$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft File: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft (raw, json) Hash identifier: WXSjgPcMngHtenN/E4hdLe67AhBWk1mlK8QBN5Np7GE= Subject key identifier: 63:BB:BD:0F:09:F1:08:8B:E6:43:7C:B9:0F:21:16:16:93:92:CB:53 Authority key identifier: 38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 Certificate issuer: /CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Certificate serial: 26AC531FB79C573DD0B1E6D11419C006945120F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 10:18:52 +0000 Manifest this update: Wed 23 Sep 2026 10:13:52 +0000 Manifest next update: Thu 24 Sep 2026 11:08:52 +0000 Files and hashes: 1: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl (hash: shwhpe7/PSh+3cVopiwAeY++gh0BaUkYKRc+NnO/VBA=) 2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: oNAyYs1M4vvZUL8ZRq7sx5Uf/aJwxuSkl8dJpKgZM5c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ac:53:1f:b7:9c:57:3d:d0:b1:e6:d1:14:19:c0:06:94:51:20:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Validity Not Before: Sep 23 10:13:52 2026 GMT Not After : Sep 24 11:08:52 2026 GMT Subject: CN=63BBBD0F09F1088BE6437CB90F2116169392CB53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bb:31:b2:a6:42:1d:f1:c0:09:e8:50:78:13: a6:49:27:f2:65:5e:3a:ae:7b:6e:e2:75:83:23:ea: 28:16:00:e7:c3:22:ba:ed:d8:7c:37:d6:54:af:e0: 05:59:a8:77:33:5f:24:71:4f:d9:a2:a5:93:ee:53: fc:80:1d:46:31:43:38:8e:64:db:7d:47:85:4b:e4: df:f5:19:71:58:88:af:54:02:d9:b8:fa:36:db:ea: c1:4c:15:c2:05:2c:fa:48:84:5d:20:e8:3b:4f:a4: 51:ba:f3:5a:7c:fd:78:b2:59:0c:ee:13:ad:98:c3: 1b:45:28:32:3c:72:82:af:c1:e9:ea:ed:b0:ac:92: dc:63:e8:e1:1a:96:56:28:4d:4b:59:da:52:40:ae: a2:5d:41:d7:a1:66:00:62:72:4d:a8:62:bf:c1:76: 55:41:72:98:99:a8:00:03:7b:6f:6b:ce:33:29:0a: eb:6e:35:0a:14:5a:de:79:4a:35:79:16:18:35:0b: 47:59:7c:64:1b:cc:74:7d:69:29:e5:3c:83:8b:5c: 51:b9:ba:b7:a0:bb:f4:be:c6:36:3e:2b:ca:f2:34: 73:86:83:99:45:16:59:4d:82:93:16:f8:f0:fc:63: 68:7f:40:e3:20:3e:5f:98:66:a4:b0:32:05:2c:62: 99:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BB:BD:0F:09:F1:08:8B:E6:43:7C:B9:0F:21:16:16:93:92:CB:53 X509v3 Authority Key Identifier: keyid:38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:89:23:5c:69:3e:02:4b:f7:1f:29:eb:31:83:0b:52:59:b9: d2:d4:80:15:b9:69:c7:2f:f0:e6:94:62:ba:dd:f3:5a:d3:b5: da:9f:26:8a:28:26:83:31:b5:40:08:b6:c1:fd:12:8b:5b:d1: b3:e6:e2:5b:64:77:6b:a7:17:28:73:65:2d:83:83:92:f7:11: 95:de:e8:4d:47:63:f2:d1:3c:4c:32:e1:6e:a0:cd:5b:6d:7f: 1c:2f:4f:f7:91:6b:cb:d9:87:89:8c:9a:0e:fd:c3:41:61:02: 2f:1c:b4:93:05:36:f2:77:2b:8b:6c:c4:95:6a:1c:81:a8:75: 42:23:ad:04:ad:04:31:dd:70:c6:97:22:99:92:f8:8f:c1:b5: 40:aa:09:c5:b3:a9:68:80:3c:7b:8e:d6:8e:b3:5a:68:57:0d: f8:35:5c:6d:26:3a:52:6f:11:49:a9:17:1c:cb:57:4f:a1:a8: 07:a8:1b:47:6f:fa:43:98:21:d3:da:59:1c:fb:fd:0b:23:f1: ba:f9:33:0b:42:05:41:a0:18:6a:96:14:c7:22:e8:32:73:c6: a8:d4:9f:50:96:8d:e0:f3:87:85:38:8d:3e:1a:a2:08:d0:31: 09:eb:2a:d4:91:06:d8:71:87:d2:c5:11:23:34:fc:9d:f7:ac: 16:67:cb:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJqxTH7ecVz3QsebRFBnABpRRIPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4 RkNBRjExMDAeFw0yNjA5MjMxMDEzNTJaFw0yNjA5MjQxMTA4NTJaMDMxMTAvBgNV BAMTKDYzQkJCRDBGMDlGMTA4OEJFNjQzN0NCOTBGMjExNjE2OTM5MkNCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLuzGypkId8cAJ6FB4E6ZJJ/Jl Xjque27idYMj6igWAOfDIrrt2Hw31lSv4AVZqHczXyRxT9mipZPuU/yAHUYxQziO ZNt9R4VL5N/1GXFYiK9UAtm4+jbb6sFMFcIFLPpIhF0g6DtPpFG681p8/XiyWQzu E62YwxtFKDI8coKvwenq7bCsktxj6OEallYoTUtZ2lJArqJdQdehZgBick2oYr/B dlVBcpiZqAADe29rzjMpCutuNQoUWt55SjV5Fhg1C0dZfGQbzHR9aSnlPIOLXFG5 uregu/S+xjY+K8ryNHOGg5lFFllNgpMW+PD8Y2h/QOMgPl+YZqSwMgUsYpm/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY7u9DwnxCIvmQ3y5DyEWFpOSy1MwHwYDVR0j BBgwFoAUOMhYlQvLVN6ulInuPAU7Wo/K8RAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFiMjY3YTQtNTAzMC00YTRmLWJiODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUw QkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4RkNBRjExMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zOEM4NTg5NTBCQ0I1NERFQUU5NDg5RUUzQzA1M0I1QThGQ0FG MTEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNC NUE4RkNBRjExMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCJI1xpPgJL9x8p6zGDC1JZudLUgBW5accv 8OaUYrrd81rTtdqfJoooJoMxtUAItsH9Eotb0bPm4ltkd2unFyhzZS2Dg5L3EZXe 6E1HY/LRPEwy4W6gzVttfxwvT/eRa8vZh4mMmg79w0FhAi8ctJMFNvJ3K4tsxJVq HIGodUIjrQStBDHdcMaXIpmS+I/BtUCqCcWzqWiAPHuO1o6zWmhXDfg1XG0mOlJv EUmpFxzLV0+hqAeoG0dv+kOYIdPaWRz7/Qsj8br5MwtCBUGgGGqWFMci6DJzxqjU n1CWjeDzh4U4jT4aogjQMQnrKtSRBthxh9LFESM0/J33rBZny7Q= -----END CERTIFICATE-----Generated at Thu Sep 24 03:54:41 2026 by rpki-client