$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft File: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft (raw, json) Hash identifier: ZL15itpLGI2kn43EnpSomb2aZmYnPGMgOizYRkfPTYc= Subject key identifier: FE:5F:BE:86:68:16:55:7D:27:43:11:05:F6:C9:A2:66:5F:1E:91:C7 Authority key identifier: 38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 Certificate issuer: /CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Certificate serial: 67BB2BE33E323A780E2679AFE8829323C02412DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 14:19:03 +0000 Manifest this update: Tue 28 Jul 2026 14:14:03 +0000 Manifest next update: Wed 29 Jul 2026 18:03:03 +0000 Files and hashes: 1: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl (hash: rD43pw4JOmtEsHLJRKLEyhghgcoOZhJ8gL9xQCWRU7k=) 2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: oNAyYs1M4vvZUL8ZRq7sx5Uf/aJwxuSkl8dJpKgZM5c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:bb:2b:e3:3e:32:3a:78:0e:26:79:af:e8:82:93:23:c0:24:12:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Validity Not Before: Jul 28 14:14:03 2026 GMT Not After : Jul 29 18:03:03 2026 GMT Subject: CN=FE5FBE866816557D27431105F6C9A2665F1E91C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:af:c0:90:76:9e:ff:0c:a1:d7:4b:3d:63: 3f:67:d6:de:82:2b:ba:c2:24:72:30:40:38:eb:78: 6d:71:6c:83:7b:bd:6d:59:04:8e:ef:ad:03:28:b1: e4:17:22:52:3c:d6:91:f9:47:14:8b:bc:0d:4f:ca: e8:1b:ff:a9:8f:48:72:f3:45:ac:c4:e9:7d:cb:7c: 39:cf:52:ae:6d:37:ee:d7:9e:f6:8f:c6:ed:81:f5: 99:21:39:b6:6e:15:ce:e9:8b:85:90:86:c2:e6:51: 9a:6b:2b:8a:94:17:d5:d7:e3:09:e1:fc:07:60:89: 49:1d:39:86:ad:5b:32:69:e5:06:52:52:4d:9c:3f: 36:e0:5b:7e:a7:1d:a7:86:37:1e:ac:45:b2:b4:9a: 64:67:29:38:f8:47:16:94:2f:79:f4:a6:0d:0c:2e: c7:7a:8a:8a:cc:e6:dc:34:de:cb:25:f7:1c:5e:0e: 76:37:11:bd:0c:44:ef:b7:ee:5f:9d:06:ee:bc:51: 06:cf:95:83:02:e5:b7:d8:79:80:3e:1b:47:58:88: a9:d9:fd:0e:90:d5:60:82:6d:d1:ee:c2:35:ef:07: 87:ba:eb:4c:e4:d8:c4:fe:8d:3e:54:25:25:36:cf: 0e:6f:ed:59:c1:c6:32:59:6c:1b:ee:ad:f2:df:a2: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5F:BE:86:68:16:55:7D:27:43:11:05:F6:C9:A2:66:5F:1E:91:C7 X509v3 Authority Key Identifier: keyid:38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a5:40:a5:95:3c:7c:eb:33:c0:bc:2b:f7:88:71:51:e8:78: 6f:f9:a1:99:72:70:d5:4a:86:3f:70:ef:e7:c4:a4:49:36:91: 89:e5:7e:b2:3a:85:80:5c:1e:59:61:a2:b6:39:86:ca:1d:68: bf:7c:ba:d8:3b:22:51:df:d0:8c:ea:52:e7:8b:8a:b4:e3:8a: 0a:d7:80:db:16:3b:dd:09:8c:09:58:9e:ab:0d:a9:a8:f5:be: d5:38:4c:ca:c3:e2:ca:99:b9:2f:97:42:e8:64:c0:f2:11:d4: ab:87:a5:0f:0b:fc:3a:25:5b:60:f9:e0:15:41:9b:32:f2:6a: c7:f8:4f:ef:e5:d1:ca:8e:36:f6:73:4a:6e:97:97:6d:87:ec: b0:db:fc:bc:ed:42:3a:1a:a6:09:36:ac:34:a9:55:9b:d3:68: d2:ec:10:12:cd:71:e9:a0:4c:92:ba:a5:62:f4:0f:2a:3d:bb: c9:c5:9b:f9:cf:4b:a4:c4:81:a9:de:ba:2b:71:3f:79:c2:a6: b5:58:0c:7a:bd:d8:4e:ab:16:b8:40:08:c9:49:ea:93:47:27: 1a:de:09:b4:af:25:22:f6:a9:08:c3:e1:38:8c:7c:7a:aa:77: bc:a5:55:37:6f:84:8a:fa:4e:63:43:9a:48:43:4f:21:af:5c: 1b:75:e1:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ7sr4z4yOngOJnmv6IKTI8AkEtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4 RkNBRjExMDAeFw0yNjA3MjgxNDE0MDNaFw0yNjA3MjkxODAzMDNaMDMxMTAvBgNV BAMTKEZFNUZCRTg2NjgxNjU1N0QyNzQzMTEwNUY2QzlBMjY2NUYxRTkxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84a/AkHae/wyh10s9Yz9n1t6C K7rCJHIwQDjreG1xbIN7vW1ZBI7vrQMoseQXIlI81pH5RxSLvA1Pyugb/6mPSHLz RazE6X3LfDnPUq5tN+7XnvaPxu2B9ZkhObZuFc7pi4WQhsLmUZprK4qUF9XX4wnh /AdgiUkdOYatWzJp5QZSUk2cPzbgW36nHaeGNx6sRbK0mmRnKTj4RxaUL3n0pg0M Lsd6iorM5tw03ssl9xxeDnY3Eb0MRO+37l+dBu68UQbPlYMC5bfYeYA+G0dYiKnZ /Q6Q1WCCbdHuwjXvB4e660zk2MT+jT5UJSU2zw5v7VnBxjJZbBvurfLfogx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/l++hmgWVX0nQxEF9smiZl8ekccwHwYDVR0j BBgwFoAUOMhYlQvLVN6ulInuPAU7Wo/K8RAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFiMjY3YTQtNTAzMC00YTRmLWJiODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUw QkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4RkNBRjExMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zOEM4NTg5NTBCQ0I1NERFQUU5NDg5RUUzQzA1M0I1QThGQ0FG MTEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNC NUE4RkNBRjExMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIelQKWVPHzrM8C8K/eIcVHoeG/5oZlycNVK hj9w7+fEpEk2kYnlfrI6hYBcHllhorY5hsodaL98utg7IlHf0IzqUueLirTjigrX gNsWO90JjAlYnqsNqaj1vtU4TMrD4sqZuS+XQuhkwPIR1KuHpQ8L/DolW2D54BVB mzLyasf4T+/l0cqONvZzSm6Xl22H7LDb/LztQjoapgk2rDSpVZvTaNLsEBLNcemg TJK6pWL0Dyo9u8nFm/nPS6TEganeuitxP3nCprVYDHq92E6rFrhACMlJ6pNHJxre CbSvJSL2qQjD4TiMfHqqd7ylVTdvhIr6TmNDmkhDTyGvXBt14cE= -----END CERTIFICATE-----Generated at Tue Jul 28 23:11:23 2026 by rpki-client