$ rpki-client -vvf rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft File: 38C91BA9AF338721219232C9918431499404172C.mft (raw, json) Hash identifier: oXL68Uvk6P7YVTaY79GWc9NYYovGIANt06B/hNbo2IA= Subject key identifier: 7B:A1:62:D8:7C:AC:4E:E5:25:CA:CF:E1:34:7D:84:64:13:34:A2:97 Authority key identifier: 38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C Certificate issuer: /CN=38C91BA9AF338721219232C9918431499404172C Certificate serial: 0F722F8CD2878F11DA0CCFCFB8A85F20AC92FF68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:56:32 +0000 Manifest this update: Tue 12 May 2026 05:51:32 +0000 Manifest next update: Wed 13 May 2026 07:19:32 +0000 Files and hashes: 1: 3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (hash: fqwIOY8dFjuWhu5mNkdGZq4kqZXdOIhE1mabARq0Xoc=) 2: 3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (hash: mu8XBJ0C/UdHjFffaiRYLXyHpdMvYTXgCTRd/6Q8yEQ=) 3: 3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (hash: zOWeWT233iCaXUnNmK3rbLFG6s1ycb/WigqBJUoBSfM=) 4: 38C91BA9AF338721219232C9918431499404172C.crl (hash: wWPOJXVHW9wPowreOE27Nms5vc5RnJW9GWPZr1Gs7qM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:72:2f:8c:d2:87:8f:11:da:0c:cf:cf:b8:a8:5f:20:ac:92:ff:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C91BA9AF338721219232C9918431499404172C Validity Not Before: May 12 05:51:32 2026 GMT Not After : May 13 07:19:32 2026 GMT Subject: CN=7BA162D87CAC4EE525CACFE1347D84641334A297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:1f:0e:5c:53:fa:d0:d4:d4:a1:d3:c4:27: 54:54:a1:d8:52:f8:b3:6c:5a:9b:c5:a0:7f:77:91: d8:e2:5a:2b:cf:b8:fa:91:75:55:40:8e:35:b9:25: a6:36:3f:f8:4b:ad:ad:1d:b6:fd:5c:60:90:3b:95: 23:0d:98:ce:e6:33:b3:d1:17:03:85:58:2a:18:6b: a4:ff:02:07:2e:a1:57:cd:bc:da:87:f5:58:e9:27: 1d:2b:48:7c:1b:81:c0:03:6b:bb:3f:b4:67:10:bc: bc:a2:82:0d:9d:70:10:d1:54:92:f2:e4:27:3b:79: 4a:9e:f1:28:25:97:43:7b:76:16:76:40:9a:1b:4f: 3d:3b:b3:f2:dd:ea:1a:44:d3:9d:2b:09:73:c1:e1: 1b:0d:14:3f:a5:66:29:96:75:99:b6:03:3a:89:3f: af:c5:76:a5:86:45:bf:80:3a:ad:40:a1:96:58:62: 96:63:33:e7:46:f2:d0:17:39:8e:86:9d:6e:94:a1: 31:85:9b:dc:bb:42:bc:03:43:d3:6e:55:b4:e5:a4: f9:f6:b7:8d:ae:88:c2:f2:95:63:81:7b:10:3f:2d: ac:ca:3c:88:e9:e5:cd:c5:a7:5f:3b:7b:d0:cd:32: f0:8a:f6:d0:9d:89:cd:7d:83:b2:57:b7:ee:a5:e3: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A1:62:D8:7C:AC:4E:E5:25:CA:CF:E1:34:7D:84:64:13:34:A2:97 X509v3 Authority Key Identifier: keyid:38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:76:d5:d1:90:db:a5:5f:9e:6d:a8:e2:bd:4d:97:0e:3e:3b: 91:f2:68:6f:89:fa:9b:17:4d:a8:0d:7f:e9:1a:b8:88:b5:1b: 27:cb:ba:a2:e5:e9:a2:c4:da:15:0e:ba:ef:c5:4d:18:56:60: 6f:bd:a0:17:3f:c0:ca:85:ad:56:6c:72:11:bb:9b:19:9b:a5: a3:fa:79:70:bb:b7:f8:f6:71:92:3e:4e:ea:8d:b9:ef:a1:a7: 13:c6:7d:39:93:0f:ea:ed:df:48:ef:df:39:a6:34:5e:4f:9a: f4:c3:78:4c:dd:cf:aa:a2:15:6d:ec:3b:53:25:0b:bf:a6:06: c6:48:bf:d5:a2:7b:d6:0c:30:eb:69:ab:73:73:51:93:1e:22: 79:cc:33:87:4f:a3:c4:4f:00:e5:cc:d7:65:cd:be:10:22:86: dc:66:95:61:87:5a:14:b7:88:42:b7:73:fe:b5:d6:76:c9:3a: 57:a5:9f:5e:b7:d8:68:48:06:f0:f8:04:23:b3:4f:7c:e8:f4: fa:83:0c:e0:88:34:6d:f5:42:de:c4:67:3a:38:b1:af:28:40: 60:76:5d:2d:c5:28:16:22:db:e1:f7:e4:4a:77:f8:22:0a:a8: 7a:bd:5f:52:cf:e2:34:c1:f4:9d:64:7b:13:15:42:5a:ac:72: 4e:df:1f:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3IvjNKHjxHaDM/PuKhfIKyS/2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5 NDA0MTcyQzAeFw0yNjA1MTIwNTUxMzJaFw0yNjA1MTMwNzE5MzJaMDMxMTAvBgNV BAMTKDdCQTE2MkQ4N0NBQzRFRTUyNUNBQ0ZFMTM0N0Q4NDY0MTMzNEEyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UR8OXFP60NTUodPEJ1RUodhS +LNsWpvFoH93kdjiWivPuPqRdVVAjjW5JaY2P/hLra0dtv1cYJA7lSMNmM7mM7PR FwOFWCoYa6T/AgcuoVfNvNqH9VjpJx0rSHwbgcADa7s/tGcQvLyigg2dcBDRVJLy 5Cc7eUqe8Sgll0N7dhZ2QJobTz07s/Ld6hpE050rCXPB4RsNFD+lZimWdZm2AzqJ P6/FdqWGRb+AOq1AoZZYYpZjM+dG8tAXOY6GnW6UoTGFm9y7QrwDQ9NuVbTlpPn2 t42uiMLylWOBexA/LazKPIjp5c3Fp187e9DNMvCK9tCdic19g7JXt+6l46htAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe6Fi2HysTuUlys/hNH2EZBM0opcwHwYDVR0j BBgwFoAUOMkbqa8zhyEhkjLJkYQxSZQEFywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTU0MzI0MWItY2ZkMS00Y2JiLTkyMTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlB RjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5NDA0MTcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEM5MUJBOUFGMzM4NzIxMjE5MjMyQzk5MTg0MzE0OTk0MDQx NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky MTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMx NDk5NDA0MTcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACN21dGQ26Vfnm2o4r1Nlw4+O5HyaG+J+psX TagNf+kauIi1GyfLuqLl6aLE2hUOuu/FTRhWYG+9oBc/wMqFrVZschG7mxmbpaP6 eXC7t/j2cZI+TuqNue+hpxPGfTmTD+rt30jv3zmmNF5PmvTDeEzdz6qiFW3sO1Ml C7+mBsZIv9Wie9YMMOtpq3NzUZMeInnMM4dPo8RPAOXM12XNvhAihtxmlWGHWhS3 iEK3c/611nbJOleln1632GhIBvD4BCOzT3zo9PqDDOCING31Qt7EZzo4sa8oQGB2 XS3FKBYi2+H35Ep3+CIKqHq9X1LP4jTB9J1kexMVQlqsck7fHz0= -----END CERTIFICATE-----Generated at Wed May 13 00:53:59 2026 by rpki-client