$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft File: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft (raw, json) Hash identifier: WMuiWzxIcVXmK1wgSmmCBTdKYsBHH/jR2A2/HWLQ+u8= Subject key identifier: F9:A9:D4:F5:73:81:84:7E:4C:6A:50:9D:8F:D0:B6:B9:B3:7F:28:90 Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Certificate serial: 58CA251F75D8954E840C0298DB1F770DCB1C9FF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 04:00:38 +0000 Manifest this update: Thu 24 Sep 2026 03:55:38 +0000 Manifest next update: Fri 25 Sep 2026 05:57:38 +0000 Files and hashes: 1: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: ObskdzHhJM5YPi+vb1AkQ8nGE9gX1uyY1inXWD6vNXo=) 2: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: +hu0CwIQk5R0Cx8ZxKSynMp86E6i1MoIZ/GUTrtz3uk=) 3: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl (hash: AwF0Q6xalzHS4vRL6kCdxjyztnc/Y/DyJCy26mR/GdQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ca:25:1f:75:d8:95:4e:84:0c:02:98:db:1f:77:0d:cb:1c:9f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Validity Not Before: Sep 24 03:55:38 2026 GMT Not After : Sep 25 05:57:38 2026 GMT Subject: CN=F9A9D4F57381847E4C6A509D8FD0B6B9B37F2890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:4e:15:2c:8b:0d:0e:b8:59:84:17:1f:6e: 6f:92:2d:3d:65:44:c0:c0:5f:03:b6:cf:ca:67:12: fa:ab:86:51:53:4c:b8:f3:06:8f:c8:a6:e9:eb:e4: 28:7e:ed:ec:02:b6:58:1f:75:36:9f:cf:44:76:c5: c2:1b:a5:3b:50:78:a5:a7:a2:13:21:d8:01:aa:12: 6b:e6:9a:a1:8b:1d:11:5a:4b:09:88:a5:b9:75:d2: e9:74:30:4c:82:25:5e:d0:e9:94:af:5d:9e:80:be: 6f:fb:2f:e9:d7:76:2b:88:66:76:79:4f:53:af:95: f3:24:ba:29:c4:0a:62:46:4d:d2:98:4b:42:ba:49: 29:f7:b5:13:2e:d2:93:31:7c:cd:de:d5:32:a1:e8: 1f:05:22:e0:ed:38:6b:24:17:af:71:ee:f9:78:cf: 6e:ac:b3:b1:dd:c3:d7:d3:f2:e1:ef:44:76:b4:90: 5f:ba:e0:f9:af:02:67:2b:ac:86:0f:a7:83:d9:91: b0:39:69:3f:8a:7e:b9:c5:b0:a5:98:04:7a:05:51: 21:d9:c7:57:c0:75:52:5e:86:e4:6f:ab:5a:07:e9: 8b:30:cf:c1:9a:1d:8b:d0:24:20:b4:00:53:b4:54: 6c:da:ab:02:c5:a7:b1:33:74:d4:f5:94:96:4a:94: dc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A9:D4:F5:73:81:84:7E:4C:6A:50:9D:8F:D0:B6:B9:B3:7F:28:90 X509v3 Authority Key Identifier: keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a3:07:b0:76:1f:20:8a:8a:11:be:9c:21:1f:46:3b:18:7e: 50:d4:8d:67:03:85:72:65:07:ea:2a:58:de:49:ae:76:30:cf: 64:64:86:51:a4:b6:7c:7e:57:f7:09:1c:1d:e3:34:0e:07:12: 19:29:95:e0:18:a0:d7:e5:a7:c9:c7:46:1c:bd:ba:9b:5e:10: 88:f4:41:15:a8:2f:47:7b:bf:ce:b2:4e:30:55:ce:71:d6:52: 30:e7:87:36:1e:c3:99:51:54:bc:1c:ca:6e:8f:8a:d8:1d:96: 1f:fb:c4:cd:eb:3d:03:27:33:f4:0c:29:8a:13:7a:9e:98:71: 90:b8:23:14:c6:e0:53:54:24:ad:eb:ec:d1:45:05:c8:12:b0: db:7c:56:9b:7a:07:d9:89:ec:ba:b5:c2:81:8a:25:86:c0:bf: aa:33:4a:bd:39:69:7f:b2:65:10:43:fd:bd:49:98:03:de:3e: 4f:34:2b:fe:f3:27:f3:aa:dc:f3:61:a3:b0:c2:fc:50:8a:19: 34:16:80:62:42:06:6b:8b:ee:a8:13:e4:0c:58:10:59:8b:ef: d1:15:0b:14:e7:fa:3a:9a:8a:38:1b:56:aa:fe:4c:4b:67:d8: ed:61:9a:fa:15:be:f3:fe:62:83:88:57:9a:e0:c4:7d:aa:70: 9f:aa:23:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWMolH3XYlU6EDAKY2x93Dcscn/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1 QTlBMEU4QjAeFw0yNjA5MjQwMzU1MzhaFw0yNjA5MjUwNTU3MzhaMDMxMTAvBgNV BAMTKEY5QTlENEY1NzM4MTg0N0U0QzZBNTA5RDhGRDBCNkI5QjM3RjI4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46E4VLIsNDrhZhBcfbm+SLT1l RMDAXwO2z8pnEvqrhlFTTLjzBo/Ipunr5Ch+7ewCtlgfdTafz0R2xcIbpTtQeKWn ohMh2AGqEmvmmqGLHRFaSwmIpbl10ul0MEyCJV7Q6ZSvXZ6Avm/7L+nXdiuIZnZ5 T1OvlfMkuinECmJGTdKYS0K6SSn3tRMu0pMxfM3e1TKh6B8FIuDtOGskF69x7vl4 z26ss7Hdw9fT8uHvRHa0kF+64PmvAmcrrIYPp4PZkbA5aT+KfrnFsKWYBHoFUSHZ x1fAdVJehuRvq1oH6Yswz8GaHYvQJCC0AFO0VGzaqwLFp7EzdNT1lJZKlNz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+anU9XOBhH5MalCdj9C2ubN/KJAwHwYDVR0j BBgwFoAUOLkHw+LBEM5mOxaEx6rW2FqaDoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UxZWE1MTMtYWM2ZS00YTVmLWIzZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNF MkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1QTlBMEU4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEI5MDdDM0UyQzExMENFNjYzQjE2ODRDN0FBRDZEODVBOUEw RThCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2 RDg1QTlBMEU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECjB7B2HyCKihG+nCEfRjsYflDUjWcDhXJl B+oqWN5JrnYwz2RkhlGktnx+V/cJHB3jNA4HEhkpleAYoNflp8nHRhy9upteEIj0 QRWoL0d7v86yTjBVznHWUjDnhzYew5lRVLwcym6Pitgdlh/7xM3rPQMnM/QMKYoT ep6YcZC4IxTG4FNUJK3r7NFFBcgSsNt8Vpt6B9mJ7Lq1woGKJYbAv6ozSr05aX+y ZRBD/b1JmAPePk80K/7zJ/Oq3PNho7DC/FCKGTQWgGJCBmuL7qgT5AxYEFmL79EV CxTn+jqaijgbVqr+TEtn2O1hmvoVvvP+YoOIV5rgxH2qcJ+qI5w= -----END CERTIFICATE-----Generated at Thu Sep 24 17:20:13 2026 by rpki-client