$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft File: 38A016716413D0128BA473D046A93A222EF258E1.mft (raw, json) Hash identifier: 7pAz0wjVfoCV77MHO5kIqpOFoiz8nAcCiWPll00jyqg= Subject key identifier: E8:44:EC:EB:ED:C3:BE:F2:F8:5D:37:F1:B9:6D:38:19:85:65:E5:25 Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1 Certificate issuer: /CN=38A016716413D0128BA473D046A93A222EF258E1 Certificate serial: 3AB84C73C3827233D0053A2DE0879CD1F5BC94EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 15:10:18 +0000 Manifest this update: Mon 20 Jul 2026 15:05:18 +0000 Manifest next update: Tue 21 Jul 2026 18:05:18 +0000 Files and hashes: 1: 3230322e37372e3130342e302f32322d3234203d3e2039393035.roa (hash: gq8WgCP+l227lLiu3sQbxwyDdcnnRxrBsxiqFgd4NLE=) 2: 3230322e3133372e302e302f32322d3234203d3e2039393035.roa (hash: sDTmD3GU6Ft8EEEqtjLcBYRRth1n9ZFmkA27qiDqHu0=) 3: 3230322e37372e39362e302f32322d3234203d3e2039393035.roa (hash: 9UNjPzeTlgKKqUtFeYaNHw++yvRCKf3VTOaGIaohaGU=) 4: 3230322e37372e3131322e302f32322d3234203d3e2039393035.roa (hash: 5c33gF+5gjmmb741IUEGGHDDYpayMnh6r8j5Ow51OXo=) 5: 3230322e3133372e342e302f32322d3234203d3e2039393035.roa (hash: n/wLv+DrvS6hM2yX7W1+FhqdbDsoaxYa82u0zyTWRIg=) 6: 3230322e3133372e302e302f32322d3232203d3e2039393035.roa (hash: WaWYp+Csy1XmWlHWyydNjABqy7+/ynRv2N7rdeu9lvs=) 7: 3230322e37372e3132342e302f32322d3234203d3e2039393035.roa (hash: hAYha3B7RJg5b0yJ9V9pM3cxMRjU9QmMJwDUZnJa1Qc=) 8: 3230322e37372e3131362e302f32322d3234203d3e2039393035.roa (hash: Vv/Gc1aZqIRGDihUWMWmB/KFIBvi6zpuuDKDQW27nxM=) 9: 3230322e3133372e382e302f32322d3234203d3e2039393035.roa (hash: 9boLwOGJqN+e9hHgChxBfpOSFK4xK+tkaOhwgxnywSg=) 10: 3230322e3133372e31362e302f32322d3234203d3e2039393035.roa (hash: dSBZailoQQTSiyKxA2l6AI3PspujPG35rpgdMX5KHK0=) 11: 3230322e37372e3130302e302f32322d3234203d3e2039393035.roa (hash: 4zcs3dsKUpw1QSrJt91B69SmnZX4YnkFdN0jKF+1k7E=) 12: 3230322e37372e3130382e302f32322d3234203d3e2039393035.roa (hash: hpgIbmaFVFbmnwLERjvmTE4R0RTrKMtLvdV36aAo84w=) 13: 3230322e3133372e31322e302f32322d3234203d3e2039393035.roa (hash: DsSxJ+60lvbsX4hG81MSfAY6DjOKwAPqkr7jR3rXmbA=) 14: 3230322e3133372e32302e302f32322d3234203d3e2039393035.roa (hash: j3p3wEKo5eKcusMRNWAz6h27m/X8ftQFUkaePF+oebQ=) 15: 3130332e32312e3231362e302f32322d3234203d3e2039393035.roa (hash: 69DRa4aTIpAEdb51xzvQioJYr3teJfUAi2k8d2rlqC4=) 16: 323430353a3130303a3a2f33322d3438203d3e2039393035.roa (hash: Kthx67gHVNGYI0fzwSZ0fi+hJEWpAyGO/ZNZDQ2LEig=) 17: 38A016716413D0128BA473D046A93A222EF258E1.crl (hash: 0Ph8hhM7qFiMdJ+iA7FhxsEWbZBspI6hC1qSFv6RUuc=) 18: 3230322e37372e3132302e302f32322d3234203d3e2039393035.roa (hash: dijnvbrxw14fcU7sTr4Hi9+AvVCISHBw/XOBUUSQn0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b8:4c:73:c3:82:72:33:d0:05:3a:2d:e0:87:9c:d1:f5:bc:94:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1 Validity Not Before: Jul 20 15:05:18 2026 GMT Not After : Jul 21 18:05:18 2026 GMT Subject: CN=E844ECEBEDC3BEF2F85D37F1B96D38198565E525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:11:f2:23:45:e1:91:a6:29:b3:d5:ca:d0: c9:4a:09:54:1d:39:51:ce:b2:cb:94:01:b9:0f:5c: 31:3e:4e:61:1b:1d:24:a6:49:21:2c:56:92:10:d6: 96:73:72:75:d6:2c:cf:bc:9d:83:dc:5a:bf:38:e8: 68:c1:aa:61:cb:ff:a9:5d:f1:dc:81:b4:40:9a:70: 1a:69:35:5d:75:fc:95:5f:cf:10:68:33:78:b1:fc: 54:e4:da:cb:0a:63:38:13:b6:a5:ee:ef:e8:2b:7e: b8:80:32:df:f3:41:f5:ee:d6:38:09:ce:d7:40:5d: 90:6f:ce:75:2f:65:7d:80:90:6d:c0:bd:c8:3e:ae: 0e:f3:0d:87:d1:38:72:b3:32:91:a8:68:19:af:b2: f6:e5:5b:c6:69:c1:a7:f6:dc:24:eb:bb:3f:1a:54: 5c:3b:71:7c:63:63:7b:39:f2:34:5d:73:f2:20:86: 01:61:af:13:f0:71:ef:0b:71:8b:1e:77:7e:1f:7e: 88:48:ca:32:8e:92:da:4b:c1:89:b0:44:8e:56:3c: a3:cf:1d:68:5d:4c:62:42:5f:14:b6:ca:a1:87:48: c5:fa:7d:11:f9:d0:44:1a:7c:1a:8a:32:1c:1f:8e: 46:10:46:1d:4e:0a:db:c6:9c:17:14:8f:d9:6a:65: 03:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:44:EC:EB:ED:C3:BE:F2:F8:5D:37:F1:B9:6D:38:19:85:65:E5:25 X509v3 Authority Key Identifier: keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:74:15:b5:7f:c7:a8:18:d7:cc:fb:3a:6f:70:ba:7b:9a:c2: 51:cb:96:02:34:00:33:88:5b:bf:e6:59:a0:34:de:1d:7f:f9: 38:ad:ad:24:f8:70:fe:33:c1:04:2f:f5:00:db:b7:8f:fb:1b: a1:9c:db:d1:7d:07:8a:eb:98:76:80:22:0f:fb:30:60:12:c8: 1b:a2:5b:91:e8:2d:65:8a:92:d9:83:1c:51:b9:4c:e6:b9:f7: 99:31:fc:5a:13:c3:17:03:28:b1:19:4c:8c:15:1b:d7:0a:cc: 3f:33:06:74:f1:a3:7a:d5:69:d1:08:34:e6:4f:83:aa:09:b3: 2f:10:b7:c0:e5:cb:43:9e:dd:94:9c:c4:88:90:bb:cc:7d:d1: 45:de:46:01:45:dc:c3:f4:84:2d:5f:52:ee:ac:20:61:59:06: a6:b0:15:00:0d:59:99:d0:a7:07:8e:fe:fa:7a:40:d3:07:76: 54:37:4a:83:e2:73:84:d7:5a:8c:f3:c8:18:6a:59:4e:88:f6: b1:b1:b3:c6:f8:ee:15:d9:c4:73:2b:4e:b6:8e:9f:ed:04:6e: d8:d5:01:2a:ff:a4:e2:2b:0c:ab:3e:49:05:eb:fe:dd:a9:bb: 79:b5:28:8e:e7:93:04:b7:54:12:2d:3b:45:a8:44:62:58:11: db:f2:dd:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrhMc8OCcjPQBTot4Iec0fW8lOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhBMDE2NzE2NDEzRDAxMjhCQTQ3M0QwNDZBOTNBMjIy RUYyNThFMTAeFw0yNjA3MjAxNTA1MThaFw0yNjA3MjExODA1MThaMDMxMTAvBgNV BAMTKEU4NDRFQ0VCRURDM0JFRjJGODVEMzdGMUI5NkQzODE5ODU2NUU1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDapBHyI0XhkaYps9XK0MlKCVQd OVHOssuUAbkPXDE+TmEbHSSmSSEsVpIQ1pZzcnXWLM+8nYPcWr846GjBqmHL/6ld 8dyBtECacBppNV11/JVfzxBoM3ix/FTk2ssKYzgTtqXu7+grfriAMt/zQfXu1jgJ ztdAXZBvznUvZX2AkG3Avcg+rg7zDYfROHKzMpGoaBmvsvblW8Zpwaf23CTruz8a VFw7cXxjY3s58jRdc/IghgFhrxPwce8LcYsed34ffohIyjKOktpLwYmwRI5WPKPP HWhdTGJCXxS2yqGHSMX6fRH50EQafBqKMhwfjkYQRh1OCtvGnBcUj9lqZQNVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6ETs6+3DvvL4XTfxuW04GYVl5SUwHwYDVR0j BBgwFoAUOKAWcWQT0BKLpHPQRqk6Ii7yWOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzljMDVlZTMtN2ZjOC00NDA3LWIyYzAtY2I0MGJmY2ZiODY2LzAvMzhBMDE2NzE2 NDEzRDAxMjhCQTQ3M0QwNDZBOTNBMjIyRUYyNThFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEEwMTY3MTY0MTNEMDEyOEJBNDczRDA0NkE5M0EyMjJFRjI1 OEUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzljMDVlZTMtN2ZjOC00NDA3LWIy YzAtY2I0MGJmY2ZiODY2LzAvMzhBMDE2NzE2NDEzRDAxMjhCQTQ3M0QwNDZBOTNB MjIyRUYyNThFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx0FbV/x6gY18z7Om9wunuawlHLlgI0ADOI W7/mWaA03h1/+TitrST4cP4zwQQv9QDbt4/7G6Gc29F9B4rrmHaAIg/7MGASyBui W5HoLWWKktmDHFG5TOa595kx/FoTwxcDKLEZTIwVG9cKzD8zBnTxo3rVadEINOZP g6oJsy8Qt8Dly0Oe3ZScxIiQu8x90UXeRgFF3MP0hC1fUu6sIGFZBqawFQANWZnQ pweO/vp6QNMHdlQ3SoPic4TXWozzyBhqWU6I9rGxs8b47hXZxHMrTraOn+0EbtjV ASr/pOIrDKs+SQXr/t2pu3m1KI7nkwS3VBItO0WoRGJYEdvy3bk= -----END CERTIFICATE-----Generated at Tue Jul 21 08:25:13 2026 by rpki-client