$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft File: 38C91BA9AF338721219232C9918431499404172C.mft (raw, json) Hash identifier: kMIUngqtqe/oiLo2XAVato2DnM+C0tovIVGSwMVlQYc= Subject key identifier: 4A:21:87:AB:38:E4:03:0C:61:47:5B:C2:EE:21:77:44:E5:B7:04:1E Authority key identifier: 38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C Certificate issuer: /CN=38C91BA9AF338721219232C9918431499404172C Certificate serial: 76A51F40B4D8876D2265EA229147AA24FA157023 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 01:58:34 +0000 Manifest this update: Wed 23 Sep 2026 01:53:34 +0000 Manifest next update: Thu 24 Sep 2026 05:08:34 +0000 Files and hashes: 1: 3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (hash: fqwIOY8dFjuWhu5mNkdGZq4kqZXdOIhE1mabARq0Xoc=) 2: 38C91BA9AF338721219232C9918431499404172C.crl (hash: tQngY8oV/bmrbsRlCR29cFzT8uDnu7KpoBmsoqX+J1E=) 3: 3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (hash: zOWeWT233iCaXUnNmK3rbLFG6s1ycb/WigqBJUoBSfM=) 4: 3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (hash: mu8XBJ0C/UdHjFffaiRYLXyHpdMvYTXgCTRd/6Q8yEQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a5:1f:40:b4:d8:87:6d:22:65:ea:22:91:47:aa:24:fa:15:70:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C91BA9AF338721219232C9918431499404172C Validity Not Before: Sep 23 01:53:34 2026 GMT Not After : Sep 24 05:08:34 2026 GMT Subject: CN=4A2187AB38E4030C61475BC2EE217744E5B7041E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:09:e2:dd:9f:fd:3d:e4:4d:28:f5:ef:ea:81: d3:ba:70:c4:3a:d9:5d:5c:f8:6f:36:95:4b:a3:3e: 44:20:f3:da:ec:9c:1d:26:04:bb:78:78:8a:94:69: d5:ac:8a:e5:80:ec:33:0c:64:af:ce:ce:d8:e1:36: 9f:72:0d:1f:24:75:fe:42:85:b8:89:ef:5a:7b:d4: 72:e4:b6:8e:a2:14:82:b2:40:0b:61:a6:ba:77:b4: 0b:f8:22:37:be:a2:b0:92:32:1c:eb:24:21:9e:79: 90:b1:b7:4f:25:5a:45:a6:b5:33:85:7f:8b:4a:70: 3f:34:60:21:b0:14:06:ca:1f:d8:c2:ad:81:01:12: 23:14:0b:8a:bd:81:3f:6e:da:fb:1d:db:ca:f4:b9: 2a:77:19:97:bf:de:7d:7e:f8:c6:92:6f:ee:a7:9c: 60:0f:96:db:fe:af:7d:9e:b3:0f:f5:10:15:f5:6e: 92:07:ba:85:85:38:35:e1:98:bf:d9:f2:90:43:f2: 47:ca:c2:a1:b7:cf:3e:ba:cc:a0:bf:a2:4d:1c:bc: d1:a8:55:95:d5:06:e9:9b:f2:9e:db:fe:a6:30:e5: 6d:aa:a7:02:b0:74:86:ea:0f:b3:22:e2:f5:f9:d3: d0:21:a7:08:7e:25:9e:88:9f:6f:4d:19:3f:4e:e4: 4f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:87:AB:38:E4:03:0C:61:47:5B:C2:EE:21:77:44:E5:B7:04:1E X509v3 Authority Key Identifier: keyid:38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:77:95:df:e8:d0:44:eb:a6:8e:f3:0b:93:6e:60:3a:1f:ac: 30:56:01:1e:87:34:06:b3:68:e3:20:09:35:76:4c:d4:e2:f7: 85:ff:60:39:76:19:26:b4:a8:25:8a:b2:14:7b:6c:cf:71:02: 0a:77:98:ee:b2:d0:2b:6c:0c:96:ac:47:2b:60:e4:28:b3:8b: 7e:35:4f:99:80:48:8d:89:26:2f:ad:dc:89:74:22:43:12:f8: 8e:f5:f5:4c:2f:4a:72:7b:1a:d0:24:ee:c7:cc:36:cd:6f:61: fa:a1:0e:6c:6a:6f:f8:45:78:69:90:72:66:e0:77:21:c6:2f: b7:56:03:4f:78:2d:58:e8:e1:3a:3c:35:e5:2f:64:f3:9d:ce: 83:32:3b:93:7c:9f:a6:04:77:9b:0d:3f:77:88:19:ba:24:98: b8:f8:46:1b:e7:fc:8f:d8:84:c5:b4:4f:04:5e:ee:5a:c5:c8: f8:c7:94:fd:e4:e1:76:8b:9b:e2:bf:89:19:1a:64:0a:35:0e: 47:83:69:cf:1b:5a:84:16:f8:51:be:70:6f:93:7a:44:7d:56: 53:ca:42:aa:dc:96:b5:d0:4f:84:db:ad:59:7f:f5:00:da:84: 03:ad:23:30:a2:19:f7:d8:29:db:ff:98:83:4f:03:3e:7d:79: 6e:39:a5:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdqUfQLTYh20iZeoikUeqJPoVcCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5 NDA0MTcyQzAeFw0yNjA5MjMwMTUzMzRaFw0yNjA5MjQwNTA4MzRaMDMxMTAvBgNV BAMTKDRBMjE4N0FCMzhFNDAzMEM2MTQ3NUJDMkVFMjE3NzQ0RTVCNzA0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXCeLdn/095E0o9e/qgdO6cMQ6 2V1c+G82lUujPkQg89rsnB0mBLt4eIqUadWsiuWA7DMMZK/OztjhNp9yDR8kdf5C hbiJ71p71HLkto6iFIKyQAthprp3tAv4Ije+orCSMhzrJCGeeZCxt08lWkWmtTOF f4tKcD80YCGwFAbKH9jCrYEBEiMUC4q9gT9u2vsd28r0uSp3GZe/3n1++MaSb+6n nGAPltv+r32esw/1EBX1bpIHuoWFODXhmL/Z8pBD8kfKwqG3zz66zKC/ok0cvNGo VZXVBumb8p7b/qYw5W2qpwKwdIbqD7Mi4vX509Ahpwh+JZ6In29NGT9O5E8hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSiGHqzjkAwxhR1vC7iF3ROW3BB4wHwYDVR0j BBgwFoAUOMkbqa8zhyEhkjLJkYQxSZQEFywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTU0MzI0MWItY2ZkMS00Y2JiLTkyMTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlB RjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5NDA0MTcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEM5MUJBOUFGMzM4NzIxMjE5MjMyQzk5MTg0MzE0OTk0MDQx NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky MTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMx NDk5NDA0MTcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGt3ld/o0ETrpo7zC5NuYDofrDBWAR6HNAaz aOMgCTV2TNTi94X/YDl2GSa0qCWKshR7bM9xAgp3mO6y0CtsDJasRytg5Cizi341 T5mASI2JJi+t3Il0IkMS+I719UwvSnJ7GtAk7sfMNs1vYfqhDmxqb/hFeGmQcmbg dyHGL7dWA094LVjo4To8NeUvZPOdzoMyO5N8n6YEd5sNP3eIGbokmLj4Rhvn/I/Y hMW0TwRe7lrFyPjHlP3k4XaLm+K/iRkaZAo1DkeDac8bWoQW+FG+cG+TekR9VlPK QqrclrXQT4TbrVl/9QDahAOtIzCiGffYKdv/mINPAz59eW45pWU= -----END CERTIFICATE-----Generated at Wed Sep 23 12:51:06 2026 by rpki-client