
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft
File: 38A92419EE1289455FCB1B71F9420F05CA334C15.mft (raw, json)
Hash identifier: GHOt0ZMXKRZ+Y90OP/s8d4OpRNUKIuOHP2a7Xety4wY=
Subject key identifier: B7:30:6C:3C:76:CC:37:08:0E:31:D0:F4:77:EC:A6:D7:06:10:6F:3E
Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15
Certificate issuer: /CN=38A92419EE1289455FCB1B71F9420F05CA334C15
Certificate serial: 12F02C7D327327DAB6AAD8A6976EAEEA3C949563
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft
Manifest number: 0268
Signing time: Wed 15 Apr 2026 21:30:01 +0000
Manifest this update: Wed 15 Apr 2026 21:25:01 +0000
Manifest next update: Sun 19 Apr 2026 08:52:01 +0000
Files and hashes: 1: 3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (hash: Ol+8mj4uz+YDl+K02s8/nnKwbaKHiw9jdN56tzENmfg=)
2: 3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (hash: gzlae1M+2c3Da2PrmmaLHCIu6SA8hOf9N6Q+EvROXj4=)
3: 38A92419EE1289455FCB1B71F9420F05CA334C15.crl (hash: Jio/2WtgcETzGPv/tbL+7FNGlyD0TvKJ3FwEdDwoATQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl
rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 08:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f0:2c:7d:32:73:27:da:b6:aa:d8:a6:97:6e:ae:ea:3c:94:95:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15
Validity
Not Before: Apr 15 21:25:01 2026 GMT
Not After : Apr 19 08:52:01 2026 GMT
Subject: CN=B7306C3C76CC37080E31D0F477ECA6D706106F3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:51:2c:d3:f0:a7:50:ce:0a:c8:7d:e6:c0:
b6:f5:db:30:d9:47:81:7c:53:1e:69:20:63:2b:24:
b9:d6:be:e5:f9:88:de:f0:bf:18:13:8a:cf:dc:32:
d0:f7:fc:22:e1:86:7d:f9:fb:00:a1:96:50:e8:4a:
ce:06:d5:ce:e2:54:1c:60:20:19:dd:09:a1:c9:90:
d2:d9:e3:b1:98:1e:ab:f7:45:72:47:4f:a6:c9:38:
5d:e6:44:09:5a:c1:27:d4:98:24:7a:d4:ea:74:dd:
97:0d:e6:47:8d:71:24:f5:2f:fb:51:ae:1f:33:f2:
da:d1:9b:fb:aa:7b:7c:fb:10:12:97:e0:6d:8e:b2:
fd:ab:33:6f:b6:42:37:4d:5c:9c:34:68:93:76:61:
51:74:46:55:34:d6:c0:47:ea:c0:ea:d5:84:53:6a:
e0:af:96:f8:67:79:66:54:12:f9:f5:96:5b:9a:80:
c1:1e:4d:0a:1d:b6:53:72:2d:57:30:01:fa:4b:85:
5a:be:b6:f9:a5:c2:9a:1c:0e:97:7a:e2:e7:ed:f1:
ea:04:2f:f4:1e:26:e3:7e:4b:9f:e8:24:af:10:12:
69:b7:c5:5d:79:98:25:9d:65:f9:19:1d:98:64:eb:
5d:f2:92:d8:f1:28:7d:05:25:28:ea:74:f7:91:ff:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:30:6C:3C:76:CC:37:08:0E:31:D0:F4:77:EC:A6:D7:06:10:6F:3E
X509v3 Authority Key Identifier:
keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:35:da:c7:fb:0c:e7:bd:62:97:98:84:be:03:b9:74:7a:26:
52:2f:cf:bb:a1:99:e2:57:0f:58:19:54:39:9a:62:bf:78:be:
11:0d:9a:01:c7:cf:7b:8b:23:92:b5:3a:3f:74:cf:4b:00:7d:
64:58:e5:c9:81:fd:4e:71:84:5b:8e:14:b5:e5:af:e1:43:7f:
f3:2a:26:ef:e8:55:a4:2c:e9:49:73:96:2e:e1:7a:98:7d:a8:
0f:90:27:00:d6:77:c0:e8:77:09:b1:fc:b9:23:7c:1e:1d:15:
1e:88:9b:ff:03:44:0c:3d:76:7a:be:22:40:2e:c9:5c:23:c6:
e0:43:ce:dc:1e:94:2a:f4:a7:f5:ba:76:f1:54:46:09:b8:a4:
ad:24:fd:72:e2:58:0b:c6:41:fc:ba:c1:06:79:15:72:32:07:
41:c9:b7:c4:82:83:72:f4:95:ad:68:fd:fb:a6:cf:53:3a:df:
86:e3:c8:3b:38:e0:4b:4b:7b:18:bf:b1:70:85:0f:73:32:f0:
bc:1f:0f:98:5e:87:6d:8b:dc:12:39:ae:1d:6c:3a:6e:cc:b0:
e5:b2:2c:cd:66:e1:e6:a9:8e:eb:20:dd:ce:ec:28:cc:49:53:
a2:7e:58:e4:e4:66:19:bd:3d:26:15:79:56:a2:11:28:3e:a3:
d7:32:23:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:15:51 2026 by rpki-client