$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft File: 38F5CCFB43C14A0A6D836EE754A8073545066216.mft (raw, json) Hash identifier: LY5wjb6aIe9qy7pTyy3L8OUeJeoS9ypzQZdWBSPgFAs= Subject key identifier: 4D:3F:6D:40:1B:C4:7A:0F:17:08:8D:24:A9:0B:B2:A1:72:9D:33:67 Authority key identifier: 38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 Certificate issuer: /CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Certificate serial: 5C6BB902D78A6EA02C51142E03A1BD372A8D4966 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 06:16:11 +0000 Manifest this update: Thu 17 Sep 2026 06:11:11 +0000 Manifest next update: Fri 18 Sep 2026 10:00:11 +0000 Files and hashes: 1: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (hash: pMseYXhaROm6EYmzpm8l2beM5snzhmulBoKAFnDhIs8=) 2: 38F5CCFB43C14A0A6D836EE754A8073545066216.crl (hash: 7nT21kx+nUu9vz3N6EwLP1fWeX2GSjMtSgHoPrJd45c=) 3: 3130332e3136382e3134392e302f32342d3234203d3e20313532303038.roa (hash: nyod0CT/fB5gH7ANBUTQG+Fhk9ZB7fad+xE68OSLCI0=) 4: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (hash: f8d867FdOKPAI9FI9ckkqBnXV6BMv6oUu/lBMN4pJIk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:6b:b9:02:d7:8a:6e:a0:2c:51:14:2e:03:a1:bd:37:2a:8d:49:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F5CCFB43C14A0A6D836EE754A8073545066216 Validity Not Before: Sep 17 06:11:11 2026 GMT Not After : Sep 18 10:00:11 2026 GMT Subject: CN=4D3F6D401BC47A0F17088D24A90BB2A1729D3367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:96:af:95:37:20:bf:6f:2d:d7:ba:7d:54: 0e:c2:67:e5:e8:45:db:0c:6f:88:f1:0b:76:eb:84: ae:71:f0:8d:0a:9b:d3:30:d6:85:0e:c3:86:7a:7e: 96:d9:82:06:fe:d1:d7:76:24:ca:7b:e6:52:76:94: 1d:70:18:44:ae:51:44:31:5a:e8:79:1a:6f:35:3f: d5:cb:44:13:cf:65:f8:4a:7c:d1:d8:17:b1:11:94: de:34:f8:b4:f1:34:b6:b4:95:bf:73:ac:c0:a9:d5: 77:48:a7:e5:70:b8:0f:9f:aa:07:b8:09:58:5f:71: 98:63:87:03:8d:e3:44:97:b0:d8:a0:ee:bb:2b:74: b2:69:15:06:85:e1:05:2e:79:fa:b1:54:db:ac:b0: 7a:ec:c7:e9:46:da:b2:a3:bc:71:12:85:4c:86:57: dc:95:ef:b2:ee:9a:f1:30:85:cd:93:d3:2d:08:26: 58:68:83:e5:55:2e:a4:32:bf:98:f2:3a:f8:d5:2c: 87:96:ea:a4:d4:f1:20:3c:d4:fd:71:10:e6:fe:79: 0b:1c:38:3d:a6:26:df:75:7a:f5:a2:8c:e0:34:36: 9e:26:a7:b9:c4:4a:f5:dd:33:a2:89:35:61:19:9a: 34:3f:8d:d5:3f:39:9e:97:07:d0:2a:cd:fc:c7:87: 27:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3F:6D:40:1B:C4:7A:0F:17:08:8D:24:A9:0B:B2:A1:72:9D:33:67 X509v3 Authority Key Identifier: keyid:38:F5:CC:FB:43:C1:4A:0A:6D:83:6E:E7:54:A8:07:35:45:06:62:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38F5CCFB43C14A0A6D836EE754A8073545066216.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/38F5CCFB43C14A0A6D836EE754A8073545066216.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:3e:09:35:63:fa:3e:79:5d:cc:7c:26:49:ee:7c:38:96:3f: f7:9f:fc:66:36:7e:b6:16:e7:17:54:b0:5c:df:f1:a4:66:5f: c4:14:10:32:ea:26:d6:77:b3:f3:bf:45:4e:6d:98:36:ba:93: 8c:8f:1f:f9:af:17:5c:a3:a4:9c:bf:27:5a:46:ea:e6:e3:43: 59:f1:56:89:f4:e5:98:d7:2a:d3:9c:7b:1b:5b:38:ff:70:0e: ad:08:ca:54:46:d3:e5:3d:a3:f3:a0:03:ec:bd:c8:6f:b6:0c: 8d:79:c8:01:48:2a:f9:27:69:6d:d6:ba:bf:9b:c4:ea:ad:92: 1e:ad:c1:cb:f5:f5:28:ba:64:e8:c7:fd:63:d4:c9:85:6b:ad: 4a:41:5f:e6:db:89:01:70:7a:40:c7:b6:50:12:0e:d1:cc:3d: b4:0b:98:89:1e:03:ca:62:1f:b5:8e:03:c9:9d:33:84:db:6c: 9a:14:59:78:4b:5a:f1:1d:d8:d7:c4:49:c0:66:3b:6d:f5:0a: 34:d2:7c:2a:84:97:0b:5a:ee:c3:75:62:9c:0e:88:18:1f:6a: 66:57:54:c2:9f:3c:db:60:ec:91:2f:f4:e2:2e:61:74:b8:37: 4b:3a:8a:c9:c6:06:8c:6f:4a:05:08:c5:d8:be:64:04:dc:0d: ec:cb:9b:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXGu5AteKbqAsURQuA6G9NyqNSWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGNUNDRkI0M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0 NTA2NjIxNjAeFw0yNjA5MTcwNjExMTFaFw0yNjA5MTgxMDAwMTFaMDMxMTAvBgNV BAMTKDREM0Y2RDQwMUJDNDdBMEYxNzA4OEQyNEE5MEJCMkExNzI5RDMzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RJavlTcgv28t17p9VA7CZ+Xo RdsMb4jxC3brhK5x8I0Km9Mw1oUOw4Z6fpbZggb+0dd2JMp75lJ2lB1wGESuUUQx Wuh5Gm81P9XLRBPPZfhKfNHYF7ERlN40+LTxNLa0lb9zrMCp1XdIp+VwuA+fqge4 CVhfcZhjhwON40SXsNig7rsrdLJpFQaF4QUuefqxVNussHrsx+lG2rKjvHEShUyG V9yV77LumvEwhc2T0y0IJlhog+VVLqQyv5jyOvjVLIeW6qTU8SA81P1xEOb+eQsc OD2mJt91evWijOA0Np4mp7nESvXdM6KJNWEZmjQ/jdU/OZ6XB9AqzfzHhydNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTT9tQBvEeg8XCI0kqQuyoXKdM2cwHwYDVR0j BBgwFoAUOPXM+0PBSgptg27nVKgHNUUGYhYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGRkMDc4ZmUtMDkzMC00NWRjLWI0MDMtM2NlNGU4NjNmOGI1LzAvMzhGNUNDRkI0 M0MxNEEwQTZEODM2RUU3NTRBODA3MzU0NTA2NjIxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEY1Q0NGQjQzQzE0QTBBNkQ4MzZFRTc1NEE4MDczNTQ1MDY2 MjE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGRkMDc4ZmUtMDkzMC00NWRjLWI0 MDMtM2NlNGU4NjNmOGI1LzAvMzhGNUNDRkI0M0MxNEEwQTZEODM2RUU3NTRBODA3 MzU0NTA2NjIxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABw+CTVj+j55Xcx8JknufDiWP/ef/GY2frYW 5xdUsFzf8aRmX8QUEDLqJtZ3s/O/RU5tmDa6k4yPH/mvF1yjpJy/J1pG6ubjQ1nx Von05ZjXKtOcextbOP9wDq0IylRG0+U9o/OgA+y9yG+2DI15yAFIKvknaW3Wur+b xOqtkh6twcv19Si6ZOjH/WPUyYVrrUpBX+bbiQFwekDHtlASDtHMPbQLmIkeA8pi H7WOA8mdM4TbbJoUWXhLWvEd2NfEScBmO231CjTSfCqElwta7sN1YpwOiBgfamZX VMKfPNtg7JEv9OIuYXS4N0s6isnGBoxvSgUIxdi+ZATcDezLm2g= -----END CERTIFICATE-----Generated at Thu Sep 17 09:22:50 2026 by rpki-client