$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft File: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft (raw, json) Hash identifier: 8SYf9QXgOJkR4ExfNXW1uQgTa9JbdhXRsLyrtvShW6E= Subject key identifier: 78:3E:43:8D:F5:D0:57:DE:4B:12:26:3D:30:38:5E:CA:12:4F:ED:4A Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Certificate serial: 7FB92458902C9574CBDB2FD40BAC8EE379500D02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 12:19:48 +0000 Manifest this update: Sat 14 Nov 2026 12:14:48 +0000 Manifest next update: Sun 15 Nov 2026 16:09:48 +0000 Files and hashes: 1: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: +hu0CwIQk5R0Cx8ZxKSynMp86E6i1MoIZ/GUTrtz3uk=) 2: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl (hash: ScbKepPvAxxIYhrWQXbwaj0l8LXnHDzdN7FzZp6MEu0=) 3: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: ObskdzHhJM5YPi+vb1AkQ8nGE9gX1uyY1inXWD6vNXo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 16:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b9:24:58:90:2c:95:74:cb:db:2f:d4:0b:ac:8e:e3:79:50:0d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Validity Not Before: Nov 14 12:14:48 2026 GMT Not After : Nov 15 16:09:48 2026 GMT Subject: CN=783E438DF5D057DE4B12263D30385ECA124FED4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:be:bc:4b:8f:c0:c6:55:b0:a3:07:bb:4d: e5:52:e2:a3:3c:43:8e:fc:df:91:05:b3:4f:0d:c3: bf:88:3c:c0:e7:11:d9:d4:c5:61:87:5b:5a:97:0a: 9a:2c:38:c1:68:a8:0a:2e:1e:89:3a:9e:ea:9f:d2: cb:8d:18:91:42:75:50:e8:18:d0:75:8b:e3:09:5a: 84:91:67:57:04:6b:45:51:41:24:d6:0b:a4:bd:8c: 5c:68:1e:45:16:ff:60:a8:1b:4e:d1:95:8f:4e:ab: d5:cd:5c:5b:47:b5:6e:63:e7:a3:db:8c:a3:96:25: f8:e3:1b:b1:51:13:21:18:59:c2:2e:6c:7a:79:70: 5d:32:0d:e4:88:b3:bf:46:c1:b3:fa:89:4c:0e:e5: ab:9c:68:39:ac:87:c7:18:24:ff:92:7c:8a:bd:bf: 62:37:85:7a:ef:e1:d0:40:fd:6e:e3:9f:11:6c:b2: a8:b6:aa:b9:48:0d:07:56:b0:1e:a9:58:95:54:b0: 96:95:3c:d8:50:a0:2f:de:96:82:b5:78:6a:c0:7f: 7e:5a:22:8d:62:60:9f:68:e6:1f:35:99:d8:3c:e0: 3a:4b:06:9b:0b:28:82:b3:e9:fc:65:54:56:80:97: 89:f3:b2:06:eb:78:b1:09:9a:06:25:0b:54:40:b4: 03:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3E:43:8D:F5:D0:57:DE:4B:12:26:3D:30:38:5E:CA:12:4F:ED:4A X509v3 Authority Key Identifier: keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ae:c0:20:47:91:01:fd:f4:0d:fa:83:24:46:dc:2d:10:71: 4c:76:f2:1c:d7:27:6a:8b:dd:6b:ce:57:5b:ed:f0:5d:02:91: 1a:f3:f7:b3:52:40:75:1d:c3:17:0f:2d:91:a4:c7:c4:63:10: bb:fe:1d:9e:68:d7:f0:af:02:e3:a0:9b:4a:19:9d:4a:d4:8b: 75:a4:73:4e:32:ff:ba:e6:ca:6b:73:eb:09:f8:e9:b5:43:a9: 51:74:61:5e:2a:66:bd:d6:2d:6b:49:18:ce:83:8a:08:35:df: 3a:d9:cb:7f:41:ef:bb:4f:40:27:00:a9:b1:f5:86:d3:1b:96: 8c:44:d4:25:85:a5:1c:4c:11:cf:24:be:44:a9:66:bd:db:ef: c1:7b:af:24:f5:67:fc:cb:c3:18:1f:9c:f6:d4:30:e1:b7:4f: 40:9f:56:05:d0:7d:30:94:ec:8e:e0:a8:77:71:3f:18:23:68: fc:8e:0f:bc:73:ce:c4:f0:43:38:76:f5:61:c5:cf:12:e0:92: 15:58:cd:23:d7:a1:6a:37:e2:b5:80:c5:d2:8d:1f:73:5d:47: 05:90:9f:55:2a:33:f4:c6:a4:c4:bb:91:9c:74:79:3c:f0:d6: 02:93:75:f9:75:7f:12:11:1a:be:be:03:92:01:d6:15:93:b6: b7:d4:7a:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7kkWJAslXTL2y/UC6yO43lQDQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1 QTlBMEU4QjAeFw0yNjExMTQxMjE0NDhaFw0yNjExMTUxNjA5NDhaMDMxMTAvBgNV BAMTKDc4M0U0MzhERjVEMDU3REU0QjEyMjYzRDMwMzg1RUNBMTI0RkVENEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZL68S4/AxlWwowe7TeVS4qM8 Q47835EFs08Nw7+IPMDnEdnUxWGHW1qXCposOMFoqAouHok6nuqf0suNGJFCdVDo GNB1i+MJWoSRZ1cEa0VRQSTWC6S9jFxoHkUW/2CoG07RlY9Oq9XNXFtHtW5j56Pb jKOWJfjjG7FREyEYWcIubHp5cF0yDeSIs79GwbP6iUwO5aucaDmsh8cYJP+SfIq9 v2I3hXrv4dBA/W7jnxFssqi2qrlIDQdWsB6pWJVUsJaVPNhQoC/eloK1eGrAf35a Io1iYJ9o5h81mdg84DpLBpsLKIKz6fxlVFaAl4nzsgbreLEJmgYlC1RAtANZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeD5DjfXQV95LEiY9MDheyhJP7UowHwYDVR0j BBgwFoAUOLkHw+LBEM5mOxaEx6rW2FqaDoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UxZWE1MTMtYWM2ZS00YTVmLWIzZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNF MkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1QTlBMEU4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEI5MDdDM0UyQzExMENFNjYzQjE2ODRDN0FBRDZEODVBOUEw RThCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2 RDg1QTlBMEU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSuwCBHkQH99A36gyRG3C0QcUx28hzXJ2qL 3WvOV1vt8F0CkRrz97NSQHUdwxcPLZGkx8RjELv+HZ5o1/CvAuOgm0oZnUrUi3Wk c04y/7rmymtz6wn46bVDqVF0YV4qZr3WLWtJGM6Digg13zrZy39B77tPQCcAqbH1 htMbloxE1CWFpRxMEc8kvkSpZr3b78F7ryT1Z/zLwxgfnPbUMOG3T0CfVgXQfTCU 7I7gqHdxPxgjaPyOD7xzzsTwQzh29WHFzxLgkhVYzSPXoWo34rWAxdKNH3NdRwWQ n1UqM/TGpMS7kZx0eTzw1gKTdfl1fxIRGr6+A5IB1hWTtrfUetM= -----END CERTIFICATE-----Generated at Sun Nov 15 08:02:50 2026 by rpki-client