$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: 9Vc/4zLVNSzw+prkL+IynvtcirEp4XvWio9CwptSDhs= Subject key identifier: B7:21:9B:C0:EF:EA:54:0E:F0:09:EC:D2:EA:33:99:0C:A1:A8:08:D0 Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 1393D0EFD1002B604AB1F47631B627BCBF161E05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 020A Signing time: Tue 24 Mar 2026 19:20:48 +0000 Manifest this update: Tue 24 Mar 2026 19:15:48 +0000 Manifest next update: Fri 27 Mar 2026 23:09:48 +0000 Files and hashes: 1: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: lFeY6l/DTOlKC1U1MUvDNYeTgNKF1uRNEIC5o6LS2wg=) 2: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: kHcd0PiR+avo06lt/QU/A5Sa1D2RSw2rXV6RMIKGIO8=) 3: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: d6Adr6ZZkYn4Jq27NkWDxIH+Fg4wpxOILm0JtNJ0Cfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:93:d0:ef:d1:00:2b:60:4a:b1:f4:76:31:b6:27:bc:bf:16:1e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Mar 24 19:15:48 2026 GMT Not After : Mar 27 23:09:48 2026 GMT Subject: CN=B7219BC0EFEA540EF009ECD2EA33990CA1A808D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c2:9f:e8:68:c8:44:43:a7:f1:a4:9d:6f:d4: 75:db:38:d7:47:46:a3:50:e4:b7:87:e6:07:6b:91: 35:9b:d1:b5:49:1b:f8:5f:e6:37:33:8f:77:b9:4e: e6:a7:dd:16:1a:cd:6f:e3:c0:1b:f4:b4:e6:30:c5: 1b:47:32:a1:b0:84:f5:a6:df:64:63:84:49:83:9a: da:54:83:52:d3:27:94:5c:3f:ae:9c:d2:b5:8d:fe: 62:3c:b0:ea:43:f5:e9:9c:23:b8:9d:84:8e:a2:d2: 1d:e7:ec:57:06:15:9d:a7:3c:8a:26:77:de:4d:e0: 14:e4:68:3c:6e:ae:53:21:5b:85:a0:bc:46:59:f1: 8e:31:e5:db:bc:74:95:7f:14:f6:d5:cd:7a:33:73: d0:92:1e:54:b0:68:fe:61:25:9b:c4:3c:f3:87:39: 50:80:a2:40:21:d5:36:b4:1c:5c:50:12:c4:ff:ae: f1:89:82:c1:fd:08:1d:ba:b6:4e:01:81:58:76:ce: e3:a7:81:5e:c4:ec:cf:47:0e:ff:49:a1:01:38:0e: 4b:bc:4e:da:08:72:98:64:8f:b0:4a:6d:b2:9a:9d: 82:c2:cb:b1:40:bc:fc:5f:1a:ea:2f:d1:ce:88:27: 3c:b5:24:ae:c8:fc:e0:ea:de:f8:48:1c:07:69:40: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:21:9B:C0:EF:EA:54:0E:F0:09:EC:D2:EA:33:99:0C:A1:A8:08:D0 X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b9:09:1d:ba:a3:03:84:1b:6b:68:cd:cc:e0:65:17:29:20: b2:aa:5c:47:8e:a0:bb:68:ff:d6:18:86:71:e3:6b:11:29:ec: b5:b1:09:ef:bf:f7:b0:60:e0:23:2b:96:a8:b2:c0:ca:84:90: 4d:52:44:56:db:44:55:0c:7f:28:fd:37:60:17:e0:b7:74:a9: e4:e6:51:fc:ae:be:1b:10:6a:16:cb:b2:3c:d4:f7:48:5b:79: 54:8d:da:ff:c9:23:c4:4d:e7:9f:fc:58:d1:3d:f5:93:20:6b: 9a:b3:51:8e:38:8f:7b:20:29:cf:cc:09:21:75:09:24:c8:7c: 36:bb:e4:b7:2c:6a:5c:1c:a4:76:f1:85:f6:9a:a2:32:ab:21: 1f:dc:d3:1d:ce:56:a3:00:86:10:75:be:14:c3:54:13:03:df: 88:f3:0f:a8:c0:41:42:c3:8e:3a:36:37:2e:cc:6e:a2:22:02: 8c:55:07:ab:98:d7:5d:19:2a:0d:2c:97:2a:c9:51:0d:b2:89: b4:07:71:63:93:f0:37:2a:d9:2f:12:47:54:7a:d7:4f:09:c1: d2:3d:f8:f1:1c:ad:66:a8:17:67:70:18:15:1a:9f:b1:7a:34: b4:9b:0b:1d:83:96:e2:5f:cc:3f:ee:f7:17:4a:f5:77:06:04: 5b:2b:22:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE5PQ79EAK2BKsfR2MbYnvL8WHgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNjAzMjQxOTE1NDhaFw0yNjAzMjcyMzA5NDhaMDMxMTAvBgNV BAMTKEI3MjE5QkMwRUZFQTU0MEVGMDA5RUNEMkVBMzM5OTBDQTFBODA4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvwp/oaMhEQ6fxpJ1v1HXbONdH RqNQ5LeH5gdrkTWb0bVJG/hf5jczj3e5Tuan3RYazW/jwBv0tOYwxRtHMqGwhPWm 32RjhEmDmtpUg1LTJ5RcP66c0rWN/mI8sOpD9emcI7idhI6i0h3n7FcGFZ2nPIom d95N4BTkaDxurlMhW4WgvEZZ8Y4x5du8dJV/FPbVzXozc9CSHlSwaP5hJZvEPPOH OVCAokAh1Ta0HFxQEsT/rvGJgsH9CB26tk4BgVh2zuOngV7E7M9HDv9JoQE4Dku8 TtoIcphkj7BKbbKanYLCy7FAvPxfGuov0c6IJzy1JK7I/ODq3vhIHAdpQG/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtyGbwO/qVA7wCezS6jOZDKGoCNAwHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAi5CR26owOEG2tozczgZRcpILKqXEeOoLto /9YYhnHjaxEp7LWxCe+/97Bg4CMrlqiywMqEkE1SRFbbRFUMfyj9N2AX4Ld0qeTm UfyuvhsQahbLsjzU90hbeVSN2v/JI8RN55/8WNE99ZMga5qzUY44j3sgKc/MCSF1 CSTIfDa75LcsalwcpHbxhfaaojKrIR/c0x3OVqMAhhB1vhTDVBMD34jzD6jAQULD jjo2Ny7MbqIiAoxVB6uY110ZKg0slyrJUQ2yibQHcWOT8Dcq2S8SR1R6108JwdI9 +PEcrWaoF2dwGBUan7F6NLSbCx2DluJfzD/u9xdK9XcGBFsrIhk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:50:37 2026 by rpki-client