$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft File: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json) Hash identifier: CIVbRPh2cOhI7xx69so1gRgHMO6UNWFdqzWvJLWgqYY= Subject key identifier: 8C:14:DC:E5:6D:F3:6A:5B:B7:44:09:E6:8C:45:E4:67:81:68:C8:62 Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D Certificate issuer: /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Certificate serial: 426F7A3E2A7EAD26F2C6A7102C9C802E094933B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft Manifest number: 01CC Signing time: Sat 28 Feb 2026 13:11:05 +0000 Manifest this update: Sat 28 Feb 2026 13:06:05 +0000 Manifest next update: Tue 03 Mar 2026 14:29:05 +0000 Files and hashes: 1: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=) 2: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=) 3: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=) 4: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=) 5: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=) 6: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: ZDkxtUKChVcswkLNU/N48JiWWozv+89pg/GO1QMhSLM=) 7: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=) 8: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=) 9: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=) 10: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=) 11: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 14:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6f:7a:3e:2a:7e:ad:26:f2:c6:a7:10:2c:9c:80:2e:09:49:33:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D Validity Not Before: Feb 28 13:06:05 2026 GMT Not After : Mar 3 14:29:05 2026 GMT Subject: CN=8C14DCE56DF36A5BB74409E68C45E4678168C862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:64:1b:47:cc:85:e5:3f:57:5c:9d:35:4d:33: 29:5e:75:fe:b3:10:9a:4a:b2:a3:b1:22:c6:db:ab: 78:a2:8c:67:c7:f1:4f:b3:34:f5:51:6d:d8:be:a5: fc:7e:1a:a9:ef:6a:82:48:af:19:c5:93:99:61:72: d5:d5:df:07:b4:ee:b4:77:2c:8f:5f:5d:ec:83:0c: 2e:f3:45:ec:49:07:3f:b6:bf:b1:db:b3:5f:26:3f: 6f:b4:5f:fc:77:ae:b7:a5:1c:db:4b:02:7f:77:12: 90:15:79:1e:fc:01:a4:c9:ae:bc:52:6c:c0:3a:fc: 24:d0:fd:ba:28:c9:d3:30:58:e9:72:0e:80:7f:c9: 49:a1:d2:95:f2:8a:ae:bb:9c:8b:b5:92:7f:47:9c: 9c:85:da:ee:5b:37:1a:ec:3a:03:20:44:ca:f6:6d: 7e:ec:77:51:18:49:f4:f3:3b:b1:24:ca:f2:58:c6: ef:95:d3:e9:7e:c5:66:f5:5b:07:96:4d:cb:7c:8d: ca:dc:f3:8c:91:26:49:36:34:19:07:99:00:34:ca: 99:da:e9:a3:17:70:5d:fa:36:7e:2e:9b:7b:9b:64: ea:74:41:b6:75:d6:e4:4b:e9:d4:da:bd:ec:bd:49: b7:ee:35:8a:e3:0f:90:9e:88:6c:51:61:0e:87:8f: b7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:14:DC:E5:6D:F3:6A:5B:B7:44:09:E6:8C:45:E4:67:81:68:C8:62 X509v3 Authority Key Identifier: keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:47:f0:2b:78:a3:0a:5a:6e:8a:d7:02:12:61:63:8d:30:b9: 52:0a:e3:0b:c8:75:58:7e:eb:b4:1e:9b:5b:c9:f6:6c:1d:f3: 55:ac:15:41:5b:7c:43:3c:d2:47:56:77:93:4d:04:53:c8:37: 13:65:19:07:c8:9e:2e:b2:10:8b:f3:78:ff:99:46:4f:ce:d3: 49:ec:2b:f1:e4:8d:68:dd:4e:16:60:01:7a:39:17:2f:69:bc: 8d:32:ed:10:9d:11:a5:79:fd:68:dd:eb:80:7b:11:d4:86:18: a5:4c:d6:1a:bb:2a:c7:9d:21:7a:89:a8:2f:c8:60:c6:19:15: 80:37:d8:db:7a:e8:20:2b:ec:cb:ca:dc:4a:50:00:9f:05:f1: 32:89:3a:95:5a:ee:0c:c6:09:93:61:e8:b4:8e:de:03:24:b9: 0d:ef:65:6c:72:98:e8:c9:4b:e9:9b:79:48:88:18:5d:05:9d: d5:fa:f9:ec:d9:14:c8:61:d3:ec:42:ec:dc:a2:06:46:84:a7: c7:b7:5c:91:dd:5c:ad:07:a8:ab:1a:f9:71:3f:c0:3b:7d:fd: b1:1f:65:5a:86:46:a2:03:ae:30:f5:e9:86:17:46:94:6f:76: 88:3d:fb:43:fa:9e:d3:51:f9:23:a1:12:e0:12:6c:ee:57:de: fb:b4:4b:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQm96Pip+rSbyxqcQLJyALglJM7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3 MjJDMjk0RDAeFw0yNjAyMjgxMzA2MDVaFw0yNjAzMDMxNDI5MDVaMDMxMTAvBgNV BAMTKDhDMTREQ0U1NkRGMzZBNUJCNzQ0MDlFNjhDNDVFNDY3ODE2OEM4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZBtHzIXlP1dcnTVNMyledf6z EJpKsqOxIsbbq3iijGfH8U+zNPVRbdi+pfx+GqnvaoJIrxnFk5lhctXV3we07rR3 LI9fXeyDDC7zRexJBz+2v7Hbs18mP2+0X/x3rrelHNtLAn93EpAVeR78AaTJrrxS bMA6/CTQ/booydMwWOlyDoB/yUmh0pXyiq67nIu1kn9HnJyF2u5bNxrsOgMgRMr2 bX7sd1EYSfTzO7EkyvJYxu+V0+l+xWb1WweWTct8jcrc84yRJkk2NBkHmQA0ypna 6aMXcF36Nn4um3ubZOp0QbZ11uRL6dTavey9SbfuNYrjD5CeiGxRYQ6Hj7c5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjBTc5W3zalu3RAnmjEXkZ4FoyGIwHwYDVR0j BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtH8Ct4owpaborXAhJhY40wuVIK4wvIdVh+ 67Qem1vJ9mwd81WsFUFbfEM80kdWd5NNBFPINxNlGQfIni6yEIvzeP+ZRk/O00ns K/HkjWjdThZgAXo5Fy9pvI0y7RCdEaV5/Wjd64B7EdSGGKVM1hq7KsedIXqJqC/I YMYZFYA32Nt66CAr7MvK3EpQAJ8F8TKJOpVa7gzGCZNh6LSO3gMkuQ3vZWxymOjJ S+mbeUiIGF0FndX6+ezZFMhh0+xC7NyiBkaEp8e3XJHdXK0HqKsa+XE/wDt9/bEf ZVqGRqIDrjD16YYXRpRvdog9+0P6ntNR+SOhEuASbO5X3vu0SxY= -----END CERTIFICATE-----Generated at Mon Mar 2 13:04:04 2026 by rpki-client