$ rpki-client -vvf rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft File: 38F5CCFB43C14A0A6D836EE754A8073545066216.mft (raw, json) Hash identifier: c2bw/OA4q/3oe3e4TwUP+wgy6bPsxhYTHLPxLGTWv+s= Subject key identifier: 1A:AE:F6:C8:40:C4:60:B3:C2:3C:0F:0E:CE:98:D8:EA:C6:B5:73:48 Authority key identifier: 38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 Certificate issuer: /CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Certificate serial: 34C32FD980212D9131DF8C9A2D7CE4384FCF26A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 20:13:39 +0000 Manifest this update: Tue 16 Jun 2026 20:08:39 +0000 Manifest next update: Wed 17 Jun 2026 22:03:39 +0000 Files and hashes: 1: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (hash: f8d867FdOKPAI9FI9ckkqBnXV6BMv6oUu/lBMN4pJIk=) 2: 38F5CCFB43C14A0A6D836EE754A8073545066216.crl (hash: G5i2/gw7327ry/E3BByI0itvuAzaNZFv9Fdjh4XMSZI=) 3: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (hash: pMseYXhaROm6EYmzpm8l2beM5snzhmulBoKAFnDhIs8=) 4: 3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa (hash: nyod0CT/fB5gH7ANBUTQG+Fhk9ZB7fad+xE68OSLCI0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c3:2f:d9:80:21:2d:91:31:df:8c:9a:2d:7c:e4:38:4f:cf:26:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Validity Not Before: Jun 16 20:08:39 2026 GMT Not After : Jun 17 22:03:39 2026 GMT Subject: CN=1AAEF6C840C460B3C23C0F0ECE98D8EAC6B57348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:73:a5:92:21:3d:c5:e5:52:82:ef:14:a8: 66:da:17:04:0a:cb:6a:56:bc:1f:1c:0c:fc:6f:b3: ca:3e:c8:13:4c:fb:bd:f0:b8:3d:4a:c2:24:3d:8a: 1a:26:6f:53:41:9d:7e:5c:40:b0:7d:a9:45:2a:67: 3a:7b:3e:37:93:aa:cb:7f:1b:0c:2d:e0:95:06:d4: f7:d0:bc:30:2f:e7:04:b6:2d:24:69:82:4e:b7:fe: 9c:f6:81:75:69:c8:5d:3c:84:5a:f2:50:ce:3b:e5: 80:8d:6d:ca:dd:ac:bb:c2:ea:1b:23:f4:e6:5d:a6: e9:85:94:ca:0a:82:b0:6d:a0:83:78:27:1c:e7:39: e4:f6:62:af:31:7d:3c:a9:4a:cf:64:52:70:23:a9: a9:e8:7a:37:a1:a2:e8:a5:8c:bd:ca:e8:f8:1c:a0: 67:e0:87:22:9e:b9:03:e1:ba:8c:59:f5:ff:c8:e5: 15:6f:6c:5a:2e:bd:58:31:06:60:c6:88:0f:3f:02: 4f:b3:c8:4b:86:43:ee:a9:6d:2e:65:fe:9b:d9:3f: bd:96:e4:93:94:2a:58:dd:90:e7:6c:74:60:0d:52: 7b:50:0e:9b:8c:0f:31:d2:b9:7a:d3:2a:9e:8e:ca: a8:c9:b3:3f:0a:b3:23:43:09:9f:8a:0f:56:36:28: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AE:F6:C8:40:C4:60:B3:C2:3C:0F:0E:CE:98:D8:EA:C6:B5:73:48 X509v3 Authority Key Identifier: keyid:38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:77:12:41:5d:41:61:8e:d5:62:29:66:b7:a8:00:cf:a1:24: 52:9f:3f:e4:ff:e1:e9:2b:19:95:8d:c3:b5:8d:4f:87:ea:68: 70:43:27:98:ee:34:91:46:69:b4:3b:38:ba:69:3f:6c:60:d7: 88:d6:4c:61:ec:cf:89:6c:1b:54:e6:69:6c:b1:96:6b:ad:0b: bd:fc:0e:3e:7f:e5:e2:15:9c:ae:fe:01:bc:db:25:6b:d6:2c: 99:f1:97:36:96:64:c3:c6:cb:fa:73:17:78:4c:56:0e:1e:55: 39:58:c6:d8:3c:16:b9:b1:4d:6e:1c:9e:cc:39:d1:67:5c:9a: 67:a2:70:d5:6e:4e:aa:11:6b:43:a3:a9:73:fd:73:da:f6:f5: c9:57:f0:8b:72:6d:43:a8:92:61:7e:8f:38:7c:e5:ae:e8:1b: a7:3f:03:cc:07:ec:b4:58:c7:87:98:27:95:c6:8b:4d:96:09: 1f:e4:57:68:13:05:6a:a7:fc:9e:f5:ca:73:a4:af:4a:c8:87: 02:41:46:c5:05:78:6f:7e:b7:fd:1b:a1:dd:68:55:f4:1e:f7: db:60:08:49:b9:bf:44:6e:8c:9e:3f:0a:3f:af:d3:20:e2:26: 4a:c8:c5:6d:00:78:2c:5e:26:09:2b:a5:46:96:1d:b7:dd:72: 6a:c1:81:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMMv2YAhLZEx34yaLXzkOE/PJqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGNUNDRkI0M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0 NTA2NjIxNjAeFw0yNjA2MTYyMDA4MzlaFw0yNjA2MTcyMjAzMzlaMDMxMTAvBgNV BAMTKDFBQUVGNkM4NDBDNDYwQjNDMjNDMEYwRUNFOThEOEVBQzZCNTczNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4U3OlkiE9xeVSgu8UqGbaFwQK y2pWvB8cDPxvs8o+yBNM+73wuD1KwiQ9ihomb1NBnX5cQLB9qUUqZzp7PjeTqst/ Gwwt4JUG1PfQvDAv5wS2LSRpgk63/pz2gXVpyF08hFryUM475YCNbcrdrLvC6hsj 9OZdpumFlMoKgrBtoIN4JxznOeT2Yq8xfTypSs9kUnAjqanoejehouiljL3K6Pgc oGfghyKeuQPhuoxZ9f/I5RVvbFouvVgxBmDGiA8/Ak+zyEuGQ+6pbS5l/pvZP72W 5JOUKljdkOdsdGANUntQDpuMDzHSuXrTKp6OyqjJsz8KsyNDCZ+KD1Y2KE+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGq72yEDEYLPCPA8OzpjY6sa1c0gwHwYDVR0j BBgwFoAUOPXM+0PBSgptg27nVKgHNUUGYhYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRkMDc4ZmUtMDkzMC00NWRjLWI0MDMtM2NlNGU4NjNmOGI1LzAvMzhGNUNDRkI0 M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0NTA2NjIxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEY1Q0NGQjQzQzE0QTBBNkQ4MzZFRTc1NEE4MDczNTQ1MDY2 MjE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRkMDc4ZmUtMDkzMC00NWRjLWI0 MDMtM2NlNGU4NjNmOGI1LzAvMzhGNUNDRkI0M0MxNEEwQTZEODM2RUU3NTRBODA3 MzU0NTA2NjIxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJ3EkFdQWGO1WIpZreoAM+hJFKfP+T/4ekr GZWNw7WNT4fqaHBDJ5juNJFGabQ7OLppP2xg14jWTGHsz4lsG1TmaWyxlmutC738 Dj5/5eIVnK7+AbzbJWvWLJnxlzaWZMPGy/pzF3hMVg4eVTlYxtg8FrmxTW4cnsw5 0WdcmmeicNVuTqoRa0OjqXP9c9r29clX8ItybUOokmF+jzh85a7oG6c/A8wH7LRY x4eYJ5XGi02WCR/kV2gTBWqn/J71ynOkr0rIhwJBRsUFeG9+t/0bod1oVfQe99tg CEm5v0RujJ4/Cj+v0yDiJkrIxW0AeCxeJgkrpUaWHbfdcmrBgUk= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:25 2026 by rpki-client