$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft File: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft (raw, json) Hash identifier: Sf+6hYj3lx6R1c7ksN/S0fy8goY0jQEnvV71d6TdlGg= Subject key identifier: D0:39:61:7B:E4:3F:4A:DE:1F:32:E9:97:68:55:1A:34:AC:C3:EE:78 Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Certificate serial: 31B20CEBC9021D6F70793943C5F9336E072BD501 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:22:16 +0000 Manifest this update: Tue 12 May 2026 06:17:16 +0000 Manifest next update: Wed 13 May 2026 06:36:16 +0000 Files and hashes: 1: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: ObskdzHhJM5YPi+vb1AkQ8nGE9gX1uyY1inXWD6vNXo=) 2: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl (hash: E9uukfaJKLlWbNW75pP6Bs5FMBMDgJOH/8V//pfIDgA=) 3: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: +hu0CwIQk5R0Cx8ZxKSynMp86E6i1MoIZ/GUTrtz3uk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b2:0c:eb:c9:02:1d:6f:70:79:39:43:c5:f9:33:6e:07:2b:d5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Validity Not Before: May 12 06:17:16 2026 GMT Not After : May 13 06:36:16 2026 GMT Subject: CN=D039617BE43F4ADE1F32E99768551A34ACC3EE78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:08:f8:67:9c:24:21:ea:dc:03:e6:e9:87: cc:e1:20:6d:6b:28:e1:00:11:1f:d6:7f:14:4d:9b: bc:0e:b9:9a:c0:27:01:44:7d:69:82:06:47:fa:75: 0e:62:3f:59:f8:9a:d0:7d:57:19:f3:23:31:23:01: 6d:d8:9b:56:c5:db:18:11:59:4d:4c:7c:ff:df:19: 03:ba:d9:a6:24:22:58:a7:62:e2:b4:cf:66:ac:8f: fb:ab:93:5d:a5:ee:6a:20:f4:95:e4:1b:5f:6f:af: 49:ff:a8:9f:81:c5:ed:af:b5:c5:d8:f5:9e:4a:bf: a7:9b:1f:81:4f:66:7d:38:e9:84:fa:cf:45:40:1a: 38:d6:59:b0:11:7c:88:f4:48:ef:0d:a3:1d:77:94: f8:af:7a:ae:37:06:17:83:82:94:cb:ff:b1:c1:9d: b4:36:a4:88:fb:7c:9e:bb:fa:4b:8c:d7:c4:51:bf: c6:83:e1:81:40:b2:c8:90:e6:df:ea:21:53:e6:dd: c5:64:ac:74:74:06:08:b1:20:d4:ae:4e:ef:04:ad: c3:e4:41:00:b2:69:e0:1b:6b:9c:bb:42:30:f0:75: 2a:da:1f:4d:c2:ca:5a:e6:95:6d:0b:e7:46:ea:12: 04:e7:0d:1f:65:b3:cd:70:41:5d:26:38:5f:56:b2: ec:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:39:61:7B:E4:3F:4A:DE:1F:32:E9:97:68:55:1A:34:AC:C3:EE:78 X509v3 Authority Key Identifier: keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e8:32:13:05:cd:d0:c3:07:d2:f9:a3:d6:e1:5d:23:4c:84: 88:c0:9a:8c:99:95:c6:33:a0:1e:c2:54:05:34:df:4c:63:1a: 72:d6:3f:f6:0f:99:e7:2a:5d:34:30:9b:b4:11:90:39:b1:81: 4c:06:d8:e8:de:9f:9f:c6:ea:55:42:9a:44:ae:73:47:6a:a4: 12:a9:fe:a4:b1:0e:b7:fd:a0:0f:e7:78:0b:6b:af:a3:8c:ec: bc:87:f5:6a:34:20:c7:11:03:ac:55:a3:ed:1e:cf:8e:4b:9f: 20:5c:db:90:b6:3e:9d:4b:da:96:12:c0:d5:c0:36:2a:6f:d6: e2:a8:42:6d:9a:a6:59:72:09:31:3c:e4:87:b7:0a:b2:6a:d9: 61:ca:82:5d:05:86:be:7b:b9:27:46:da:68:b4:91:3e:19:48: 6c:0a:4a:c8:ee:10:5d:f3:76:72:5f:af:14:85:9c:ae:12:b1: 68:48:c4:f8:df:35:d4:5d:a8:be:0e:53:e1:6b:37:b7:58:7f: 4e:1b:ce:3a:48:40:b0:0d:c6:39:9a:3b:f9:4f:6c:a1:28:a4: f7:58:1c:a9:e1:c7:12:e8:d9:55:cd:45:4a:96:48:aa:4e:d9: ba:01:f7:92:52:e7:2a:e9:5a:6f:0e:2f:0a:2c:4e:b3:88:67: ce:88:9e:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbIM68kCHW9weTlDxfkzbgcr1QEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1 QTlBMEU4QjAeFw0yNjA1MTIwNjE3MTZaFw0yNjA1MTMwNjM2MTZaMDMxMTAvBgNV BAMTKEQwMzk2MTdCRTQzRjRBREUxRjMyRTk5NzY4NTUxQTM0QUNDM0VFNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BQj4Z5wkIercA+bph8zhIG1r KOEAER/WfxRNm7wOuZrAJwFEfWmCBkf6dQ5iP1n4mtB9VxnzIzEjAW3Ym1bF2xgR WU1MfP/fGQO62aYkIlinYuK0z2asj/urk12l7mog9JXkG19vr0n/qJ+Bxe2vtcXY 9Z5Kv6ebH4FPZn046YT6z0VAGjjWWbARfIj0SO8Nox13lPiveq43BheDgpTL/7HB nbQ2pIj7fJ67+kuM18RRv8aD4YFAssiQ5t/qIVPm3cVkrHR0BgixINSuTu8ErcPk QQCyaeAba5y7QjDwdSraH03CylrmlW0L50bqEgTnDR9ls81wQV0mOF9Wsux1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Dlhe+Q/St4fMumXaFUaNKzD7ngwHwYDVR0j BBgwFoAUOLkHw+LBEM5mOxaEx6rW2FqaDoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UxZWE1MTMtYWM2ZS00YTVmLWIzZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNF MkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1QTlBMEU4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEI5MDdDM0UyQzExMENFNjYzQjE2ODRDN0FBRDZEODVBOUEw RThCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2 RDg1QTlBMEU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjoMhMFzdDDB9L5o9bhXSNMhIjAmoyZlcYz oB7CVAU030xjGnLWP/YPmecqXTQwm7QRkDmxgUwG2Ojen5/G6lVCmkSuc0dqpBKp /qSxDrf9oA/neAtrr6OM7LyH9Wo0IMcRA6xVo+0ez45LnyBc25C2Pp1L2pYSwNXA Nipv1uKoQm2apllyCTE85Ie3CrJq2WHKgl0Fhr57uSdG2mi0kT4ZSGwKSsjuEF3z dnJfrxSFnK4SsWhIxPjfNdRdqL4OU+FrN7dYf04bzjpIQLANxjmaO/lPbKEopPdY HKnhxxLo2VXNRUqWSKpO2boB95JS5yrpWm8OLwosTrOIZ86IniM= -----END CERTIFICATE-----Generated at Tue May 12 22:19:49 2026 by rpki-client