
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft
File: 38F5CCFB43C14A0A6D836EE754A8073545066216.mft (raw, json)
Hash identifier: Ln6JKM+pJZFlDe3AYGUFEMy3XY7gnkh6oY+sI2rnB2M=
Subject key identifier: 42:27:43:B1:34:52:67:68:22:EF:90:25:44:70:60:D3:10:B5:B3:01
Authority key identifier: 38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16
Certificate issuer: /CN=38F5CCFB43C14A0A6D836EE754A8073545066216
Certificate serial: 66276741DF988B159D3039F2FA88BAB99CF71386
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 05:00:37 +0000
Manifest this update: Fri 24 Jul 2026 04:55:37 +0000
Manifest next update: Sat 25 Jul 2026 06:38:37 +0000
Files and hashes: 1: 3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa (hash: nyod0CT/fB5gH7ANBUTQG+Fhk9ZB7fad+xE68OSLCI0=)
2: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (hash: pMseYXhaROm6EYmzpm8l2beM5snzhmulBoKAFnDhIs8=)
3: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (hash: f8d867FdOKPAI9FI9ckkqBnXV6BMv6oUu/lBMN4pJIk=)
4: 38F5CCFB43C14A0A6D836EE754A8073545066216.crl (hash: PhSfySZTdYwFOnQYzrd4trUd/B74lSrO/X2Yt9he4qY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl
rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:27:67:41:df:98:8b:15:9d:30:39:f2:fa:88:ba:b9:9c:f7:13:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38F5CCFB43C14A0A6D836EE754A8073545066216
Validity
Not Before: Jul 24 04:55:37 2026 GMT
Not After : Jul 25 06:38:37 2026 GMT
Subject: CN=422743B13452676822EF9025447060D310B5B301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:60:8a:ed:73:11:47:47:02:ef:6f:17:8a:
7d:ed:aa:b6:02:7b:91:bc:31:26:46:08:75:87:38:
bb:51:f5:f0:40:ba:d7:35:15:6a:bd:2f:2b:ae:d9:
ee:7e:8c:bf:45:ea:28:6e:d9:3f:53:07:58:86:64:
1e:58:05:55:0d:d1:de:d6:74:5c:8a:b6:0d:13:06:
02:07:7c:98:cc:21:7e:cb:84:3d:cb:1a:f2:18:a9:
bd:40:41:27:55:48:68:2a:a1:aa:2d:1a:74:13:3b:
e7:ca:b7:c3:70:93:71:f2:1b:ec:8b:ae:e7:2d:65:
b0:b9:1f:21:21:16:27:6f:72:4b:d8:7e:87:79:7c:
1c:ce:69:1c:5a:1e:57:f9:fc:a5:f4:41:cc:fe:dc:
c9:a1:13:b2:0d:15:7c:cb:fe:1e:1d:9b:fc:9f:8a:
4f:f6:ca:f9:e4:b6:42:fd:35:63:53:d3:62:cf:ec:
41:36:44:00:a8:08:e0:c3:73:fc:7f:a4:94:55:59:
5e:1d:33:7d:c7:db:10:68:20:e9:7a:73:66:e1:23:
43:2c:fa:6b:20:4e:97:af:d3:4f:ac:99:bb:fd:88:
71:10:29:bb:11:62:41:f5:be:7a:e8:e8:90:dc:83:
6d:fd:cc:d3:01:cb:97:2e:f7:2c:8c:df:bd:5b:ea:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:43:B1:34:52:67:68:22:EF:90:25:44:70:60:D3:10:B5:B3:01
X509v3 Authority Key Identifier:
keyid:38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b6:b9:4e:8e:32:53:f3:b6:18:aa:9a:20:44:93:24:4c:c7:
91:4e:a9:f8:90:f4:5b:ca:61:ea:9e:1b:7e:20:f6:69:5f:88:
81:b8:3b:a6:f9:b0:ad:87:6a:8d:a5:e0:7e:10:db:b5:4a:b5:
4e:10:67:f1:af:71:aa:2c:d5:46:9c:d7:86:9c:cd:8f:88:2c:
48:4c:a9:f4:97:83:7b:19:88:f7:84:9a:b7:91:c1:11:b3:85:
36:a9:67:82:eb:3d:f5:82:93:6e:95:c3:82:d3:48:a9:05:04:
e6:4b:ae:ac:83:01:2d:8d:f1:9d:ae:cd:e9:fa:fc:a4:e5:1c:
92:d3:5b:26:cd:47:8b:45:c8:eb:ac:77:61:4d:01:7d:de:50:
7a:f0:9e:68:7b:06:6a:34:96:92:4c:a1:23:ce:2f:fa:a6:41:
da:23:22:83:c6:59:03:53:97:8c:10:f2:8a:c3:79:58:88:62:
59:09:ce:b1:a1:81:0e:e4:61:84:b6:c2:c1:d5:b0:b6:7a:db:
eb:61:5d:7e:21:a6:d4:c2:46:9a:75:fa:83:4c:63:a8:0f:f1:
2e:5f:e3:53:3a:6d:e5:eb:53:a0:f6:fc:f5:44:53:4f:f6:3c:
07:4c:b6:ff:52:c8:72:93:52:2b:4e:25:6a:16:45:bc:8e:65:
18:5e:cf:d2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZidnQd+YixWdMDny+oi6uZz3E4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGNUNDRkI0M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0
NTA2NjIxNjAeFw0yNjA3MjQwNDU1MzdaFw0yNjA3MjUwNjM4MzdaMDMxMTAvBgNV
BAMTKDQyMjc0M0IxMzQ1MjY3NjgyMkVGOTAyNTQ0NzA2MEQzMTBCNUIzMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgIGCK7XMRR0cC728Xin3tqrYC
e5G8MSZGCHWHOLtR9fBAutc1FWq9Lyuu2e5+jL9F6ihu2T9TB1iGZB5YBVUN0d7W
dFyKtg0TBgIHfJjMIX7LhD3LGvIYqb1AQSdVSGgqoaotGnQTO+fKt8Nwk3HyG+yL
ructZbC5HyEhFidvckvYfod5fBzOaRxaHlf5/KX0Qcz+3MmhE7INFXzL/h4dm/yf
ik/2yvnktkL9NWNT02LP7EE2RACoCODDc/x/pJRVWV4dM33H2xBoIOl6c2bhI0Ms
+msgTpev00+smbv9iHEQKbsRYkH1vnro6JDcg239zNMBy5cu9yyM371b6t+XAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQidDsTRSZ2gi75AlRHBg0xC1swEwHwYDVR0j
BBgwFoAUOPXM+0PBSgptg27nVKgHNUUGYhYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGRkMDc4ZmUtMDkzMC00NWRjLWI0MDMtM2NlNGU4NjNmOGI1LzAvMzhGNUNDRkI0
M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0NTA2NjIxNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zOEY1Q0NGQjQzQzE0QTBBNkQ4MzZFRTc1NEE4MDczNTQ1MDY2
MjE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRkMDc4ZmUtMDkzMC00NWRjLWI0
MDMtM2NlNGU4NjNmOGI1LzAvMzhGNUNDRkI0M0MxNEEwQTZEODM2RUU3NTRBODA3
MzU0NTA2NjIxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB+2uU6OMlPzthiqmiBEkyRMx5FOqfiQ9FvK
YeqeG34g9mlfiIG4O6b5sK2Hao2l4H4Q27VKtU4QZ/Gvcaos1Uac14aczY+ILEhM
qfSXg3sZiPeEmreRwRGzhTapZ4LrPfWCk26Vw4LTSKkFBOZLrqyDAS2N8Z2uzen6
/KTlHJLTWybNR4tFyOusd2FNAX3eUHrwnmh7Bmo0lpJMoSPOL/qmQdojIoPGWQNT
l4wQ8orDeViIYlkJzrGhgQ7kYYS2wsHVsLZ62+thXX4hptTCRpp1+oNMY6gP8S5f
41M6beXrU6D2/PVEU0/2PAdMtv9SyHKTUitOJWoWRbyOZRhez9I=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:25 2026 by rpki-client