$ rpki-client -vvf rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft File: 38D72675FCFA53571947E587993417F0A2E84774.mft (raw, json) Hash identifier: N58Yh+xre/KEikElCYcOy0GtHP8qs2krDw+jok1Xlug= Subject key identifier: 21:BD:BA:07:48:AB:8D:A0:41:D3:79:2C:98:6E:A3:9B:E7:F2:61:A1 Authority key identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 Certificate issuer: /CN=38D72675FCFA53571947E587993417F0A2E84774 Certificate serial: 55B79AE218DFD3A4C5DC788DEDDBE50A1C409084 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft Manifest number: 6A Signing time: Sun 19 Jul 2026 21:03:01 +0000 Manifest this update: Sun 19 Jul 2026 20:58:01 +0000 Manifest next update: Mon 20 Jul 2026 22:46:01 +0000 Files and hashes: 1: 3131342e3134312e39342e302f32342d3234203d3e203338373733.roa (hash: KBgcMCCrYhviN35Lsj+SDe+UfidQ9sTv4EpZKCSDnc4=) 2: 38D72675FCFA53571947E587993417F0A2E84774.crl (hash: w31dB48zFK9gOCYFnVX7/oNQSt2BtkT/0NNvk3t3Vyk=) 3: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: FscfLd+VmMO0VIBUn9YaLAaHtn1/p9aWzjIEPbsat1U=) 4: 3131342e3134312e39312e302f32342d3234203d3e203338373733.roa (hash: 4dNfe19s0fvjSguokSLbqrRLsnLRnuoEvEhmGuqBlvY=) 5: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: uTIMEfksgIfw3pC5q8pYKmgEjBmK5dhPwmsdESCHDfM=) 6: 3131342e3134312e39352e302f32342d3234203d3e203338373733.roa (hash: BtBofw2ddLFZvd8330UeqRlGDcKEpNlQwCfV2FpF8/w=) 7: 3131342e3134312e39332e302f32342d3234203d3e203338373733.roa (hash: So6HCFRYfBIDo3Yy4ADeQ9cjX7P8uCC8BIv2/s6u/0g=) 8: 3131342e3134312e39322e302f32342d3234203d3e203338373733.roa (hash: 81ry6DUJ7vS8X5kvVlKujeT3BQmxdahLH8ZK0O09vk0=) 9: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 60QvD+kuWCtJFdascF9uuaceBf/9kdy2qmj8qDdkANM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:b7:9a:e2:18:df:d3:a4:c5:dc:78:8d:ed:db:e5:0a:1c:40:90:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38D72675FCFA53571947E587993417F0A2E84774 Validity Not Before: Jul 19 20:58:01 2026 GMT Not After : Jul 20 22:46:01 2026 GMT Subject: CN=21BDBA0748AB8DA041D3792C986EA39BE7F261A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:00:b7:61:f7:96:b1:24:f0:57:51:bd:d1:b2: 83:e6:6b:c7:40:87:6b:a6:77:13:a3:1e:16:5a:5b: 63:85:2b:0b:23:7a:65:41:10:9c:ae:e4:2e:9c:05: a3:0f:fc:79:29:14:58:5d:40:06:31:0a:93:ec:20: 6e:48:27:b4:64:fb:b2:03:a7:e2:46:1b:b8:8a:ec: 8b:a3:9c:35:ca:48:fc:b2:0b:d2:58:0f:dc:69:6e: 29:41:af:03:f7:e4:02:73:b4:b6:1b:dc:b0:c8:7e: 61:c5:fe:ba:3a:18:0f:aa:58:33:91:68:4e:98:c9: 82:d0:33:d9:33:37:2b:8c:b0:b7:3d:ba:2d:b8:e5: 89:30:cc:e1:34:86:b4:63:ba:e4:37:fe:da:9b:9a: 27:f4:7b:02:e2:c2:29:b8:d4:69:b8:cf:19:b6:37: f4:20:95:ca:12:2c:ad:cd:92:20:38:3c:d0:1e:1c: 4c:9a:2d:86:7e:ea:04:0d:ff:53:d3:f3:b2:b1:0c: 95:45:bf:3f:f4:ef:39:de:fa:1a:e5:71:65:b1:7a: 32:17:93:d4:9f:93:a5:33:98:15:51:21:ec:4c:fe: 44:15:97:06:ed:07:aa:79:16:a0:6d:8c:b1:74:ec: c8:e1:22:b7:f3:00:b9:1e:a7:5e:fb:82:1b:7b:9c: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BD:BA:07:48:AB:8D:A0:41:D3:79:2C:98:6E:A3:9B:E7:F2:61:A1 X509v3 Authority Key Identifier: keyid:38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:66:07:fd:93:fd:88:ca:3b:62:aa:82:c1:96:58:32:a2:46: 70:d4:66:19:d0:bc:cf:b8:c1:6e:ad:67:17:39:a3:6c:d6:f7: 95:89:a5:0c:27:01:0e:49:db:5a:ec:28:53:c9:c8:64:81:d3: dc:82:82:30:59:36:47:36:aa:5f:72:bc:f0:9a:2a:c7:69:7b: 10:21:23:ff:6b:c1:3f:e2:6d:4a:0d:e0:98:f6:a2:4d:28:c3: f6:cb:40:6a:25:65:18:37:70:61:76:81:31:01:fa:f9:46:3f: 02:12:55:32:d8:da:b8:8e:f6:79:73:60:c8:c0:58:99:9e:e5: 33:cb:dd:20:b8:98:2d:bb:6f:48:ef:35:7f:a8:a6:7c:b1:65: ac:a6:8e:e1:f8:5d:ea:8f:e8:ce:e1:22:05:d7:12:e2:3d:63: e8:70:08:97:ec:08:4d:14:9e:96:6f:ad:a5:e8:c8:73:12:51: 25:c7:01:6c:be:15:e0:ce:c7:2d:a3:84:de:1a:4b:98:6f:a9: 56:36:f6:65:df:ee:4c:54:e3:8a:05:e1:75:4d:1c:78:e5:9b: 4c:c0:2c:d0:b0:7d:b0:bd:c7:a6:17:19:97:8d:54:c8:2b:4a: 36:d1:36:4f:16:e8:e9:fd:09:cf:b2:64:8e:05:b8:21:e5:01: e9:59:80:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVbea4hjf06TF3HiN7dvlChxAkIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBB MkU4NDc3NDAeFw0yNjA3MTkyMDU4MDFaFw0yNjA3MjAyMjQ2MDFaMDMxMTAvBgNV BAMTKDIxQkRCQTA3NDhBQjhEQTA0MUQzNzkyQzk4NkVBMzlCRTdGMjYxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyALdh95axJPBXUb3RsoPma8dA h2umdxOjHhZaW2OFKwsjemVBEJyu5C6cBaMP/HkpFFhdQAYxCpPsIG5IJ7Rk+7ID p+JGG7iK7IujnDXKSPyyC9JYD9xpbilBrwP35AJztLYb3LDIfmHF/ro6GA+qWDOR aE6YyYLQM9kzNyuMsLc9ui245YkwzOE0hrRjuuQ3/tqbmif0ewLiwim41Gm4zxm2 N/QglcoSLK3NkiA4PNAeHEyaLYZ+6gQN/1PT87KxDJVFvz/07zne+hrlcWWxejIX k9Sfk6UzmBVRIexM/kQVlwbtB6p5FqBtjLF07MjhIrfzALkep177ght7nKmnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIb26B0irjaBB03ksmG6jm+fyYaEwHwYDVR0j BBgwFoAUONcmdfz6U1cZR+WHmTQX8KLoR3QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzdmYzU0ZmItNzI0ZS00MzE2LWI5YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVG Q0ZBNTM1NzE5NDdFNTg3OTkzNDE3RjBBMkU4NDc3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEQ3MjY3NUZDRkE1MzU3MTk0N0U1ODc5OTM0MTdGMEEyRTg0 Nzc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMzhENzI2NzVGQ0ZBNTM1NzE5NDdFNTg3OTkzNDE3 RjBBMkU4NDc3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVmB/2T/YjKO2KqgsGWWDKiRnDUZhnQvM+4 wW6tZxc5o2zW95WJpQwnAQ5J21rsKFPJyGSB09yCgjBZNkc2ql9yvPCaKsdpexAh I/9rwT/ibUoN4Jj2ok0ow/bLQGolZRg3cGF2gTEB+vlGPwISVTLY2riO9nlzYMjA WJme5TPL3SC4mC27b0jvNX+opnyxZaymjuH4XeqP6M7hIgXXEuI9Y+hwCJfsCE0U npZvraXoyHMSUSXHAWy+FeDOxy2jhN4aS5hvqVY29mXf7kxU44oF4XVNHHjlm0zA LNCwfbC9x6YXGZeNVMgrSjbRNk8W6On9Cc+yZI4FuCHlAelZgHc= -----END CERTIFICATE-----Generated at Sun Jul 19 23:48:19 2026 by rpki-client