$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft File: 38F85F0AA81AE33827BDF573D6A712452180A036.mft (raw, json) Hash identifier: KspGZFOlcnkFa9jyoT6/ug/Ukgrh+VBbzqGOdwXrBeI= Subject key identifier: 30:18:F4:F3:97:28:0C:99:9C:ED:B2:E3:BD:91:F7:68:4C:86:9C:90 Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 78B1FD64E1155C3EFB50BF0706CD6B86A7D4059D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft Manifest number: 0168 Signing time: Sun 01 Mar 2026 04:52:43 +0000 Manifest this update: Sun 01 Mar 2026 04:47:43 +0000 Manifest next update: Wed 04 Mar 2026 09:01:43 +0000 Files and hashes: 1: 3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (hash: cUGjLzsP6pQOAx8Ui8zdXgQSGKzMT6l2dfGBPWcFc1E=) 2: 38F85F0AA81AE33827BDF573D6A712452180A036.crl (hash: c5jib/AbV59uey6QS3sbv6+kibA0rvzUuT8Wz4cQafE=) 3: 3130332e38332e3131392e302f32342d3234203d3e20313336303634.roa (hash: ga8wH5rsKuQUVujSS3GZnCocjhl1lP+W7D3mjm+PBiM=) 4: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (hash: E1Zc/UwpXG2NEKaf6TijDRvbu7t9U5+UrKGfBCasGq0=) 5: 3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (hash: mGyvpkS5yb9JoXFyRjdqknvb4h8/sA38z3cphRqQWHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b1:fd:64:e1:15:5c:3e:fb:50:bf:07:06:cd:6b:86:a7:d4:05:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Mar 1 04:47:43 2026 GMT Not After : Mar 4 09:01:43 2026 GMT Subject: CN=3018F4F397280C999CEDB2E3BD91F7684C869C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:40:12:83:55:a2:dc:53:e9:2c:57:bf:00: 46:1c:4c:9d:69:2c:3e:aa:c6:74:a9:11:1a:21:b1: 5d:0b:8a:52:68:6d:5a:17:64:58:ad:c3:28:01:8f: 32:46:bc:37:f7:30:0f:58:6e:fe:4f:ec:b2:50:4f: e2:22:e8:c2:cb:f6:d6:56:2c:6d:db:f8:9b:fd:14: 98:b4:9d:a2:cb:a3:34:31:f4:ca:7d:c9:a2:a2:6f: 24:e7:5a:43:7a:d4:15:f0:a5:ff:11:c5:e6:1c:74: 8a:fc:95:1c:9e:a7:c3:03:ca:d0:d0:04:cd:5e:f1: c8:9a:dd:39:8a:06:65:b0:0b:26:69:70:67:2c:b8: 06:5b:fa:69:79:68:47:01:a6:e7:9b:2d:91:af:26: 04:b2:cd:b8:f1:52:33:37:4d:62:0a:a3:7b:69:0b: 3c:ec:71:a2:3a:0c:2f:dd:e9:ef:fa:3b:4f:d9:06: f0:5f:3e:2d:a1:7f:92:2d:dd:c3:ea:57:be:ea:39: d2:bf:29:e5:a0:4c:4e:63:1c:a8:f1:3a:39:88:6e: aa:09:c2:79:65:17:aa:5d:86:f7:53:55:0f:71:7a: 42:14:13:86:fc:1a:60:0a:ce:bf:11:b2:9b:f8:3b: c1:d8:9e:0a:16:74:80:65:e2:c2:f8:bc:f8:22:6f: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:18:F4:F3:97:28:0C:99:9C:ED:B2:E3:BD:91:F7:68:4C:86:9C:90 X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c5:7e:de:95:0f:e0:09:3c:1c:21:65:fd:18:82:40:a1:33: f7:dc:14:ba:3e:29:92:25:d3:17:bd:98:71:a2:84:e3:f0:fc: 6f:23:36:b2:f5:61:22:22:67:a6:9b:19:55:0e:c5:70:a9:0a: 62:cb:d9:76:88:96:03:da:fe:4e:55:0d:ed:5c:50:d4:66:79: b8:d0:0d:74:07:a9:2a:da:76:4f:23:95:02:68:4b:6c:80:ed: ec:ee:a9:5e:c4:9f:73:ee:c5:2b:9e:3b:22:f6:63:db:28:0f: ac:ce:09:85:00:c1:89:13:70:11:56:64:ab:40:46:8c:84:4f: cf:78:02:73:65:ef:33:b4:e9:86:50:6b:0c:ca:ed:4b:a8:e4: 37:f2:65:be:e2:c5:34:f6:9f:e8:9d:c0:3b:67:e4:26:34:76: 96:60:0f:d3:8b:31:46:25:0c:3d:41:81:76:df:27:63:fd:18: 7f:ea:fb:45:e5:7a:a0:a9:70:cf:8e:b8:bf:b4:8d:f8:94:0e: c5:77:3d:e6:df:f8:e5:81:99:90:5e:9e:2f:b0:1d:e1:a9:87: e6:e8:22:50:f1:42:0e:02:66:87:5f:23:f3:78:2e:8f:95:33: a4:54:a9:ab:38:8d:c4:b4:a2:ab:bd:af:25:1c:df:ed:3e:68: d7:b7:b9:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLH9ZOEVXD77UL8HBs1rhqfUBZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNjAzMDEwNDQ3NDNaFw0yNjAzMDQwOTAxNDNaMDMxMTAvBgNV BAMTKDMwMThGNEYzOTcyODBDOTk5Q0VEQjJFM0JEOTFGNzY4NEM4NjlDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgkASg1Wi3FPpLFe/AEYcTJ1p LD6qxnSpERohsV0LilJobVoXZFitwygBjzJGvDf3MA9Ybv5P7LJQT+Ii6MLL9tZW LG3b+Jv9FJi0naLLozQx9Mp9yaKibyTnWkN61BXwpf8RxeYcdIr8lRyep8MDytDQ BM1e8cia3TmKBmWwCyZpcGcsuAZb+ml5aEcBpuebLZGvJgSyzbjxUjM3TWIKo3tp CzzscaI6DC/d6e/6O0/ZBvBfPi2hf5It3cPqV77qOdK/KeWgTE5jHKjxOjmIbqoJ wnllF6pdhvdTVQ9xekIUE4b8GmAKzr8Rspv4O8HYngoWdIBl4sL4vPgib5i/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMBj085coDJmc7bLjvZH3aEyGnJAwHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU5OGIzYmQtMjg0ZC00YTdkLTlm MjctY2I1ODdlOWRkODQxLzAvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEy NDUyMTgwQTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTFft6VD+AJPBwhZf0YgkChM/fcFLo+KZIl 0xe9mHGihOPw/G8jNrL1YSIiZ6abGVUOxXCpCmLL2XaIlgPa/k5VDe1cUNRmebjQ DXQHqSradk8jlQJoS2yA7ezuqV7En3PuxSueOyL2Y9soD6zOCYUAwYkTcBFWZKtA RoyET894AnNl7zO06YZQawzK7Uuo5DfyZb7ixTT2n+idwDtn5CY0dpZgD9OLMUYl DD1BgXbfJ2P9GH/q+0XleqCpcM+OuL+0jfiUDsV3Pebf+OWBmZBeni+wHeGph+bo IlDxQg4CZodfI/N4Lo+VM6RUqas4jcS0oqu9ryUc3+0+aNe3ucg= -----END CERTIFICATE-----Generated at Mon Mar 2 10:56:25 2026 by rpki-client