$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft File: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft (raw, json) Hash identifier: e3PRVAMCcD4zUffkHG/76dP8LeTLq1rMGFqIpEKw4k4= Subject key identifier: D6:DB:0C:CC:69:3F:BF:4E:18:32:EE:84:E5:BE:55:91:8A:31:D2:4E Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Certificate serial: 6894707A06AB281774B48D49482E40CC1E81D4D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:29:35 +0000 Manifest this update: Mon 21 Sep 2026 02:24:35 +0000 Manifest next update: Tue 22 Sep 2026 05:36:35 +0000 Files and hashes: 1: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: ObskdzHhJM5YPi+vb1AkQ8nGE9gX1uyY1inXWD6vNXo=) 2: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl (hash: tX+wWTPQUXsfUG6jmF9afJWTJRDV4SP/Lddp2ph0K5I=) 3: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: +hu0CwIQk5R0Cx8ZxKSynMp86E6i1MoIZ/GUTrtz3uk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:94:70:7a:06:ab:28:17:74:b4:8d:49:48:2e:40:cc:1e:81:d4:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Validity Not Before: Sep 21 02:24:35 2026 GMT Not After : Sep 22 05:36:35 2026 GMT Subject: CN=D6DB0CCC693FBF4E1832EE84E5BE55918A31D24E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:79:c5:19:76:45:0d:0a:15:5b:2c:19:75: 33:5d:20:c2:10:a5:a5:84:c9:d5:2d:1f:c1:6f:a4: a2:b0:a1:a7:13:95:c1:c9:c0:46:87:ab:37:40:07: 9e:12:82:88:d9:13:b0:cf:36:1b:fb:94:86:de:b8: 9e:82:95:e7:40:bc:90:7e:c6:db:42:96:03:0f:af: 9c:7d:54:63:90:6d:47:20:f2:5c:c7:96:72:48:33: e8:a3:28:45:f1:0d:49:69:86:1c:b0:1d:44:f7:9e: dc:60:3e:98:5f:09:48:b5:78:84:b5:d4:a4:3d:55: 11:03:6e:e3:bf:f5:45:47:7f:c1:4d:16:f4:76:c6: 2c:8e:c5:db:68:9a:73:32:62:99:dd:bb:b4:a6:75: e1:e0:81:44:a2:77:27:e3:2f:3e:b0:be:33:ee:f5: 31:39:8d:8e:71:29:9c:d2:08:e6:93:42:29:c0:b5: d7:3f:49:df:a7:fa:a9:cf:b7:c5:a7:f7:3b:28:73: 67:ad:21:16:42:3e:dc:f6:7b:d3:8b:a7:83:16:44: 7d:d7:94:04:8d:bc:45:2e:0e:1a:cf:7d:1d:7b:af: 7e:a1:a7:b6:3c:08:3a:68:3c:0c:f0:ab:4a:11:0a: 32:8f:e7:dc:0e:33:a9:75:fc:80:5b:35:64:ce:cb: 21:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DB:0C:CC:69:3F:BF:4E:18:32:EE:84:E5:BE:55:91:8A:31:D2:4E X509v3 Authority Key Identifier: keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:be:e5:58:7d:34:e3:0a:f1:a5:11:95:be:f5:d4:a0:e8:12: 3b:5a:91:50:6a:06:73:51:68:00:ee:35:7a:a3:99:de:32:c8: ae:36:23:48:da:aa:3a:be:52:31:97:fc:8f:fe:59:46:cf:1f: e8:dd:06:73:84:e9:e6:22:d0:6f:99:c7:43:07:f3:e0:49:2c: ff:90:94:d1:65:b5:41:45:f4:00:07:b3:21:51:b1:e1:68:7e: df:3b:5a:a2:5d:bd:d7:9f:4a:cc:ff:94:74:2a:b4:f8:9f:e8: 53:21:47:c6:b8:22:1a:01:e5:78:ee:52:ec:69:a2:3e:af:d0: 3f:95:e6:65:5b:98:9f:56:03:83:9d:b0:37:5b:3c:22:9b:89: 43:9b:89:1e:df:76:5e:e3:f2:19:15:e7:63:03:b5:85:ad:fa: bd:da:13:d5:73:53:77:27:45:c4:93:2e:d2:37:71:be:68:77: 10:5f:25:2a:4c:f6:23:05:d8:7d:34:fb:e4:f6:8c:52:e5:65: d6:14:33:a6:c5:01:a5:7d:9a:8a:3d:c6:ea:42:68:a4:22:28: 78:b8:8a:cd:41:2d:80:97:eb:b7:f6:f6:30:95:fd:fd:d3:9d: 71:4a:40:6c:93:3f:99:03:97:37:0b:b1:f4:9c:38:80:b6:be: 07:3c:c2:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJRwegarKBd0tI1JSC5AzB6B1NEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1 QTlBMEU4QjAeFw0yNjA5MjEwMjI0MzVaFw0yNjA5MjIwNTM2MzVaMDMxMTAvBgNV BAMTKEQ2REIwQ0NDNjkzRkJGNEUxODMyRUU4NEU1QkU1NTkxOEEzMUQyNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6XnFGXZFDQoVWywZdTNdIMIQ paWEydUtH8FvpKKwoacTlcHJwEaHqzdAB54SgojZE7DPNhv7lIbeuJ6CledAvJB+ xttClgMPr5x9VGOQbUcg8lzHlnJIM+ijKEXxDUlphhywHUT3ntxgPphfCUi1eIS1 1KQ9VREDbuO/9UVHf8FNFvR2xiyOxdtomnMyYpndu7SmdeHggUSidyfjLz6wvjPu 9TE5jY5xKZzSCOaTQinAtdc/Sd+n+qnPt8Wn9zsoc2etIRZCPtz2e9OLp4MWRH3X lASNvEUuDhrPfR17r36hp7Y8CDpoPAzwq0oRCjKP59wOM6l1/IBbNWTOyyHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1tsMzGk/v04YMu6E5b5VkYox0k4wHwYDVR0j BBgwFoAUOLkHw+LBEM5mOxaEx6rW2FqaDoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UxZWE1MTMtYWM2ZS00YTVmLWIzZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNF MkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1QTlBMEU4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEI5MDdDM0UyQzExMENFNjYzQjE2ODRDN0FBRDZEODVBOUEw RThCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2 RDg1QTlBMEU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACK+5Vh9NOMK8aURlb711KDoEjtakVBqBnNR aADuNXqjmd4yyK42I0jaqjq+UjGX/I/+WUbPH+jdBnOE6eYi0G+Zx0MH8+BJLP+Q lNFltUFF9AAHsyFRseFoft87WqJdvdefSsz/lHQqtPif6FMhR8a4IhoB5XjuUuxp oj6v0D+V5mVbmJ9WA4OdsDdbPCKbiUObiR7fdl7j8hkV52MDtYWt+r3aE9VzU3cn RcSTLtI3cb5odxBfJSpM9iMF2H00++T2jFLlZdYUM6bFAaV9moo9xupCaKQiKHi4 is1BLYCX67f29jCV/f3TnXFKQGyTP5kDlzcLsfScOIC2vgc8wlU= -----END CERTIFICATE-----Generated at Mon Sep 21 20:58:23 2026 by rpki-client