$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft File: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft (raw, json) Hash identifier: gtSY5ueQS3zqESygw0hNBwIcp1CVQDWlxDqHDDzY8J4= Subject key identifier: DF:24:C0:CD:54:9E:EA:7B:D5:04:F4:D0:DA:07:49:FF:64:72:5E:3D Authority key identifier: 38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 Certificate issuer: /CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Certificate serial: 4D4E71D908F00BDE9212F5E565D51CB984E00E71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 03:09:31 +0000 Manifest this update: Thu 24 Sep 2026 03:04:31 +0000 Manifest next update: Fri 25 Sep 2026 06:32:31 +0000 Files and hashes: 1: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl (hash: HcrHJQefqh1FQaV24tNyZ4qmUxF+EiTqNd14qlSpolc=) 2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: oNAyYs1M4vvZUL8ZRq7sx5Uf/aJwxuSkl8dJpKgZM5c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4e:71:d9:08:f0:0b:de:92:12:f5:e5:65:d5:1c:b9:84:e0:0e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Validity Not Before: Sep 24 03:04:31 2026 GMT Not After : Sep 25 06:32:31 2026 GMT Subject: CN=DF24C0CD549EEA7BD504F4D0DA0749FF64725E3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:12:b4:f3:ce:ae:de:8f:5f:70:fb:f7:59: 04:a0:59:83:ee:3f:f6:48:ce:fc:40:82:ac:21:65: 19:3b:d0:01:26:f1:4d:18:11:d3:41:92:2c:47:4d: 6b:fc:e5:9c:82:8a:00:59:f6:25:8b:ae:a2:e6:1a: f3:01:f7:82:40:62:c6:f0:01:ac:35:3f:a0:f9:66: c8:5c:ce:ae:27:66:73:e4:19:f4:0a:90:76:cf:da: 5e:1b:10:b2:f4:19:a4:77:74:c0:ec:29:63:6a:f7: a1:0a:15:96:3c:aa:2c:c6:6a:06:8b:04:4b:4c:f2: 97:f3:a3:ee:29:20:0f:3b:90:a3:ff:21:09:28:aa: 13:9f:3d:61:91:e9:1a:ad:a6:77:49:a0:d4:8c:99: 56:56:2c:75:5d:bc:cc:8a:4f:d5:d6:cc:a5:ca:97: ec:87:65:35:28:c5:70:34:43:c8:e3:3a:82:e7:39: 56:7c:40:cc:b9:53:3f:79:48:64:4f:36:36:c1:dd: 37:46:c3:db:d4:2d:e0:a1:2e:c0:2c:30:98:60:94: 6b:f1:50:8a:08:a4:43:5d:28:99:c1:41:f8:73:3a: 11:e7:34:3e:36:db:ff:66:92:e4:c5:97:8e:73:2a: e1:45:86:2a:70:6b:fb:5b:bf:c5:77:03:d1:b1:c4: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:24:C0:CD:54:9E:EA:7B:D5:04:F4:D0:DA:07:49:FF:64:72:5E:3D X509v3 Authority Key Identifier: keyid:38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8f:76:e1:d2:a7:23:49:cf:d3:40:29:e0:55:12:8a:e2:05: af:62:86:c7:34:21:9a:fb:b7:34:03:0c:fe:6f:ed:e2:6c:f3: 91:0c:30:c3:09:c8:9d:8b:22:7a:7f:00:65:4a:13:4d:90:c7: e3:26:c3:c9:ce:0a:58:6a:07:f2:66:36:66:0d:db:c0:10:7f: 52:8b:9d:6c:ae:21:25:87:c1:04:88:d9:bc:f1:d3:5f:0d:49: 76:da:bd:5d:38:99:d9:55:a8:8d:c3:ec:23:5b:e9:79:88:34: d6:0b:a3:22:02:b1:85:74:ff:7c:c7:58:d9:aa:6f:cc:1e:9a: 15:17:64:0e:7b:40:95:ed:b5:36:13:4d:7a:06:4b:0b:cb:b2: 3b:31:a6:43:0a:eb:4d:37:48:2d:5d:b2:6d:0e:e7:4b:a5:bf: d1:bd:ae:89:9d:ef:87:8d:1e:ce:5d:70:a6:b2:29:46:a2:70: a5:10:28:b6:38:aa:04:ad:46:d0:08:ce:40:d4:e1:f4:6e:d1: f6:bd:ba:08:34:30:d0:53:84:b3:40:f1:df:a3:88:f7:2f:fa: 9a:f3:69:64:2d:7c:c3:32:e1:6a:8c:3d:65:d6:17:47:b7:31: ff:69:d0:54:ba:ab:fc:ba:9f:b0:a2:a6:49:d4:1e:f4:d5:14: 4e:42:1c:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTU5x2QjwC96SEvXlZdUcuYTgDnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4 RkNBRjExMDAeFw0yNjA5MjQwMzA0MzFaFw0yNjA5MjUwNjMyMzFaMDMxMTAvBgNV BAMTKERGMjRDMENENTQ5RUVBN0JENTA0RjREMERBMDc0OUZGNjQ3MjVFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NxK0886u3o9fcPv3WQSgWYPu P/ZIzvxAgqwhZRk70AEm8U0YEdNBkixHTWv85ZyCigBZ9iWLrqLmGvMB94JAYsbw Aaw1P6D5Zshczq4nZnPkGfQKkHbP2l4bELL0GaR3dMDsKWNq96EKFZY8qizGagaL BEtM8pfzo+4pIA87kKP/IQkoqhOfPWGR6RqtpndJoNSMmVZWLHVdvMyKT9XWzKXK l+yHZTUoxXA0Q8jjOoLnOVZ8QMy5Uz95SGRPNjbB3TdGw9vULeChLsAsMJhglGvx UIoIpENdKJnBQfhzOhHnND422/9mkuTFl45zKuFFhipwa/tbv8V3A9GxxLhtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3yTAzVSe6nvVBPTQ2gdJ/2RyXj0wHwYDVR0j BBgwFoAUOMhYlQvLVN6ulInuPAU7Wo/K8RAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFiMjY3YTQtNTAzMC00YTRmLWJiODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUw QkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4RkNBRjExMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zOEM4NTg5NTBCQ0I1NERFQUU5NDg5RUUzQzA1M0I1QThGQ0FG MTEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNC NUE4RkNBRjExMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6PduHSpyNJz9NAKeBVEoriBa9ihsc0IZr7 tzQDDP5v7eJs85EMMMMJyJ2LInp/AGVKE02Qx+Mmw8nOClhqB/JmNmYN28AQf1KL nWyuISWHwQSI2bzx018NSXbavV04mdlVqI3D7CNb6XmINNYLoyICsYV0/3zHWNmq b8wemhUXZA57QJXttTYTTXoGSwvLsjsxpkMK6003SC1dsm0O50ulv9G9romd74eN Hs5dcKayKUaicKUQKLY4qgStRtAIzkDU4fRu0fa9ugg0MNBThLNA8d+jiPcv+prz aWQtfMMy4WqMPWXWF0e3Mf9p0FS6q/y6n7CipknUHvTVFE5CHFk= -----END CERTIFICATE-----Generated at Thu Sep 24 20:18:36 2026 by rpki-client