$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: FlQTae8tGBCrYRaKOu/QO9+55b/NG3xJ50V/UqlVdwM= Subject key identifier: CB:9A:B0:AE:71:BD:D5:AC:3C:12:7C:4B:71:AF:5D:59:A1:14:0E:9F Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 3317D1C853546931D78FDFEA6380B0450E396996 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: 017D Signing time: Fri 17 Apr 2026 07:42:39 +0000 Manifest this update: Fri 17 Apr 2026 07:37:39 +0000 Manifest next update: Mon 20 Apr 2026 11:17:39 +0000 Files and hashes: 1: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: mGyvpkS5yb9JoXFyRjdqknvb4h8/sA38z3cphRqQWHs=) 2: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: E1Zc/UwpXG2NEKaf6TijDRvbu7t9U5+UrKGfBCasGq0=) 3: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: MUH9rSBm/K6Ev/4M2YiYjsVt+DrsSCzn8Rt8a0OlM8Y=) 4: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: cUGjLzsP6pQOAx8Ui8zdXgQSGKzMT6l2dfGBPWcFc1E=) 5: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: ga8wH5rsKuQUVujSS3GZnCocjhl1lP+W7D3mjm+PBiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:17:d1:c8:53:54:69:31:d7:8f:df:ea:63:80:b0:45:0e:39:69:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Apr 17 07:37:39 2026 GMT Not After : Apr 20 11:17:39 2026 GMT Subject: CN=CB9AB0AE71BDD5AC3C127C4B71AF5D59A1140E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:db:a0:dc:f8:ef:40:59:87:7d:84:93:c9: 3c:8a:69:dd:c1:ef:a1:08:61:ba:b3:25:fe:c4:81: d5:9b:1f:a1:c0:fd:d6:2c:50:ed:f0:8f:ec:10:48: 0d:8d:ac:9e:d2:7d:dc:f6:05:b7:8f:b6:10:94:dc: d3:f3:eb:36:33:30:de:c4:ac:39:c7:23:01:70:cd: b4:62:fa:34:46:15:15:c6:8f:2b:c3:8a:31:08:9b: 59:e8:47:8e:67:3e:1d:5a:fd:88:d0:75:e0:de:b1: 68:1d:e6:b9:e8:bf:4f:fb:61:56:25:e1:db:20:06: b8:0e:9d:0e:f4:a1:d6:95:d7:09:0e:ca:31:f0:b1: 22:bd:94:cb:d3:b4:cc:f8:96:4e:40:10:6d:8c:b5: 86:9e:bc:c5:d4:37:25:26:ed:fe:31:e0:1a:d9:53: 27:eb:42:13:c3:fd:cc:a1:47:85:d7:4c:e8:3e:72: ff:ea:e4:e2:89:f6:76:32:55:28:a4:1c:6e:82:8d: 83:37:88:51:dd:9f:05:6d:38:16:e5:a6:f1:7c:3d: 3c:fe:61:b3:21:c3:c3:ea:60:5b:1b:e6:3a:8c:2f: 79:21:82:ac:a1:a3:45:61:b3:56:62:34:36:45:5e: ab:a0:bc:d7:36:fe:a1:cc:6e:86:1b:35:95:52:a6: 6a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9A:B0:AE:71:BD:D5:AC:3C:12:7C:4B:71:AF:5D:59:A1:14:0E:9F X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d9:55:c2:63:36:58:22:40:4c:54:2d:09:60:a3:72:c3:7e: 06:46:2b:8a:f4:e0:83:f9:6a:7b:69:bc:47:2a:0c:58:0b:c1: 7f:7d:1a:4e:35:25:46:7c:41:50:0f:81:5a:16:bf:da:b6:25: 4b:49:7f:93:e5:af:ee:6e:15:b9:8e:ae:4f:ed:50:79:2f:03: 3b:a6:3d:2c:39:87:09:19:a9:f3:9b:0c:fc:b3:84:3e:f8:aa: db:e3:e2:a6:7c:cb:dc:6a:49:79:69:1a:33:c5:d1:75:31:56: 26:3c:0f:06:9d:42:1a:5b:4d:4e:af:81:f5:9b:8d:fe:7e:eb: 98:49:b9:62:46:02:30:c7:7e:26:22:fb:2b:79:1f:1b:5c:e6: 9d:e4:eb:1f:de:6a:37:fc:4b:10:c8:8c:f3:38:80:8c:5f:ba: f8:fe:13:e4:0c:22:c3:8f:2a:bb:7b:1b:2f:e7:04:d1:b4:3b: 4a:d8:b7:49:50:6f:a7:c2:79:0a:d1:85:65:6a:be:eb:d0:bf: ca:a0:1b:95:88:9e:2c:08:58:3d:a0:88:49:68:41:75:56:50: 7f:b5:bb:d6:3e:ef:ac:82:5b:56:41:cf:d4:3b:24:76:d6:15: 7c:25:29:11:55:c1:b2:6b:a6:4a:ec:9a:dc:52:58:72:95:68: 25:64:cd:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxfRyFNUaTHXj9/qY4CwRQ45aZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNjA0MTcwNzM3MzlaFw0yNjA0MjAxMTE3MzlaMDMxMTAvBgNV BAMTKENCOUFCMEFFNzFCREQ1QUMzQzEyN0M0QjcxQUY1RDU5QTExNDBFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0tug3PjvQFmHfYSTyTyKad3B 76EIYbqzJf7EgdWbH6HA/dYsUO3wj+wQSA2NrJ7Sfdz2BbePthCU3NPz6zYzMN7E rDnHIwFwzbRi+jRGFRXGjyvDijEIm1noR45nPh1a/YjQdeDesWgd5rnov0/7YVYl 4dsgBrgOnQ70odaV1wkOyjHwsSK9lMvTtMz4lk5AEG2MtYaevMXUNyUm7f4x4BrZ UyfrQhPD/cyhR4XXTOg+cv/q5OKJ9nYyVSikHG6CjYM3iFHdnwVtOBblpvF8PTz+ YbMhw8PqYFsb5jqML3khgqyho0Vhs1ZiNDZFXqugvNc2/qHMboYbNZVSpmodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy5qwrnG91aw8EnxLca9dWaEUDp8wHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbZVcJjNlgiQExULQlgo3LDfgZGK4r04IP5 antpvEcqDFgLwX99Gk41JUZ8QVAPgVoWv9q2JUtJf5Plr+5uFbmOrk/tUHkvAzum PSw5hwkZqfObDPyzhD74qtvj4qZ8y9xqSXlpGjPF0XUxViY8DwadQhpbTU6vgfWb jf5+65hJuWJGAjDHfiYi+yt5Hxtc5p3k6x/eajf8SxDIjPM4gIxfuvj+E+QMIsOP Krt7Gy/nBNG0O0rYt0lQb6fCeQrRhWVqvuvQv8qgG5WIniwIWD2giEloQXVWUH+1 u9Y+76yCW1ZBz9Q7JHbWFXwlKRFVwbJrpkrsmtxSWHKVaCVkzbM= -----END CERTIFICATE-----Generated at Sun Apr 19 10:15:54 2026 by rpki-client