$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft File: 38C91BA9AF338721219232C9918431499404172C.mft (raw, json) Hash identifier: ljpzyqnCxVDg6j5a2by75HPj0EsudDAupIF+K1Vfh/8= Subject key identifier: CA:05:E4:53:C8:F6:EE:81:B3:57:28:79:5D:2A:39:AC:EC:F9:E0:FF Authority key identifier: 38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C Certificate issuer: /CN=38C91BA9AF338721219232C9918431499404172C Certificate serial: 643EA3BC93DAFDEDDF7602D647BA6EF52027E208 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 04:02:43 +0000 Manifest this update: Thu 03 Sep 2026 03:57:43 +0000 Manifest next update: Fri 04 Sep 2026 04:04:43 +0000 Files and hashes: 1: 3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (hash: zOWeWT233iCaXUnNmK3rbLFG6s1ycb/WigqBJUoBSfM=) 2: 3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (hash: mu8XBJ0C/UdHjFffaiRYLXyHpdMvYTXgCTRd/6Q8yEQ=) 3: 3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (hash: fqwIOY8dFjuWhu5mNkdGZq4kqZXdOIhE1mabARq0Xoc=) 4: 38C91BA9AF338721219232C9918431499404172C.crl (hash: b8dMHzCkXnoQTxYFw/NrMHEBYSm+8OPS0RediRC56Y8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3e:a3:bc:93:da:fd:ed:df:76:02:d6:47:ba:6e:f5:20:27:e2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C91BA9AF338721219232C9918431499404172C Validity Not Before: Sep 3 03:57:43 2026 GMT Not After : Sep 4 04:04:43 2026 GMT Subject: CN=CA05E453C8F6EE81B35728795D2A39ACECF9E0FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:38:49:c5:e5:84:4f:bb:20:b7:4b:fa:40: 01:1d:f9:f5:e7:16:42:b1:40:60:c0:56:56:9b:cc: 3f:65:1c:7e:56:d9:a5:b2:cf:8e:4f:8e:81:6e:85: e8:78:87:d5:5d:91:36:72:53:2b:dc:12:e4:bc:53: b7:e6:94:47:e6:af:a9:2a:05:bc:8b:f6:cd:1b:19: fe:68:53:b2:28:0f:4b:30:0c:2f:82:70:ed:76:41: c6:70:56:c5:52:e0:35:c0:8f:35:7e:6a:1d:b1:c5: 80:fc:5d:47:bc:8a:71:4c:54:8e:1c:c7:67:fd:62: ba:32:15:00:8c:c0:56:bd:c5:9c:7a:d3:a4:0e:1f: 76:dd:96:de:ce:d7:4f:b1:40:e9:87:59:70:6f:0d: c0:bf:11:c3:5f:7d:1b:0a:0c:ec:0b:5e:5d:38:67: 5f:1a:53:91:d2:26:8a:1b:db:92:8c:f1:1d:7f:8a: 47:0c:2d:56:1d:1d:ea:6e:41:61:8d:8d:57:59:24: 4b:cb:ed:58:3d:10:ac:27:27:eb:2d:88:55:67:97: 03:db:e7:4e:5a:75:c9:f4:8e:20:4b:68:b4:ca:bf: 94:11:7b:45:21:e8:88:fb:bf:04:98:8e:3f:4f:5a: 0f:2a:3b:6e:18:96:49:7a:b2:22:82:bc:a5:c9:bc: 19:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:05:E4:53:C8:F6:EE:81:B3:57:28:79:5D:2A:39:AC:EC:F9:E0:FF X509v3 Authority Key Identifier: keyid:38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3a:a0:99:16:eb:7d:e2:2f:20:c9:73:d8:ee:d9:41:66:bb: a7:15:d4:cb:6f:35:18:4c:28:98:b7:3f:a9:04:27:7c:4f:f0: e8:04:cd:0d:d8:f5:7d:9e:ea:96:3d:a9:73:c8:3a:3f:08:ca: 07:07:cd:1a:36:9d:98:11:f9:56:e7:a7:fe:14:c0:13:e4:56: 50:26:7e:20:bc:2e:56:58:6f:0b:0e:72:58:02:1a:44:ab:98: 2b:c5:de:4f:d6:c4:fa:db:1d:9d:d9:3a:cf:ff:b1:03:e0:02: 4f:1c:5d:1a:24:23:8f:da:44:5f:97:bf:cc:ee:80:b2:09:0a: 8b:ad:ae:e9:67:7d:11:97:87:83:15:14:81:89:c8:8c:43:18: ac:61:e0:05:04:b9:1e:9f:0e:84:50:92:5a:1f:06:6b:41:e2: 9c:85:a3:d3:69:ee:b7:12:fd:ad:32:ff:f9:41:b1:66:a7:05: fb:9c:b5:8c:61:e0:fd:4a:0d:5d:9d:6a:fb:1e:63:1d:83:9b: a8:10:f9:5a:af:f3:85:26:fa:5e:a0:d4:3b:62:e4:ae:d5:6a: 68:80:f0:ad:c9:1d:7f:fc:43:76:80:b6:47:81:f1:a7:1e:bc: 7f:75:9b:0e:87:08:8d:7c:cd:95:c8:0c:f2:b5:8e:00:d4:91: 4c:12:38:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZD6jvJPa/e3fdgLWR7pu9SAn4ggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5 NDA0MTcyQzAeFw0yNjA5MDMwMzU3NDNaFw0yNjA5MDQwNDA0NDNaMDMxMTAvBgNV BAMTKENBMDVFNDUzQzhGNkVFODFCMzU3Mjg3OTVEMkEzOUFDRUNGOUUwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpjhJxeWET7sgt0v6QAEd+fXn FkKxQGDAVlabzD9lHH5W2aWyz45PjoFuheh4h9VdkTZyUyvcEuS8U7fmlEfmr6kq BbyL9s0bGf5oU7IoD0swDC+CcO12QcZwVsVS4DXAjzV+ah2xxYD8XUe8inFMVI4c x2f9YroyFQCMwFa9xZx606QOH3bdlt7O10+xQOmHWXBvDcC/EcNffRsKDOwLXl04 Z18aU5HSJoob25KM8R1/ikcMLVYdHepuQWGNjVdZJEvL7Vg9EKwnJ+stiFVnlwPb 505adcn0jiBLaLTKv5QRe0Uh6Ij7vwSYjj9PWg8qO24Ylkl6siKCvKXJvBkBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUygXkU8j27oGzVyh5XSo5rOz54P8wHwYDVR0j BBgwFoAUOMkbqa8zhyEhkjLJkYQxSZQEFywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTU0MzI0MWItY2ZkMS00Y2JiLTkyMTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlB RjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5NDA0MTcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEM5MUJBOUFGMzM4NzIxMjE5MjMyQzk5MTg0MzE0OTk0MDQx NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky MTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMx NDk5NDA0MTcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAY6oJkW633iLyDJc9ju2UFmu6cV1MtvNRhM KJi3P6kEJ3xP8OgEzQ3Y9X2e6pY9qXPIOj8IygcHzRo2nZgR+Vbnp/4UwBPkVlAm fiC8LlZYbwsOclgCGkSrmCvF3k/WxPrbHZ3ZOs//sQPgAk8cXRokI4/aRF+Xv8zu gLIJCoutrulnfRGXh4MVFIGJyIxDGKxh4AUEuR6fDoRQklofBmtB4pyFo9Np7rcS /a0y//lBsWanBfuctYxh4P1KDV2davseYx2Dm6gQ+Vqv84Um+l6g1Dti5K7VamiA 8K3JHX/8Q3aAtkeB8acevH91mw6HCI18zZXIDPK1jgDUkUwSOIk= -----END CERTIFICATE-----Generated at Thu Sep 3 05:58:10 2026 by rpki-client