$ rpki-client -vvf rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft File: 38D72675FCFA53571947E587993417F0A2E84774.mft (raw, json) Hash identifier: FCnFvALuc7/0H/WfgQFv91FQ5wZ4kZOr2SjoQfY/vFU= Subject key identifier: AD:8B:4A:9A:3D:DA:7F:78:F9:A9:A3:AF:5C:C3:6C:F6:E2:7F:36:C4 Authority key identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 Certificate issuer: /CN=38D72675FCFA53571947E587993417F0A2E84774 Certificate serial: 7D9F3F06E4DC46120CCFCC31CF925FA9C9750F23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:00:55 +0000 Manifest this update: Tue 16 Jun 2026 21:55:55 +0000 Manifest next update: Thu 18 Jun 2026 01:52:55 +0000 Files and hashes: 1: 38D72675FCFA53571947E587993417F0A2E84774.crl (hash: Zx7fHWIrhqR0qzemCQUMU4I5H3SOWxcldiHTqYiRe50=) 2: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: uTIMEfksgIfw3pC5q8pYKmgEjBmK5dhPwmsdESCHDfM=) 3: 3131342e3134312e39352e302f32342d3234203d3e203338373733.roa (hash: BtBofw2ddLFZvd8330UeqRlGDcKEpNlQwCfV2FpF8/w=) 4: 3131342e3134312e39332e302f32342d3234203d3e203338373733.roa (hash: So6HCFRYfBIDo3Yy4ADeQ9cjX7P8uCC8BIv2/s6u/0g=) 5: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 60QvD+kuWCtJFdascF9uuaceBf/9kdy2qmj8qDdkANM=) 6: 3131342e3134312e39322e302f32342d3234203d3e203338373733.roa (hash: 81ry6DUJ7vS8X5kvVlKujeT3BQmxdahLH8ZK0O09vk0=) 7: 3131342e3134312e39342e302f32342d3234203d3e203338373733.roa (hash: KBgcMCCrYhviN35Lsj+SDe+UfidQ9sTv4EpZKCSDnc4=) 8: 3131342e3134312e39312e302f32342d3234203d3e203338373733.roa (hash: 4dNfe19s0fvjSguokSLbqrRLsnLRnuoEvEhmGuqBlvY=) 9: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: FscfLd+VmMO0VIBUn9YaLAaHtn1/p9aWzjIEPbsat1U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9f:3f:06:e4:dc:46:12:0c:cf:cc:31:cf:92:5f:a9:c9:75:0f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38D72675FCFA53571947E587993417F0A2E84774 Validity Not Before: Jun 16 21:55:55 2026 GMT Not After : Jun 18 01:52:55 2026 GMT Subject: CN=AD8B4A9A3DDA7F78F9A9A3AF5CC36CF6E27F36C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:76:3d:0d:1f:8f:a2:42:e8:cd:01:19:42: d1:97:f7:2e:7c:6b:ea:39:c4:8f:25:2f:56:74:2f: cd:6b:57:f9:ed:6d:11:39:03:f3:a1:97:4f:70:43: 1a:03:e8:c5:9b:54:1a:d5:30:31:bf:49:ae:3c:fe: 65:c0:77:34:bc:21:a0:7a:4b:64:69:c5:4d:96:91: c3:b6:9b:f5:12:0f:d4:e2:a8:8f:39:e3:fa:ec:57: 13:64:82:d0:8b:70:fd:5b:9f:31:e4:c2:52:92:1e: 14:09:18:76:60:49:25:1b:cd:31:49:85:2e:07:3a: 61:94:27:6e:12:6e:4c:29:57:4a:3d:63:d6:a4:a6: 2e:3f:fe:8a:8b:5f:7e:15:08:ec:e9:ca:de:05:33: 23:ec:25:c7:03:8a:db:c8:76:fa:1c:60:13:e5:63: a5:df:8c:1d:64:4e:b8:cc:f5:c9:21:d4:65:01:df: 2b:85:01:db:d6:5f:44:f0:9b:35:49:02:5c:c5:08: 16:ac:14:84:4c:27:8f:c6:6d:a3:4e:ca:c0:be:75: 07:b4:3f:8b:9f:cc:9b:ba:04:f6:59:75:6a:c4:37: ec:61:cb:94:e9:85:08:f0:6f:0f:15:7e:7e:c4:a7: d1:26:93:9b:74:21:bc:93:92:22:9e:20:8b:35:be: 01:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8B:4A:9A:3D:DA:7F:78:F9:A9:A3:AF:5C:C3:6C:F6:E2:7F:36:C4 X509v3 Authority Key Identifier: keyid:38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:cc:a5:98:6e:f9:54:58:67:75:fa:01:d6:dc:15:b8:10:dd: 1c:c5:59:79:62:c5:63:fa:5f:ee:22:ff:d5:fb:5c:60:4a:f1: bf:bb:77:74:a3:77:43:3e:50:36:31:de:f0:d0:ec:fe:99:c9: bd:c1:04:2d:7f:26:5f:85:0a:b2:ab:e9:4f:5b:93:8f:c6:0f: 26:77:e3:e0:1f:91:4b:af:11:35:52:59:30:f3:f2:37:ba:2b: 9f:6f:33:6c:05:d0:ef:69:f9:b4:80:83:c2:c2:89:c1:90:28: 41:f9:e7:41:15:ef:bc:7b:f3:fa:d0:6f:79:10:19:9b:a5:c7: 81:9e:b3:88:29:ec:ba:90:cc:7c:6c:2d:12:d5:e8:d1:c1:72: f0:8d:84:50:e8:34:9e:f7:ad:6c:b1:83:70:90:31:d6:55:a2: 4f:df:25:1e:cc:20:98:a3:87:24:fa:5b:e8:35:dd:42:5c:46: 95:a3:92:ea:39:d8:04:99:da:a3:86:34:bd:6f:9d:11:f2:81: a3:ef:50:39:4a:f5:66:fd:44:32:9a:d1:c1:ac:8e:1f:99:7b: 37:2f:5d:91:94:4f:32:7e:a2:5a:b6:a4:e4:cc:75:24:f9:60: 2a:24:34:14:38:e7:b6:de:21:08:a3:45:9d:39:03:1b:87:40: 38:8f:62:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZ8/BuTcRhIMz8wxz5Jfqcl1DyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBB MkU4NDc3NDAeFw0yNjA2MTYyMTU1NTVaFw0yNjA2MTgwMTUyNTVaMDMxMTAvBgNV BAMTKEFEOEI0QTlBM0REQTdGNzhGOUE5QTNBRjVDQzM2Q0Y2RTI3RjM2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84HY9DR+PokLozQEZQtGX9y58 a+o5xI8lL1Z0L81rV/ntbRE5A/Ohl09wQxoD6MWbVBrVMDG/Sa48/mXAdzS8IaB6 S2RpxU2WkcO2m/USD9TiqI854/rsVxNkgtCLcP1bnzHkwlKSHhQJGHZgSSUbzTFJ hS4HOmGUJ24SbkwpV0o9Y9akpi4//oqLX34VCOzpyt4FMyPsJccDitvIdvocYBPl Y6XfjB1kTrjM9ckh1GUB3yuFAdvWX0TwmzVJAlzFCBasFIRMJ4/GbaNOysC+dQe0 P4ufzJu6BPZZdWrEN+xhy5TphQjwbw8Vfn7Ep9Emk5t0IbyTkiKeIIs1vgEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrYtKmj3af3j5qaOvXMNs9uJ/NsQwHwYDVR0j BBgwFoAUONcmdfz6U1cZR+WHmTQX8KLoR3QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzdmYzU0ZmItNzI0ZS00MzE2LWI5YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVG Q0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBBMkU4NDc3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEQ3MjY3NUZDRkE1MzU3MTk0N0U1ODc5OTM0MTdGMEEyRTg0 Nzc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3 RjBBMkU4NDc3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXMpZhu+VRYZ3X6AdbcFbgQ3RzFWXlixWP6 X+4i/9X7XGBK8b+7d3Sjd0M+UDYx3vDQ7P6Zyb3BBC1/Jl+FCrKr6U9bk4/GDyZ3 4+AfkUuvETVSWTDz8je6K59vM2wF0O9p+bSAg8LCicGQKEH550EV77x78/rQb3kQ GZulx4Ges4gp7LqQzHxsLRLV6NHBcvCNhFDoNJ73rWyxg3CQMdZVok/fJR7MIJij hyT6W+g13UJcRpWjkuo52ASZ2qOGNL1vnRHygaPvUDlK9Wb9RDKa0cGsjh+Zezcv XZGUTzJ+olq2pOTMdST5YCokNBQ457beIQijRZ05AxuHQDiPYpI= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:39 2026 by rpki-client