$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json) Hash identifier: MTuDxGQQj1mVSjvENRBokZAJfdeK3MN8IAW4Q+m+mUY= Subject key identifier: 81:6B:8C:18:F2:61:13:1A:FF:7B:85:AF:85:FE:46:C3:02:B8:37:88 Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Certificate serial: 56A3A2FB732D3CADD7DA74394BA0F8DE90759B0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft Manifest number: 01BF Signing time: Sat 18 Apr 2026 21:51:14 +0000 Manifest this update: Sat 18 Apr 2026 21:46:14 +0000 Manifest next update: Wed 22 Apr 2026 03:24:14 +0000 Files and hashes: 1: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: gPCETACha+fezhBYBhJYa/swfwDw/Y0U6G6fZAKsjQg=) 2: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a3:a2:fb:73:2d:3c:ad:d7:da:74:39:4b:a0:f8:de:90:75:9b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335 Validity Not Before: Apr 18 21:46:14 2026 GMT Not After : Apr 22 03:24:14 2026 GMT Subject: CN=816B8C18F261131AFF7B85AF85FE46C302B83788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:84:5c:e0:a2:8d:cf:3c:88:95:ba:5a:ae:2c: 0f:7c:42:44:55:a4:78:dd:94:7f:60:fd:38:80:61: 32:25:4e:c3:8a:25:d2:7c:d3:52:33:97:3e:0f:da: 01:17:cc:d4:5d:05:dd:0b:8b:da:65:7d:49:3f:52: 03:56:81:97:88:d2:d9:ed:7d:7d:1a:e2:35:63:67: 28:0d:e9:46:8d:84:40:2c:32:d1:6e:3c:b5:d1:d6: 1e:83:84:99:33:8b:c0:29:83:c9:ef:2e:16:f7:1f: e2:fd:aa:4a:18:32:bd:fa:85:35:ce:5b:b3:9f:e7: 89:01:28:8e:8d:c0:35:d5:50:4e:39:e5:39:d7:e6: 93:ab:d0:b0:e1:d4:d6:de:eb:5d:92:39:a1:c6:a6: 55:ab:d3:cb:20:11:00:62:ac:83:11:34:6b:c8:23: 03:9c:66:d9:c0:80:16:95:6e:05:74:98:78:9a:b6: fb:24:2a:26:46:35:74:27:4c:0f:ad:31:f9:4c:a4: 8e:05:1e:a8:3b:f6:58:05:06:8a:91:b9:ac:fb:21: 8f:62:92:fd:43:64:33:87:24:f5:ce:22:57:ec:b9: b4:a0:da:6b:90:2d:46:e0:81:0f:60:49:60:c8:94: 49:eb:2f:28:bd:8f:f5:89:b3:04:e9:df:c1:ce:aa: 46:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6B:8C:18:F2:61:13:1A:FF:7B:85:AF:85:FE:46:C3:02:B8:37:88 X509v3 Authority Key Identifier: keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c7:ee:f5:ef:e0:a7:6d:29:60:98:68:16:7e:f0:97:c2:20: 79:71:1d:88:51:84:48:76:36:84:57:0b:a6:75:3c:f4:38:f2: bc:10:b6:64:79:1f:08:92:52:b9:da:b5:7a:74:ea:84:a5:d0: 04:f8:3b:71:dc:b1:62:da:c1:8b:07:3f:f6:82:e8:66:d1:1a: dc:1f:94:ef:68:b1:77:02:f2:52:35:de:d9:aa:03:f6:22:79: 58:c6:04:12:2c:75:69:6c:a4:7e:bd:2a:a9:9a:ff:ad:3a:4e: 11:4d:96:20:dd:3e:23:0a:4d:28:70:cc:ca:6b:9d:df:1e:2a: e3:5b:24:c5:0f:80:a3:92:36:0a:51:e3:b1:aa:49:e6:23:ba: b7:20:fa:7a:93:b6:5d:9d:e0:2a:6b:be:a4:33:67:09:6d:42: 88:2b:87:19:64:28:b3:ca:27:77:d2:8e:75:2f:76:25:b7:29: b4:27:8f:46:a9:81:a9:bc:8b:7f:fa:22:a0:cb:b5:f6:26:2c: 43:99:49:a0:d1:ef:f4:ee:6f:3a:8e:ae:5c:12:04:19:93:cc: 56:83:f3:4c:27:20:0d:d0:93:67:94:b9:2a:52:cb:3a:45:fe: 79:31:e3:09:6c:ff:cb:07:f7:d8:7d:16:1e:b3:57:7b:3e:74: 77:28:6e:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqOi+3MtPK3X2nQ5S6D43pB1mwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB QkI3MjMzNTAeFw0yNjA0MTgyMTQ2MTRaFw0yNjA0MjIwMzI0MTRaMDMxMTAvBgNV BAMTKDgxNkI4QzE4RjI2MTEzMUFGRjdCODVBRjg1RkU0NkMzMDJCODM3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhFzgoo3PPIiVulquLA98QkRV pHjdlH9g/TiAYTIlTsOKJdJ801Izlz4P2gEXzNRdBd0Li9plfUk/UgNWgZeI0tnt fX0a4jVjZygN6UaNhEAsMtFuPLXR1h6DhJkzi8Apg8nvLhb3H+L9qkoYMr36hTXO W7Of54kBKI6NwDXVUE455TnX5pOr0LDh1Nbe612SOaHGplWr08sgEQBirIMRNGvI IwOcZtnAgBaVbgV0mHiatvskKiZGNXQnTA+tMflMpI4FHqg79lgFBoqRuaz7IY9i kv1DZDOHJPXOIlfsubSg2muQLUbggQ9gSWDIlEnrLyi9j/WJswTp38HOqkaDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgWuMGPJhExr/e4Wvhf5GwwK4N4gwHwYDVR0j BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1 REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3 MjMzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1YWY4MjItYmVhOS00OGYzLWFh MTItYjI3MzcxNjJmYzQyLzAvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQz QUVBQkI3MjMzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnH7vXv4KdtKWCYaBZ+8JfCIHlxHYhRhEh2 NoRXC6Z1PPQ48rwQtmR5HwiSUrnatXp06oSl0AT4O3HcsWLawYsHP/aC6GbRGtwf lO9osXcC8lI13tmqA/YieVjGBBIsdWlspH69Kqma/606ThFNliDdPiMKTShwzMpr nd8eKuNbJMUPgKOSNgpR47GqSeYjurcg+nqTtl2d4CprvqQzZwltQogrhxlkKLPK J3fSjnUvdiW3KbQnj0apgam8i3/6IqDLtfYmLEOZSaDR7/TubzqOrlwSBBmTzFaD 80wnIA3Qk2eUuSpSyzpF/nkx4wls/8sH99h9Fh6zV3s+dHcobh0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:20:47 2026 by rpki-client