$ rpki-client -vvf rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft File: 38C91BA9AF338721219232C9918431499404172C.mft (raw, json) Hash identifier: q2UErsR9PfpdzVH+HvTi1MDvXAMggHulhpIcqjdR+Ao= Subject key identifier: 84:FB:EC:57:42:B1:DF:5B:4E:CC:0A:87:DF:A5:C7:FC:1F:4C:2B:5B Authority key identifier: 38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C Certificate issuer: /CN=38C91BA9AF338721219232C9918431499404172C Certificate serial: 19BBFF2B5BFE69AEB2F0C50005D677A4639E1644 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:33:15 +0000 Manifest this update: Wed 17 Jun 2026 04:28:15 +0000 Manifest next update: Thu 18 Jun 2026 08:30:15 +0000 Files and hashes: 1: 3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (hash: fqwIOY8dFjuWhu5mNkdGZq4kqZXdOIhE1mabARq0Xoc=) 2: 38C91BA9AF338721219232C9918431499404172C.crl (hash: Caxo2BfAhcUJYX6AuRzYzYrwVg/AxurvQJyaqDGpWW0=) 3: 3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (hash: mu8XBJ0C/UdHjFffaiRYLXyHpdMvYTXgCTRd/6Q8yEQ=) 4: 3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (hash: zOWeWT233iCaXUnNmK3rbLFG6s1ycb/WigqBJUoBSfM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:bb:ff:2b:5b:fe:69:ae:b2:f0:c5:00:05:d6:77:a4:63:9e:16:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C91BA9AF338721219232C9918431499404172C Validity Not Before: Jun 17 04:28:15 2026 GMT Not After : Jun 18 08:30:15 2026 GMT Subject: CN=84FBEC5742B1DF5B4ECC0A87DFA5C7FC1F4C2B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:48:1d:4c:6c:3b:37:a2:4b:7f:17:59:18: 73:cf:5f:e2:ac:74:4a:5d:d0:58:1d:3a:85:e3:5e: b0:8a:09:43:68:c1:e8:33:c5:5a:d6:45:95:63:50: c9:65:63:c1:3d:8c:c6:c7:8b:8b:1d:20:f6:5a:97: a9:e2:06:99:50:32:30:de:c7:d7:4c:3e:c9:fd:e1: 30:46:ea:a0:19:d4:83:a9:7e:d0:1e:fa:0c:bf:81: 2a:13:c1:c6:77:d7:92:e5:1f:b1:45:ff:0b:c7:8d: 14:e3:64:aa:8c:94:62:20:36:e5:b6:d0:17:5c:cc: 12:5f:52:dd:42:7e:aa:af:e3:00:6e:79:c0:d2:ac: 0e:1f:f2:57:60:0b:10:98:32:25:a8:24:e1:a0:0a: c4:ce:2a:40:4d:0f:01:c6:7d:a7:a4:2d:18:18:9e: 70:85:c1:f8:35:cb:85:1e:8f:62:9c:70:e6:9f:7a: b3:8b:06:a5:0f:81:05:d6:ad:85:59:b5:a6:08:ff: ce:de:14:0d:7f:18:db:04:d3:a7:64:de:53:42:bc: d7:89:c6:da:7d:69:58:b7:ef:93:84:69:90:34:06: f8:17:e1:88:9b:07:46:b7:72:2a:c6:6a:48:47:c9: 3b:c8:68:43:0e:c1:8a:a7:a0:03:d9:be:27:e0:56: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FB:EC:57:42:B1:DF:5B:4E:CC:0A:87:DF:A5:C7:FC:1F:4C:2B:5B X509v3 Authority Key Identifier: keyid:38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:cf:51:40:ca:42:d1:17:ab:c4:cc:ca:e0:d7:7b:22:89:d7: 5c:99:8e:26:56:91:2c:21:e1:f9:df:7a:8c:8b:6b:3a:49:19: be:f6:dc:d7:22:c9:e7:98:85:22:5a:21:62:19:5f:a7:14:75: 66:fd:1f:fd:75:58:7b:37:07:cd:28:74:7e:93:33:ee:a9:39: ad:d8:10:d0:63:cf:75:d7:86:da:36:42:28:f1:c8:66:c8:82: 4c:66:44:ad:70:dd:a9:55:4c:ba:f7:bb:d3:78:75:c4:7f:f6: 7c:dd:a1:1a:d4:40:e5:84:f7:1c:51:e6:fd:99:e0:e4:35:06: 14:40:4d:d3:4b:4f:41:16:39:28:62:f1:12:8e:57:4e:8e:64: b9:f9:75:2c:e7:fc:27:d8:26:24:85:b3:db:36:94:7b:f6:fb: 6f:af:b1:81:99:20:59:87:04:8d:d5:9e:15:c8:35:09:de:cc: 89:9a:ce:a4:18:fc:79:11:de:42:fd:42:1e:6f:6f:c2:f8:07: be:e2:d8:8f:c9:53:82:e8:f0:cf:98:b4:d8:ea:4c:e7:ab:f2: fa:e1:f3:93:a3:e0:83:77:7a:ac:4d:94:07:4f:60:a1:21:fc: 1c:7e:d4:50:76:0b:d4:09:7d:92:cf:d0:3e:1e:2f:23:56:dc: 78:6b:c5:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbv/K1v+aa6y8MUABdZ3pGOeFkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5 NDA0MTcyQzAeFw0yNjA2MTcwNDI4MTVaFw0yNjA2MTgwODMwMTVaMDMxMTAvBgNV BAMTKDg0RkJFQzU3NDJCMURGNUI0RUNDMEE4N0RGQTVDN0ZDMUY0QzJCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/skgdTGw7N6JLfxdZGHPPX+Ks dEpd0FgdOoXjXrCKCUNowegzxVrWRZVjUMllY8E9jMbHi4sdIPZal6niBplQMjDe x9dMPsn94TBG6qAZ1IOpftAe+gy/gSoTwcZ315LlH7FF/wvHjRTjZKqMlGIgNuW2 0BdczBJfUt1Cfqqv4wBuecDSrA4f8ldgCxCYMiWoJOGgCsTOKkBNDwHGfaekLRgY nnCFwfg1y4Uej2KccOaferOLBqUPgQXWrYVZtaYI/87eFA1/GNsE06dk3lNCvNeJ xtp9aVi375OEaZA0BvgX4YibB0a3cirGakhHyTvIaEMOwYqnoAPZvifgVndnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhPvsV0Kx31tOzAqH36XH/B9MK1swHwYDVR0j BBgwFoAUOMkbqa8zhyEhkjLJkYQxSZQEFywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTU0MzI0MWItY2ZkMS00Y2JiLTkyMTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlB RjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5NDA0MTcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEM5MUJBOUFGMzM4NzIxMjE5MjMyQzk5MTg0MzE0OTk0MDQx NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky MTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMx NDk5NDA0MTcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXPUUDKQtEXq8TMyuDXeyKJ11yZjiZWkSwh 4fnfeoyLazpJGb723NciyeeYhSJaIWIZX6cUdWb9H/11WHs3B80odH6TM+6pOa3Y ENBjz3XXhto2QijxyGbIgkxmRK1w3alVTLr3u9N4dcR/9nzdoRrUQOWE9xxR5v2Z 4OQ1BhRATdNLT0EWOShi8RKOV06OZLn5dSzn/CfYJiSFs9s2lHv2+2+vsYGZIFmH BI3VnhXINQnezImazqQY/HkR3kL9Qh5vb8L4B77i2I/JU4Lo8M+YtNjqTOer8vrh 85Oj4IN3eqxNlAdPYKEh/Bx+1FB2C9QJfZLP0D4eLyNW3Hhrxc0= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:26 2026 by rpki-client