
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft
File: 38D72675FCFA53571947E587993417F0A2E84774.mft (raw, json)
Hash identifier: AziGZg1ISQJyuNFp6GbwoCELDY18w0WS1zpo4qFdywM=
Subject key identifier: 5B:B5:E1:62:C5:E5:D2:45:63:96:57:B5:EB:A0:7B:C0:EF:65:69:8D
Authority key identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74
Certificate issuer: /CN=38D72675FCFA53571947E587993417F0A2E84774
Certificate serial: 6665448CC2F759A5AE9D41ED752F66C1B7CD66D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft
Manifest number: A6
Signing time: Wed 02 Sep 2026 16:12:48 +0000
Manifest this update: Wed 02 Sep 2026 16:07:48 +0000
Manifest next update: Thu 03 Sep 2026 18:12:48 +0000
Files and hashes: 1: 3131342e3134312e39332e302f32342d3234203d3e203338373733.roa (hash: So6HCFRYfBIDo3Yy4ADeQ9cjX7P8uCC8BIv2/s6u/0g=)
2: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 60QvD+kuWCtJFdascF9uuaceBf/9kdy2qmj8qDdkANM=)
3: 3131342e3134312e39352e302f32342d3234203d3e203338373733.roa (hash: BtBofw2ddLFZvd8330UeqRlGDcKEpNlQwCfV2FpF8/w=)
4: 3131342e3134312e39312e302f32342d3234203d3e203338373733.roa (hash: 4dNfe19s0fvjSguokSLbqrRLsnLRnuoEvEhmGuqBlvY=)
5: 3131342e3134312e39342e302f32342d3234203d3e203338373733.roa (hash: KBgcMCCrYhviN35Lsj+SDe+UfidQ9sTv4EpZKCSDnc4=)
6: 3131342e3134312e39322e302f32342d3234203d3e203338373733.roa (hash: 81ry6DUJ7vS8X5kvVlKujeT3BQmxdahLH8ZK0O09vk0=)
7: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: uTIMEfksgIfw3pC5q8pYKmgEjBmK5dhPwmsdESCHDfM=)
8: 38D72675FCFA53571947E587993417F0A2E84774.crl (hash: udsU4BS0XNuZXdeNJWkwSG+9x0C19f++jil59xpimDM=)
9: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: FscfLd+VmMO0VIBUn9YaLAaHtn1/p9aWzjIEPbsat1U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl
rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 18:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:65:44:8c:c2:f7:59:a5:ae:9d:41:ed:75:2f:66:c1:b7:cd:66:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38D72675FCFA53571947E587993417F0A2E84774
Validity
Not Before: Sep 2 16:07:48 2026 GMT
Not After : Sep 3 18:12:48 2026 GMT
Subject: CN=5BB5E162C5E5D245639657B5EBA07BC0EF65698D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:0c:b2:68:45:9e:fc:cc:5c:15:8e:9c:34:
c8:9f:76:0d:1f:a7:06:13:13:b2:6b:db:de:7a:e8:
f7:52:39:5d:58:0b:bd:a3:a9:4b:08:0c:5e:18:d1:
e6:49:78:d0:4e:e9:d8:ee:35:5f:8d:da:c7:8e:73:
d4:6b:d6:5a:80:d3:17:1d:d2:78:13:ec:93:24:2f:
b3:00:09:24:f0:5d:0b:03:cf:b9:6e:9e:4a:32:c4:
58:48:2a:ce:79:95:8a:b1:29:96:6e:1b:d1:ae:99:
85:39:c8:51:0e:67:b2:4e:83:bd:a2:9d:01:13:f9:
5f:49:35:bb:5b:8a:e5:4d:29:65:0c:23:75:75:db:
73:b8:6f:03:43:c2:75:d1:c0:10:01:c3:a3:88:e8:
b4:13:1c:c4:ab:1b:4c:e7:71:82:47:d9:fa:09:1c:
9a:01:ad:ef:fe:6e:f0:d6:91:29:67:a2:1d:40:81:
ce:13:ab:79:51:e1:6d:3a:74:99:b2:51:f2:07:cd:
bc:10:40:46:b6:0d:84:a8:de:93:7e:9e:16:e7:03:
c4:7f:dd:de:98:b9:2a:e1:82:52:48:bb:d9:39:91:
91:95:f7:12:0f:4d:6f:dd:ef:2e:32:a4:b7:8a:40:
e4:10:8b:2e:d2:e7:3e:b4:e8:30:8a:4a:14:fc:61:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B5:E1:62:C5:E5:D2:45:63:96:57:B5:EB:A0:7B:C0:EF:65:69:8D
X509v3 Authority Key Identifier:
keyid:38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ab:59:83:1d:01:d4:20:81:45:23:30:aa:0d:52:e6:ea:3b:
b4:c3:44:16:65:25:de:d3:7e:81:3f:3c:93:9c:fe:e8:85:a9:
43:e5:99:85:43:3b:c0:24:5d:7c:cd:7b:35:41:1d:41:bf:38:
3a:06:ec:b5:5d:87:42:49:00:5b:39:b3:d0:be:5e:a0:51:c4:
3f:2f:52:33:33:24:ff:8e:29:8d:e9:fb:fe:23:7d:ac:23:84:
d2:f2:e7:88:63:85:95:52:fd:61:cc:58:58:b8:84:69:6e:79:
1e:ae:69:9b:b7:11:21:57:38:a8:12:ca:53:1f:f8:8a:d5:7d:
79:27:74:1d:89:f2:ed:fe:19:56:3d:18:99:2d:8b:dc:3d:8f:
0f:0e:4f:21:93:3d:8d:38:8e:0d:29:e6:88:62:7d:5e:5b:d8:
1b:66:96:58:e1:aa:10:74:10:f6:80:70:f6:2f:23:6f:81:90:
8a:54:ea:c5:01:9b:d8:ea:fc:33:b1:02:9b:e7:ce:ff:2a:80:
0f:1d:c3:34:80:14:3e:e8:d3:93:62:66:68:3f:32:e2:73:41:
12:94:a5:e5:78:db:3f:d4:21:fd:14:19:97:f8:10:e4:c2:0a:
3c:e5:91:8a:52:c7:d0:8e:2c:f3:c9:4b:55:65:f1:d3:57:7c:
46:dd:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:36:00 2026 by rpki-client