$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft File: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft (raw, json) Hash identifier: wLC6K22Zgwglfs9PMxd8QKGa8s2fCrEvB2gxmjfp4RE= Subject key identifier: 97:67:DA:42:39:43:3E:DB:CC:B8:C1:29:75:5C:F2:F9:96:AC:5C:57 Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Certificate serial: 0491DFFA07212FB2BA83CA1208F58B91F70F5DF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 09:42:34 +0000 Manifest this update: Wed 29 Jul 2026 09:37:34 +0000 Manifest next update: Thu 30 Jul 2026 13:07:34 +0000 Files and hashes: 1: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: +hu0CwIQk5R0Cx8ZxKSynMp86E6i1MoIZ/GUTrtz3uk=) 2: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: ObskdzHhJM5YPi+vb1AkQ8nGE9gX1uyY1inXWD6vNXo=) 3: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl (hash: nj3Q9ITqlp3Ct8ybIAR4GYQmEdEwWmhxVDD0D4p2oSA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 13:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:91:df:fa:07:21:2f:b2:ba:83:ca:12:08:f5:8b:91:f7:0f:5d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Validity Not Before: Jul 29 09:37:34 2026 GMT Not After : Jul 30 13:07:34 2026 GMT Subject: CN=9767DA4239433EDBCCB8C129755CF2F996AC5C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f4:a5:67:e7:82:23:cb:17:42:bb:3b:2e:38: c9:6a:b8:f2:0b:f4:bf:f1:c9:df:9b:d5:20:a0:bf: 9f:8d:fc:6f:ad:e3:d5:1f:e2:1c:af:8e:53:1e:73: 37:f5:d9:77:6f:29:5d:a1:d5:b8:92:9b:23:a3:84: 6a:a2:88:45:19:e6:35:05:9f:44:1e:03:91:af:02: e3:08:46:d6:23:4e:80:c6:23:50:78:67:1b:55:82: 41:1b:d3:21:05:b4:3b:78:28:6d:e3:a7:eb:1f:41: 69:55:bc:74:56:e6:35:04:0f:f4:89:61:74:99:b9: 05:f2:14:62:2c:93:2d:e2:51:40:d6:45:6a:2f:af: ee:88:ca:e4:04:96:68:9b:a5:7d:fb:ae:f2:08:b6: 54:cc:27:db:b2:13:05:f6:6b:ba:d5:5d:6b:9d:e8: d1:b4:6d:68:b2:7d:30:f4:fe:e7:91:f6:31:1e:4f: 23:c2:b7:20:ab:9e:41:1b:ef:4b:d6:ae:71:f7:d3: af:28:05:f1:92:81:5d:d0:4e:ca:76:2a:90:6a:ed: 80:d6:b4:06:66:c7:4d:a9:87:00:bd:1e:ab:12:97: fd:c4:ab:fb:a5:e3:6f:71:e4:93:ad:27:3e:d2:83: 82:cd:ca:ba:57:7f:69:85:6f:90:8a:43:98:ea:70: 2b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:67:DA:42:39:43:3E:DB:CC:B8:C1:29:75:5C:F2:F9:96:AC:5C:57 X509v3 Authority Key Identifier: keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1c:17:b0:4d:04:3c:1b:41:28:2e:d8:83:cc:03:a0:cc:d2: 59:d8:a1:c1:53:f1:3d:2e:6b:79:21:1c:47:47:49:5c:d0:f9: 49:ac:ce:92:66:47:3f:08:9e:4a:e0:56:5a:d6:85:7f:07:79: 67:32:b2:6e:78:ee:0e:5c:0c:90:75:6a:e5:81:03:63:2c:04: 07:a0:2c:40:62:03:b2:dc:db:25:6d:0a:03:37:32:ab:2b:4a: 3e:f4:6a:cf:ee:89:97:7b:32:0d:0f:c8:d4:3b:19:c7:02:f0: d1:73:fd:ff:6d:5a:7b:84:dc:4b:e4:d9:97:7c:3b:e9:e7:7a: 8b:69:4a:eb:5c:37:c3:b4:6d:a8:83:b0:b7:5f:ce:fe:07:87: ac:bc:3c:45:5e:99:71:21:31:85:00:5c:ed:7c:d4:c7:52:54: 8e:d2:50:20:44:2b:56:e5:f8:42:b1:44:65:56:2a:45:74:4c: b1:66:2a:91:59:37:43:1c:00:62:70:8b:0c:25:91:f5:fb:05: 94:1b:3b:cf:e0:db:fb:11:12:d2:48:ba:6b:1c:0e:56:46:e1: 13:b0:55:6f:9e:84:22:4a:79:1d:26:e2:70:94:3b:96:4f:fc: 9b:ce:0b:81:b3:07:2c:6e:96:54:0a:3b:b8:f1:58:cc:f8:a3: c3:48:48:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJHf+gchL7K6g8oSCPWLkfcPXfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1 QTlBMEU4QjAeFw0yNjA3MjkwOTM3MzRaFw0yNjA3MzAxMzA3MzRaMDMxMTAvBgNV BAMTKDk3NjdEQTQyMzk0MzNFREJDQ0I4QzEyOTc1NUNGMkY5OTZBQzVDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ9KVn54IjyxdCuzsuOMlquPIL 9L/xyd+b1SCgv5+N/G+t49Uf4hyvjlMeczf12XdvKV2h1biSmyOjhGqiiEUZ5jUF n0QeA5GvAuMIRtYjToDGI1B4ZxtVgkEb0yEFtDt4KG3jp+sfQWlVvHRW5jUED/SJ YXSZuQXyFGIsky3iUUDWRWovr+6IyuQElmibpX37rvIItlTMJ9uyEwX2a7rVXWud 6NG0bWiyfTD0/ueR9jEeTyPCtyCrnkEb70vWrnH3068oBfGSgV3QTsp2KpBq7YDW tAZmx02phwC9HqsSl/3Eq/ul429x5JOtJz7Sg4LNyrpXf2mFb5CKQ5jqcCt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl2faQjlDPtvMuMEpdVzy+ZasXFcwHwYDVR0j BBgwFoAUOLkHw+LBEM5mOxaEx6rW2FqaDoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UxZWE1MTMtYWM2ZS00YTVmLWIzZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNF MkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1QTlBMEU4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEI5MDdDM0UyQzExMENFNjYzQjE2ODRDN0FBRDZEODVBOUEw RThCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2 RDg1QTlBMEU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKscF7BNBDwbQSgu2IPMA6DM0lnYocFT8T0u a3khHEdHSVzQ+UmszpJmRz8InkrgVlrWhX8HeWcysm547g5cDJB1auWBA2MsBAeg LEBiA7Lc2yVtCgM3MqsrSj70as/uiZd7Mg0PyNQ7GccC8NFz/f9tWnuE3Evk2Zd8 O+nneotpSutcN8O0baiDsLdfzv4Hh6y8PEVemXEhMYUAXO181MdSVI7SUCBEK1bl +EKxRGVWKkV0TLFmKpFZN0McAGJwiwwlkfX7BZQbO8/g2/sREtJIumscDlZG4ROw VW+ehCJKeR0m4nCUO5ZP/JvOC4GzByxullQKO7jxWMz4o8NISNc= -----END CERTIFICATE-----Generated at Wed Jul 29 12:03:52 2026 by rpki-client