$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft File: 3C38CDC785C4C8B22E60377271E55409582CCE11.mft (raw, json) Hash identifier: cH3hcA7AcrLPvZmrkLIqGbFC1EHspPTjUwFsqNdMGoc= Subject key identifier: 0E:D3:8A:38:05:FF:97:6E:19:4D:68:26:24:EF:65:59:9E:61:AE:B9 Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 Certificate issuer: /CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Certificate serial: 63C3A8025CCC8CF2DBF8756A8EA7795854B15643 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft Manifest number: BC Signing time: Mon 21 Sep 2026 05:48:49 +0000 Manifest this update: Mon 21 Sep 2026 05:43:49 +0000 Manifest next update: Tue 22 Sep 2026 06:05:49 +0000 Files and hashes: 1: 3C38CDC785C4C8B22E60377271E55409582CCE11.crl (hash: ZHyfsm4hbLActoIYc6iO/5TVN7zmUDrZLoLypseh25M=) 2: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: CNqZtOi2G7stcR7KpWbtX7pHl0DtOjDNuPcEVY0GuK4=) 3: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: YTCmCer361lbPyWorpFl5d+Z6lvA+nitAm63kpLBrjA=) 4: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: YRj5C4EJmHgy7/Vm8+56TmtCB98kN0pGzPis/CT4F1s=) 5: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: 6IAAYhSuJnzcb+wPAnz95hDBr9XmKVxiIbVUzRwnFY4=) 6: 3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa (hash: uY3yyx4wQkOkesdmZiKQBfO/mX9p5Uwb9aYVUKsyBH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c3:a8:02:5c:cc:8c:f2:db:f8:75:6a:8e:a7:79:58:54:b1:56:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Validity Not Before: Sep 21 05:43:49 2026 GMT Not After : Sep 22 06:05:49 2026 GMT Subject: CN=0ED38A3805FF976E194D682624EF65599E61AEB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:d7:1e:18:cf:2f:b7:1b:c2:63:d0:5a:65: 11:07:be:38:42:a1:94:13:3e:76:84:4b:4f:ff:2b: 97:3c:2a:2a:75:b2:58:84:e8:85:f8:96:6b:3a:32: 87:a5:28:19:e3:8e:6a:39:6a:04:c4:c3:81:10:31: ac:92:b3:7c:f6:67:3f:47:08:a5:44:74:a9:a9:76: 1f:c7:55:38:96:b1:0e:cb:14:c6:ea:c1:2b:8d:a9: c3:29:4d:70:0f:95:96:4c:dd:8d:2e:7b:fc:0a:db: 17:ca:3b:e9:91:39:89:26:28:e0:e1:31:20:6b:4d: 8f:5e:ac:39:f9:33:f9:97:7c:48:6a:67:18:a2:80: a9:66:9d:5f:d7:c7:f0:22:d9:f1:2e:4c:e6:85:0a: 1d:a3:de:31:93:63:62:27:68:b1:b6:f1:22:57:62: 57:d0:49:e2:ac:6b:ca:7a:96:d2:45:aa:a5:1d:3e: e2:ce:ae:a3:db:91:2d:41:47:3b:32:c3:4b:b8:02: 7b:55:3a:76:54:84:b0:ff:0d:36:a3:52:5d:ff:63: 72:2c:9e:b0:e4:d4:bc:92:6a:fa:97:81:0e:99:66: 88:d8:38:8d:c3:ca:c1:f5:19:74:e5:b6:14:06:1d: a8:51:54:99:96:23:f1:35:bf:63:4f:37:1b:04:04: b2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D3:8A:38:05:FF:97:6E:19:4D:68:26:24:EF:65:59:9E:61:AE:B9 X509v3 Authority Key Identifier: keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:81:cd:7c:33:69:17:78:69:6c:a1:43:5b:16:43:db:2c:d3: 0d:ed:ee:8c:a8:86:e5:2a:20:ab:47:6f:7e:e0:5b:81:8c:89: 77:c8:c3:9b:ea:1e:f3:d3:b4:eb:40:32:a5:45:97:b7:97:5c: ed:97:08:cd:4e:65:e1:4d:14:51:93:de:4f:d4:c8:b7:2a:6b: f9:73:59:dd:d2:31:03:27:ab:b3:04:89:79:82:2b:24:0f:f7: 8c:15:29:8a:f2:ce:85:74:be:c4:69:1b:24:36:50:6e:32:1c: 57:10:84:62:d4:c1:2e:3e:31:52:43:8e:5a:bb:56:a9:3b:02: 37:8e:37:04:3d:22:e0:7e:3e:2c:19:c4:f3:65:06:a3:b6:b2: 91:f8:8b:b6:2b:86:ee:ce:20:61:87:41:e8:e2:0e:6c:38:dd: 85:94:2c:50:81:79:b5:d5:57:3b:c8:a0:64:f9:cc:e0:81:a0: 9e:60:ad:e3:8f:94:29:be:5f:21:39:e6:94:39:b6:76:08:8e: 0c:ff:19:b5:62:ba:b7:d3:0f:65:a0:81:18:08:14:19:3a:8e: d7:b2:3d:90:10:97:2f:87:15:49:2f:76:a4:39:4a:00:06:7c: d1:8b:87:92:37:cd:76:bd:81:28:1f:9e:7b:4a:b0:8d:5c:38: dc:0f:e0:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8OoAlzMjPLb+HVqjqd5WFSxVkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1 ODJDQ0UxMTAeFw0yNjA5MjEwNTQzNDlaFw0yNjA5MjIwNjA1NDlaMDMxMTAvBgNV BAMTKDBFRDM4QTM4MDVGRjk3NkUxOTRENjgyNjI0RUY2NTU5OUU2MUFFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfltceGM8vtxvCY9BaZREHvjhC oZQTPnaES0//K5c8Kip1sliE6IX4lms6MoelKBnjjmo5agTEw4EQMaySs3z2Zz9H CKVEdKmpdh/HVTiWsQ7LFMbqwSuNqcMpTXAPlZZM3Y0ue/wK2xfKO+mROYkmKODh MSBrTY9erDn5M/mXfEhqZxiigKlmnV/Xx/Ai2fEuTOaFCh2j3jGTY2InaLG28SJX YlfQSeKsa8p6ltJFqqUdPuLOrqPbkS1BRzsyw0u4AntVOnZUhLD/DTajUl3/Y3Is nrDk1LySavqXgQ6ZZojYOI3DysH1GXTlthQGHahRVJmWI/E1v2NPNxsEBLJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDtOKOAX/l24ZTWgmJO9lWZ5hrrkwHwYDVR0j BBgwFoAUPDjNx4XEyLIuYDdyceVUCVgszhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ3OTRkMzYtNjlmOC00NDA2LWJmOWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4 NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1ODJDQ0UxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzM4Q0RDNzg1QzRDOEIyMkU2MDM3NzI3MUU1NTQwOTU4MkND RTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm OWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0 MDk1ODJDQ0UxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCBzXwzaRd4aWyhQ1sWQ9ss0w3t7oyohuUq IKtHb37gW4GMiXfIw5vqHvPTtOtAMqVFl7eXXO2XCM1OZeFNFFGT3k/UyLcqa/lz Wd3SMQMnq7MEiXmCKyQP94wVKYryzoV0vsRpGyQ2UG4yHFcQhGLUwS4+MVJDjlq7 Vqk7AjeONwQ9IuB+PiwZxPNlBqO2spH4i7Yrhu7OIGGHQejiDmw43YWULFCBebXV VzvIoGT5zOCBoJ5greOPlCm+XyE55pQ5tnYIjgz/GbViurfTD2WggRgIFBk6jtey PZAQly+HFUkvdqQ5SgAGfNGLh5I3zXa9gSgfnntKsI1cONwP4Nk= -----END CERTIFICATE-----Generated at Mon Sep 21 09:43:09 2026 by rpki-client