$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft File: 38C91BA9AF338721219232C9918431499404172C.mft (raw, json) Hash identifier: +FuXOC0sCYimkEK8HqEMs6aUZb1PwUrvX1rKDzFniAA= Subject key identifier: E8:FD:24:31:42:9C:A7:90:B2:CE:6E:10:B7:6C:F0:E3:D8:23:68:CE Authority key identifier: 38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C Certificate issuer: /CN=38C91BA9AF338721219232C9918431499404172C Certificate serial: 79DBD3DF5ED3A5EECAB39C4C471791737AFA282B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:04:27 +0000 Manifest this update: Thu 24 Sep 2026 14:59:27 +0000 Manifest next update: Fri 25 Sep 2026 18:32:27 +0000 Files and hashes: 1: 38C91BA9AF338721219232C9918431499404172C.crl (hash: 28FHXjAaPGCvT9mn8ll4CIBtIw0BhIjnieoietus4Ks=) 2: 3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (hash: mu8XBJ0C/UdHjFffaiRYLXyHpdMvYTXgCTRd/6Q8yEQ=) 3: 3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (hash: fqwIOY8dFjuWhu5mNkdGZq4kqZXdOIhE1mabARq0Xoc=) 4: 3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (hash: zOWeWT233iCaXUnNmK3rbLFG6s1ycb/WigqBJUoBSfM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:db:d3:df:5e:d3:a5:ee:ca:b3:9c:4c:47:17:91:73:7a:fa:28:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C91BA9AF338721219232C9918431499404172C Validity Not Before: Sep 24 14:59:27 2026 GMT Not After : Sep 25 18:32:27 2026 GMT Subject: CN=E8FD2431429CA790B2CE6E10B76CF0E3D82368CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:44:48:32:0e:a9:a6:85:67:a6:31:a2:c7: a7:01:e1:07:58:ba:ed:eb:d4:0b:d3:0d:5e:55:b9: 56:07:af:25:6a:79:de:63:39:4b:94:0b:c9:29:d5: 07:6e:e3:60:7d:9e:5b:df:e2:8c:5c:7c:c4:41:ef: 0f:3b:f7:6c:cf:f2:6b:f7:df:67:bc:62:02:de:04: 1a:65:7a:1f:60:04:a1:78:7b:06:53:75:6f:1c:66: 5a:dc:f1:2d:d0:25:5b:8b:37:14:fe:ea:cd:13:f0: e9:f2:15:42:77:be:82:10:0f:d3:ea:79:e0:39:18: 86:bb:ed:91:05:9c:bd:c3:6b:65:73:35:08:08:b2: c8:ec:8e:1b:26:89:7e:24:b8:b6:ed:bd:df:da:47: 89:1b:ec:ff:e3:3f:f8:47:58:91:3d:e6:4e:3f:79: 44:99:dd:6b:bc:13:62:33:f3:78:dd:d4:65:f6:6c: 47:90:86:f7:12:84:e8:23:9c:24:13:30:51:68:e4: e2:ec:42:9d:a6:e1:a2:d9:e2:d6:c8:f0:57:90:e8: 81:69:d2:dd:84:0f:f0:bd:e3:1e:b9:69:4c:87:74: a4:df:df:67:c5:72:de:e8:d1:0d:73:5e:bc:46:59: bf:d0:4c:dc:15:3f:89:87:54:28:f3:5e:6a:b8:b0: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FD:24:31:42:9C:A7:90:B2:CE:6E:10:B7:6C:F0:E3:D8:23:68:CE X509v3 Authority Key Identifier: keyid:38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:68:1a:c4:40:40:e1:ce:0a:da:2c:28:45:e0:30:3a:c4:88: c3:f2:1b:33:e3:c0:ab:69:8b:8e:e7:3c:43:1a:cb:ea:41:f6: 8a:ee:dd:54:53:85:ba:ff:48:30:f1:88:2a:69:21:31:be:85: f9:25:a6:11:aa:10:e9:ce:f0:25:b9:e6:0e:18:59:1f:ac:7d: 8e:48:f4:03:8a:2c:aa:1d:eb:14:df:48:8f:24:fc:4e:ec:e0: 49:57:52:36:60:93:ff:23:b4:66:3d:e9:9e:82:01:bd:97:b4: d1:78:d5:24:38:c9:53:b2:df:84:b3:32:ac:80:3a:ef:ad:c1: 2c:7b:08:45:e5:c9:dd:8a:21:fe:f9:4b:32:14:5f:fc:c5:e3: aa:bf:ed:c1:89:e1:41:ca:f2:ed:7d:d4:6d:a8:98:4e:52:8e: 77:65:74:91:0e:b1:fe:ec:17:62:1a:a4:42:29:f3:67:bb:8a: b3:8b:cb:b8:21:a6:c6:9c:eb:1c:04:b1:32:c5:1e:21:9e:b3: 57:c3:78:06:1a:95:8e:64:03:1c:17:8c:8e:8f:f4:5f:13:f6: 50:2c:38:f8:99:32:af:a3:a6:7a:2a:18:1d:da:eb:4c:fb:1f: 26:17:c2:b3:9a:2a:76:52:10:e8:b0:ca:25:a5:c4:a5:1b:10: 47:f6:7d:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUedvT317Tpe7Ks5xMRxeRc3r6KCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5 NDA0MTcyQzAeFw0yNjA5MjQxNDU5MjdaFw0yNjA5MjUxODMyMjdaMDMxMTAvBgNV BAMTKEU4RkQyNDMxNDI5Q0E3OTBCMkNFNkUxMEI3NkNGMEUzRDgyMzY4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCns0RIMg6ppoVnpjGix6cB4QdY uu3r1AvTDV5VuVYHryVqed5jOUuUC8kp1Qdu42B9nlvf4oxcfMRB7w8792zP8mv3 32e8YgLeBBpleh9gBKF4ewZTdW8cZlrc8S3QJVuLNxT+6s0T8OnyFUJ3voIQD9Pq eeA5GIa77ZEFnL3Da2VzNQgIssjsjhsmiX4kuLbtvd/aR4kb7P/jP/hHWJE95k4/ eUSZ3Wu8E2Iz83jd1GX2bEeQhvcShOgjnCQTMFFo5OLsQp2m4aLZ4tbI8FeQ6IFp 0t2ED/C94x65aUyHdKTf32fFct7o0Q1zXrxGWb/QTNwVP4mHVCjzXmq4sI8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6P0kMUKcp5Cyzm4Qt2zw49gjaM4wHwYDVR0j BBgwFoAUOMkbqa8zhyEhkjLJkYQxSZQEFywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTU0MzI0MWItY2ZkMS00Y2JiLTkyMTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlB RjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5NDA0MTcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEM5MUJBOUFGMzM4NzIxMjE5MjMyQzk5MTg0MzE0OTk0MDQx NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky MTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMx NDk5NDA0MTcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABloGsRAQOHOCtosKEXgMDrEiMPyGzPjwKtp i47nPEMay+pB9oru3VRThbr/SDDxiCppITG+hfklphGqEOnO8CW55g4YWR+sfY5I 9AOKLKod6xTfSI8k/E7s4ElXUjZgk/8jtGY96Z6CAb2XtNF41SQ4yVOy34SzMqyA Ou+twSx7CEXlyd2KIf75SzIUX/zF46q/7cGJ4UHK8u191G2omE5SjndldJEOsf7s F2IapEIp82e7irOLy7ghpsac6xwEsTLFHiGes1fDeAYalY5kAxwXjI6P9F8T9lAs OPiZMq+jpnoqGB3a60z7HyYXwrOaKnZSEOiwyiWlxKUbEEf2fWA= -----END CERTIFICATE-----Generated at Fri Sep 25 02:51:52 2026 by rpki-client