$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft File: 3C38CDC785C4C8B22E60377271E55409582CCE11.mft (raw, json) Hash identifier: jJo+OA0/lIvxXWP5ZTVbAwW2gS6jrO/qddFhOm7hRCk= Subject key identifier: 59:0A:8E:7D:A3:3E:A9:5B:8C:EC:6D:0F:C8:A1:BE:1E:4D:2F:74:ED Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 Certificate issuer: /CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Certificate serial: 3F5D0CE18B1A08C73386F42E8FD34772F6EA6468 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:35:33 +0000 Manifest this update: Mon 20 Jul 2026 19:30:33 +0000 Manifest next update: Tue 21 Jul 2026 19:45:33 +0000 Files and hashes: 1: 3C38CDC785C4C8B22E60377271E55409582CCE11.crl (hash: 5MNf06X3WCrILf2lh3of4II3BxwLnMScgvWurJweK1M=) 2: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: YTCmCer361lbPyWorpFl5d+Z6lvA+nitAm63kpLBrjA=) 3: 3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa (hash: uY3yyx4wQkOkesdmZiKQBfO/mX9p5Uwb9aYVUKsyBH0=) 4: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: 6IAAYhSuJnzcb+wPAnz95hDBr9XmKVxiIbVUzRwnFY4=) 5: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: CNqZtOi2G7stcR7KpWbtX7pHl0DtOjDNuPcEVY0GuK4=) 6: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: YRj5C4EJmHgy7/Vm8+56TmtCB98kN0pGzPis/CT4F1s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5d:0c:e1:8b:1a:08:c7:33:86:f4:2e:8f:d3:47:72:f6:ea:64:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Validity Not Before: Jul 20 19:30:33 2026 GMT Not After : Jul 21 19:45:33 2026 GMT Subject: CN=590A8E7DA33EA95B8CEC6D0FC8A1BE1E4D2F74ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:ac:0d:df:65:33:99:e7:75:04:f3:61:d3: aa:c4:65:76:4a:15:2b:69:3b:1b:1a:d4:0c:c1:ab: d5:94:0e:1b:21:bd:1c:ae:56:2c:c8:7c:4e:d7:9f: c3:a5:d3:63:55:53:fb:30:e4:25:7d:b1:3f:04:27: 38:2d:9f:2b:03:9d:84:2b:60:ed:be:14:24:6e:42: ba:6a:6b:6e:11:af:3a:47:08:cd:88:61:c7:e8:49: 57:28:39:86:f2:70:06:8b:40:79:f2:cb:1d:f2:23: 4e:7e:42:f4:47:27:46:c4:a6:9d:84:49:6f:35:2c: e1:a3:a5:f9:c7:10:f8:ed:0b:4d:78:73:ba:0a:e6: 68:c4:36:c1:1c:1e:2c:57:f2:e8:3a:19:f0:8d:ed: c1:34:39:03:44:e3:c2:31:35:4f:ae:ad:59:6f:dd: de:aa:75:30:77:32:e0:14:10:1e:8d:f4:d7:36:b9: 9b:fe:26:f3:9e:9c:be:ec:e7:19:ba:46:c4:50:e1: ef:86:0c:8c:75:ca:1a:ef:c2:93:f9:57:0f:87:9f: dc:dd:10:fc:18:ba:ed:1e:4c:86:5b:23:1e:1b:e1: 39:7b:d1:cf:39:e5:8c:8c:88:1a:b1:a3:fb:50:ec: 26:4f:56:5a:2f:e5:96:99:63:dd:f6:e5:81:9c:2f: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0A:8E:7D:A3:3E:A9:5B:8C:EC:6D:0F:C8:A1:BE:1E:4D:2F:74:ED X509v3 Authority Key Identifier: keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e6:c1:78:aa:b2:67:e5:19:81:e4:86:21:38:c5:82:f5:fc: d9:59:01:76:93:e3:58:cc:c1:fd:ff:d3:64:0a:fd:75:1b:b6: 9b:d4:a7:ae:85:12:4b:84:c4:ec:3e:d5:09:fc:d0:40:73:37: b1:a6:c1:bd:4d:00:aa:5f:8e:a6:06:22:eb:fd:4d:f7:7d:b7: 18:38:c8:99:e0:e7:5c:9c:b5:ef:fb:c1:e9:07:d9:ef:db:b1: 72:a7:08:68:5f:a7:2f:fa:b3:cc:d7:c0:2d:82:25:2d:dc:1a: 2a:28:10:32:03:67:75:3d:8b:18:c3:09:89:be:b1:76:62:89: fb:7c:05:af:75:b7:03:3d:4f:92:c6:1a:af:4f:a6:0f:ee:34: 2e:f0:2e:f8:c1:12:fd:6f:a5:fa:14:0f:ba:f2:31:64:7e:92: 52:db:7d:b8:03:01:55:42:af:06:da:67:72:90:95:af:60:67: a1:09:2d:b0:a8:ba:1f:81:e3:6a:2d:72:32:d2:d4:aa:41:b0: 4c:4d:94:5d:64:ee:c4:88:3a:e9:df:50:cf:82:13:7c:97:3b: f6:4c:ea:69:12:1f:ea:d9:bb:b5:2d:e3:44:6e:d5:13:93:a6: 08:ab:3a:3b:5f:79:de:8d:7d:70:94:b1:07:af:9e:a6:b0:a9: a5:b1:af:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP10M4YsaCMczhvQuj9NHcvbqZGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1 ODJDQ0UxMTAeFw0yNjA3MjAxOTMwMzNaFw0yNjA3MjExOTQ1MzNaMDMxMTAvBgNV BAMTKDU5MEE4RTdEQTMzRUE5NUI4Q0VDNkQwRkM4QTFCRTFFNEQyRjc0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8KwN32Uzmed1BPNh06rEZXZK FStpOxsa1AzBq9WUDhshvRyuVizIfE7Xn8Ol02NVU/sw5CV9sT8EJzgtnysDnYQr YO2+FCRuQrpqa24RrzpHCM2IYcfoSVcoOYbycAaLQHnyyx3yI05+QvRHJ0bEpp2E SW81LOGjpfnHEPjtC014c7oK5mjENsEcHixX8ug6GfCN7cE0OQNE48IxNU+urVlv 3d6qdTB3MuAUEB6N9Nc2uZv+JvOenL7s5xm6RsRQ4e+GDIx1yhrvwpP5Vw+Hn9zd EPwYuu0eTIZbIx4b4Tl70c855YyMiBqxo/tQ7CZPVlov5ZaZY9325YGcL8AnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWQqOfaM+qVuM7G0PyKG+Hk0vdO0wHwYDVR0j BBgwFoAUPDjNx4XEyLIuYDdyceVUCVgszhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ3OTRkMzYtNjlmOC00NDA2LWJmOWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4 NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1ODJDQ0UxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzM4Q0RDNzg1QzRDOEIyMkU2MDM3NzI3MUU1NTQwOTU4MkND RTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm OWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0 MDk1ODJDQ0UxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvmwXiqsmflGYHkhiE4xYL1/NlZAXaT41jM wf3/02QK/XUbtpvUp66FEkuExOw+1Qn80EBzN7Gmwb1NAKpfjqYGIuv9Tfd9txg4 yJng51ycte/7wekH2e/bsXKnCGhfpy/6s8zXwC2CJS3cGiooEDIDZ3U9ixjDCYm+ sXZiift8Ba91twM9T5LGGq9Ppg/uNC7wLvjBEv1vpfoUD7ryMWR+klLbfbgDAVVC rwbaZ3KQla9gZ6EJLbCouh+B42otcjLS1KpBsExNlF1k7sSIOunfUM+CE3yXO/ZM 6mkSH+rZu7Ut40Ru1ROTpgirOjtfed6NfXCUsQevnqawqaWxr1A= -----END CERTIFICATE-----Generated at Tue Jul 21 06:23:42 2026 by rpki-client