$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft File: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft (raw, json) Hash identifier: sZKtQilC8OpTJRViD6QeA2s0VgFXsJxUpSgc7BDN/Wg= Subject key identifier: 72:94:17:1D:47:68:08:86:7D:30:5D:DA:24:5F:9E:3A:1A:34:65:27 Authority key identifier: 38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 Certificate issuer: /CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Certificate serial: 0CFA079B6546F83A7EAE299E66A9D0CE44FB2016 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 04:19:26 +0000 Manifest this update: Sun 15 Nov 2026 04:14:26 +0000 Manifest next update: Mon 16 Nov 2026 05:24:26 +0000 Files and hashes: 1: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl (hash: zw7iinBScVW+6uF1AVvu3+TmHTAn2Cl5VrH0KMrprSY=) 2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: oNAyYs1M4vvZUL8ZRq7sx5Uf/aJwxuSkl8dJpKgZM5c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:fa:07:9b:65:46:f8:3a:7e:ae:29:9e:66:a9:d0:ce:44:fb:20:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Validity Not Before: Nov 15 04:14:26 2026 GMT Not After : Nov 16 05:24:26 2026 GMT Subject: CN=7294171D476808867D305DDA245F9E3A1A346527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:1c:da:e4:40:b9:50:d2:99:fe:37:bb:a9: e5:21:c6:a3:1e:89:ad:20:d0:81:36:2f:ba:2b:d6: c5:47:ab:3c:77:18:a0:a7:44:6f:9a:a8:92:d5:24: 90:58:3b:1d:3d:da:2b:45:82:11:58:97:c4:34:56: 84:4c:fc:90:12:95:00:da:cb:4a:d0:9e:16:cf:24: a8:e2:87:f6:10:63:47:e1:22:94:87:bc:5e:f9:5c: 41:47:1b:66:68:31:c2:fb:87:99:cc:bf:38:9f:2e: 98:0b:1d:b2:b3:68:9a:6a:51:9b:37:26:ca:fc:9b: 0c:a2:46:0c:cf:87:6a:f3:02:ce:ce:cc:1e:b0:99: cd:cb:de:7e:af:22:15:74:55:35:3f:f7:6d:76:24: eb:a7:43:5d:7f:fc:aa:1d:cb:cd:7c:65:49:db:01: 63:26:4f:04:2c:fe:29:d7:c8:fe:a9:3d:73:07:92: 85:e6:63:f3:5e:14:7a:fa:cc:d7:68:e1:de:55:3a: 4d:18:8c:03:92:9d:e8:75:8e:cb:e6:db:8c:1a:9c: ec:34:ce:53:b8:29:14:15:a2:d5:a8:fb:53:15:b8: 8f:b5:dc:8e:29:f7:c0:20:d1:70:1a:a9:78:74:7c: 59:04:b1:a3:94:ee:5f:95:d9:59:dc:61:25:26:68: 9c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:94:17:1D:47:68:08:86:7D:30:5D:DA:24:5F:9E:3A:1A:34:65:27 X509v3 Authority Key Identifier: keyid:38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:37:9e:d7:4a:0e:61:a5:5a:29:47:ee:d4:84:08:b5:31:ab: 32:ca:19:b0:97:b9:c8:11:10:a8:e1:57:1c:d2:ef:e5:8d:58: 88:6f:1c:b1:0f:98:12:13:2c:ed:f3:2f:59:c1:b3:10:df:e5: 4b:83:8f:1d:79:ce:53:b3:23:96:07:20:d7:bf:13:ba:f9:9b: 32:cc:6b:b6:eb:1f:46:2a:4a:b4:b2:63:fc:31:bd:5e:26:a4: 9a:03:4e:23:7e:6a:64:91:36:02:45:71:64:50:0b:f7:82:ea: ed:d2:38:7a:19:ca:00:5e:3f:37:ef:b1:13:2f:18:0e:46:a1: e8:1d:9b:b3:09:66:0d:c7:f7:41:83:c5:7a:20:e0:47:e2:b8: 94:da:b3:43:86:f5:f4:f5:36:df:6f:d0:04:5e:d0:7c:7a:68: 7b:32:92:c4:14:07:d1:95:1c:50:b8:6e:ce:46:bb:fd:b8:f4: 66:a4:c9:b1:b4:23:ab:95:78:4b:25:cf:08:1b:6d:32:1b:e2: d2:75:4d:98:31:10:a3:4a:00:52:03:50:16:e7:95:bb:d8:a2: 02:2e:f9:60:3e:54:87:e7:35:84:cb:3d:39:d9:7e:0b:df:83: 59:20:2b:9f:1a:c8:d2:cd:47:b5:14:a0:1f:89:3c:c1:0c:55: 40:71:09:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPoHm2VG+Dp+rimeZqnQzkT7IBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4 RkNBRjExMDAeFw0yNjExMTUwNDE0MjZaFw0yNjExMTYwNTI0MjZaMDMxMTAvBgNV BAMTKDcyOTQxNzFENDc2ODA4ODY3RDMwNUREQTI0NUY5RTNBMUEzNDY1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeBhza5EC5UNKZ/je7qeUhxqMe ia0g0IE2L7or1sVHqzx3GKCnRG+aqJLVJJBYOx092itFghFYl8Q0VoRM/JASlQDa y0rQnhbPJKjih/YQY0fhIpSHvF75XEFHG2ZoMcL7h5nMvzifLpgLHbKzaJpqUZs3 Jsr8mwyiRgzPh2rzAs7OzB6wmc3L3n6vIhV0VTU/9212JOunQ11//Kody818ZUnb AWMmTwQs/inXyP6pPXMHkoXmY/NeFHr6zNdo4d5VOk0YjAOSneh1jsvm24wanOw0 zlO4KRQVotWo+1MVuI+13I4p98Ag0XAaqXh0fFkEsaOU7l+V2VncYSUmaJx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcpQXHUdoCIZ9MF3aJF+eOho0ZScwHwYDVR0j BBgwFoAUOMhYlQvLVN6ulInuPAU7Wo/K8RAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFiMjY3YTQtNTAzMC00YTRmLWJiODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUw QkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4RkNBRjExMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zOEM4NTg5NTBCQ0I1NERFQUU5NDg5RUUzQzA1M0I1QThGQ0FG MTEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNC NUE4RkNBRjExMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEw3ntdKDmGlWilH7tSECLUxqzLKGbCXucgR EKjhVxzS7+WNWIhvHLEPmBITLO3zL1nBsxDf5UuDjx15zlOzI5YHINe/E7r5mzLM a7brH0YqSrSyY/wxvV4mpJoDTiN+amSRNgJFcWRQC/eC6u3SOHoZygBePzfvsRMv GA5Goegdm7MJZg3H90GDxXog4EfiuJTas0OG9fT1Nt9v0ARe0Hx6aHsyksQUB9GV HFC4bs5Gu/249GakybG0I6uVeEslzwgbbTIb4tJ1TZgxEKNKAFIDUBbnlbvYogIu +WA+VIfnNYTLPTnZfgvfg1kgK58ayNLNR7UUoB+JPMEMVUBxCRI= -----END CERTIFICATE-----Generated at Sun Nov 15 19:17:10 2026 by rpki-client