$ rpki-client -vvf rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft File: 38D72675FCFA53571947E587993417F0A2E84774.mft (raw, json) Hash identifier: tfsKYAmaSiRcj7lpRMHF5ypnZQMAhUbYws1hmKEqXbw= Subject key identifier: 04:DD:E2:71:FF:61:69:D9:6F:39:08:36:1E:47:9D:E6:BD:AA:D7:48 Authority key identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 Certificate issuer: /CN=38D72675FCFA53571947E587993417F0A2E84774 Certificate serial: 033CC6C2FA597E15C0F484398309526DE1C7146B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 11:18:55 +0000 Manifest this update: Thu 23 Jul 2026 11:13:55 +0000 Manifest next update: Fri 24 Jul 2026 13:30:55 +0000 Files and hashes: 1: 3131342e3134312e39352e302f32342d3234203d3e203338373733.roa (hash: BtBofw2ddLFZvd8330UeqRlGDcKEpNlQwCfV2FpF8/w=) 2: 3131342e3134312e39322e302f32342d3234203d3e203338373733.roa (hash: 81ry6DUJ7vS8X5kvVlKujeT3BQmxdahLH8ZK0O09vk0=) 3: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: FscfLd+VmMO0VIBUn9YaLAaHtn1/p9aWzjIEPbsat1U=) 4: 38D72675FCFA53571947E587993417F0A2E84774.crl (hash: km7Ihum7yyYW5CFWwU9pkwlDY4VkX8H8x4OwS8HGKm8=) 5: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 60QvD+kuWCtJFdascF9uuaceBf/9kdy2qmj8qDdkANM=) 6: 3131342e3134312e39342e302f32342d3234203d3e203338373733.roa (hash: KBgcMCCrYhviN35Lsj+SDe+UfidQ9sTv4EpZKCSDnc4=) 7: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: uTIMEfksgIfw3pC5q8pYKmgEjBmK5dhPwmsdESCHDfM=) 8: 3131342e3134312e39312e302f32342d3234203d3e203338373733.roa (hash: 4dNfe19s0fvjSguokSLbqrRLsnLRnuoEvEhmGuqBlvY=) 9: 3131342e3134312e39332e302f32342d3234203d3e203338373733.roa (hash: So6HCFRYfBIDo3Yy4ADeQ9cjX7P8uCC8BIv2/s6u/0g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3c:c6:c2:fa:59:7e:15:c0:f4:84:39:83:09:52:6d:e1:c7:14:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38D72675FCFA53571947E587993417F0A2E84774 Validity Not Before: Jul 23 11:13:55 2026 GMT Not After : Jul 24 13:30:55 2026 GMT Subject: CN=04DDE271FF6169D96F3908361E479DE6BDAAD748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:73:55:77:bb:05:74:a4:1b:ec:f3:c5:ce: 32:3a:f1:3e:9d:44:bd:bb:22:8b:4f:38:8a:42:8c: ea:53:14:c1:a1:fc:57:44:ba:d3:22:6c:dd:ec:8f: 45:83:34:a8:3b:64:8f:4c:0c:32:8f:b4:45:a4:64: a3:89:cd:f0:a6:f2:74:d4:31:90:a1:92:d8:72:ec: 08:96:ec:06:f4:21:21:97:22:2e:b7:2c:cb:5c:c7: ac:c6:d1:b5:c7:ba:72:15:1e:b0:de:98:05:c8:af: 98:46:e7:3f:22:fb:8e:c1:6d:d8:1b:47:cc:aa:16: e4:11:ad:2c:53:89:90:40:72:a2:de:18:dc:42:7c: 9a:87:24:5c:5e:6c:46:fc:5a:a5:c2:96:9c:6d:09: 0c:7e:7f:81:dd:41:0f:83:b0:2a:6d:7f:f5:27:68: f5:53:90:f7:55:fd:7b:3e:15:c9:d5:f0:03:cc:e4: 22:28:ec:ad:57:c8:d3:67:00:c8:8d:97:e9:52:7e: 79:1b:41:dd:5c:80:ba:a8:9e:af:85:91:67:e9:b5: 31:b6:ca:12:17:2a:80:17:05:69:72:5f:d3:86:ff: c6:9e:a7:1c:4b:6e:54:b1:d4:a3:fc:6a:80:2b:df: 04:8a:82:79:e5:f1:f0:e3:04:c8:e9:a1:48:76:36: d1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DD:E2:71:FF:61:69:D9:6F:39:08:36:1E:47:9D:E6:BD:AA:D7:48 X509v3 Authority Key Identifier: keyid:38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e2:e1:33:a5:be:f7:91:6b:48:77:d3:6e:a5:de:e9:11:1f: 99:96:db:49:01:7d:98:0e:22:70:3b:e7:ba:ea:53:c4:e0:5e: 0e:cc:0b:e9:41:79:e1:b3:ab:5e:11:bd:a3:7b:d9:c0:19:10: b7:cb:66:25:c8:2d:09:06:63:1c:06:9f:d7:f3:bb:4c:96:9f: fa:a7:85:e8:4d:44:89:e5:c0:52:67:a7:75:bc:40:0b:bc:88: 2e:33:e8:5f:eb:ba:e3:35:39:dd:2f:4a:b8:a2:de:54:0e:a1: 47:a0:2b:b5:a4:34:4a:01:59:8d:31:5a:e1:69:d8:7f:4a:fe: d5:d2:ab:7b:20:76:4a:b7:c3:c8:ab:0a:ee:ca:62:1c:d6:73: 9e:5e:a5:16:23:d3:90:ed:0a:ff:6d:00:8d:6d:78:c1:be:cb: 9e:6c:e6:75:71:96:3b:01:f8:3e:37:54:73:3c:a1:59:2c:ae: fa:05:96:31:b1:99:f3:8c:c9:40:0b:6f:ac:14:e0:a8:a4:b8: bf:16:46:8d:96:c4:8c:84:89:37:14:bc:47:56:9a:0d:08:4c: 81:7c:ba:70:21:94:a6:d5:77:1d:36:85:fa:e2:d6:c9:9c:be: 79:d4:12:4b:a7:94:3b:99:d9:8d:27:ab:e6:8d:32:67:b8:2d: 3a:cd:2c:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAzzGwvpZfhXA9IQ5gwlSbeHHFGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBB MkU4NDc3NDAeFw0yNjA3MjMxMTEzNTVaFw0yNjA3MjQxMzMwNTVaMDMxMTAvBgNV BAMTKDA0RERFMjcxRkY2MTY5RDk2RjM5MDgzNjFFNDc5REU2QkRBQUQ3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVfXNVd7sFdKQb7PPFzjI68T6d RL27IotPOIpCjOpTFMGh/FdEutMibN3sj0WDNKg7ZI9MDDKPtEWkZKOJzfCm8nTU MZChkthy7AiW7Ab0ISGXIi63LMtcx6zG0bXHunIVHrDemAXIr5hG5z8i+47Bbdgb R8yqFuQRrSxTiZBAcqLeGNxCfJqHJFxebEb8WqXClpxtCQx+f4HdQQ+DsCptf/Un aPVTkPdV/Xs+FcnV8APM5CIo7K1XyNNnAMiNl+lSfnkbQd1cgLqonq+FkWfptTG2 yhIXKoAXBWlyX9OG/8aepxxLblSx1KP8aoAr3wSKgnnl8fDjBMjpoUh2NtFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBN3icf9hadlvOQg2Hked5r2q10gwHwYDVR0j BBgwFoAUONcmdfz6U1cZR+WHmTQX8KLoR3QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzdmYzU0ZmItNzI0ZS00MzE2LWI5YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVG Q0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBBMkU4NDc3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEQ3MjY3NUZDRkE1MzU3MTk0N0U1ODc5OTM0MTdGMEEyRTg0 Nzc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3 RjBBMkU4NDc3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGni4TOlvveRa0h3026l3ukRH5mW20kBfZgO InA757rqU8TgXg7MC+lBeeGzq14RvaN72cAZELfLZiXILQkGYxwGn9fzu0yWn/qn hehNRInlwFJnp3W8QAu8iC4z6F/ruuM1Od0vSrii3lQOoUegK7WkNEoBWY0xWuFp 2H9K/tXSq3sgdkq3w8irCu7KYhzWc55epRYj05DtCv9tAI1teMG+y55s5nVxljsB +D43VHM8oVksrvoFljGxmfOMyUALb6wU4KikuL8WRo2WxIyEiTcUvEdWmg0ITIF8 unAhlKbVdx02hfri1smcvnnUEkunlDuZ2Y0nq+aNMme4LTrNLO8= -----END CERTIFICATE-----Generated at Fri Jul 24 04:18:02 2026 by rpki-client