$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft File: 38C91BA9AF338721219232C9918431499404172C.mft (raw, json) Hash identifier: NmtEdekFW1r58WpGHuR4Hb70qCCT72yjwdKEW9bltvY= Subject key identifier: 5E:C1:40:F6:55:DF:3C:E7:6E:E6:28:F4:0B:2A:67:43:94:80:93:DA Authority key identifier: 38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C Certificate issuer: /CN=38C91BA9AF338721219232C9918431499404172C Certificate serial: 34A7FD57AC0EE64791D86897A9F825674C2E8EBF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:12:13 +0000 Manifest this update: Wed 23 Sep 2026 21:07:13 +0000 Manifest next update: Thu 24 Sep 2026 23:01:13 +0000 Files and hashes: 1: 3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (hash: zOWeWT233iCaXUnNmK3rbLFG6s1ycb/WigqBJUoBSfM=) 2: 38C91BA9AF338721219232C9918431499404172C.crl (hash: oGndZFg4nTLysd9uoLlEL4i4E75Gebr8mrC5YltbaFY=) 3: 3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (hash: mu8XBJ0C/UdHjFffaiRYLXyHpdMvYTXgCTRd/6Q8yEQ=) 4: 3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (hash: fqwIOY8dFjuWhu5mNkdGZq4kqZXdOIhE1mabARq0Xoc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a7:fd:57:ac:0e:e6:47:91:d8:68:97:a9:f8:25:67:4c:2e:8e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C91BA9AF338721219232C9918431499404172C Validity Not Before: Sep 23 21:07:13 2026 GMT Not After : Sep 24 23:01:13 2026 GMT Subject: CN=5EC140F655DF3CE76EE628F40B2A6743948093DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:d8:2e:cf:ed:c7:44:46:f0:13:f8:b0:35: 70:d5:86:dd:de:b8:6a:21:70:ce:2b:47:1f:5f:af: 8c:a9:fe:b2:47:1f:5b:60:7e:91:eb:17:db:2a:ab: 32:3a:8c:ef:bf:29:ae:4b:3d:8f:e2:fe:63:fa:a3: ac:79:7e:3d:e4:a2:64:54:1a:50:dd:75:a7:85:28: a7:a4:fe:bd:af:51:c6:7f:fc:97:5f:02:e2:68:1e: 49:32:db:9d:ca:04:59:d7:98:7c:52:ec:fd:4e:24: db:e9:8d:0c:5a:b7:97:49:55:e0:17:6b:5b:89:bf: 84:22:b5:17:d4:09:31:89:43:77:ed:a1:6d:04:3e: 96:3a:b4:f2:f4:55:6d:74:1d:66:db:21:8f:0f:5f: 25:63:79:dc:4d:ba:39:2e:4b:ac:17:8a:30:9f:39: 4e:df:dd:51:c6:be:67:e0:71:a0:98:20:43:54:d5: d3:85:22:d0:12:42:c3:23:c9:76:a0:51:df:07:f3: 5a:e2:b1:48:8b:88:a6:23:88:a2:31:05:6b:e2:e3: 48:2b:39:cf:c1:42:1b:a3:f0:31:a7:e8:d9:56:45: cf:5d:d9:17:a6:f9:b9:e4:b9:ba:26:ea:37:ef:8b: c6:61:a6:06:94:e3:a8:42:9b:7b:48:b8:e4:e8:1f: 2a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C1:40:F6:55:DF:3C:E7:6E:E6:28:F4:0B:2A:67:43:94:80:93:DA X509v3 Authority Key Identifier: keyid:38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:90:d1:19:f2:bd:31:ea:30:36:e6:02:b0:02:e7:fa:f5:90: 5c:8c:7a:f8:08:de:76:6c:63:1d:03:86:cf:af:6f:cd:33:f8: 11:c6:ea:ae:79:5e:fd:ad:0c:13:8a:b0:07:61:34:a8:7e:db: c3:09:d9:eb:85:02:63:77:a6:59:f8:8d:4f:97:cd:0b:52:62: 81:fa:b1:c3:76:ad:d3:7a:63:1d:a1:59:8c:9e:6f:12:73:55: 62:5c:fe:4e:61:c1:09:2d:87:f2:cb:f6:87:f8:36:09:79:b2: e2:f9:67:e6:27:87:b4:04:8a:f8:f9:9f:ba:5a:da:ec:83:ee: 3d:97:bb:d8:c1:ca:00:b7:6d:b0:4c:98:11:2b:98:54:83:30: 9e:92:7b:de:f0:ab:00:bc:43:30:73:38:10:b6:0a:a3:38:9e: 7d:7f:19:a0:9c:24:f7:5f:8b:c9:7c:8a:e9:f0:08:42:c4:c6: 5a:f6:6e:b9:61:64:84:c5:9e:84:90:f0:ee:9b:99:5d:4f:ac: 6d:9d:06:4e:73:1d:a1:dd:5a:b5:f4:2e:ce:8f:ed:77:d5:f0: fc:32:f1:ac:ea:05:bf:1f:6b:72:20:46:19:c0:5b:fc:f5:d3: f4:c6:62:8e:9d:f9:8a:ce:58:5c:14:6e:ad:4e:a7:9d:f9:1e: 3d:11:a5:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKf9V6wO5keR2GiXqfglZ0wujr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5 NDA0MTcyQzAeFw0yNjA5MjMyMTA3MTNaFw0yNjA5MjQyMzAxMTNaMDMxMTAvBgNV BAMTKDVFQzE0MEY2NTVERjNDRTc2RUU2MjhGNDBCMkE2NzQzOTQ4MDkzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbdguz+3HREbwE/iwNXDVht3e uGohcM4rRx9fr4yp/rJHH1tgfpHrF9sqqzI6jO+/Ka5LPY/i/mP6o6x5fj3komRU GlDddaeFKKek/r2vUcZ//JdfAuJoHkky253KBFnXmHxS7P1OJNvpjQxat5dJVeAX a1uJv4QitRfUCTGJQ3ftoW0EPpY6tPL0VW10HWbbIY8PXyVjedxNujkuS6wXijCf OU7f3VHGvmfgcaCYIENU1dOFItASQsMjyXagUd8H81risUiLiKYjiKIxBWvi40gr Oc/BQhuj8DGn6NlWRc9d2Rem+bnkubom6jfvi8ZhpgaU46hCm3tIuOToHyp7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXsFA9lXfPOdu5ij0CypnQ5SAk9owHwYDVR0j BBgwFoAUOMkbqa8zhyEhkjLJkYQxSZQEFywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTU0MzI0MWItY2ZkMS00Y2JiLTkyMTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlB RjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5NDA0MTcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEM5MUJBOUFGMzM4NzIxMjE5MjMyQzk5MTg0MzE0OTk0MDQx NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky MTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMx NDk5NDA0MTcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOQ0RnyvTHqMDbmArAC5/r1kFyMevgI3nZs Yx0Dhs+vb80z+BHG6q55Xv2tDBOKsAdhNKh+28MJ2euFAmN3pln4jU+XzQtSYoH6 scN2rdN6Yx2hWYyebxJzVWJc/k5hwQkth/LL9of4Ngl5suL5Z+Ynh7QEivj5n7pa 2uyD7j2Xu9jBygC3bbBMmBErmFSDMJ6Se97wqwC8QzBzOBC2CqM4nn1/GaCcJPdf i8l8iunwCELExlr2brlhZITFnoSQ8O6bmV1PrG2dBk5zHaHdWrX0Ls6P7XfV8Pwy 8azqBb8fa3IgRhnAW/z10/TGYo6d+YrOWFwUbq1Op535Hj0RpTA= -----END CERTIFICATE-----Generated at Thu Sep 24 00:57:54 2026 by rpki-client