
$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft
File: 38E19BA955DC939F0FD5EB77C83043AEABB72335.mft (raw, json)
Hash identifier: P4zSs4i/y6DP6ZJvBTNjK91TAX9FDbBuJebXfQxQNDQ=
Subject key identifier: 01:EB:F0:06:DF:0C:5B:A0:73:2F:4F:0B:DE:67:64:C2:2D:68:F5:42
Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35
Certificate issuer: /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335
Certificate serial: 26125F0817DFEDB090D24E1E02AB04C7A276D576
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft
Manifest number: 01A9
Signing time: Sat 28 Feb 2026 17:41:13 +0000
Manifest this update: Sat 28 Feb 2026 17:36:13 +0000
Manifest next update: Wed 04 Mar 2026 02:37:13 +0000
Files and hashes: 1: 3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (hash: /7IuJZAwwBq7SuIrNQW6iaVueky5hyLhQUZ7/ozbnk8=)
2: 38E19BA955DC939F0FD5EB77C83043AEABB72335.crl (hash: QDUTTCyp0nuqIgpCS8ayf0f62Peh7zsWGFoWboGWr5M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl
rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:12:5f:08:17:df:ed:b0:90:d2:4e:1e:02:ab:04:c7:a2:76:d5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335
Validity
Not Before: Feb 28 17:36:13 2026 GMT
Not After : Mar 4 02:37:13 2026 GMT
Subject: CN=01EBF006DF0C5BA0732F4F0BDE6764C22D68F542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:dc:b6:3b:06:58:ed:47:68:e3:84:08:44:
c4:4d:65:61:15:43:b3:c3:c5:51:22:8b:be:2b:e4:
b4:14:2d:52:59:c0:ec:d6:03:53:05:c8:58:2b:8d:
98:fe:7b:0a:14:85:74:51:3b:02:66:8d:6f:19:19:
91:7e:02:8c:2c:30:77:c4:d4:90:8e:a4:80:26:12:
76:09:4b:16:eb:f1:a7:24:46:b6:39:24:78:d5:8d:
47:b1:30:14:54:f3:d0:b7:6e:ea:28:73:6e:e4:94:
62:b6:be:af:24:f7:21:c5:5a:14:c8:a0:4b:48:de:
bb:d3:f4:71:81:df:38:f1:41:bb:96:39:b7:59:22:
13:e3:dd:50:f0:33:93:45:83:cb:17:f2:4b:22:92:
c4:ae:e3:57:15:f7:03:bc:68:36:af:82:a3:68:18:
36:ed:d0:14:a7:f3:a5:15:e2:7b:62:df:2c:1f:e4:
9e:68:c0:59:7f:71:94:0d:44:23:3e:2c:b8:b7:95:
2c:d3:71:bf:a2:7f:e1:09:38:5e:18:b8:ca:25:78:
60:4a:d3:a3:7c:c7:e6:91:b6:f5:6d:0d:c9:4d:8e:
61:d3:9d:a2:a2:e7:e8:95:07:15:64:aa:f8:dc:8d:
f3:a6:ee:b4:94:59:3e:df:b1:d5:19:9f:72:27:a8:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EB:F0:06:DF:0C:5B:A0:73:2F:4F:0B:DE:67:64:C2:2D:68:F5:42
X509v3 Authority Key Identifier:
keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:92:00:3b:79:ff:64:14:12:9b:01:83:d0:ba:4c:89:9a:06:
ad:f9:7d:fc:1c:bb:46:26:14:22:b3:77:6e:44:7e:0c:1b:b8:
71:e7:96:74:39:97:5c:4b:24:d6:ed:2b:b0:9e:a7:55:d8:75:
06:fd:0d:23:6e:de:94:d8:50:17:69:90:34:b6:3b:57:cc:7f:
d0:d0:36:48:d1:81:00:68:90:a4:8a:3b:2f:9e:8c:9b:8c:03:
05:e3:3d:d0:46:62:3a:b8:62:fb:fe:ba:d7:bc:20:c3:85:2e:
8b:a7:28:70:07:fa:d8:9d:aa:8a:9c:77:79:3a:00:3a:8d:c2:
88:88:9f:2a:dc:46:1f:47:7c:f3:e7:c5:c9:f3:cb:b5:7b:42:
f0:30:b3:3f:61:05:05:7f:bf:df:bc:c3:7c:1a:53:cc:68:4c:
38:ab:27:8d:ca:39:ce:df:8e:ae:4b:f7:44:80:53:64:84:72:
57:46:69:09:41:7f:24:cb:6c:bc:33:f0:7e:11:22:f6:b9:da:
07:16:84:99:5f:b3:96:cb:14:db:1e:2b:ab:87:6b:67:b5:cc:
ae:c9:9e:c2:ba:04:e1:79:f1:86:8b:7e:80:ee:8f:7e:dd:1a:
01:02:9b:ee:52:e4:e3:45:c5:36:81:8f:97:9e:e1:3a:62:55:
e8:c8:bd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:53 2026 by rpki-client