$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft File: 38D72675FCFA53571947E587993417F0A2E84774.mft (raw, json) Hash identifier: 2427Wypdgy4BzQBr4CkTsEh9RObua7kpNO8n/JRdElg= Subject key identifier: F5:13:41:25:F4:E3:4C:58:E9:90:3B:FD:C9:5A:3D:98:84:ED:2C:B6 Authority key identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 Certificate issuer: /CN=38D72675FCFA53571947E587993417F0A2E84774 Certificate serial: 1E9034C4B7A08C8F87C7BD2A4F0A102CB15B91A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft Manifest number: BF Signing time: Mon 21 Sep 2026 12:47:15 +0000 Manifest this update: Mon 21 Sep 2026 12:42:15 +0000 Manifest next update: Tue 22 Sep 2026 14:19:15 +0000 Files and hashes: 1: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: uTIMEfksgIfw3pC5q8pYKmgEjBmK5dhPwmsdESCHDfM=) 2: 3131342e3134312e39332e302f32342d3234203d3e203338373733.roa (hash: So6HCFRYfBIDo3Yy4ADeQ9cjX7P8uCC8BIv2/s6u/0g=) 3: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: FscfLd+VmMO0VIBUn9YaLAaHtn1/p9aWzjIEPbsat1U=) 4: 3131342e3134312e39322e302f32342d3234203d3e203338373733.roa (hash: 81ry6DUJ7vS8X5kvVlKujeT3BQmxdahLH8ZK0O09vk0=) 5: 3131342e3134312e39342e302f32342d3234203d3e203338373733.roa (hash: KBgcMCCrYhviN35Lsj+SDe+UfidQ9sTv4EpZKCSDnc4=) 6: 3131342e3134312e39312e302f32342d3234203d3e203338373733.roa (hash: 4dNfe19s0fvjSguokSLbqrRLsnLRnuoEvEhmGuqBlvY=) 7: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 60QvD+kuWCtJFdascF9uuaceBf/9kdy2qmj8qDdkANM=) 8: 38D72675FCFA53571947E587993417F0A2E84774.crl (hash: 6EANbBoNjxTitKPLWGrRmY+eZbwYj+iw2MAnEsd0OQ8=) 9: 3131342e3134312e39352e302f32342d3234203d3e203338373733.roa (hash: BtBofw2ddLFZvd8330UeqRlGDcKEpNlQwCfV2FpF8/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:90:34:c4:b7:a0:8c:8f:87:c7:bd:2a:4f:0a:10:2c:b1:5b:91:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38D72675FCFA53571947E587993417F0A2E84774 Validity Not Before: Sep 21 12:42:15 2026 GMT Not After : Sep 22 14:19:15 2026 GMT Subject: CN=F5134125F4E34C58E9903BFDC95A3D9884ED2CB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e8:51:f2:74:a9:cf:61:f3:f8:32:7b:ff:7b: e2:92:c8:4e:b9:9e:e8:6e:e5:57:6e:d8:e3:0d:e7: fb:8f:76:ff:26:a6:d6:36:c0:92:68:e7:c9:61:5d: 26:4f:22:b6:77:80:06:87:fc:26:bb:70:d4:e6:dd: 55:e5:23:9b:e5:6c:e6:53:e2:f3:85:24:a6:ea:36: 75:40:74:10:58:06:1a:d7:04:bd:bd:8d:8e:35:b7: 58:46:1e:4a:a3:7b:94:60:77:c3:36:05:58:ce:79: 03:64:f6:28:25:3f:cb:03:dd:4c:f8:07:9f:bd:e0: 87:66:46:00:75:e9:d3:85:bc:fe:c6:0d:b5:6a:ac: 45:a2:a5:a5:ef:17:ad:ee:fc:1a:d8:ae:21:80:b7: a1:fc:cf:49:1d:43:5c:6c:a1:0c:31:a8:e5:11:14: 04:12:51:f7:30:73:99:21:94:b1:10:a1:d5:b0:e7: d9:26:5f:5a:8e:c0:d9:67:98:b5:b7:ba:60:82:b2: 0e:57:21:03:af:3a:85:fd:cd:58:08:d2:ba:c2:fb: ca:4f:4f:62:60:b5:84:1c:3f:53:f6:cd:83:06:26: 91:1a:ae:6b:a4:8d:19:c6:17:3e:a8:c0:31:8e:c3: f9:c3:5a:db:78:be:5e:5b:b0:cd:ce:42:f3:1c:0c: 7a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:13:41:25:F4:E3:4C:58:E9:90:3B:FD:C9:5A:3D:98:84:ED:2C:B6 X509v3 Authority Key Identifier: keyid:38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:97:da:1c:91:92:77:c4:21:32:35:ab:14:80:e4:96:ea:fa: 9f:50:c7:d3:d0:78:66:cd:f7:d4:86:15:a4:60:ab:b7:fb:6d: f0:fc:1c:a8:70:be:36:b9:15:e6:91:57:e9:35:4b:62:ba:8f: 2c:ac:c4:99:73:4e:7f:2e:c7:bd:b1:22:e1:52:13:8d:61:d5: 13:69:b4:f2:a9:e1:df:25:9a:4e:02:7d:b1:73:42:dd:c5:ef: 19:ad:e6:32:77:7f:2c:aa:b7:74:17:c3:fd:44:66:88:91:aa: 9f:64:07:6a:da:9d:ab:cd:46:f9:9c:20:2f:f3:91:14:d5:49: a8:a2:5e:0a:06:1f:16:4b:fc:62:37:bf:5b:88:ad:3c:a5:50: 3c:2b:93:fd:05:d6:d1:05:bb:19:1c:02:c4:7e:9e:d6:3c:3b: d2:7a:c6:0c:e7:ff:a9:fb:11:6b:7b:ca:7d:6e:f3:60:98:6b: 06:c3:08:ab:f8:76:f8:e5:bf:7a:b8:7d:4b:57:03:63:91:49: 07:9b:fd:44:3e:96:60:ea:be:6c:88:07:d6:41:81:1e:57:4d: 3a:fd:3b:b5:5a:c0:3c:fb:a9:0b:6c:03:78:db:08:90:83:df: 23:3c:86:44:db:ed:d4:e4:c6:ad:aa:55:cf:7c:6d:b5:fa:d0: 50:42:e8:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHpA0xLegjI+Hx70qTwoQLLFbkaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBB MkU4NDc3NDAeFw0yNjA5MjExMjQyMTVaFw0yNjA5MjIxNDE5MTVaMDMxMTAvBgNV BAMTKEY1MTM0MTI1RjRFMzRDNThFOTkwM0JGREM5NUEzRDk4ODRFRDJDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6FHydKnPYfP4Mnv/e+KSyE65 nuhu5Vdu2OMN5/uPdv8mptY2wJJo58lhXSZPIrZ3gAaH/Ca7cNTm3VXlI5vlbOZT 4vOFJKbqNnVAdBBYBhrXBL29jY41t1hGHkqje5Rgd8M2BVjOeQNk9iglP8sD3Uz4 B5+94IdmRgB16dOFvP7GDbVqrEWipaXvF63u/BrYriGAt6H8z0kdQ1xsoQwxqOUR FAQSUfcwc5khlLEQodWw59kmX1qOwNlnmLW3umCCsg5XIQOvOoX9zVgI0rrC+8pP T2JgtYQcP1P2zYMGJpEarmukjRnGFz6owDGOw/nDWtt4vl5bsM3OQvMcDHrDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9RNBJfTjTFjpkDv9yVo9mITtLLYwHwYDVR0j BBgwFoAUONcmdfz6U1cZR+WHmTQX8KLoR3QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzdmYzU0ZmItNzI0ZS00MzE2LWI5YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVG Q0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBBMkU4NDc3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEQ3MjY3NUZDRkE1MzU3MTk0N0U1ODc5OTM0MTdGMEEyRTg0 Nzc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3 RjBBMkU4NDc3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOX2hyRknfEITI1qxSA5Jbq+p9Qx9PQeGbN 99SGFaRgq7f7bfD8HKhwvja5FeaRV+k1S2K6jyysxJlzTn8ux72xIuFSE41h1RNp tPKp4d8lmk4CfbFzQt3F7xmt5jJ3fyyqt3QXw/1EZoiRqp9kB2ranavNRvmcIC/z kRTVSaiiXgoGHxZL/GI3v1uIrTylUDwrk/0F1tEFuxkcAsR+ntY8O9J6xgzn/6n7 EWt7yn1u82CYawbDCKv4dvjlv3q4fUtXA2ORSQeb/UQ+lmDqvmyIB9ZBgR5XTTr9 O7VawDz7qQtsA3jbCJCD3yM8hkTb7dTkxq2qVc98bbX60FBC6As= -----END CERTIFICATE-----Generated at Mon Sep 21 20:07:13 2026 by rpki-client