$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft File: 38F5CCFB43C14A0A6D836EE754A8073545066216.mft (raw, json) Hash identifier: hsuCJmzHh/5Lk0ibqAwmYd7ciRHPszpbvzVaB58O99w= Subject key identifier: CF:47:89:79:DC:43:79:B2:40:45:31:7F:73:E2:48:8A:95:1C:D6:F7 Authority key identifier: 38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 Certificate issuer: /CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Certificate serial: 47A5FCBB315009F4B0D52D34818BC78BD8D291 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft Manifest number: BD Signing time: Mon 21 Sep 2026 16:01:30 +0000 Manifest this update: Mon 21 Sep 2026 15:56:30 +0000 Manifest next update: Tue 22 Sep 2026 18:12:30 +0000 Files and hashes: 1: 3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa (hash: nyod0CT/fB5gH7ANBUTQG+Fhk9ZB7fad+xE68OSLCI0=) 2: 38F5CCFB43C14A0A6D836EE754A8073545066216.crl (hash: TMjATrby07nW1WPm0d2hOCvRHM7am93rywvVittG1dc=) 3: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (hash: f8d867FdOKPAI9FI9ckkqBnXV6BMv6oUu/lBMN4pJIk=) 4: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (hash: pMseYXhaROm6EYmzpm8l2beM5snzhmulBoKAFnDhIs8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a5:fc:bb:31:50:09:f4:b0:d5:2d:34:81:8b:c7:8b:d8:d2:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Validity Not Before: Sep 21 15:56:30 2026 GMT Not After : Sep 22 18:12:30 2026 GMT Subject: CN=CF478979DC4379B24045317F73E2488A951CD6F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:77:eb:a7:0e:31:42:84:ff:60:4f:4b:7e: 24:41:c6:d3:80:2b:54:2f:82:ff:9d:af:d8:5e:32: 88:26:c9:42:ca:9e:f7:08:a9:8e:a1:2d:6c:76:d9: 4d:b5:d4:df:9c:57:f5:2e:79:93:7d:e1:c4:48:de: e9:94:50:ba:9d:90:71:0d:91:2a:65:8f:af:e4:8c: df:85:87:e4:fe:ea:65:fd:11:52:39:fc:e2:4f:92: 46:e1:a5:1f:2b:ee:01:72:81:64:ea:73:e5:11:81: 22:d9:e1:e8:0c:4e:36:bf:b1:74:35:93:2f:f5:33: d4:1e:41:3e:9b:21:36:ff:04:e0:28:6e:72:89:79: e7:7a:66:f6:e9:e3:91:8a:fd:49:e7:be:12:12:6b: ba:72:61:7e:8f:07:9b:1f:34:c1:0c:9b:df:23:b9: 2f:3a:e5:66:95:74:4a:a8:99:1c:cd:db:47:da:c4: d5:7b:e9:d7:5c:38:06:a8:86:73:35:c0:79:c7:ef: 5b:a8:82:e7:25:bc:d1:5d:12:16:3a:bd:4b:ab:cb: 3b:9c:3d:59:90:85:b0:30:82:29:d9:a1:ff:d1:12: 67:43:15:96:fd:32:d0:c6:22:c9:a9:c5:0c:de:8f: 02:c5:18:88:0f:35:4b:6f:26:f9:f7:9e:4f:b4:02: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:47:89:79:DC:43:79:B2:40:45:31:7F:73:E2:48:8A:95:1C:D6:F7 X509v3 Authority Key Identifier: keyid:38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5b:59:fe:67:58:d5:34:cb:32:c9:c6:cc:d4:2e:8e:5c:b4: a9:42:c1:5e:26:52:73:dc:fb:7f:19:4c:fb:1f:4b:26:7f:68: 9d:61:8f:bc:ba:04:61:95:6e:62:d4:c2:c9:95:d3:0c:f5:5a: d8:e1:3d:78:6e:31:31:7b:45:67:97:65:0a:6c:40:aa:8e:9d: 4d:85:cc:d5:63:8e:b9:42:b5:81:d3:2b:ed:ed:39:52:d8:86: 42:04:08:dd:66:d8:b3:eb:44:6f:56:38:6e:96:ac:a0:3f:15: 2c:f3:35:9c:6d:b0:91:de:75:24:78:8f:cd:30:2b:41:61:37: 8c:7a:ef:43:6d:49:cc:6a:51:d2:85:6a:a9:e5:21:f4:f0:2f: a2:d4:af:b6:9f:7c:4f:b1:1b:32:cb:73:73:4c:1e:fd:62:21: 87:98:dc:88:e5:a2:06:55:60:7c:f6:a2:1f:8c:b8:de:f6:53: 9d:0a:1a:35:55:e7:8c:05:0a:ac:ab:f2:82:46:2f:fe:88:ed: 93:d9:84:9b:31:90:67:1e:44:12:1c:3d:25:b8:53:2c:84:ff: 97:47:bd:c1:f7:62:6f:f8:94:12:5b:cd:15:92:ed:68:4d:e1: 52:de:78:a1:1e:03:0b:19:96:4a:dc:19:f1:e2:f3:a6:37:84: 07:ee:be:42 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITR6X8uzFQCfSw1S00gYvHi9jSkTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzOEY1Q0NGQjQzQzE0QTBBNkQ4MzZFRTc1NEE4MDczNTQ1 MDY2MjE2MB4XDTI2MDkyMTE1NTYzMFoXDTI2MDkyMjE4MTIzMFowMzExMC8GA1UE AxMoQ0Y0Nzg5NzlEQzQzNzlCMjQwNDUzMTdGNzNFMjQ4OEE5NTFDRDZGNzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK6td+unDjFChP9gT0t+JEHG04Ar VC+C/52v2F4yiCbJQsqe9wipjqEtbHbZTbXU35xX9S55k33hxEje6ZRQup2QcQ2R KmWPr+SM34WH5P7qZf0RUjn84k+SRuGlHyvuAXKBZOpz5RGBItnh6AxONr+xdDWT L/Uz1B5BPpshNv8E4Chucol553pm9unjkYr9See+EhJrunJhfo8Hmx80wQyb3yO5 LzrlZpV0SqiZHM3bR9rE1Xvp11w4BqiGczXAecfvW6iC5yW80V0SFjq9S6vLO5w9 WZCFsDCCKdmh/9ESZ0MVlv0y0MYiyanFDN6PAsUYiA81S28m+feeT7QC+rsCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTPR4l53EN5skBFMX9z4kiKlRzW9zAfBgNVHSME GDAWgBQ49cz7Q8FKCm2DbudUqAc1RQZiFjAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8w ZGQwNzhmZS0wOTMwLTQ1ZGMtYjQwMy0zY2U0ZTg2M2Y4YjUvMC8zOEY1Q0NGQjQz QzE0QTBBNkQ4MzZFRTc1NEE4MDczNTQ1MDY2MjE2LmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzM4RjVDQ0ZCNDNDMTRBMEE2RDgzNkVFNzU0QTgwNzM1NDUwNjYy MTYuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8wZGQwNzhmZS0wOTMwLTQ1ZGMtYjQw My0zY2U0ZTg2M2Y4YjUvMC8zOEY1Q0NGQjQzQzE0QTBBNkQ4MzZFRTc1NEE4MDcz NTQ1MDY2MjE2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAiVtZ/mdY1TTLMsnGzNQujly0qULBXiZSc9z7 fxlM+x9LJn9onWGPvLoEYZVuYtTCyZXTDPVa2OE9eG4xMXtFZ5dlCmxAqo6dTYXM 1WOOuUK1gdMr7e05UtiGQgQI3WbYs+tEb1Y4bpasoD8VLPM1nG2wkd51JHiPzTAr QWE3jHrvQ21JzGpR0oVqqeUh9PAvotSvtp98T7EbMstzc0we/WIhh5jciOWiBlVg fPaiH4y43vZTnQoaNVXnjAUKrKvygkYv/ojtk9mEmzGQZx5EEhw9JbhTLIT/l0e9 wfdib/iUElvNFZLtaE3hUt54oR4DCxmWStwZ8eLzpjeEB+6+Qg== -----END CERTIFICATE-----Generated at Tue Sep 22 06:31:40 2026 by rpki-client