$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft File: 3C38CDC785C4C8B22E60377271E55409582CCE11.mft (raw, json) Hash identifier: GusNi8ETADWTebrL9gVLiOmrIdJdmMj/zhVaOfbmMsc= Subject key identifier: CD:43:F5:01:2F:11:C5:49:C0:A5:4D:1F:87:88:8B:24:69:5F:6C:41 Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 Certificate issuer: /CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Certificate serial: 0DF00C9B1002BC8B522E235CF8A62C4B833B0B07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 23:08:02 +0000 Manifest this update: Thu 23 Jul 2026 23:03:02 +0000 Manifest next update: Sat 25 Jul 2026 00:14:02 +0000 Files and hashes: 1: 3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa (hash: uY3yyx4wQkOkesdmZiKQBfO/mX9p5Uwb9aYVUKsyBH0=) 2: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: CNqZtOi2G7stcR7KpWbtX7pHl0DtOjDNuPcEVY0GuK4=) 3: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: YRj5C4EJmHgy7/Vm8+56TmtCB98kN0pGzPis/CT4F1s=) 4: 3C38CDC785C4C8B22E60377271E55409582CCE11.crl (hash: 1O3MtEpVPMdh5X9GHTVG6o1PH0ROUgusO/FBAwJ5XUo=) 5: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: 6IAAYhSuJnzcb+wPAnz95hDBr9XmKVxiIbVUzRwnFY4=) 6: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: YTCmCer361lbPyWorpFl5d+Z6lvA+nitAm63kpLBrjA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f0:0c:9b:10:02:bc:8b:52:2e:23:5c:f8:a6:2c:4b:83:3b:0b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Validity Not Before: Jul 23 23:03:02 2026 GMT Not After : Jul 25 00:14:02 2026 GMT Subject: CN=CD43F5012F11C549C0A54D1F87888B24695F6C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:65:ad:97:12:7a:9f:5e:c3:27:5e:10:ca:9d: 6e:19:06:93:8b:e4:61:28:0d:3a:41:95:67:0a:9f: f1:84:db:0f:58:33:09:2c:e6:1c:e4:02:06:ef:57: d3:55:f4:9d:92:f1:e4:46:a2:b8:d6:87:ec:5d:77: ae:d8:0e:ce:e7:f9:11:56:f4:aa:22:a0:51:03:7c: e1:3e:18:36:42:d7:80:e6:f8:aa:4d:14:e2:87:f2: b8:fd:7d:9f:13:54:9b:84:48:ab:8b:52:24:d8:0b: 95:06:13:17:fe:c1:1b:fa:dc:74:ac:66:5c:d9:c0: c6:4b:20:fe:16:91:60:c6:c9:28:1f:fb:22:a8:18: f7:da:fb:b3:9f:85:2d:f4:93:a0:6e:3e:1a:f2:64: 83:45:fe:1b:7d:0c:9a:1e:f9:ac:30:42:a9:ae:11: ba:f2:68:62:73:c7:d5:f7:7c:14:54:c0:ee:11:a7: 4c:11:03:ae:0a:ba:75:92:06:ce:6d:6c:9e:bc:9f: 47:d2:32:62:0b:56:07:76:35:0d:e3:c8:39:a2:0a: 05:ca:ab:e4:6f:9c:f7:1e:db:d1:97:8a:ae:59:c0: 12:88:83:cf:8d:53:15:94:9c:b1:d5:a8:c0:17:51: 6c:b7:64:49:ba:50:b9:d4:d8:1d:6f:36:85:e1:f9: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:43:F5:01:2F:11:C5:49:C0:A5:4D:1F:87:88:8B:24:69:5F:6C:41 X509v3 Authority Key Identifier: keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:77:37:48:d4:51:fd:0f:f2:ed:24:de:9e:2b:55:3b:db:dd: 24:c1:77:fb:57:d6:c9:9d:9b:ce:7d:b3:b9:80:18:27:5c:fd: d0:1e:a1:e2:1f:7a:a6:6f:48:4f:a3:d6:93:ab:1c:6d:27:f9: fb:16:75:b8:4f:02:a2:8b:4d:2a:ff:56:46:7c:72:ee:ca:93: ac:2a:f4:08:dd:e3:35:b6:43:60:6e:06:62:2e:85:28:98:a7: 9a:a9:a8:a6:2e:67:e5:0a:e6:36:6e:58:a2:7e:de:bb:02:99: 22:55:36:3a:90:00:22:c0:22:65:97:04:65:ea:03:bc:c4:e1: 1b:70:2c:01:39:88:b9:8a:a1:d3:af:1e:40:43:63:2c:45:3f: 61:02:b9:6c:31:64:42:98:96:d2:2a:0f:ea:27:c1:18:7b:31: 0c:40:6a:dd:9e:c9:fe:b9:43:73:d2:4f:b9:87:29:e3:bc:68: 89:f9:d5:b0:54:8a:80:ba:58:66:91:aa:fa:ac:b9:90:2e:5c: 09:e2:37:c3:a3:56:7f:86:07:82:91:7f:03:78:71:df:30:8d: 51:70:d4:6b:85:42:fe:09:7e:4e:e4:49:dc:5f:11:42:59:34: 1d:d5:1c:02:bc:53:3e:86:0c:1b:69:7e:c8:35:4a:6c:17:b7: c5:16:b0:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfAMmxACvItSLiNc+KYsS4M7CwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1 ODJDQ0UxMTAeFw0yNjA3MjMyMzAzMDJaFw0yNjA3MjUwMDE0MDJaMDMxMTAvBgNV BAMTKENENDNGNTAxMkYxMUM1NDlDMEE1NEQxRjg3ODg4QjI0Njk1RjZDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Za2XEnqfXsMnXhDKnW4ZBpOL 5GEoDTpBlWcKn/GE2w9YMwks5hzkAgbvV9NV9J2S8eRGorjWh+xdd67YDs7n+RFW 9KoioFEDfOE+GDZC14Dm+KpNFOKH8rj9fZ8TVJuESKuLUiTYC5UGExf+wRv63HSs ZlzZwMZLIP4WkWDGySgf+yKoGPfa+7OfhS30k6BuPhryZINF/ht9DJoe+awwQqmu EbryaGJzx9X3fBRUwO4Rp0wRA64KunWSBs5tbJ68n0fSMmILVgd2NQ3jyDmiCgXK q+RvnPce29GXiq5ZwBKIg8+NUxWUnLHVqMAXUWy3ZEm6ULnU2B1vNoXh+S+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzUP1AS8RxUnApU0fh4iLJGlfbEEwHwYDVR0j BBgwFoAUPDjNx4XEyLIuYDdyceVUCVgszhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ3OTRkMzYtNjlmOC00NDA2LWJmOWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4 NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1ODJDQ0UxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzM4Q0RDNzg1QzRDOEIyMkU2MDM3NzI3MUU1NTQwOTU4MkND RTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm OWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0 MDk1ODJDQ0UxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHh3N0jUUf0P8u0k3p4rVTvb3STBd/tX1smd m859s7mAGCdc/dAeoeIfeqZvSE+j1pOrHG0n+fsWdbhPAqKLTSr/VkZ8cu7Kk6wq 9Ajd4zW2Q2BuBmIuhSiYp5qpqKYuZ+UK5jZuWKJ+3rsCmSJVNjqQACLAImWXBGXq A7zE4RtwLAE5iLmKodOvHkBDYyxFP2ECuWwxZEKYltIqD+onwRh7MQxAat2eyf65 Q3PST7mHKeO8aIn51bBUioC6WGaRqvqsuZAuXAniN8OjVn+GB4KRfwN4cd8wjVFw 1GuFQv4Jfk7kSdxfEUJZNB3VHAK8Uz6GDBtpfsg1SmwXt8UWsCI= -----END CERTIFICATE-----Generated at Fri Jul 24 01:47:42 2026 by rpki-client