$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft File: 3C38CDC785C4C8B22E60377271E55409582CCE11.mft (raw, json) Hash identifier: mkXmTXt+gMyeif2CQz7ATcqFPn9XugiSIpQLmFq7cbE= Subject key identifier: 25:AA:2E:49:76:52:B4:49:DD:9D:7E:88:DE:E2:3B:EA:77:D2:80:33 Authority key identifier: 3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 Certificate issuer: /CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Certificate serial: 08F9813B09B7D00E8BE0A171B0D60C6508FCB544 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 17:46:06 +0000 Manifest this update: Wed 16 Sep 2026 17:41:06 +0000 Manifest next update: Thu 17 Sep 2026 20:16:06 +0000 Files and hashes: 1: 323430343a363134303a3a2f33322d3438203d3e20313338313433.roa (hash: 6IAAYhSuJnzcb+wPAnz95hDBr9XmKVxiIbVUzRwnFY4=) 2: 3C38CDC785C4C8B22E60377271E55409582CCE11.crl (hash: OSpdqvhErjPa/rpcmYi+BcSGFl8bkeT8fUPk5JS9x+k=) 3: 3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (hash: CNqZtOi2G7stcR7KpWbtX7pHl0DtOjDNuPcEVY0GuK4=) 4: 3130332e3133342e37372e302f32342d3234203d3e20313338313433.roa (hash: YTCmCer361lbPyWorpFl5d+Z6lvA+nitAm63kpLBrjA=) 5: 3130332e3133342e37362e302f32342d3234203d3e20313338313433.roa (hash: YRj5C4EJmHgy7/Vm8+56TmtCB98kN0pGzPis/CT4F1s=) 6: 3130332e3133342e37382e302f32342d3234203d3e20313338313433.roa (hash: uY3yyx4wQkOkesdmZiKQBfO/mX9p5Uwb9aYVUKsyBH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f9:81:3b:09:b7:d0:0e:8b:e0:a1:71:b0:d6:0c:65:08:fc:b5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C38CDC785C4C8B22E60377271E55409582CCE11 Validity Not Before: Sep 16 17:41:06 2026 GMT Not After : Sep 17 20:16:06 2026 GMT Subject: CN=25AA2E497652B449DD9D7E88DEE23BEA77D28033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:65:ca:8f:00:88:60:5d:8d:0d:93:b5:40: cf:30:0a:51:2d:50:8b:59:44:9b:e4:5e:0a:89:a0: 22:6e:c6:78:1e:1b:11:82:7c:0a:3e:e8:fa:46:0a: 3c:14:e1:90:67:c8:f9:b9:8a:b0:22:b0:29:59:c3: 52:02:fc:ed:ab:80:89:b6:7c:da:99:b6:6a:f8:f4: bb:1d:04:9d:fc:8b:c0:61:1d:68:ff:0c:11:eb:41: 26:3a:d2:63:ba:c9:57:16:4b:46:e4:b0:e6:00:12: fb:23:37:56:9e:a7:46:c6:6b:7f:30:9d:75:c0:75: 1c:65:c2:71:8f:b7:23:58:5b:25:bc:47:8d:ee:f6: 6c:57:12:a7:ad:13:66:4f:1a:51:82:48:80:46:4c: a2:f7:e4:71:99:76:f9:c0:73:76:27:c8:01:6e:d0: 66:19:e4:00:6a:e1:11:6d:62:6f:4a:0e:2a:19:a1: 0c:15:54:19:f1:9d:68:33:ff:ef:10:c6:5c:45:30: 0c:50:c2:2c:e1:64:a1:9d:9d:d5:57:cc:9e:cb:36: dc:55:57:b6:35:86:b0:cf:af:05:ea:aa:9a:da:95: 63:a4:aa:38:98:17:62:24:51:0e:f9:b3:55:8b:74: f8:ec:49:5a:90:2f:fc:6d:ea:5e:6d:22:3a:73:3a: 6b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AA:2E:49:76:52:B4:49:DD:9D:7E:88:DE:E2:3B:EA:77:D2:80:33 X509v3 Authority Key Identifier: keyid:3C:38:CD:C7:85:C4:C8:B2:2E:60:37:72:71:E5:54:09:58:2C:CE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3C38CDC785C4C8B22E60377271E55409582CCE11.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3C38CDC785C4C8B22E60377271E55409582CCE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:5d:88:07:fa:f0:76:70:77:31:e0:b3:7e:fc:fd:b0:9d:58: b8:3b:c8:38:11:9e:88:b5:40:9e:7a:2c:bb:75:5f:80:69:df: 79:ef:af:a6:2d:9f:f9:c7:99:15:b3:a4:ff:23:4d:3e:97:1b: 72:f8:c3:e2:b2:7e:37:a5:6c:b5:a2:e7:49:03:ea:c3:2b:57: 49:87:ae:8e:01:9d:b7:d6:95:d0:4f:41:5a:e2:bd:f5:ee:0e: 6a:13:de:d9:72:d1:b6:0c:3b:14:ca:c0:d1:67:e4:a0:74:7e: 28:fa:b0:5e:e7:f7:12:90:31:98:4e:60:e0:09:47:09:6f:04: bc:b3:9c:43:3d:78:98:c2:e6:fa:e7:08:2a:c6:99:98:17:b2: ff:8d:f3:0e:81:0c:a8:7e:c3:c4:87:31:12:1b:30:f2:4e:20: 16:b2:d4:49:a2:a2:e7:aa:c7:71:a3:52:d7:72:f4:ae:c2:e8: 43:9d:13:4e:47:9b:fa:cf:b9:9b:77:69:23:d9:3e:db:68:11: e7:11:14:d2:64:85:60:9c:41:8b:d1:6e:22:2e:d0:60:67:bc: 86:45:4b:2c:66:cc:92:79:59:3a:c1:a1:ee:ed:e0:96:a8:1b: 64:ec:f7:c8:34:84:37:a2:15:4b:44:88:a2:34:31:53:96:67: 1c:09:36:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCPmBOwm30A6L4KFxsNYMZQj8tUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1 ODJDQ0UxMTAeFw0yNjA5MTYxNzQxMDZaFw0yNjA5MTcyMDE2MDZaMDMxMTAvBgNV BAMTKDI1QUEyRTQ5NzY1MkI0NDlERDlEN0U4OERFRTIzQkVBNzdEMjgwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nGXKjwCIYF2NDZO1QM8wClEt UItZRJvkXgqJoCJuxngeGxGCfAo+6PpGCjwU4ZBnyPm5irAisClZw1IC/O2rgIm2 fNqZtmr49LsdBJ38i8BhHWj/DBHrQSY60mO6yVcWS0bksOYAEvsjN1aep0bGa38w nXXAdRxlwnGPtyNYWyW8R43u9mxXEqetE2ZPGlGCSIBGTKL35HGZdvnAc3YnyAFu 0GYZ5ABq4RFtYm9KDioZoQwVVBnxnWgz/+8QxlxFMAxQwizhZKGdndVXzJ7LNtxV V7Y1hrDPrwXqqpralWOkqjiYF2IkUQ75s1WLdPjsSVqQL/xt6l5tIjpzOmsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJaouSXZStEndnX6I3uI76nfSgDMwHwYDVR0j BBgwFoAUPDjNx4XEyLIuYDdyceVUCVgszhEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ3OTRkMzYtNjlmOC00NDA2LWJmOWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4 NUM0QzhCMjJFNjAzNzcyNzFFNTU0MDk1ODJDQ0UxMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQzM4Q0RDNzg1QzRDOEIyMkU2MDM3NzI3MUU1NTQwOTU4MkND RTExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ3OTRkMzYtNjlmOC00NDA2LWJm OWYtMTIyZGRkMTdmNDUwLzAvM0MzOENEQzc4NUM0QzhCMjJFNjAzNzcyNzFFNTU0 MDk1ODJDQ0UxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFdiAf68HZwdzHgs378/bCdWLg7yDgRnoi1 QJ56LLt1X4Bp33nvr6Ytn/nHmRWzpP8jTT6XG3L4w+KyfjelbLWi50kD6sMrV0mH ro4BnbfWldBPQVrivfXuDmoT3tly0bYMOxTKwNFn5KB0fij6sF7n9xKQMZhOYOAJ RwlvBLyznEM9eJjC5vrnCCrGmZgXsv+N8w6BDKh+w8SHMRIbMPJOIBay1Emioueq x3GjUtdy9K7C6EOdE05Hm/rPuZt3aSPZPttoEecRFNJkhWCcQYvRbiIu0GBnvIZF SyxmzJJ5WTrBoe7t4JaoG2Ts98g0hDeiFUtEiKI0MVOWZxwJNrE= -----END CERTIFICATE-----Generated at Thu Sep 17 11:28:37 2026 by rpki-client