$ rpki-client -vvf rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft File: 38F5CCFB43C14A0A6D836EE754A8073545066216.mft (raw, json) Hash identifier: 5v2USMZiuYhNSVSBMlNd1XDUxC+/2IT/LyAHBBBJzcI= Subject key identifier: 17:87:C8:E2:FD:F7:5F:0A:5C:9D:44:E0:0A:7D:49:8D:DC:5A:3F:CE Authority key identifier: 38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 Certificate issuer: /CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Certificate serial: 7DC4D4C9FEC1B4BDD70810589C934A21870B47AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 14:58:14 +0000 Manifest this update: Tue 02 Jun 2026 14:53:14 +0000 Manifest next update: Wed 03 Jun 2026 17:01:14 +0000 Files and hashes: 1: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (hash: pMseYXhaROm6EYmzpm8l2beM5snzhmulBoKAFnDhIs8=) 2: 38F5CCFB43C14A0A6D836EE754A8073545066216.crl (hash: WFs9Pew9IfbxzCKizq6+QAkXwC6697+xpAR/VV6PuSA=) 3: 3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa (hash: nyod0CT/fB5gH7ANBUTQG+Fhk9ZB7fad+xE68OSLCI0=) 4: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (hash: f8d867FdOKPAI9FI9ckkqBnXV6BMv6oUu/lBMN4pJIk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c4:d4:c9:fe:c1:b4:bd:d7:08:10:58:9c:93:4a:21:87:0b:47:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Validity Not Before: Jun 2 14:53:14 2026 GMT Not After : Jun 3 17:01:14 2026 GMT Subject: CN=1787C8E2FDF75F0A5C9D44E00A7D498DDC5A3FCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3b:e7:ff:2a:c4:a6:78:6b:20:78:85:47:03: a2:29:4f:3f:54:ed:34:61:06:22:e3:ad:5d:fc:90: e5:d1:1c:65:3e:ab:94:2f:bb:7b:f1:10:08:59:f4: cc:47:f2:50:99:33:82:be:da:31:aa:1d:25:d1:e0: 78:95:82:b0:13:1d:96:26:02:67:6a:15:74:f3:cd: 87:1d:a9:f5:ff:dc:ab:ef:04:21:56:6f:bf:fc:5d: bd:e3:0c:a7:cd:a7:c4:f1:e1:29:f3:f5:fa:92:c4: e9:96:7d:20:9a:89:60:95:4d:c5:6c:31:27:e0:9a: 9f:4a:ee:e3:d5:d6:dd:ec:df:c5:b4:31:30:4e:27: ca:12:fb:49:8d:f3:8f:98:e9:36:ca:b1:2e:2c:3d: 34:b2:23:50:04:65:27:c1:d7:96:26:fa:0e:aa:f6: 9b:ac:07:02:b3:eb:b5:e3:fa:ff:c9:f2:46:ea:bd: c5:85:c4:fe:23:87:1c:c5:14:65:c3:cb:ce:98:f0: 08:76:76:79:cb:18:6f:00:9e:70:59:ef:c6:87:ee: 0d:e2:03:7e:ee:4e:86:8d:83:2b:da:0f:8c:d2:9e: 83:6c:7d:0c:07:6e:cb:1c:61:45:32:2f:25:98:81: 78:8f:7f:a4:ba:41:e0:c6:fc:78:3a:e7:ca:7f:12: d1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:87:C8:E2:FD:F7:5F:0A:5C:9D:44:E0:0A:7D:49:8D:DC:5A:3F:CE X509v3 Authority Key Identifier: keyid:38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e4:ba:02:a8:91:06:85:05:57:a6:82:ca:2f:04:f1:16:91: bc:f3:89:18:f8:92:e0:44:0e:af:fd:fa:49:6c:a2:ee:3e:7f: 90:28:db:0d:49:e0:ec:92:dd:47:9f:52:eb:9e:d8:a6:6c:2d: ec:c2:bc:1a:88:c4:2c:fb:fc:45:9d:13:f7:e5:46:01:03:14: fd:1c:c1:f8:79:dc:01:dc:51:ab:01:4f:04:c9:1d:88:1d:e3: 96:ee:98:bc:e9:58:2f:7f:6b:c5:31:85:72:56:c5:a2:e1:b3: 7c:57:04:75:7e:64:3b:7b:04:a8:38:b5:90:bd:04:7d:52:f5: 36:83:fc:77:28:7c:2c:b1:99:fe:d5:d5:c7:56:86:8f:73:ff: 96:69:d7:6d:f8:0e:14:7d:dc:04:57:6b:8a:68:09:b3:d1:69: 02:39:ac:d4:77:73:a3:a6:ce:7d:ab:d2:a6:4d:8d:58:d9:b0: 02:bc:e2:61:93:e6:ee:8f:eb:ac:42:97:94:2d:18:56:06:e3: e8:f5:17:8a:e5:49:da:f3:31:d5:aa:34:bd:47:d3:7e:f3:85: d2:a9:53:8e:4c:5d:e1:07:1c:f2:5c:e7:b7:f0:f0:52:10:56: 97:b3:3d:8f:aa:80:d4:17:0e:3e:4b:eb:f5:d7:f2:c3:87:ba: a6:26:bc:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfcTUyf7BtL3XCBBYnJNKIYcLR64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGNUNDRkI0M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0 NTA2NjIxNjAeFw0yNjA2MDIxNDUzMTRaFw0yNjA2MDMxNzAxMTRaMDMxMTAvBgNV BAMTKDE3ODdDOEUyRkRGNzVGMEE1QzlENDRFMDBBN0Q0OThEREM1QTNGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1O+f/KsSmeGsgeIVHA6IpTz9U 7TRhBiLjrV38kOXRHGU+q5Qvu3vxEAhZ9MxH8lCZM4K+2jGqHSXR4HiVgrATHZYm AmdqFXTzzYcdqfX/3KvvBCFWb7/8Xb3jDKfNp8Tx4Snz9fqSxOmWfSCaiWCVTcVs MSfgmp9K7uPV1t3s38W0MTBOJ8oS+0mN84+Y6TbKsS4sPTSyI1AEZSfB15Ym+g6q 9pusBwKz67Xj+v/J8kbqvcWFxP4jhxzFFGXDy86Y8Ah2dnnLGG8AnnBZ78aH7g3i A37uToaNgyvaD4zSnoNsfQwHbsscYUUyLyWYgXiPf6S6QeDG/Hg658p/EtENAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF4fI4v33XwpcnUTgCn1JjdxaP84wHwYDVR0j BBgwFoAUOPXM+0PBSgptg27nVKgHNUUGYhYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRkMDc4ZmUtMDkzMC00NWRjLWI0MDMtM2NlNGU4NjNmOGI1LzAvMzhGNUNDRkI0 M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0NTA2NjIxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEY1Q0NGQjQzQzE0QTBBNkQ4MzZFRTc1NEE4MDczNTQ1MDY2 MjE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRkMDc4ZmUtMDkzMC00NWRjLWI0 MDMtM2NlNGU4NjNmOGI1LzAvMzhGNUNDRkI0M0MxNEEwQTZEODM2RUU3NTRBODA3 MzU0NTA2NjIxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLkugKokQaFBVemgsovBPEWkbzziRj4kuBE Dq/9+klsou4+f5Ao2w1J4OyS3UefUuue2KZsLezCvBqIxCz7/EWdE/flRgEDFP0c wfh53AHcUasBTwTJHYgd45bumLzpWC9/a8UxhXJWxaLhs3xXBHV+ZDt7BKg4tZC9 BH1S9TaD/HcofCyxmf7V1cdWho9z/5Zp1234DhR93ARXa4poCbPRaQI5rNR3c6Om zn2r0qZNjVjZsAK84mGT5u6P66xCl5QtGFYG4+j1F4rlSdrzMdWqNL1H037zhdKp U45MXeEHHPJc57fw8FIQVpezPY+qgNQXDj5L6/XX8sOHuqYmvP4= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:39 2026 by rpki-client