$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft File: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft (raw, json) Hash identifier: NHc8F5dTGfytotvDc0VTjYvSLkoCI+AWpOwGeY30sKM= Subject key identifier: A1:6D:24:E3:06:C3:F7:7F:27:10:65:92:98:B0:B2:80:97:AA:80:39 Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Certificate serial: 0C258D2156993210C5E22352E70352288CE30584 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:33:25 +0000 Manifest this update: Tue 28 Jul 2026 17:28:25 +0000 Manifest next update: Wed 29 Jul 2026 17:42:25 +0000 Files and hashes: 1: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: +hu0CwIQk5R0Cx8ZxKSynMp86E6i1MoIZ/GUTrtz3uk=) 2: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl (hash: Z9TX6fpdTyUZwVz5zANoG8ZRkc97r4nLWtlbtI1MBME=) 3: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: ObskdzHhJM5YPi+vb1AkQ8nGE9gX1uyY1inXWD6vNXo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:25:8d:21:56:99:32:10:c5:e2:23:52:e7:03:52:28:8c:e3:05:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Validity Not Before: Jul 28 17:28:25 2026 GMT Not After : Jul 29 17:42:25 2026 GMT Subject: CN=A16D24E306C3F77F2710659298B0B28097AA8039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:d4:3c:42:7d:7d:74:79:d4:23:92:77:61: 16:68:80:5c:c0:cc:29:b4:0a:aa:67:8a:29:89:79: 8a:f0:5b:77:9f:1f:ce:51:ee:30:29:5b:b5:99:f9: 88:0d:3d:82:c1:04:33:61:f9:8d:ee:92:8c:f8:24: 67:1a:e6:fd:0a:b9:d5:aa:ff:a5:07:0b:17:fa:e6: 8d:13:bb:d8:23:98:60:44:dc:60:fb:71:6b:ee:59: fa:7f:2b:49:cd:47:60:47:9a:8f:24:e4:d3:10:e9: f1:38:2e:d5:cb:b5:cd:50:10:fd:b1:b3:8b:c5:4e: 3a:9d:14:2b:c2:12:7d:56:2d:86:c6:1a:bb:f7:b9: 68:63:eb:cd:a6:8e:29:16:58:06:d6:7b:8c:4e:35: 17:5b:ef:c0:7b:56:cc:04:ab:ac:f0:db:7e:21:88: 24:29:3a:58:2f:69:fa:46:bb:96:06:0f:d3:f7:da: f3:1b:63:f4:4a:e5:a6:da:1c:7e:12:65:8c:f9:a1: f6:4b:49:26:06:42:f2:54:38:5e:2a:bf:1a:59:c6: 45:d1:26:94:fa:cd:1a:bd:4d:e7:70:5f:27:ca:bd: be:5b:49:e6:bb:30:db:8f:60:11:35:28:c9:90:26: 41:32:ba:09:43:60:2d:54:f9:e3:22:83:51:8d:52: 45:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6D:24:E3:06:C3:F7:7F:27:10:65:92:98:B0:B2:80:97:AA:80:39 X509v3 Authority Key Identifier: keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ba:fc:23:8d:1b:94:89:05:a1:80:15:d8:79:36:8c:0d:d8: 9e:f5:da:f6:4f:0a:2d:bc:e4:f6:72:84:02:32:31:fa:b3:32: bf:3c:9b:dc:43:32:bb:65:8d:bc:62:c9:a3:51:95:7d:76:d0: c4:aa:37:3c:d5:04:90:cf:cb:9e:3c:fc:d9:6c:9e:5c:0e:64: 96:08:b4:40:9d:be:26:30:fd:4b:54:85:6f:34:2e:0b:d3:9d: 99:35:fb:22:73:84:af:9d:1b:50:f2:f8:7d:2c:7c:51:9e:9a: c9:f6:30:97:c3:42:53:c4:05:09:91:26:38:74:22:e8:60:48: 65:32:f1:7e:11:53:c6:5a:58:60:a9:19:41:81:e7:c4:7f:45: a4:2b:88:32:86:bc:77:ec:b4:af:dc:7c:96:e5:f9:ef:ee:81: 0e:de:4d:e7:63:ce:55:27:77:07:7c:b9:18:9b:f0:75:3a:f2: 59:b3:5e:97:80:ae:03:e8:07:8c:2c:76:36:66:c8:cc:5a:06: 90:38:ad:0c:69:af:3b:1b:1c:23:af:da:26:f0:9d:4e:81:d7: 75:88:56:a4:57:f1:1b:04:12:dd:84:12:01:c1:9a:79:1f:a0: df:a2:ca:d5:a5:8c:09:63:43:79:45:5b:ad:a9:cf:f8:46:a2: d1:5f:b0:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCWNIVaZMhDF4iNS5wNSKIzjBYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1 QTlBMEU4QjAeFw0yNjA3MjgxNzI4MjVaFw0yNjA3MjkxNzQyMjVaMDMxMTAvBgNV BAMTKEExNkQyNEUzMDZDM0Y3N0YyNzEwNjU5Mjk4QjBCMjgwOTdBQTgwMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzNQ8Qn19dHnUI5J3YRZogFzA zCm0CqpniimJeYrwW3efH85R7jApW7WZ+YgNPYLBBDNh+Y3ukoz4JGca5v0KudWq /6UHCxf65o0Tu9gjmGBE3GD7cWvuWfp/K0nNR2BHmo8k5NMQ6fE4LtXLtc1QEP2x s4vFTjqdFCvCEn1WLYbGGrv3uWhj682mjikWWAbWe4xONRdb78B7VswEq6zw234h iCQpOlgvafpGu5YGD9P32vMbY/RK5abaHH4SZYz5ofZLSSYGQvJUOF4qvxpZxkXR JpT6zRq9TedwXyfKvb5bSea7MNuPYBE1KMmQJkEyuglDYC1U+eMig1GNUkWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoW0k4wbD938nEGWSmLCygJeqgDkwHwYDVR0j BBgwFoAUOLkHw+LBEM5mOxaEx6rW2FqaDoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UxZWE1MTMtYWM2ZS00YTVmLWIzZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNF MkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1QTlBMEU4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEI5MDdDM0UyQzExMENFNjYzQjE2ODRDN0FBRDZEODVBOUEw RThCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2 RDg1QTlBMEU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFS6/CONG5SJBaGAFdh5NowN2J712vZPCi28 5PZyhAIyMfqzMr88m9xDMrtljbxiyaNRlX120MSqNzzVBJDPy548/NlsnlwOZJYI tECdviYw/UtUhW80LgvTnZk1+yJzhK+dG1Dy+H0sfFGemsn2MJfDQlPEBQmRJjh0 IuhgSGUy8X4RU8ZaWGCpGUGB58R/RaQriDKGvHfstK/cfJbl+e/ugQ7eTedjzlUn dwd8uRib8HU68lmzXpeArgPoB4wsdjZmyMxaBpA4rQxprzsbHCOv2ibwnU6B13WI VqRX8RsEEt2EEgHBmnkfoN+iytWljAljQ3lFW62pz/hGotFfsLQ= -----END CERTIFICATE-----Generated at Wed Jul 29 09:30:10 2026 by rpki-client