
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft
File: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft (raw, json)
Hash identifier: NHc8F5dTGfytotvDc0VTjYvSLkoCI+AWpOwGeY30sKM=
Subject key identifier: A1:6D:24:E3:06:C3:F7:7F:27:10:65:92:98:B0:B2:80:97:AA:80:39
Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B
Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B
Certificate serial: 0C258D2156993210C5E22352E70352288CE30584
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 17:33:25 +0000
Manifest this update: Tue 28 Jul 2026 17:28:25 +0000
Manifest next update: Wed 29 Jul 2026 17:42:25 +0000
Files and hashes: 1: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: +hu0CwIQk5R0Cx8ZxKSynMp86E6i1MoIZ/GUTrtz3uk=)
2: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl (hash: Z9TX6fpdTyUZwVz5zANoG8ZRkc97r4nLWtlbtI1MBME=)
3: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: ObskdzHhJM5YPi+vb1AkQ8nGE9gX1uyY1inXWD6vNXo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl
rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:25:8d:21:56:99:32:10:c5:e2:23:52:e7:03:52:28:8c:e3:05:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B
Validity
Not Before: Jul 28 17:28:25 2026 GMT
Not After : Jul 29 17:42:25 2026 GMT
Subject: CN=A16D24E306C3F77F2710659298B0B28097AA8039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:d4:3c:42:7d:7d:74:79:d4:23:92:77:61:
16:68:80:5c:c0:cc:29:b4:0a:aa:67:8a:29:89:79:
8a:f0:5b:77:9f:1f:ce:51:ee:30:29:5b:b5:99:f9:
88:0d:3d:82:c1:04:33:61:f9:8d:ee:92:8c:f8:24:
67:1a:e6:fd:0a:b9:d5:aa:ff:a5:07:0b:17:fa:e6:
8d:13:bb:d8:23:98:60:44:dc:60:fb:71:6b:ee:59:
fa:7f:2b:49:cd:47:60:47:9a:8f:24:e4:d3:10:e9:
f1:38:2e:d5:cb:b5:cd:50:10:fd:b1:b3:8b:c5:4e:
3a:9d:14:2b:c2:12:7d:56:2d:86:c6:1a:bb:f7:b9:
68:63:eb:cd:a6:8e:29:16:58:06:d6:7b:8c:4e:35:
17:5b:ef:c0:7b:56:cc:04:ab:ac:f0:db:7e:21:88:
24:29:3a:58:2f:69:fa:46:bb:96:06:0f:d3:f7:da:
f3:1b:63:f4:4a:e5:a6:da:1c:7e:12:65:8c:f9:a1:
f6:4b:49:26:06:42:f2:54:38:5e:2a:bf:1a:59:c6:
45:d1:26:94:fa:cd:1a:bd:4d:e7:70:5f:27:ca:bd:
be:5b:49:e6:bb:30:db:8f:60:11:35:28:c9:90:26:
41:32:ba:09:43:60:2d:54:f9:e3:22:83:51:8d:52:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6D:24:E3:06:C3:F7:7F:27:10:65:92:98:B0:B2:80:97:AA:80:39
X509v3 Authority Key Identifier:
keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ba:fc:23:8d:1b:94:89:05:a1:80:15:d8:79:36:8c:0d:d8:
9e:f5:da:f6:4f:0a:2d:bc:e4:f6:72:84:02:32:31:fa:b3:32:
bf:3c:9b:dc:43:32:bb:65:8d:bc:62:c9:a3:51:95:7d:76:d0:
c4:aa:37:3c:d5:04:90:cf:cb:9e:3c:fc:d9:6c:9e:5c:0e:64:
96:08:b4:40:9d:be:26:30:fd:4b:54:85:6f:34:2e:0b:d3:9d:
99:35:fb:22:73:84:af:9d:1b:50:f2:f8:7d:2c:7c:51:9e:9a:
c9:f6:30:97:c3:42:53:c4:05:09:91:26:38:74:22:e8:60:48:
65:32:f1:7e:11:53:c6:5a:58:60:a9:19:41:81:e7:c4:7f:45:
a4:2b:88:32:86:bc:77:ec:b4:af:dc:7c:96:e5:f9:ef:ee:81:
0e:de:4d:e7:63:ce:55:27:77:07:7c:b9:18:9b:f0:75:3a:f2:
59:b3:5e:97:80:ae:03:e8:07:8c:2c:76:36:66:c8:cc:5a:06:
90:38:ad:0c:69:af:3b:1b:1c:23:af:da:26:f0:9d:4e:81:d7:
75:88:56:a4:57:f1:1b:04:12:dd:84:12:01:c1:9a:79:1f:a0:
df:a2:ca:d5:a5:8c:09:63:43:79:45:5b:ad:a9:cf:f8:46:a2:
d1:5f:b0:b4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDCWNIVaZMhDF4iNS5wNSKIzjBYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1
QTlBMEU4QjAeFw0yNjA3MjgxNzI4MjVaFw0yNjA3MjkxNzQyMjVaMDMxMTAvBgNV
BAMTKEExNkQyNEUzMDZDM0Y3N0YyNzEwNjU5Mjk4QjBCMjgwOTdBQTgwMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzNQ8Qn19dHnUI5J3YRZogFzA
zCm0CqpniimJeYrwW3efH85R7jApW7WZ+YgNPYLBBDNh+Y3ukoz4JGca5v0KudWq
/6UHCxf65o0Tu9gjmGBE3GD7cWvuWfp/K0nNR2BHmo8k5NMQ6fE4LtXLtc1QEP2x
s4vFTjqdFCvCEn1WLYbGGrv3uWhj682mjikWWAbWe4xONRdb78B7VswEq6zw234h
iCQpOlgvafpGu5YGD9P32vMbY/RK5abaHH4SZYz5ofZLSSYGQvJUOF4qvxpZxkXR
JpT6zRq9TedwXyfKvb5bSea7MNuPYBE1KMmQJkEyuglDYC1U+eMig1GNUkWxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUoW0k4wbD938nEGWSmLCygJeqgDkwHwYDVR0j
BBgwFoAUOLkHw+LBEM5mOxaEx6rW2FqaDoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2UxZWE1MTMtYWM2ZS00YTVmLWIzZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNF
MkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1QTlBMEU4Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zOEI5MDdDM0UyQzExMENFNjYzQjE2ODRDN0FBRDZEODVBOUEw
RThCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz
ZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2
RDg1QTlBMEU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFS6/CONG5SJBaGAFdh5NowN2J712vZPCi28
5PZyhAIyMfqzMr88m9xDMrtljbxiyaNRlX120MSqNzzVBJDPy548/NlsnlwOZJYI
tECdviYw/UtUhW80LgvTnZk1+yJzhK+dG1Dy+H0sfFGemsn2MJfDQlPEBQmRJjh0
IuhgSGUy8X4RU8ZaWGCpGUGB58R/RaQriDKGvHfstK/cfJbl+e/ugQ7eTedjzlUn
dwd8uRib8HU68lmzXpeArgPoB4wsdjZmyMxaBpA4rQxprzsbHCOv2ibwnU6B13WI
VqRX8RsEEt2EEgHBmnkfoN+iytWljAljQ3lFW62pz/hGotFfsLQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:30:10 2026 by rpki-client