+2c3Da2PrmmaLHCIu6SA8hOf9N6Q+EvROXj4=) 2: 38A92419EE1289455FCB1B71F9420F05CA334C15.crl (hash: DY2nb7bl7BVswKGHkYiTi0Y4MDmto5LJJDlZuglujHc=) 3: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: Ol+8mj4uz+YDl+K02s8/nnKwbaKHiw9jdN56tzENmfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b1:d2:c2:f5:a0:8d:d1:9f:24:19:bc:d9:b0:05:57:04:dd:61:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Validity Not Before: Mar 25 01:35:01 2026 GMT Not After : Mar 28 02:40:01 2026 GMT Subject: CN=8359B5CABACD10B052BE1536771F720E651D2F90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f5:2c:25:77:92:c0:68:d1:ca:df:18:e1:43: 24:24:11:0c:57:32:eb:eb:4a:8b:0a:eb:1d:1e:72: 76:0a:69:f5:71:95:4c:ba:da:2e:0f:59:d1:c0:bf: 95:e3:4f:38:10:47:84:3d:fc:0c:7e:10:63:11:26: 6a:4b:f2:a4:1c:24:10:ef:b8:de:2d:e9:f9:8e:10: 8b:1c:f8:0a:73:03:dd:94:be:3e:0e:61:40:c1:5d: 59:8a:af:7e:51:a9:75:99:70:e9:b3:2d:4e:41:d8: b9:58:03:bf:ee:de:83:70:7f:d2:47:12:ed:a6:3a: c8:04:c9:e6:ed:18:06:1a:61:f9:f2:7b:fd:ef:b9: e7:a8:e8:99:68:5f:11:98:11:a7:c0:11:c3:20:19: dd:d4:cb:31:0c:4f:4d:f1:78:8b:fd:0c:3d:e4:cd: 63:e3:5a:1d:39:3a:3b:62:68:0a:65:ac:a7:54:a3: d7:b2:8c:f7:88:a9:82:c2:22:4d:ff:05:84:71:fe: 90:8a:b8:e6:bf:d5:35:40:e0:41:57:35:fe:35:ac: 6b:0b:e6:3b:96:61:cb:3e:d3:9b:d3:68:25:83:db: f3:9f:47:4f:48:d5:02:b1:d4:e3:ac:4f:ff:d9:7f: 7f:c2:30:8c:75:f7:ba:fb:9e:7a:88:a0:68:cd:cf: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:59:B5:CA:BA:CD:10:B0:52:BE:15:36:77:1F:72:0E:65:1D:2F:90 X509v3 Authority Key Identifier: keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:3f:eb:9a:d2:cc:58:cd:f0:63:3a:a6:0f:e0:bb:da:1f:2e: e5:7f:e7:2e:45:a8:f0:57:8d:9b:64:f0:19:99:db:d3:77:99: 90:1b:a7:15:61:21:74:70:f9:f0:00:c2:14:51:08:09:7b:47: 65:95:5d:5b:37:c1:4e:c6:43:72:05:7e:6b:ed:83:8c:74:79: 2a:37:7e:94:87:af:75:f7:b5:cb:ac:2b:c2:97:76:cd:20:57: df:62:04:da:61:28:cd:8e:e7:26:83:d5:fc:97:71:12:ed:b2: c2:80:a3:76:7b:89:67:2b:32:95:5a:08:54:ae:29:c3:a5:52: 99:60:e1:37:58:ca:d3:09:47:e8:d3:b6:ed:32:2a:a9:2f:ac: d9:81:56:b3:b7:d4:5c:f0:32:ae:1d:6e:d6:6d:d4:12:f6:66: 60:16:79:e0:b8:67:66:a4:5c:9f:f5:1a:63:3f:3c:9c:ec:62: 45:3a:1a:61:19:02:c9:4e:9c:28:23:ff:9f:cc:48:62:32:8a: 78:f6:18:09:7e:90:40:5d:f5:d7:e5:0e:5b:3d:2c:73:37:78: 80:28:88:64:e2:8d:24:14:cf:b5:be:25:70:00:95:7d:39:35: 3a:9a:45:9f:f2:0e:df:f1:9c:09:0a:a6:c2:f3:fe:6e:1e:ff: ad:2d:aa:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFrHSwvWgjdGfJBm82bAFVwTdYcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVD QTMzNEMxNTAeFw0yNjAzMjUwMTM1MDFaFw0yNjAzMjgwMjQwMDFaMDMxMTAvBgNV BAMTKDgzNTlCNUNBQkFDRDEwQjA1MkJFMTUzNjc3MUY3MjBFNjUxRDJGOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9Swld5LAaNHK3xjhQyQkEQxX MuvrSosK6x0ecnYKafVxlUy62i4PWdHAv5XjTzgQR4Q9/Ax+EGMRJmpL8qQcJBDv uN4t6fmOEIsc+ApzA92Uvj4OYUDBXVmKr35RqXWZcOmzLU5B2LlYA7/u3oNwf9JH Eu2mOsgEyebtGAYaYfnye/3vueeo6JloXxGYEafAEcMgGd3UyzEMT03xeIv9DD3k zWPjWh05OjtiaAplrKdUo9eyjPeIqYLCIk3/BYRx/pCKuOa/1TVA4EFXNf41rGsL 5juWYcs+05vTaCWD2/OfR09I1QKx1OOsT//Zf3/CMIx197r7nnqIoGjNzxoxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg1m1yrrNELBSvhU2dx9yDmUdL5AwHwYDVR0j BBgwFoAUOKkkGe4SiUVfyxtx+UIPBcozTBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRhZDhjYi1hNTM3LTRjNTAtYWY2YS1hYWJhNWYxZTc2NDQvMC8zOEE5MjQxOUVF MTI4OTQ1NUZDQjFCNzFGOTQyMEYwNUNBMzM0QzE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVDQTMz NEMxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkYWQ4Y2ItYTUzNy00YzUwLWFm NmEtYWFiYTVmMWU3NjQ0LzAvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBG MDVDQTMzNEMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALs/65rSzFjN8GM6pg/gu9ofLuV/5y5FqPBX jZtk8BmZ29N3mZAbpxVhIXRw+fAAwhRRCAl7R2WVXVs3wU7GQ3IFfmvtg4x0eSo3 fpSHr3X3tcusK8KXds0gV99iBNphKM2O5yaD1fyXcRLtssKAo3Z7iWcrMpVaCFSu KcOlUplg4TdYytMJR+jTtu0yKqkvrNmBVrO31FzwMq4dbtZt1BL2ZmAWeeC4Z2ak XJ/1GmM/PJzsYkU6GmEZAslOnCgj/5/MSGIyinj2GAl+kEBd9dflDls9LHM3eIAo iGTijSQUz7W+JXAAlX05NTqaRZ/yDt/xnAkKpsLz/m4e/60tqiU= -----END CERTIFICATE-----Generated at Thu Mar 26 07:51:24 2026 by rpki-client