$ rpki-client -vvf rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft File: 38D72675FCFA53571947E587993417F0A2E84774.mft (raw, json) Hash identifier: WomOy3lPyVSwTOtQ46Z5IOpAQRYWyCvOpy2ZmXAj7Ss= Subject key identifier: 1D:30:FA:90:2C:07:46:5A:3C:F6:EF:C7:B1:10:CF:60:9D:AF:D8:AC Authority key identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 Certificate issuer: /CN=38D72675FCFA53571947E587993417F0A2E84774 Certificate serial: 10A248DEAEF51BECD239153335659CD7172D8461 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:17:04 +0000 Manifest this update: Tue 12 May 2026 17:12:04 +0000 Manifest next update: Wed 13 May 2026 17:47:04 +0000 Files and hashes: 1: 3131342e3134312e39342e302f32342d3234203d3e203338373733.roa (hash: KBgcMCCrYhviN35Lsj+SDe+UfidQ9sTv4EpZKCSDnc4=) 2: 3131342e3134312e39322e302f32342d3234203d3e203338373733.roa (hash: 81ry6DUJ7vS8X5kvVlKujeT3BQmxdahLH8ZK0O09vk0=) 3: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 60QvD+kuWCtJFdascF9uuaceBf/9kdy2qmj8qDdkANM=) 4: 38D72675FCFA53571947E587993417F0A2E84774.crl (hash: 4R9+/ucO0c6MQWiuPCjEiva3vKQbB3tfNK5TQEpCEkk=) 5: 3131342e3134312e39352e302f32342d3234203d3e203338373733.roa (hash: BtBofw2ddLFZvd8330UeqRlGDcKEpNlQwCfV2FpF8/w=) 6: 3131342e3134312e39312e302f32342d3234203d3e203338373733.roa (hash: 4dNfe19s0fvjSguokSLbqrRLsnLRnuoEvEhmGuqBlvY=) 7: 3131342e3134312e39332e302f32342d3234203d3e203338373733.roa (hash: So6HCFRYfBIDo3Yy4ADeQ9cjX7P8uCC8BIv2/s6u/0g=) 8: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: uTIMEfksgIfw3pC5q8pYKmgEjBmK5dhPwmsdESCHDfM=) 9: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: FscfLd+VmMO0VIBUn9YaLAaHtn1/p9aWzjIEPbsat1U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a2:48:de:ae:f5:1b:ec:d2:39:15:33:35:65:9c:d7:17:2d:84:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38D72675FCFA53571947E587993417F0A2E84774 Validity Not Before: May 12 17:12:04 2026 GMT Not After : May 13 17:47:04 2026 GMT Subject: CN=1D30FA902C07465A3CF6EFC7B110CF609DAFD8AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e1:20:e3:fa:ff:f3:44:19:e8:a9:a4:6d:8f: 12:6b:5d:35:78:67:79:cc:a4:95:c9:45:2a:2f:2e: c3:7d:0f:64:2f:7a:5c:81:43:54:de:35:9d:ad:53: 59:ea:f1:fc:2d:70:4e:4a:65:55:ba:54:a9:3c:e2: 9a:f8:2a:fd:d1:8a:39:d3:cb:3a:a5:fe:e5:9f:28: b2:4e:b0:35:46:23:e2:4b:7d:f6:c2:3e:0e:b2:25: 12:ea:46:85:1c:05:c0:7c:3d:3b:2a:a2:5f:35:ba: 86:ad:62:27:f7:22:bb:dd:31:36:10:cd:f6:96:81: 1a:35:22:3d:ac:17:ac:6e:9c:58:3a:69:a9:7c:33: 50:87:09:c3:41:ce:64:92:09:d2:52:13:8c:c7:e9: 3a:1e:a6:34:29:30:e1:97:01:63:3f:f4:99:4e:1a: d2:70:4e:8d:b6:81:fe:4b:c7:eb:3a:a0:b5:b4:22: dd:50:56:35:a5:be:2b:71:8d:bb:10:24:61:00:80: 45:6b:ef:d4:09:1f:ba:6b:fe:e0:be:ae:90:f0:b7: 05:66:eb:5a:cb:a3:b0:07:a2:b3:43:11:9d:45:10: 37:3c:6f:33:2e:47:1a:3a:ad:4d:50:d5:b3:ae:75: c2:86:7e:bf:0b:c5:01:f0:b5:e2:51:0c:4b:ca:3a: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:30:FA:90:2C:07:46:5A:3C:F6:EF:C7:B1:10:CF:60:9D:AF:D8:AC X509v3 Authority Key Identifier: keyid:38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:46:dd:3b:06:79:ae:48:df:ca:ea:0d:63:8c:e7:a6:ff:8f: a2:cd:d3:53:3b:71:32:f0:b0:89:f1:c9:32:e4:ed:1e:c0:79: a4:c6:e4:02:c8:92:c3:4d:28:d9:b7:9e:bc:22:be:e2:06:6b: 28:32:e0:41:bb:92:e8:00:af:6d:0a:b8:43:6c:18:ad:4c:16: c9:be:fb:54:c2:1e:f6:41:11:c6:d5:86:1d:46:57:e2:af:37: 4a:8f:87:1f:53:d4:31:8b:05:d4:3e:58:9e:bc:18:48:7d:61: 78:91:a3:fd:41:8c:3f:91:04:75:c7:43:e8:24:4f:a5:c5:7b: cd:81:95:c6:f7:bc:43:eb:8f:bd:1c:36:a0:3a:9a:5b:30:27: 98:e0:0a:2b:fb:e6:dc:eb:40:a7:85:aa:2c:88:80:14:01:bd: 34:1f:2c:c5:b7:00:63:0f:76:69:7d:8c:a4:e3:16:7e:6c:4a: 42:61:31:00:c6:3b:b7:d8:2d:29:d8:6e:00:c8:a7:0c:24:93: c9:2c:0c:c9:0b:d0:69:90:40:2b:f5:b4:1b:36:8e:e4:c3:d4: 8e:4a:7c:bb:9a:93:e0:fa:27:4d:e7:9a:d9:d1:ad:7e:d9:c6: 29:2a:74:d7:eb:8c:68:f1:2f:93:76:6a:4b:41:53:7e:38:38: 88:45:44:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKJI3q71G+zSORUzNWWc1xcthGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBB MkU4NDc3NDAeFw0yNjA1MTIxNzEyMDRaFw0yNjA1MTMxNzQ3MDRaMDMxMTAvBgNV BAMTKDFEMzBGQTkwMkMwNzQ2NUEzQ0Y2RUZDN0IxMTBDRjYwOURBRkQ4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi4SDj+v/zRBnoqaRtjxJrXTV4 Z3nMpJXJRSovLsN9D2QvelyBQ1TeNZ2tU1nq8fwtcE5KZVW6VKk84pr4Kv3RijnT yzql/uWfKLJOsDVGI+JLffbCPg6yJRLqRoUcBcB8PTsqol81uoatYif3IrvdMTYQ zfaWgRo1Ij2sF6xunFg6aal8M1CHCcNBzmSSCdJSE4zH6ToepjQpMOGXAWM/9JlO GtJwTo22gf5Lx+s6oLW0It1QVjWlvitxjbsQJGEAgEVr79QJH7pr/uC+rpDwtwVm 61rLo7AHorNDEZ1FEDc8bzMuRxo6rU1Q1bOudcKGfr8LxQHwteJRDEvKOmkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHTD6kCwHRlo89u/HsRDPYJ2v2KwwHwYDVR0j BBgwFoAUONcmdfz6U1cZR+WHmTQX8KLoR3QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzdmYzU0ZmItNzI0ZS00MzE2LWI5YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVG Q0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBBMkU4NDc3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEQ3MjY3NUZDRkE1MzU3MTk0N0U1ODc5OTM0MTdGMEEyRTg0 Nzc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3 RjBBMkU4NDc3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVG3TsGea5I38rqDWOM56b/j6LN01M7cTLw sInxyTLk7R7AeaTG5ALIksNNKNm3nrwivuIGaygy4EG7kugAr20KuENsGK1MFsm+ +1TCHvZBEcbVhh1GV+KvN0qPhx9T1DGLBdQ+WJ68GEh9YXiRo/1BjD+RBHXHQ+gk T6XFe82Blcb3vEPrj70cNqA6mlswJ5jgCiv75tzrQKeFqiyIgBQBvTQfLMW3AGMP dml9jKTjFn5sSkJhMQDGO7fYLSnYbgDIpwwkk8ksDMkL0GmQQCv1tBs2juTD1I5K fLuak+D6J03nmtnRrX7ZxikqdNfrjGjxL5N2aktBU344OIhFROI= -----END CERTIFICATE-----Generated at Wed May 13 01:45:04 2026 by rpki-client