$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft File: 38A92419EE1289455FCB1B71F9420F05CA334C15.mft (raw, json) Hash identifier: TDrVGQxxyjGZo8GDixCQTtzcgWSQ4S0T8RIGwDA9diQ= Subject key identifier: 03:01:43:4B:85:B8:58:32:FC:8C:6F:52:91:DF:85:B4:B7:2B:BE:12 Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 Certificate issuer: /CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Certificate serial: 34E109496FC9D8081B6BA88A5311C0CDD09A7464 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft Manifest number: 0254 Signing time: Mon 02 Mar 2026 02:30:01 +0000 Manifest this update: Mon 02 Mar 2026 02:25:00 +0000 Manifest next update: Thu 05 Mar 2026 10:56:00 +0000 Files and hashes: 1: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: FHb4F7lq3vcwTbWDvi1X4f5+wy1PMf7axFDD1qokmPs=) 2: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: /4y0i2UIqC94Q9jjKOVg3BHE03KUaQHXxOynS0oUshc=) 3: 38A92419EE1289455FCB1B71F9420F05CA334C15.crl (hash: 5Cr9m8eFSEn8TOzhmJhwxYI+njm1ia4ZfNE33xkTqLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e1:09:49:6f:c9:d8:08:1b:6b:a8:8a:53:11:c0:cd:d0:9a:74:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15 Validity Not Before: Mar 2 02:25:00 2026 GMT Not After : Mar 5 10:56:00 2026 GMT Subject: CN=0301434B85B85832FC8C6F5291DF85B4B72BBE12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:c2:fc:31:1d:78:cf:27:11:c9:0e:61:8b: 77:b4:e8:35:f2:4b:69:f2:d9:e6:93:d8:9c:ea:9c: 30:82:55:5e:fe:d1:69:67:0f:7d:74:57:85:30:10: 56:a0:f7:f4:c8:57:68:35:02:af:86:56:2f:44:e2: bb:8a:7b:fd:59:5b:0a:ee:dc:cd:29:5c:df:6a:1b: cf:b2:d2:a3:1f:55:85:80:71:40:a6:33:57:fb:1c: 5c:9e:5f:e3:99:a8:cd:02:4f:3d:2b:ed:1c:82:21: 38:b7:6f:82:43:ad:97:de:d8:52:8d:90:f9:ef:87: bd:6d:d1:a8:b6:bf:03:9e:10:c9:83:75:7b:1a:4b: b8:2d:0a:51:af:77:99:fe:6c:39:ee:f8:0c:0c:56: 77:93:98:b9:44:7a:d4:f2:48:a8:22:48:48:bd:13: 12:d3:60:17:fc:65:85:3c:31:c5:66:b0:40:30:ac: a4:40:dd:be:1e:af:67:18:1d:56:ac:42:f6:69:74: 13:6b:95:87:4e:69:11:6e:9e:75:24:4c:5f:6b:a0: 58:77:53:84:3f:32:97:e8:31:63:55:d2:c2:e3:8f: ff:5d:5e:53:22:30:cf:48:da:41:9f:5b:6b:63:a4: be:c3:e5:d8:8e:ad:e3:b5:3e:fd:3d:4c:12:93:f6: d6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:01:43:4B:85:B8:58:32:FC:8C:6F:52:91:DF:85:B4:B7:2B:BE:12 X509v3 Authority Key Identifier: keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:53:e8:93:e9:a8:52:02:97:50:e8:3a:a7:80:32:78:53:b1: a0:96:22:cf:90:22:9b:5d:4d:ac:70:44:58:81:ec:07:8f:ee: d8:17:75:67:67:92:ca:86:a3:f6:18:63:1a:b9:22:ca:63:c6: 0f:db:9d:ea:7b:21:07:ea:7e:5e:3a:b0:9d:9a:f0:7b:09:3a: 14:db:0d:d0:0c:4d:74:9b:82:c5:b8:1d:38:03:a2:dd:c6:34: bf:d5:9c:bd:10:7b:07:9b:69:84:fb:c3:97:92:f4:c8:aa:dc: 94:43:72:2f:9c:9c:26:ec:f6:45:69:9f:fb:c0:e3:70:55:3c: 91:cc:d2:21:be:d5:e4:42:a3:db:b0:c1:ab:93:00:ad:a7:bb: f4:b6:7e:d1:9b:fc:9c:7f:80:51:7d:cf:8e:2b:ec:dc:1f:25: 59:e6:d5:47:01:92:4f:0b:ad:88:3c:18:d4:25:00:fd:b5:8e: 21:7a:a5:4e:d6:f6:32:cc:62:68:22:30:79:c8:84:f2:8f:29: 4d:11:1c:fd:57:37:17:bf:81:d5:05:88:7e:cf:d8:d3:73:27: 24:1d:d9:9b:c4:44:ee:61:d1:56:11:49:74:55:6a:e5:39:8e: 3f:82:f3:30:ee:3b:2f:6b:51:2f:7a:af:7b:43:77:48:db:3f: 5a:9f:de:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNOEJSW/J2Agba6iKUxHAzdCadGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVD QTMzNEMxNTAeFw0yNjAzMDIwMjI1MDBaFw0yNjAzMDUxMDU2MDBaMDMxMTAvBgNV BAMTKDAzMDE0MzRCODVCODU4MzJGQzhDNkY1MjkxREY4NUI0QjcyQkJFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0cL8MR14zycRyQ5hi3e06DXy S2ny2eaT2JzqnDCCVV7+0WlnD310V4UwEFag9/TIV2g1Aq+GVi9E4ruKe/1ZWwru 3M0pXN9qG8+y0qMfVYWAcUCmM1f7HFyeX+OZqM0CTz0r7RyCITi3b4JDrZfe2FKN kPnvh71t0ai2vwOeEMmDdXsaS7gtClGvd5n+bDnu+AwMVneTmLlEetTySKgiSEi9 ExLTYBf8ZYU8McVmsEAwrKRA3b4er2cYHVasQvZpdBNrlYdOaRFunnUkTF9roFh3 U4Q/MpfoMWNV0sLjj/9dXlMiMM9I2kGfW2tjpL7D5diOreO1Pv09TBKT9tYzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAwFDS4W4WDL8jG9Skd+FtLcrvhIwHwYDVR0j BBgwFoAUOKkkGe4SiUVfyxtx+UIPBcozTBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRhZDhjYi1hNTM3LTRjNTAtYWY2YS1hYWJhNWYxZTc2NDQvMC8zOEE5MjQxOUVF MTI4OTQ1NUZDQjFCNzFGOTQyMEYwNUNBMzM0QzE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBGMDVDQTMz NEMxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkYWQ4Y2ItYTUzNy00YzUwLWFm NmEtYWFiYTVmMWU3NjQ0LzAvMzhBOTI0MTlFRTEyODk0NTVGQ0IxQjcxRjk0MjBG MDVDQTMzNEMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFT6JPpqFICl1DoOqeAMnhTsaCWIs+QIptd TaxwRFiB7AeP7tgXdWdnksqGo/YYYxq5Ispjxg/bnep7IQfqfl46sJ2a8HsJOhTb DdAMTXSbgsW4HTgDot3GNL/VnL0QewebaYT7w5eS9Miq3JRDci+cnCbs9kVpn/vA 43BVPJHM0iG+1eRCo9uwwauTAK2nu/S2ftGb/Jx/gFF9z44r7NwfJVnm1UcBkk8L rYg8GNQlAP21jiF6pU7W9jLMYmgiMHnIhPKPKU0RHP1XNxe/gdUFiH7P2NNzJyQd 2ZvERO5h0VYRSXRVauU5jj+C8zDuOy9rUS96r3tDd0jbP1qf3kI= -----END CERTIFICATE-----Generated at Mon Mar 2 07:49:57 2026 by rpki-client