$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft File: 38F5CCFB43C14A0A6D836EE754A8073545066216.mft (raw, json) Hash identifier: SZtVSB6Ai/kO/NpLjSCNd+C++LjcAS91NFftOgoeaf4= Subject key identifier: CC:AE:4B:D6:50:63:F8:F5:54:88:E4:E4:44:D5:6E:DF:4D:84:9F:7F Authority key identifier: 38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 Certificate issuer: /CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Certificate serial: 0850A790E3E428F964D30A3E8767641BEBE8B6FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 13:53:09 +0000 Manifest this update: Thu 24 Sep 2026 13:48:09 +0000 Manifest next update: Fri 25 Sep 2026 14:03:09 +0000 Files and hashes: 1: 3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa (hash: nyod0CT/fB5gH7ANBUTQG+Fhk9ZB7fad+xE68OSLCI0=) 2: 38F5CCFB43C14A0A6D836EE754A8073545066216.crl (hash: w6iALhrvtArDGhBM7XBwjzEll7PkdNM4H0zIedj+qDM=) 3: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (hash: pMseYXhaROm6EYmzpm8l2beM5snzhmulBoKAFnDhIs8=) 4: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (hash: f8d867FdOKPAI9FI9ckkqBnXV6BMv6oUu/lBMN4pJIk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:50:a7:90:e3:e4:28:f9:64:d3:0a:3e:87:67:64:1b:eb:e8:b6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Validity Not Before: Sep 24 13:48:09 2026 GMT Not After : Sep 25 14:03:09 2026 GMT Subject: CN=CCAE4BD65063F8F55488E4E444D56EDF4D849F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7b:b8:4c:31:be:7c:f8:3d:08:1b:75:b5:39: 0d:83:cc:47:7e:1c:de:94:6a:21:16:0c:a7:7b:1f: cb:2c:e8:5a:c6:69:89:97:01:a3:ce:54:38:72:2a: 11:54:65:aa:04:5b:a5:e0:7e:2b:40:48:0d:19:1a: a8:18:1e:09:2d:b8:dc:89:c3:a7:78:a0:e5:12:91: 61:77:6a:ed:51:87:68:d9:7a:9f:75:20:48:14:66: 88:7a:f0:89:3c:b3:f1:aa:fe:38:8d:55:96:0e:a2: 02:31:6e:56:83:0d:f0:ae:cf:6d:99:cd:0a:6f:56: 24:46:75:6b:88:ac:94:c3:19:8f:a3:f4:c1:5d:6c: ba:6e:8f:e7:ee:63:43:a5:be:dc:4e:f1:26:00:0b: 23:ba:76:77:e1:42:d4:6a:c5:a1:45:65:24:99:b9: b6:e1:fe:20:a7:67:3f:ad:ff:87:ad:3b:6c:b5:6a: 6b:28:e8:30:6a:da:7b:79:cd:7e:30:fb:45:df:2c: 68:27:06:71:79:b6:7c:d8:e1:36:e8:52:4f:62:3c: c6:37:82:28:6e:8a:85:58:2f:d1:27:9f:dd:d3:9e: 0f:17:95:ab:9b:2c:56:e9:89:04:ee:0b:bd:22:f5: ae:32:46:53:ff:27:62:6d:10:67:8f:21:40:83:03: 42:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AE:4B:D6:50:63:F8:F5:54:88:E4:E4:44:D5:6E:DF:4D:84:9F:7F X509v3 Authority Key Identifier: keyid:38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d3:40:6b:23:2c:6d:f7:01:a3:03:c5:a9:76:f8:54:4b:da: 98:1d:d2:3d:c1:86:11:21:b5:80:67:a4:7d:8b:b5:61:81:e2: 61:c0:e8:b4:88:9c:6d:16:d6:f5:ab:86:1d:91:cc:49:ea:66: 50:f5:c3:c9:67:c5:29:8d:67:d7:53:0a:ba:33:87:27:a7:f1: f3:c8:51:7d:93:07:50:88:b1:f0:f9:fb:d2:40:ca:a6:98:0a: ba:3d:f9:4b:ce:43:b8:3c:eb:68:1e:69:f0:62:c0:b4:98:fb: 99:83:f4:ac:d9:cd:4b:a3:23:eb:62:f7:ed:2a:8a:a1:f1:96: 95:57:45:15:1f:ab:2f:81:00:ee:17:f0:f9:ee:16:b6:20:17: 7e:38:22:f1:c2:5c:4d:ee:11:93:d1:f6:62:fe:52:10:ca:52: c3:74:7d:f6:be:7a:d8:cc:f2:92:ab:5e:6e:a0:c7:f4:d8:84: 53:e2:21:e1:38:a2:ee:c4:04:68:ea:61:80:3f:ea:62:19:da: 76:de:43:7c:0d:1c:0f:26:15:ee:58:67:3a:58:9f:7a:27:dd: 30:b9:63:bb:e7:f0:81:c0:38:dd:34:9e:90:50:2b:cc:de:96: f8:75:1a:f6:88:3e:f0:d1:3d:fc:a9:94:7e:ea:7c:3f:ca:52: 0a:1e:ba:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFCnkOPkKPlk0wo+h2dkG+votv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGNUNDRkI0M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0 NTA2NjIxNjAeFw0yNjA5MjQxMzQ4MDlaFw0yNjA5MjUxNDAzMDlaMDMxMTAvBgNV BAMTKENDQUU0QkQ2NTA2M0Y4RjU1NDg4RTRFNDQ0RDU2RURGNEQ4NDlGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWe7hMMb58+D0IG3W1OQ2DzEd+ HN6UaiEWDKd7H8ss6FrGaYmXAaPOVDhyKhFUZaoEW6XgfitASA0ZGqgYHgktuNyJ w6d4oOUSkWF3au1Rh2jZep91IEgUZoh68Ik8s/Gq/jiNVZYOogIxblaDDfCuz22Z zQpvViRGdWuIrJTDGY+j9MFdbLpuj+fuY0OlvtxO8SYACyO6dnfhQtRqxaFFZSSZ ubbh/iCnZz+t/4etO2y1amso6DBq2nt5zX4w+0XfLGgnBnF5tnzY4TboUk9iPMY3 gihuioVYL9Enn93Tng8XlaubLFbpiQTuC70i9a4yRlP/J2JtEGePIUCDA0IBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzK5L1lBj+PVUiOTkRNVu302En38wHwYDVR0j BBgwFoAUOPXM+0PBSgptg27nVKgHNUUGYhYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRkMDc4ZmUtMDkzMC00NWRjLWI0MDMtM2NlNGU4NjNmOGI1LzAvMzhGNUNDRkI0 M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0NTA2NjIxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEY1Q0NGQjQzQzE0QTBBNkQ4MzZFRTc1NEE4MDczNTQ1MDY2 MjE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRkMDc4ZmUtMDkzMC00NWRjLWI0 MDMtM2NlNGU4NjNmOGI1LzAvMzhGNUNDRkI0M0MxNEEwQTZEODM2RUU3NTRBODA3 MzU0NTA2NjIxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTTQGsjLG33AaMDxal2+FRL2pgd0j3BhhEh tYBnpH2LtWGB4mHA6LSInG0W1vWrhh2RzEnqZlD1w8lnxSmNZ9dTCrozhyen8fPI UX2TB1CIsfD5+9JAyqaYCro9+UvOQ7g862geafBiwLSY+5mD9KzZzUujI+ti9+0q iqHxlpVXRRUfqy+BAO4X8PnuFrYgF344IvHCXE3uEZPR9mL+UhDKUsN0ffa+etjM 8pKrXm6gx/TYhFPiIeE4ou7EBGjqYYA/6mIZ2nbeQ3wNHA8mFe5YZzpYn3on3TC5 Y7vn8IHAON00npBQK8zelvh1GvaIPvDRPfyplH7qfD/KUgoeuk8= -----END CERTIFICATE-----Generated at Thu Sep 24 19:43:54 2026 by rpki-client