$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft File: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft (raw, json) Hash identifier: qk/IWNrPZ553FJLm+MpDhrng4lm2iwf5XPe2P/OXM4c= Subject key identifier: 73:12:6A:87:49:B3:0D:EE:9B:F2:63:60:98:1A:FC:EC:EF:DF:39:14 Authority key identifier: 38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 Certificate issuer: /CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Certificate serial: 44C40709DE00A6C44C731BF404290E4CA61AD99E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:37:29 +0000 Manifest this update: Fri 24 Jul 2026 02:32:29 +0000 Manifest next update: Sat 25 Jul 2026 03:31:29 +0000 Files and hashes: 1: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: oNAyYs1M4vvZUL8ZRq7sx5Uf/aJwxuSkl8dJpKgZM5c=) 2: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl (hash: iu5G7xtTYJhaardCdPZPCSwDJJ2Z3t3z7HVpBGhaNew=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c4:07:09:de:00:a6:c4:4c:73:1b:f4:04:29:0e:4c:a6:1a:d9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Validity Not Before: Jul 24 02:32:29 2026 GMT Not After : Jul 25 03:31:29 2026 GMT Subject: CN=73126A8749B30DEE9BF26360981AFCECEFDF3914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fa:92:6c:4e:35:ce:70:3a:ff:f3:87:32:30: 74:a9:f3:be:27:06:81:fc:a3:2b:00:43:3e:df:b0: a7:fe:02:78:01:a6:6f:62:86:bd:46:55:c5:4a:c4: e0:36:c1:d1:4f:a9:2b:74:3e:d7:7a:f8:c2:b6:52: 0c:ba:91:56:8e:b6:9f:bc:1d:ae:49:27:8c:c7:fa: c9:0a:7a:ae:55:8c:ab:2a:2e:34:29:97:f7:5a:b4: 43:7e:2c:04:5b:86:e0:9c:cd:c1:a0:6c:76:b4:10: 1b:0e:e0:45:53:c4:c9:d3:c6:89:32:a8:91:e8:74: f5:84:4d:d2:d9:98:80:c1:5c:47:82:66:68:1b:f8: 58:e5:02:c7:ef:29:c1:94:10:74:94:8b:ae:c8:bd: 7d:cb:ae:68:02:66:04:27:c8:9e:1f:58:88:c0:cd: 32:00:27:60:f9:b0:47:1f:71:ad:97:b9:dc:ee:db: fe:e7:a0:54:e9:e6:5a:6a:0e:5a:f2:9f:eb:b7:a8: 42:a0:87:09:9d:59:56:05:31:97:54:00:ec:b2:70: 55:90:36:50:0e:0c:9b:88:b3:a9:3a:61:79:5f:ee: c4:1f:8c:59:d7:25:50:88:f3:6c:d1:c8:39:1d:d6: b2:27:f2:9b:68:ff:77:08:4f:b5:4a:9a:35:f9:4d: 19:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:12:6A:87:49:B3:0D:EE:9B:F2:63:60:98:1A:FC:EC:EF:DF:39:14 X509v3 Authority Key Identifier: keyid:38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:40:51:2c:fa:78:c3:20:e0:f8:f0:f6:f0:f5:c1:ea:7f:8e: db:8c:1b:7c:ed:0a:c5:02:c3:c9:a5:2a:76:9a:69:09:97:3a: 51:f0:2f:1d:79:91:63:c9:89:5d:fc:e8:6f:d0:0a:de:a7:20: 80:57:3f:99:45:34:b6:d4:18:ca:3e:15:3f:52:95:34:ce:dd: 5a:ee:26:47:77:99:a7:d1:b6:2f:37:56:f3:5e:2b:64:48:80: 4e:d2:84:c2:57:20:91:62:50:5f:73:75:53:9f:fe:d6:53:73: 7b:b3:2a:a0:e7:22:f4:ac:9e:23:ac:c8:78:07:62:c4:fd:11: c4:fb:16:dc:ea:23:6e:de:bb:3e:76:2a:36:a6:70:ff:f6:ad: 9a:d5:63:cd:ba:7e:37:cb:54:34:50:77:35:8c:54:c3:0c:a5: d6:d5:18:17:61:13:9b:59:96:c1:c8:b7:8e:ff:7d:12:87:b2: 1e:51:ac:7f:2b:4d:3d:09:1d:b2:e1:9a:f0:37:57:f3:0b:01: c6:38:95:7c:ef:4d:ce:d6:e4:cf:34:d9:4f:7e:c3:bf:89:2c: 82:39:83:7b:ce:cd:79:d2:4e:b1:f5:54:dd:f9:32:09:3e:bf: 29:78:5b:bd:00:4d:cf:84:64:78:0b:53:22:12:16:07:75:a6: 1f:ea:88:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURMQHCd4ApsRMcxv0BCkOTKYa2Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4 RkNBRjExMDAeFw0yNjA3MjQwMjMyMjlaFw0yNjA3MjUwMzMxMjlaMDMxMTAvBgNV BAMTKDczMTI2QTg3NDlCMzBERUU5QkYyNjM2MDk4MUFGQ0VDRUZERjM5MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+pJsTjXOcDr/84cyMHSp874n BoH8oysAQz7fsKf+AngBpm9ihr1GVcVKxOA2wdFPqSt0Ptd6+MK2Ugy6kVaOtp+8 Ha5JJ4zH+skKeq5VjKsqLjQpl/datEN+LARbhuCczcGgbHa0EBsO4EVTxMnTxoky qJHodPWETdLZmIDBXEeCZmgb+FjlAsfvKcGUEHSUi67IvX3LrmgCZgQnyJ4fWIjA zTIAJ2D5sEcfca2Xudzu2/7noFTp5lpqDlryn+u3qEKghwmdWVYFMZdUAOyycFWQ NlAODJuIs6k6YXlf7sQfjFnXJVCI82zRyDkd1rIn8pto/3cIT7VKmjX5TRnLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcxJqh0mzDe6b8mNgmBr87O/fORQwHwYDVR0j BBgwFoAUOMhYlQvLVN6ulInuPAU7Wo/K8RAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFiMjY3YTQtNTAzMC00YTRmLWJiODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUw QkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4RkNBRjExMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zOEM4NTg5NTBCQ0I1NERFQUU5NDg5RUUzQzA1M0I1QThGQ0FG MTEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNC NUE4RkNBRjExMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBAUSz6eMMg4Pjw9vD1wep/jtuMG3ztCsUC w8mlKnaaaQmXOlHwLx15kWPJiV386G/QCt6nIIBXP5lFNLbUGMo+FT9SlTTO3Vru Jkd3mafRti83VvNeK2RIgE7ShMJXIJFiUF9zdVOf/tZTc3uzKqDnIvSsniOsyHgH YsT9EcT7FtzqI27euz52KjamcP/2rZrVY826fjfLVDRQdzWMVMMMpdbVGBdhE5tZ lsHIt47/fRKHsh5RrH8rTT0JHbLhmvA3V/MLAcY4lXzvTc7W5M802U9+w7+JLII5 g3vOzXnSTrH1VN35Mgk+vyl4W70ATc+EZHgLUyISFgd1ph/qiL0= -----END CERTIFICATE-----Generated at Fri Jul 24 10:03:54 2026 by rpki-client