$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft File: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft (raw, json) Hash identifier: +9NcF6oDDb4ij79GSvwnwiAVQV1eB8K/ucCNn1Y0IVw= Subject key identifier: D6:1E:68:29:14:09:A6:94:6D:F2:DD:ED:4F:DE:57:BE:B1:E7:DD:7F Authority key identifier: 38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 Certificate issuer: /CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Certificate serial: 2747C4BBF8FF8974B105C05FC7AF39EB0D44F484 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:56:32 +0000 Manifest this update: Tue 12 May 2026 22:51:32 +0000 Manifest next update: Thu 14 May 2026 01:16:32 +0000 Files and hashes: 1: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: oNAyYs1M4vvZUL8ZRq7sx5Uf/aJwxuSkl8dJpKgZM5c=) 2: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl (hash: 09iXldq6njLImv7z4vk6lcSMQVfXitTlvl9aKcjAmRA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:47:c4:bb:f8:ff:89:74:b1:05:c0:5f:c7:af:39:eb:0d:44:f4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Validity Not Before: May 12 22:51:32 2026 GMT Not After : May 14 01:16:32 2026 GMT Subject: CN=D61E68291409A6946DF2DDED4FDE57BEB1E7DD7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:4d:dc:ff:26:ec:ad:4f:6f:4d:8c:3d:a0: 5e:9e:b8:2a:42:7b:a8:6d:3d:c9:45:bc:83:88:97: c7:6c:0d:27:f7:ff:a3:f8:b5:21:16:04:9c:84:46: 0f:e1:f7:2c:0f:9c:93:fc:58:cf:63:39:8f:21:49: 9b:27:b8:67:08:7b:75:39:f7:23:24:65:cb:45:78: c8:f2:0a:5c:76:d1:db:f1:56:b4:db:54:03:bf:38: 0a:94:7f:61:23:a6:5f:e7:b3:80:b8:29:bc:ca:9a: c3:9e:4f:58:ae:c0:a0:46:53:eb:dc:b4:b5:78:93: e0:5a:5f:56:ad:5b:8a:b2:88:3a:39:5c:76:19:8b: ed:97:66:ee:cd:f8:8e:d6:8b:13:20:8d:3b:e8:bb: 4f:7d:26:3d:49:c5:e0:fa:05:8f:b3:ec:22:19:1a: 6d:0b:72:27:8b:1a:7c:14:7e:48:31:c8:6a:c4:97: 4c:40:60:5b:77:be:75:56:01:61:49:c3:71:be:ac: 8a:cc:da:e8:68:88:ba:b1:42:ff:01:f9:b3:45:b2: ff:1d:4a:66:b7:15:6c:3c:55:c9:7e:a4:86:53:d4: f6:9e:da:1b:60:b7:d5:b9:20:05:a3:4d:dd:d2:98: 53:69:84:db:8c:5a:f8:2c:7a:e4:b4:e2:53:fd:68: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1E:68:29:14:09:A6:94:6D:F2:DD:ED:4F:DE:57:BE:B1:E7:DD:7F X509v3 Authority Key Identifier: keyid:38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f2:f5:22:d5:48:06:0c:e2:6d:7c:81:af:b8:4a:c8:8c:fd: f3:a9:98:65:53:3d:38:0b:78:96:18:24:5b:f9:3b:8e:26:32: cc:82:91:2a:7b:17:4c:33:69:10:d0:dc:73:dd:a3:9c:a2:73: cb:be:4a:1c:8d:4c:1a:0d:d9:c9:c2:fb:61:b4:45:80:d0:7b: ae:05:0f:cc:f1:65:85:42:97:f3:94:65:2c:25:aa:3f:df:42: 5b:66:e7:b7:d5:85:90:ab:18:eb:0f:57:c2:1c:45:e4:3c:f1: b8:b5:0b:e9:45:14:aa:c2:ad:52:48:15:c5:d5:1a:8e:aa:08: bb:dc:36:40:4e:b7:89:53:33:5d:56:b2:c7:c9:ba:41:e0:17: 98:9c:12:68:5d:a4:e4:05:13:f5:8a:bd:8e:72:6e:69:47:28: 0a:a7:c5:cc:29:5a:66:74:92:9c:7c:41:19:62:31:12:8a:15: fd:0d:0a:af:5a:31:b8:6d:a2:df:87:84:2e:d9:90:bf:6e:f7: 3d:04:4a:4d:3f:86:47:06:f0:d6:38:a0:e0:d0:b6:7b:fe:5d: 61:80:21:11:60:dd:be:f3:69:cd:35:00:ea:f6:80:15:7c:e1: 34:5c:38:d8:05:26:09:81:e1:34:93:a1:01:1e:87:b2:77:81: 26:79:ec:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0fEu/j/iXSxBcBfx6856w1E9IQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4 RkNBRjExMDAeFw0yNjA1MTIyMjUxMzJaFw0yNjA1MTQwMTE2MzJaMDMxMTAvBgNV BAMTKEQ2MUU2ODI5MTQwOUE2OTQ2REYyRERFRDRGREU1N0JFQjFFN0REN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTK03c/ybsrU9vTYw9oF6euCpC e6htPclFvIOIl8dsDSf3/6P4tSEWBJyERg/h9ywPnJP8WM9jOY8hSZsnuGcIe3U5 9yMkZctFeMjyClx20dvxVrTbVAO/OAqUf2Ejpl/ns4C4KbzKmsOeT1iuwKBGU+vc tLV4k+BaX1atW4qyiDo5XHYZi+2XZu7N+I7WixMgjTvou099Jj1JxeD6BY+z7CIZ Gm0LcieLGnwUfkgxyGrEl0xAYFt3vnVWAWFJw3G+rIrM2uhoiLqxQv8B+bNFsv8d Sma3FWw8Vcl+pIZT1Pae2htgt9W5IAWjTd3SmFNphNuMWvgseuS04lP9aJClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1h5oKRQJppRt8t3tT95XvrHn3X8wHwYDVR0j BBgwFoAUOMhYlQvLVN6ulInuPAU7Wo/K8RAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFiMjY3YTQtNTAzMC00YTRmLWJiODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUw QkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4RkNBRjExMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zOEM4NTg5NTBCQ0I1NERFQUU5NDg5RUUzQzA1M0I1QThGQ0FG MTEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNC NUE4RkNBRjExMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/y9SLVSAYM4m18ga+4SsiM/fOpmGVTPTgL eJYYJFv5O44mMsyCkSp7F0wzaRDQ3HPdo5yic8u+ShyNTBoN2cnC+2G0RYDQe64F D8zxZYVCl/OUZSwlqj/fQltm57fVhZCrGOsPV8IcReQ88bi1C+lFFKrCrVJIFcXV Go6qCLvcNkBOt4lTM11WssfJukHgF5icEmhdpOQFE/WKvY5ybmlHKAqnxcwpWmZ0 kpx8QRliMRKKFf0NCq9aMbhtot+HhC7ZkL9u9z0ESk0/hkcG8NY4oODQtnv+XWGA IRFg3b7zac01AOr2gBV84TRcONgFJgmB4TSToQEeh7J3gSZ57D8= -----END CERTIFICATE-----Generated at Wed May 13 02:49:33 2026 by rpki-client