$ rpki-client -vvf rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft File: 38D72675FCFA53571947E587993417F0A2E84774.mft (raw, json) Hash identifier: UI+Yi1XxqnO1GKLLy8FyZ5aFp1m0Ozw4SbOeMiINN54= Subject key identifier: 43:17:E3:1C:DE:0D:12:22:4C:63:93:F9:5C:99:46:9F:5F:7E:E5:40 Authority key identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 Certificate issuer: /CN=38D72675FCFA53571947E587993417F0A2E84774 Certificate serial: 2468A3D2101E15800214659D75D942C4FB4264DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:34:58 +0000 Manifest this update: Tue 02 Jun 2026 16:29:58 +0000 Manifest next update: Wed 03 Jun 2026 18:24:58 +0000 Files and hashes: 1: 3131342e3134312e39322e302f32342d3234203d3e203338373733.roa (hash: 81ry6DUJ7vS8X5kvVlKujeT3BQmxdahLH8ZK0O09vk0=) 2: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 60QvD+kuWCtJFdascF9uuaceBf/9kdy2qmj8qDdkANM=) 3: 3131342e3134312e39352e302f32342d3234203d3e203338373733.roa (hash: BtBofw2ddLFZvd8330UeqRlGDcKEpNlQwCfV2FpF8/w=) 4: 3131342e3134312e39332e302f32342d3234203d3e203338373733.roa (hash: So6HCFRYfBIDo3Yy4ADeQ9cjX7P8uCC8BIv2/s6u/0g=) 5: 38D72675FCFA53571947E587993417F0A2E84774.crl (hash: 2Iv6zlWMQFOq71EytoyvSuFFaYBGNX1JDucxClCTUPc=) 6: 3131342e3134312e39312e302f32342d3234203d3e203338373733.roa (hash: 4dNfe19s0fvjSguokSLbqrRLsnLRnuoEvEhmGuqBlvY=) 7: 3131342e3134312e39342e302f32342d3234203d3e203338373733.roa (hash: KBgcMCCrYhviN35Lsj+SDe+UfidQ9sTv4EpZKCSDnc4=) 8: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: uTIMEfksgIfw3pC5q8pYKmgEjBmK5dhPwmsdESCHDfM=) 9: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: FscfLd+VmMO0VIBUn9YaLAaHtn1/p9aWzjIEPbsat1U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 18:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:68:a3:d2:10:1e:15:80:02:14:65:9d:75:d9:42:c4:fb:42:64:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38D72675FCFA53571947E587993417F0A2E84774 Validity Not Before: Jun 2 16:29:58 2026 GMT Not After : Jun 3 18:24:58 2026 GMT Subject: CN=4317E31CDE0D12224C6393F95C99469F5F7EE540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:50:36:36:ad:b0:8c:d8:73:ad:06:06:25:f0: 9c:0e:98:bc:18:24:7e:27:d9:4e:18:11:0f:ee:09: 37:ec:af:65:0e:c0:9b:b3:b0:c9:76:6d:ad:13:44: 64:ae:06:d4:76:23:6d:29:23:f9:50:96:38:77:4b: b2:25:87:45:18:f8:96:ca:63:a4:28:ba:78:b5:27: e0:c3:e7:b4:97:a6:a6:f9:51:f6:33:87:3c:23:30: 02:6c:21:eb:85:4f:ea:ed:6f:07:18:de:1d:07:95: f4:1f:56:3f:c8:2e:08:76:f9:d4:c0:c6:db:84:95: d4:02:8f:b5:12:c0:32:8d:67:6b:0d:75:b4:28:f4: 61:25:43:5d:42:b0:67:33:4a:16:6d:97:2b:35:7d: 7d:75:fc:2e:d1:0d:6e:91:f2:7d:11:1d:2f:5f:f0: a8:24:0b:64:7c:27:99:d2:7f:c5:bd:16:c7:98:51: 56:c1:5f:7d:a5:0c:fd:22:fb:df:c6:b4:f6:16:32: 2e:f5:a5:17:db:d5:96:b4:ba:5d:75:de:dd:b5:cb: 32:fe:8a:a5:9c:4c:86:67:43:94:b0:37:5a:a3:84: 62:c7:6f:dc:36:86:9c:d9:7f:da:f0:9d:7b:e4:ee: fa:0e:26:aa:a7:a0:f5:b5:9a:a0:00:9d:1a:75:a1: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:17:E3:1C:DE:0D:12:22:4C:63:93:F9:5C:99:46:9F:5F:7E:E5:40 X509v3 Authority Key Identifier: keyid:38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:81:52:b6:56:0b:8b:cf:d1:8a:10:f3:e3:86:67:b6:89:1c: 0a:7b:1f:d3:d8:5f:9a:99:a4:a6:9f:13:95:a9:28:34:55:8d: 37:6f:92:0b:0a:4a:44:e5:cd:f4:97:f4:45:9c:de:1a:a0:e0: 20:1e:5b:e5:d9:1d:aa:85:52:80:ab:55:d0:03:bc:1e:d5:26: 46:18:03:61:df:84:a9:7a:e3:57:10:d7:f6:10:02:07:de:20: 3b:33:85:55:b0:13:e6:fd:7a:b1:91:08:02:cf:9a:8a:69:4c: 06:e1:2b:3f:5a:43:71:d5:fb:71:4d:c9:11:1a:e3:fe:ec:1a: 39:9a:44:a3:0c:02:90:8d:12:6a:55:6d:0c:73:4f:2e:ad:f2: ff:70:69:6f:a1:12:50:1b:2f:cd:f9:47:44:84:c0:5b:5f:ae: 88:4b:47:84:03:4b:69:04:5d:9b:3d:49:05:1a:fd:cb:49:7f: 30:a0:ac:ae:2d:18:41:98:9c:d9:75:7e:ec:61:31:77:a3:04: 88:02:37:44:bb:ab:9a:63:5b:59:a0:0b:54:8a:10:4d:57:c7: 75:fb:3d:e0:6c:cc:43:57:68:77:9a:c1:5c:e1:ec:73:be:07: 5f:8c:8c:c0:a1:59:0f:39:10:11:07:1b:ed:c8:08:ed:3e:dc: 25:de:1f:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGij0hAeFYACFGWdddlCxPtCZNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBB MkU4NDc3NDAeFw0yNjA2MDIxNjI5NThaFw0yNjA2MDMxODI0NThaMDMxMTAvBgNV BAMTKDQzMTdFMzFDREUwRDEyMjI0QzYzOTNGOTVDOTk0NjlGNUY3RUU1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWUDY2rbCM2HOtBgYl8JwOmLwY JH4n2U4YEQ/uCTfsr2UOwJuzsMl2ba0TRGSuBtR2I20pI/lQljh3S7Ilh0UY+JbK Y6Qouni1J+DD57SXpqb5UfYzhzwjMAJsIeuFT+rtbwcY3h0HlfQfVj/ILgh2+dTA xtuEldQCj7USwDKNZ2sNdbQo9GElQ11CsGczShZtlys1fX11/C7RDW6R8n0RHS9f 8KgkC2R8J5nSf8W9FseYUVbBX32lDP0i+9/GtPYWMi71pRfb1Za0ul113t21yzL+ iqWcTIZnQ5SwN1qjhGLHb9w2hpzZf9rwnXvk7voOJqqnoPW1mqAAnRp1obtNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQxfjHN4NEiJMY5P5XJlGn19+5UAwHwYDVR0j BBgwFoAUONcmdfz6U1cZR+WHmTQX8KLoR3QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzdmYzU0ZmItNzI0ZS00MzE2LWI5YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVG Q0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBBMkU4NDc3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEQ3MjY3NUZDRkE1MzU3MTk0N0U1ODc5OTM0MTdGMEEyRTg0 Nzc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3 RjBBMkU4NDc3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6BUrZWC4vP0YoQ8+OGZ7aJHAp7H9PYX5qZ pKafE5WpKDRVjTdvkgsKSkTlzfSX9EWc3hqg4CAeW+XZHaqFUoCrVdADvB7VJkYY A2HfhKl641cQ1/YQAgfeIDszhVWwE+b9erGRCALPmoppTAbhKz9aQ3HV+3FNyREa 4/7sGjmaRKMMApCNEmpVbQxzTy6t8v9waW+hElAbL835R0SEwFtfrohLR4QDS2kE XZs9SQUa/ctJfzCgrK4tGEGYnNl1fuxhMXejBIgCN0S7q5pjW1mgC1SKEE1Xx3X7 PeBszENXaHeawVzh7HO+B1+MjMChWQ85EBEHG+3ICO0+3CXeHz8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:31 2026 by rpki-client