$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft File: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft (raw, json) Hash identifier: +x/8qJVEGrm3iUZeQPNfPFSwOUTSSCFObR7uhfi7uKI= Subject key identifier: DD:6B:4C:69:31:DA:AF:25:63:68:45:BB:78:D5:13:84:76:A6:5F:06 Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Certificate serial: 428DC27378F61C171E01D1DFD98BF686A6413607 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:13:14 +0000 Manifest this update: Thu 23 Jul 2026 23:08:14 +0000 Manifest next update: Sat 25 Jul 2026 02:50:14 +0000 Files and hashes: 1: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: ObskdzHhJM5YPi+vb1AkQ8nGE9gX1uyY1inXWD6vNXo=) 2: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl (hash: zBqUxpnJjS3ftSjPXk6N2TtcuJJiunH9+X5qHkfnw+w=) 3: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: +hu0CwIQk5R0Cx8ZxKSynMp86E6i1MoIZ/GUTrtz3uk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8d:c2:73:78:f6:1c:17:1e:01:d1:df:d9:8b:f6:86:a6:41:36:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Validity Not Before: Jul 23 23:08:14 2026 GMT Not After : Jul 25 02:50:14 2026 GMT Subject: CN=DD6B4C6931DAAF25636845BB78D5138476A65F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:e9:0b:9a:ce:fc:d3:68:e5:65:ba:85:e5: a7:ec:c4:de:f2:52:91:bd:df:19:60:9b:46:6d:f9: 64:fa:94:87:43:c6:3b:96:03:c6:b1:90:26:ad:aa: 94:d4:03:15:0c:39:19:5e:89:04:2c:09:6f:0d:c3: 89:c7:80:2c:3f:a0:a9:97:08:f8:51:01:90:ec:e4: 00:a9:3c:e2:07:19:ca:38:a4:11:11:da:89:8f:52: ec:3c:e4:6e:c9:1d:61:da:bb:c6:db:1b:33:5b:44: 9e:6d:1c:b7:66:cc:1d:1c:9c:21:27:1d:d1:44:af: 02:05:68:79:ee:8e:92:8b:5a:67:ae:d7:67:14:f4: 72:16:d2:46:c3:d8:2a:f0:d0:41:56:06:f2:38:eb: 11:48:65:bc:c9:1b:36:d7:f7:3e:29:53:d9:ac:c3: 64:64:7d:01:46:88:df:a2:16:1e:a6:17:bb:f6:18: ac:8b:8e:09:58:86:5c:52:f5:89:a9:ca:11:16:0b: 99:99:7e:1a:66:1d:3c:9d:46:93:e6:fc:bb:ab:8f: f5:d3:43:26:b1:67:c9:a2:88:8e:71:98:2d:ae:04: 0f:8e:e5:e7:ae:74:65:cc:af:d0:d5:2f:89:93:f2: c0:46:0b:b3:11:8b:6c:82:40:c0:bb:f9:f8:26:50: 23:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:4C:69:31:DA:AF:25:63:68:45:BB:78:D5:13:84:76:A6:5F:06 X509v3 Authority Key Identifier: keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:86:69:2e:ec:22:68:6a:25:63:2a:9f:a3:fc:91:e0:27:e7: d1:0a:10:2a:7d:98:12:33:5c:c8:9c:48:70:f4:2d:f0:e3:22: f0:f9:a2:a8:80:99:38:50:fd:27:47:47:19:72:a5:dc:1e:c1: 0b:1a:43:68:3d:68:9f:a7:be:80:fc:bc:be:47:00:7b:33:2d: d5:59:f8:34:be:21:e7:eb:d6:ee:3a:06:8c:f1:52:2e:dd:c1: 66:98:95:ef:ae:17:20:c7:fd:a5:61:d7:d2:cd:d1:13:44:98: 31:98:26:e9:4c:93:76:56:91:2b:28:33:f9:e2:61:02:8b:55: f5:93:5d:a5:7a:a7:ea:c2:52:14:46:7d:36:3e:4a:b0:e4:2c: b6:8b:93:0c:cd:07:d9:3a:cd:a3:e7:52:14:44:eb:96:f8:3c: 63:5f:a1:5c:6c:e6:3b:c0:a7:bb:10:f8:ea:cd:d7:2e:e1:b5: eb:27:09:6e:77:0c:89:dc:05:f7:47:e0:d3:0a:30:bd:f0:cf: 27:c8:43:ef:94:25:fb:05:a6:25:6f:94:16:8a:7b:fd:a8:37: 34:a3:7a:28:7a:ec:e2:43:2e:d0:32:9a:d8:ee:fc:03:8f:fa: ce:5a:05:fe:e8:e2:fd:9c:2a:c5:a0:24:24:e0:37:d4:af:d9: 6d:af:0c:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQo3Cc3j2HBceAdHf2Yv2hqZBNgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1 QTlBMEU4QjAeFw0yNjA3MjMyMzA4MTRaFw0yNjA3MjUwMjUwMTRaMDMxMTAvBgNV BAMTKERENkI0QzY5MzFEQUFGMjU2MzY4NDVCQjc4RDUxMzg0NzZBNjVGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5ukLms7802jlZbqF5afsxN7y UpG93xlgm0Zt+WT6lIdDxjuWA8axkCatqpTUAxUMORleiQQsCW8Nw4nHgCw/oKmX CPhRAZDs5ACpPOIHGco4pBER2omPUuw85G7JHWHau8bbGzNbRJ5tHLdmzB0cnCEn HdFErwIFaHnujpKLWmeu12cU9HIW0kbD2Crw0EFWBvI46xFIZbzJGzbX9z4pU9ms w2RkfQFGiN+iFh6mF7v2GKyLjglYhlxS9YmpyhEWC5mZfhpmHTydRpPm/Lurj/XT QyaxZ8miiI5xmC2uBA+O5eeudGXMr9DVL4mT8sBGC7MRi2yCQMC7+fgmUCP1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3WtMaTHaryVjaEW7eNUThHamXwYwHwYDVR0j BBgwFoAUOLkHw+LBEM5mOxaEx6rW2FqaDoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UxZWE1MTMtYWM2ZS00YTVmLWIzZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNF MkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1QTlBMEU4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEI5MDdDM0UyQzExMENFNjYzQjE2ODRDN0FBRDZEODVBOUEw RThCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2 RDg1QTlBMEU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKGaS7sImhqJWMqn6P8keAn59EKECp9mBIz XMicSHD0LfDjIvD5oqiAmThQ/SdHRxlypdwewQsaQ2g9aJ+nvoD8vL5HAHszLdVZ +DS+Iefr1u46BozxUi7dwWaYle+uFyDH/aVh19LN0RNEmDGYJulMk3ZWkSsoM/ni YQKLVfWTXaV6p+rCUhRGfTY+SrDkLLaLkwzNB9k6zaPnUhRE65b4PGNfoVxs5jvA p7sQ+OrN1y7htesnCW53DIncBfdH4NMKML3wzyfIQ++UJfsFpiVvlBaKe/2oNzSj eih67OJDLtAymtju/AOP+s5aBf7o4v2cKsWgJCTgN9Sv2W2vDDc= -----END CERTIFICATE-----Generated at Fri Jul 24 02:42:56 2026 by rpki-client