$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: 7eKQx9ZaTMtHjt2223GfseGVrWbE0JZ8tnrWg1GT/z0= Subject key identifier: 86:10:9A:F9:DA:41:53:A4:36:4A:57:03:C1:D8:26:D1:AD:13:7B:48 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 05CD456AC11DFF4154F5369B1CAE3EF0C7646B2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 01E3 Signing time: Thu 16 Apr 2026 01:51:04 +0000 Manifest this update: Thu 16 Apr 2026 01:46:04 +0000 Manifest next update: Sun 19 Apr 2026 09:47:04 +0000 Files and hashes: 1: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: KmS/dz3+11zX3fNHd3kC7GuAtCCakiSkUbzI+cUQ3nc=) 2: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: OWW18ITJldyqVjtkq8MGwz0R36P6p5kX0KmqqIy9WL4=) 3: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: pOcown3jT3h6K97fXVcJoCFnUnMhcxvWCGk/yhaw/BA=) 4: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: pzNkLG5550K6niPVhjn2lFGp5tmDU271y+wQUgja3O4=) 5: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: ETkKS9VsDoQRjfo7XaGH4n7CzRFRoBuPEhzcOfMjns0=) 6: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: M+08VWH7IMnc5EimyxyBsiNgkubt8AigK4DN84smiCk=) 7: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: OyCnOgi9DF6ImFMB1rT6WHy4zvSLECF/37ABilSCMZo=) 8: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: heV0gwzCsKLZo4O+8z83QAA9cFBR3X7O1kDpuu6dNcM=) 9: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: bqgcJ4WcL/qUF3TOomQ6qI1u/7pKQo9ovuu/3Kq5nZg=) 10: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: dRJS7uROXD+8OrePczzV74g/Ovnmamj5hrSj2kmHNWY=) 11: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: GBDiH/ZssX0EIYoemKzDZFG2u4fkDEOvHZXbsj6YXMI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 09:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:cd:45:6a:c1:1d:ff:41:54:f5:36:9b:1c:ae:3e:f0:c7:64:6b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Apr 16 01:46:04 2026 GMT Not After : Apr 19 09:47:04 2026 GMT Subject: CN=86109AF9DA4153A4364A5703C1D826D1AD137B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:60:22:25:f6:83:fc:bb:af:4f:c6:f8:56: 0d:1c:2c:e8:cd:e6:37:66:a0:02:93:07:ef:08:43: 11:95:d1:83:7d:09:06:57:ce:3c:3c:eb:f7:b7:72: 2c:e9:8d:03:b3:e0:7e:44:b1:02:d4:d3:58:40:ac: f5:a3:48:1f:73:d7:fe:66:e7:32:9c:e9:c1:9a:e3: 0a:01:7d:73:e8:43:57:fd:76:34:40:5b:47:a4:11: 6f:2a:23:4e:ec:d3:6e:c4:d5:f3:cd:a3:81:56:77: 3a:5f:dd:a3:19:10:f3:67:b9:af:1e:9c:93:e6:9e: 34:e8:ec:15:77:71:e6:d5:d1:b1:96:20:41:5f:af: 99:14:ba:11:bf:a4:96:64:bd:4d:80:a6:5a:92:08: 78:c8:ae:41:be:5a:d3:40:24:e3:33:84:a3:1e:27: b7:fb:5d:9c:42:13:32:73:01:7c:3f:4f:70:45:88: 86:75:b3:ce:0d:0a:66:ba:f0:c2:32:59:a5:80:dc: a8:96:36:b3:d9:77:de:f1:49:63:32:74:be:e6:1f: 9a:1d:e5:2d:db:ef:53:c5:ad:65:4b:94:39:3a:83: ff:3d:8e:28:4c:39:2e:ab:eb:f4:a6:b1:ac:f2:81: ee:64:e1:d9:53:85:c5:83:6b:cf:3e:a6:59:16:b6: 18:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:10:9A:F9:DA:41:53:A4:36:4A:57:03:C1:D8:26:D1:AD:13:7B:48 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:90:ad:c1:2a:44:bf:24:fa:4d:fb:42:64:ce:f7:29:9d:2e: 1b:66:a8:51:28:bd:ab:c9:b2:2b:24:a9:45:f2:4b:d6:b3:48: d1:15:aa:e3:f4:37:90:68:8a:06:96:02:b4:cb:c5:e7:33:eb: e3:cd:09:b3:78:65:19:2e:22:6f:7d:ce:b4:70:bb:ff:fc:84: eb:c4:c2:04:dd:1d:27:3a:46:be:e1:49:f4:dc:8a:bf:a1:56: be:5f:33:cb:1e:2d:25:94:1c:2e:3c:ef:0b:e0:a6:26:c4:f4: 05:04:e5:62:2f:da:31:78:17:47:e7:77:6b:9e:e9:12:1a:85: 89:f9:28:25:e6:24:81:ac:72:46:56:98:d4:85:30:0a:cb:4d: a7:4a:59:f1:3c:31:4d:bc:02:12:71:c3:f8:de:a7:7a:0b:11: 80:87:87:d1:25:0d:82:0f:17:8a:77:e4:f0:9f:ef:29:46:83: c3:18:b0:24:f7:41:5f:36:ef:fb:1c:c6:be:6c:71:2e:8c:bd: 11:a4:71:da:e6:38:56:7b:66:55:c0:9b:f9:5a:f7:26:61:bb: dc:02:09:90:7e:f5:74:77:bf:46:09:12:19:16:e6:93:b4:97: 3e:15:65:ca:2b:1a:22:91:99:7e:2b:c1:e4:93:20:de:2b:18: 4f:dc:07:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBc1FasEd/0FU9TabHK4+8MdkayowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNjA0MTYwMTQ2MDRaFw0yNjA0MTkwOTQ3MDRaMDMxMTAvBgNV BAMTKDg2MTA5QUY5REE0MTUzQTQzNjRBNTcwM0MxRDgyNkQxQUQxMzdCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrEGAiJfaD/LuvT8b4Vg0cLOjN 5jdmoAKTB+8IQxGV0YN9CQZXzjw86/e3cizpjQOz4H5EsQLU01hArPWjSB9z1/5m 5zKc6cGa4woBfXPoQ1f9djRAW0ekEW8qI07s027E1fPNo4FWdzpf3aMZEPNnua8e nJPmnjTo7BV3cebV0bGWIEFfr5kUuhG/pJZkvU2AplqSCHjIrkG+WtNAJOMzhKMe J7f7XZxCEzJzAXw/T3BFiIZ1s84NCma68MIyWaWA3KiWNrPZd97xSWMydL7mH5od 5S3b71PFrWVLlDk6g/89jihMOS6r6/Smsazyge5k4dlThcWDa88+plkWthjdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhhCa+dpBU6Q2SlcDwdgm0a0Te0gwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6QrcEqRL8k+k37QmTO9ymdLhtmqFEovavJ siskqUXyS9azSNEVquP0N5BoigaWArTLxecz6+PNCbN4ZRkuIm99zrRwu//8hOvE wgTdHSc6Rr7hSfTcir+hVr5fM8seLSWUHC487wvgpibE9AUE5WIv2jF4F0fnd2ue 6RIahYn5KCXmJIGsckZWmNSFMArLTadKWfE8MU28AhJxw/jep3oLEYCHh9ElDYIP F4p35PCf7ylGg8MYsCT3QV827/scxr5scS6MvRGkcdrmOFZ7ZlXAm/la9yZhu9wC CZB+9XR3v0YJEhkW5pO0lz4VZcorGiKRmX4rweSTIN4rGE/cB3M= -----END CERTIFICATE-----Generated at Fri Apr 17 16:08:39 2026 by rpki-client