$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft File: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft (raw, json) Hash identifier: I3kUvkeFYrU2Iuvsop7XpHaYVBWJwZXTJv/oWyTbELg= Subject key identifier: F0:31:EF:8E:AA:77:B1:70:17:65:37:3F:07:11:19:26:F4:59:29:15 Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Certificate serial: 04333D3ADCAF0EBBD5D894B4F880A94E57840513 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 18:52:16 +0000 Manifest this update: Sat 13 Jun 2026 18:47:16 +0000 Manifest next update: Sun 14 Jun 2026 20:26:16 +0000 Files and hashes: 1: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: ObskdzHhJM5YPi+vb1AkQ8nGE9gX1uyY1inXWD6vNXo=) 2: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl (hash: A11aom+UbR3twqD9MM7NtnFKDdc0vA1OrnvMLwYKPik=) 3: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: +hu0CwIQk5R0Cx8ZxKSynMp86E6i1MoIZ/GUTrtz3uk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:33:3d:3a:dc:af:0e:bb:d5:d8:94:b4:f8:80:a9:4e:57:84:05:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Validity Not Before: Jun 13 18:47:16 2026 GMT Not After : Jun 14 20:26:16 2026 GMT Subject: CN=F031EF8EAA77B1701765373F07111926F4592915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:67:34:9f:50:cf:31:65:2a:27:5e:8f:a0:45: 2c:2b:06:81:00:0a:20:92:f1:51:d1:18:f9:ff:3d: e8:82:f4:c1:f4:69:ce:cc:4d:a0:03:b3:14:59:13: d9:db:91:c9:94:5b:9d:9f:d7:42:f3:3c:06:19:f6: bf:0a:c2:41:ae:23:7e:22:95:f8:86:7d:78:1a:17: 9e:83:30:d3:9c:89:cd:98:73:9a:42:9e:cc:b3:04: 5d:88:c2:22:cc:6d:af:cc:a6:54:e6:4b:6e:1a:d1: 90:af:2e:8b:50:5d:1d:1f:e5:63:b6:e2:ff:b9:9b: df:59:75:11:b6:9d:a1:ee:22:2d:61:a1:bc:ec:c2: 3a:13:a3:8e:1c:fe:04:53:9a:74:63:16:14:3b:29: 84:0e:b4:80:e0:43:40:29:89:63:85:d8:52:8e:4c: 7a:7c:d1:39:38:c0:7c:7c:d5:7d:8f:8f:49:6f:b5: 9f:0e:2f:4f:39:b9:02:10:3a:4f:cb:27:c7:e9:89: af:83:70:30:89:ae:82:7e:91:1c:93:71:09:b6:2d: b4:2a:db:aa:86:50:34:a1:9c:92:88:eb:cd:01:ea: 5d:35:ea:96:69:51:56:20:99:21:df:13:1f:b5:52: 29:f3:d9:dc:c4:4a:7f:d4:4e:3d:aa:4d:b0:da:c5: 1c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:31:EF:8E:AA:77:B1:70:17:65:37:3F:07:11:19:26:F4:59:29:15 X509v3 Authority Key Identifier: keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f8:bf:42:39:30:1e:d2:d3:02:0b:37:ce:fb:ad:e4:5c:a4: b4:f9:cc:6b:88:74:73:29:46:13:82:35:52:cc:eb:f5:c0:23: f1:9a:ca:22:21:8c:c6:2c:d3:a2:fd:d8:b4:c9:b6:4f:51:26: 49:ec:25:17:16:e8:cf:f8:a1:0c:70:74:87:af:2b:58:af:1a: da:4a:6b:76:1c:0d:86:21:7d:72:bd:cc:dd:be:e1:b3:65:95: 06:5a:8b:c1:44:df:ea:28:45:31:d2:8e:55:a9:e4:36:7b:d0: d9:51:87:1a:3d:77:07:ff:cf:19:d7:77:0f:9d:b5:3e:ae:7c: f8:64:ad:78:c4:e7:51:c7:5d:c8:43:4e:4c:dc:0c:f0:36:ac: 19:d7:cb:99:d3:eb:a6:a7:0a:b7:ca:1e:0c:ab:54:2a:8b:fd: e4:e1:53:97:f6:7a:9c:61:5b:c9:78:14:71:0d:0a:84:3e:11: 15:77:cf:25:c7:5a:c5:bc:b8:3a:8a:39:51:43:2c:e9:de:97: 2b:c9:2d:e9:a4:eb:35:b1:9f:2c:49:9e:8e:e6:47:e4:93:ea: 78:90:b7:a9:f5:a6:fe:9c:05:18:86:ea:73:ad:fb:44:4e:2f: bb:cf:88:4f:cf:7a:9e:20:41:6a:4e:bb:e2:a1:73:48:c0:f1: 97:54:67:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBDM9OtyvDrvV2JS0+ICpTleEBRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1 QTlBMEU4QjAeFw0yNjA2MTMxODQ3MTZaFw0yNjA2MTQyMDI2MTZaMDMxMTAvBgNV BAMTKEYwMzFFRjhFQUE3N0IxNzAxNzY1MzczRjA3MTExOTI2RjQ1OTI5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnZzSfUM8xZSonXo+gRSwrBoEA CiCS8VHRGPn/PeiC9MH0ac7MTaADsxRZE9nbkcmUW52f10LzPAYZ9r8KwkGuI34i lfiGfXgaF56DMNOcic2Yc5pCnsyzBF2IwiLMba/MplTmS24a0ZCvLotQXR0f5WO2 4v+5m99ZdRG2naHuIi1hobzswjoTo44c/gRTmnRjFhQ7KYQOtIDgQ0ApiWOF2FKO THp80Tk4wHx81X2Pj0lvtZ8OL085uQIQOk/LJ8fpia+DcDCJroJ+kRyTcQm2LbQq 26qGUDShnJKI680B6l016pZpUVYgmSHfEx+1Uinz2dzESn/UTj2qTbDaxRyrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8DHvjqp3sXAXZTc/BxEZJvRZKRUwHwYDVR0j BBgwFoAUOLkHw+LBEM5mOxaEx6rW2FqaDoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UxZWE1MTMtYWM2ZS00YTVmLWIzZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNF MkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1QTlBMEU4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEI5MDdDM0UyQzExMENFNjYzQjE2ODRDN0FBRDZEODVBOUEw RThCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2 RDg1QTlBMEU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL4v0I5MB7S0wILN877reRcpLT5zGuIdHMp RhOCNVLM6/XAI/GayiIhjMYs06L92LTJtk9RJknsJRcW6M/4oQxwdIevK1ivGtpK a3YcDYYhfXK9zN2+4bNllQZai8FE3+ooRTHSjlWp5DZ70NlRhxo9dwf/zxnXdw+d tT6ufPhkrXjE51HHXchDTkzcDPA2rBnXy5nT66anCrfKHgyrVCqL/eThU5f2epxh W8l4FHENCoQ+ERV3zyXHWsW8uDqKOVFDLOnelyvJLemk6zWxnyxJno7mR+ST6niQ t6n1pv6cBRiG6nOt+0ROL7vPiE/Pep4gQWpOu+Khc0jA8ZdUZ3k= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:53 2026 by rpki-client