$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: Lwrj5tE2Tbt4mLkORDzPbecS8kQN/4Z1j/nyQwUq1dc= Subject key identifier: 05:8F:27:4E:05:1C:A2:DF:F4:1B:60:BC:72:86:76:DE:9E:8B:67:B6 Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 5FA5D22082AC8D4E388E392BC95B796C7BDCA520 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 01CA Signing time: Wed 15 Apr 2026 15:11:02 +0000 Manifest this update: Wed 15 Apr 2026 15:06:02 +0000 Manifest next update: Sat 18 Apr 2026 20:14:02 +0000 Files and hashes: 1: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: AOegtarleN5JrGQec3Av8CYsA1gHmcuPkILhiNucRMk=) 2: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: nIy/VfCP7zSkMzr8OonFtu6YLocFepg02ssVATdkB1M=) 3: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: xoYZCbJ38VnDP36L7VjZqJhg8/BRp3Ko4AcqMoQcfXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 20:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a5:d2:20:82:ac:8d:4e:38:8e:39:2b:c9:5b:79:6c:7b:dc:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Apr 15 15:06:02 2026 GMT Not After : Apr 18 20:14:02 2026 GMT Subject: CN=058F274E051CA2DFF41B60BC728676DE9E8B67B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:62:77:d0:67:dc:4d:4d:04:ce:67:0f:8c: 5e:1d:e8:a4:ce:33:9e:56:4a:ae:62:76:e0:1c:56: d5:46:22:b2:0e:5d:b0:12:c1:a3:fd:d0:09:79:aa: c7:da:7a:d9:ba:c0:26:8c:d5:63:b4:75:cf:49:0e: 26:cb:57:3a:7c:b4:83:a7:38:51:7e:fa:24:c6:57: 7f:a9:e8:80:bc:51:7f:8c:6c:0f:de:ce:54:33:f1: f9:21:83:40:f2:ea:fa:8a:fc:ec:06:16:e3:66:cd: 1d:c0:3e:e3:43:fd:4f:bf:3e:73:f1:5e:41:ea:d9: e5:93:8e:ee:c2:dc:39:30:09:2f:5c:ef:d6:3f:28: 98:0f:9b:22:71:e7:2c:cd:04:30:a0:39:96:b9:f0: b4:a4:c2:f4:48:e1:39:e4:5e:0e:89:cf:c7:33:c4: b3:f4:92:5a:0b:91:b7:69:2a:5e:73:e6:4e:65:b0: 58:aa:4e:48:cf:44:c9:23:9b:d5:f8:53:27:74:4d: 0b:0b:a5:c6:cd:57:dc:c4:37:a2:71:79:3f:f4:51: a4:7b:e1:31:d3:da:a7:82:f6:03:30:5a:12:24:6e: a3:62:4d:26:31:f0:ea:9d:f8:69:9b:7a:bd:15:99: 3e:eb:36:53:b8:e7:b7:d9:0f:55:1c:8c:f7:dd:f3: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8F:27:4E:05:1C:A2:DF:F4:1B:60:BC:72:86:76:DE:9E:8B:67:B6 X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:93:84:ca:38:ca:28:44:6a:12:62:d9:ff:ae:55:af:e8:fe: 1d:28:6c:d2:eb:e2:61:1e:c2:9c:ff:59:f2:6c:78:31:36:e7: a6:e2:d8:97:89:ca:33:b8:3d:7d:3b:89:87:31:b5:68:b6:58: cd:aa:ae:3e:66:5b:42:52:9d:c5:23:73:87:4c:bc:61:d9:2e: de:cd:d9:e9:fd:ae:b9:0b:e2:ec:ae:17:dd:7e:54:fa:4f:4d: e2:31:13:f6:62:6d:17:43:f1:8c:b8:e6:cc:e1:85:e7:28:cb: 34:b4:21:d6:98:33:31:08:18:fc:a8:ab:37:63:b7:0f:b8:9c: 44:c9:bf:ad:c3:28:7a:56:f4:b8:75:42:f5:ea:67:b1:6c:b7: 79:93:93:3b:25:fc:67:af:59:d5:52:74:4f:a1:db:9d:c1:4b: 83:4e:d6:22:47:c8:4d:bd:52:8f:ba:98:97:4a:4c:ee:71:3e: c3:48:0d:bf:b5:1a:df:9a:1f:0f:b8:42:d3:f0:0e:e8:ce:20: 56:ec:0e:bc:97:11:a8:ee:0c:96:fb:68:7d:5a:ca:05:f4:48: 0b:43:85:94:4f:a8:63:3f:2d:10:54:04:ac:5d:1b:0c:74:c8: 7c:41:88:5e:1c:24:37:02:ce:0a:a0:18:2c:a5:45:33:44:fe: f4:17:43:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6XSIIKsjU44jjkryVt5bHvcpSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNjA0MTUxNTA2MDJaFw0yNjA0MTgyMDE0MDJaMDMxMTAvBgNV BAMTKDA1OEYyNzRFMDUxQ0EyREZGNDFCNjBCQzcyODY3NkRFOUU4QjY3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5s2J30GfcTU0EzmcPjF4d6KTO M55WSq5iduAcVtVGIrIOXbASwaP90Al5qsfaetm6wCaM1WO0dc9JDibLVzp8tIOn OFF++iTGV3+p6IC8UX+MbA/ezlQz8fkhg0Dy6vqK/OwGFuNmzR3APuND/U+/PnPx XkHq2eWTju7C3DkwCS9c79Y/KJgPmyJx5yzNBDCgOZa58LSkwvRI4TnkXg6Jz8cz xLP0kloLkbdpKl5z5k5lsFiqTkjPRMkjm9X4Uyd0TQsLpcbNV9zEN6JxeT/0UaR7 4THT2qeC9gMwWhIkbqNiTSYx8Oqd+Gmber0VmT7rNlO457fZD1UcjPfd80+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBY8nTgUcot/0G2C8coZ23p6LZ7YwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCThMo4yihEahJi2f+uVa/o/h0obNLr4mEe wpz/WfJseDE256bi2JeJyjO4PX07iYcxtWi2WM2qrj5mW0JSncUjc4dMvGHZLt7N 2en9rrkL4uyuF91+VPpPTeIxE/ZibRdD8Yy45szhhecoyzS0IdaYMzEIGPyoqzdj tw+4nETJv63DKHpW9Lh1QvXqZ7Fst3mTkzsl/GevWdVSdE+h253BS4NO1iJHyE29 Uo+6mJdKTO5xPsNIDb+1Gt+aHw+4QtPwDujOIFbsDryXEajuDJb7aH1aygX0SAtD hZRPqGM/LRBUBKxdGwx0yHxBiF4cJDcCzgqgGCylRTNE/vQXQ2w= -----END CERTIFICATE-----Generated at Fri Apr 17 12:32:00 2026 by rpki-client