$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: JW3PpMpT2UNXE5dfoEvjiEogDVe9W+JrmLcKm369EZY= Subject key identifier: 5B:D9:AA:69:6B:75:02:01:61:71:35:0A:E1:27:AA:3E:C1:4D:F6:F8 Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 7BB7E3DDB2763AA31701FFD3E8CBDB97602D1379 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 01B5 Signing time: Sat 28 Feb 2026 13:41:00 +0000 Manifest this update: Sat 28 Feb 2026 13:36:00 +0000 Manifest next update: Tue 03 Mar 2026 18:12:00 +0000 Files and hashes: 1: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: iFZpayjOhiD/nihPfQLVc2Bw/muiBocrb9Vl1jBbDNE=) 2: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: /KLInRwMrzFAOh7qeeAqPKk8IR/gNPx1rp28sE4Kp1M=) 3: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: PTsTBXGsNz8ocE/IUTQsqbcgk5S4dmL+3UaKaWrcOZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b7:e3:dd:b2:76:3a:a3:17:01:ff:d3:e8:cb:db:97:60:2d:13:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Feb 28 13:36:00 2026 GMT Not After : Mar 3 18:12:00 2026 GMT Subject: CN=5BD9AA696B7502016171350AE127AA3EC14DF6F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:2d:c6:6f:e1:10:44:c1:b2:0c:11:18:a4: 66:de:76:04:08:63:a5:14:98:25:d1:7e:25:4f:33: e0:71:23:83:a8:67:a4:e7:99:18:7e:91:b1:db:ef: 65:a5:37:d5:7e:60:75:91:a5:5d:76:aa:c3:e6:52: f0:2c:a5:66:1f:d8:7a:57:bb:97:d6:ac:7f:77:a6: b1:6a:de:51:6b:bf:82:8d:1d:ce:34:b7:cf:90:64: 1b:fb:ba:e4:7f:ab:a5:3d:f8:aa:aa:c7:4a:4b:21: 86:6b:47:3e:69:a0:f9:c9:66:df:b8:00:7e:e3:44: ff:9c:49:44:af:25:9b:0d:3e:1c:eb:60:93:ec:6d: ce:3c:a4:39:0e:ce:bc:75:5a:21:a0:34:e7:b9:57: ac:e2:80:68:c3:8b:ac:fc:31:ad:3d:37:43:64:e6: 4c:25:03:31:dd:c6:76:53:0f:21:b6:63:8d:48:91: c2:29:44:01:27:a2:df:79:94:4c:8b:9c:1a:f7:5d: 8c:4c:c1:e7:ca:90:f6:95:c4:1e:c0:e1:37:b1:14: c2:79:b0:91:15:b2:d5:83:6e:e0:2b:7c:47:ef:53: 4f:0c:52:fe:5e:bd:6f:db:90:6e:f6:49:15:86:50: 8f:a4:1b:0c:46:f7:5c:21:ce:e1:21:2c:56:27:89: 3b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D9:AA:69:6B:75:02:01:61:71:35:0A:E1:27:AA:3E:C1:4D:F6:F8 X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:18:34:1a:6c:85:3a:b1:f6:34:58:5f:2e:6f:65:c7:30:4d: 26:97:10:3e:b7:6d:45:2a:15:2e:27:f1:88:95:4b:5b:02:ac: 27:da:a1:28:1a:31:93:34:01:ef:aa:2f:ae:05:91:69:0a:8d: 4f:70:c3:15:ce:19:24:9e:c5:ed:1c:61:15:dc:cf:c4:60:81: c5:a2:cf:5c:01:f4:45:05:06:11:3a:fa:6d:e6:3d:b7:a4:5b: 7d:cb:b0:dc:d2:71:45:25:b0:fe:6e:cd:a2:6b:26:45:65:cd: a6:48:64:64:9f:fa:94:96:8e:df:0d:7c:41:f6:e2:93:0d:49: 32:b0:73:f3:f6:a6:31:f1:79:21:a2:5f:ae:ed:6f:81:1c:7a: 4a:b7:a7:4c:c0:14:25:f4:76:48:d6:1c:3a:e8:a5:8c:be:12: 8e:9f:80:80:d1:b0:ea:af:88:45:93:1c:fe:b5:b3:fb:24:aa: 8f:b6:8c:7c:a4:3c:dd:d7:32:f6:c2:59:f2:01:1f:ad:88:2a: 3b:62:05:5e:bf:46:0f:1a:3c:2c:12:85:32:ed:1f:72:3a:49: 12:4d:64:a0:f2:d2:cf:08:c7:22:5b:17:bd:f0:6c:2a:78:55: 32:8f:96:a2:e2:65:66:0b:72:02:14:1c:91:0c:7c:fb:cb:f3: be:31:f5:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7fj3bJ2OqMXAf/T6Mvbl2AtE3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNjAyMjgxMzM2MDBaFw0yNjAzMDMxODEyMDBaMDMxMTAvBgNV BAMTKDVCRDlBQTY5NkI3NTAyMDE2MTcxMzUwQUUxMjdBQTNFQzE0REY2RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99i3Gb+EQRMGyDBEYpGbedgQI Y6UUmCXRfiVPM+BxI4OoZ6TnmRh+kbHb72WlN9V+YHWRpV12qsPmUvAspWYf2HpX u5fWrH93prFq3lFrv4KNHc40t8+QZBv7uuR/q6U9+Kqqx0pLIYZrRz5poPnJZt+4 AH7jRP+cSUSvJZsNPhzrYJPsbc48pDkOzrx1WiGgNOe5V6zigGjDi6z8Ma09N0Nk 5kwlAzHdxnZTDyG2Y41IkcIpRAEnot95lEyLnBr3XYxMwefKkPaVxB7A4TexFMJ5 sJEVstWDbuArfEfvU08MUv5evW/bkG72SRWGUI+kGwxG91whzuEhLFYniTsXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9mqaWt1AgFhcTUK4SeqPsFN9vgwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0YNBpshTqx9jRYXy5vZccwTSaXED63bUUq FS4n8YiVS1sCrCfaoSgaMZM0Ae+qL64FkWkKjU9wwxXOGSSexe0cYRXcz8RggcWi z1wB9EUFBhE6+m3mPbekW33LsNzScUUlsP5uzaJrJkVlzaZIZGSf+pSWjt8NfEH2 4pMNSTKwc/P2pjHxeSGiX67tb4Ecekq3p0zAFCX0dkjWHDropYy+Eo6fgIDRsOqv iEWTHP61s/skqo+2jHykPN3XMvbCWfIBH62IKjtiBV6/Rg8aPCwShTLtH3I6SRJN ZKDy0s8IxyJbF73wbCp4VTKPlqLiZWYLcgIUHJEMfPvL874x9Zc= -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:54 2026 by rpki-client