$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json) Hash identifier: 7XcO6dOMA+NqrCQQ/Nc3qHnZfnu2MijU187thl6WrIA= Subject key identifier: D1:D4:66:91:F0:91:C0:8B:8D:13:09:B6:9E:05:62:86:2F:3C:A5:C9 Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE Certificate serial: 7DA7BB88F85FBBCF378CE46AADDCEA2AB27637D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft Manifest number: 0200 Signing time: Sun 01 Mar 2026 18:30:46 +0000 Manifest this update: Sun 01 Mar 2026 18:25:46 +0000 Manifest next update: Thu 05 Mar 2026 05:16:46 +0000 Files and hashes: 1: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: kHcd0PiR+avo06lt/QU/A5Sa1D2RSw2rXV6RMIKGIO8=) 2: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: d6Adr6ZZkYn4Jq27NkWDxIH+Fg4wpxOILm0JtNJ0Cfc=) 3: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: /POlvC1fWe2baqhlPh1OBbFDFofjUhsStjozJQ/G4KA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a7:bb:88:f8:5f:bb:cf:37:8c:e4:6a:ad:dc:ea:2a:b2:76:37:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE Validity Not Before: Mar 1 18:25:46 2026 GMT Not After : Mar 5 05:16:46 2026 GMT Subject: CN=D1D46691F091C08B8D1309B69E0562862F3CA5C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:9a:73:50:e8:4b:0b:9c:10:9c:10:14:23: 4e:f4:26:82:23:4d:7e:bf:5e:14:df:86:4d:f9:02: b6:3d:75:7a:bd:6f:42:6b:32:6f:0c:a6:df:d2:6f: 89:4b:11:48:43:d9:0d:79:87:b7:10:0f:d8:72:71: 25:4e:f2:ea:db:fd:ed:d4:e2:24:23:e3:d6:15:3a: 76:96:77:dc:c9:79:3e:41:7b:7a:58:39:10:e5:c4: 74:10:b6:7b:e8:e4:75:70:e9:5c:55:ab:3f:7f:64: 27:18:42:ac:c3:2e:6d:b6:8c:16:05:cf:be:18:0e: df:c5:41:d0:04:d1:ef:aa:c0:5a:69:ea:57:4e:2d: ef:b3:37:4b:72:a1:18:be:5e:c4:db:42:3c:4c:56: 42:8b:6d:bb:f5:7e:ed:fe:c1:ae:d0:0b:b8:94:87: 6a:75:cf:a7:14:f2:0f:72:83:7c:20:ef:ca:c7:0d: d1:27:7a:2e:3d:e5:34:8b:a8:c5:4d:af:a3:fc:a0: 4e:d6:44:d6:9a:33:60:62:cb:df:38:63:e6:c9:49: 55:59:dd:01:6f:b1:a7:fc:91:11:e8:fa:f3:c2:f1: a3:60:09:dc:ef:b4:50:9b:c2:e2:6c:24:d0:72:d6: 84:bc:02:48:7a:58:ad:6b:e9:e5:a8:68:39:76:7a: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D4:66:91:F0:91:C0:8B:8D:13:09:B6:9E:05:62:86:2F:3C:A5:C9 X509v3 Authority Key Identifier: keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:55:c9:4d:6f:b0:8a:84:e6:5c:71:5d:ce:1a:fd:32:8d:ed: 33:c7:e8:7f:8d:da:a4:4c:a3:11:03:d5:83:e2:69:42:50:80: e7:14:a0:ec:85:eb:a0:65:be:82:e4:83:ba:51:4b:3b:45:ea: b6:b5:64:6b:fd:94:64:fc:98:3b:fd:b7:be:60:1e:bb:73:e2: 0b:66:a5:5d:a7:8f:bf:f0:bd:62:96:c3:2a:a5:2d:4a:72:81: 9f:96:b7:ed:1f:d5:96:3e:d9:8a:eb:ff:a0:8d:01:dd:68:15: c3:b6:aa:b0:0b:02:46:88:39:a0:34:1b:19:51:d4:23:c5:d2: 25:48:78:21:4b:f6:3a:6b:44:65:bc:8f:f0:f7:e9:c6:aa:5f: ac:ff:aa:41:4f:55:40:a0:f4:1b:6c:f2:58:fe:b3:53:a4:c7: 78:19:d4:3b:c7:74:c1:0b:a3:4c:f8:45:7b:39:2f:23:f5:65: ed:2f:a2:6f:11:83:ae:54:be:3e:6b:8f:39:47:bf:54:fe:9c: 66:c5:d9:93:e3:8a:9c:5e:b5:dc:60:a6:1f:ed:f0:6e:5d:1a: 32:5a:07:88:c9:b3:a2:27:6b:c1:87:6b:39:b0:cc:7b:c8:93: 94:ac:40:90:3f:3e:24:a2:77:bb:07:b5:d4:c9:e2:9b:35:3e: 3e:8e:b3:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfae7iPhfu883jORqrdzqKrJ2N9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2 RTIzMTFGRTAeFw0yNjAzMDExODI1NDZaFw0yNjAzMDUwNTE2NDZaMDMxMTAvBgNV BAMTKEQxRDQ2NjkxRjA5MUMwOEI4RDEzMDlCNjlFMDU2Mjg2MkYzQ0E1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOppzUOhLC5wQnBAUI070JoIj TX6/XhTfhk35ArY9dXq9b0JrMm8Mpt/Sb4lLEUhD2Q15h7cQD9hycSVO8urb/e3U 4iQj49YVOnaWd9zJeT5Be3pYORDlxHQQtnvo5HVw6VxVqz9/ZCcYQqzDLm22jBYF z74YDt/FQdAE0e+qwFpp6ldOLe+zN0tyoRi+XsTbQjxMVkKLbbv1fu3+wa7QC7iU h2p1z6cU8g9yg3wg78rHDdEnei495TSLqMVNr6P8oE7WRNaaM2Biy984Y+bJSVVZ 3QFvsaf8kRHo+vPC8aNgCdzvtFCbwuJsJNBy1oS8Akh6WK1r6eWoaDl2erS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0dRmkfCRwIuNEwm2ngVihi88pckwHwYDVR0j BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0 RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz MTFGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx MzQtMTgwNGY5NDc5MmRmLzAvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1 MTg2RTIzMTFGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVVyU1vsIqE5lxxXc4a/TKN7TPH6H+N2qRM oxED1YPiaUJQgOcUoOyF66BlvoLkg7pRSztF6ra1ZGv9lGT8mDv9t75gHrtz4gtm pV2nj7/wvWKWwyqlLUpygZ+Wt+0f1ZY+2Yrr/6CNAd1oFcO2qrALAkaIOaA0GxlR 1CPF0iVIeCFL9jprRGW8j/D36caqX6z/qkFPVUCg9Bts8lj+s1Okx3gZ1DvHdMEL o0z4RXs5LyP1Ze0vom8Rg65Uvj5rjzlHv1T+nGbF2ZPjipxetdxgph/t8G5dGjJa B4jJs6Ina8GHazmwzHvIk5SsQJA/PiSid7sHtdTJ4ps1Pj6Os7A= -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:23 2026 by rpki-client