$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft File: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft (raw, json) Hash identifier: A//p7aTzRSoYIPuePCPhpRdWAcTaylBwCDzwOPZB5tM= Subject key identifier: 57:85:EE:22:E4:54:08:70:B5:8B:40:62:51:7F:A3:0A:67:7C:34:01 Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Certificate serial: 22608761A067E0BA1C2D727105DAF120A626EF30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft Manifest number: 37 Signing time: Thu 11 Jun 2026 14:19:05 +0000 Manifest this update: Thu 11 Jun 2026 14:14:05 +0000 Manifest next update: Fri 12 Jun 2026 16:25:05 +0000 Files and hashes: 1: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: ObskdzHhJM5YPi+vb1AkQ8nGE9gX1uyY1inXWD6vNXo=) 2: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: +hu0CwIQk5R0Cx8ZxKSynMp86E6i1MoIZ/GUTrtz3uk=) 3: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl (hash: Zc2LLvNw0neAldnRhOTSgBaPcPSz2ILqrnBy6OAEXw0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 16:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:60:87:61:a0:67:e0:ba:1c:2d:72:71:05:da:f1:20:a6:26:ef:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Validity Not Before: Jun 11 14:14:05 2026 GMT Not After : Jun 12 16:25:05 2026 GMT Subject: CN=5785EE22E4540870B58B4062517FA30A677C3401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:77:a0:98:19:59:95:7d:5b:2c:89:21:88: b5:25:ef:11:5e:83:df:7f:95:e2:5e:b8:d2:86:5d: b6:ad:1f:6a:50:d2:33:18:c6:11:02:e9:c5:88:2f: 21:a8:c4:60:6b:6c:11:66:bb:0f:33:10:a8:2b:88: a0:bb:28:79:5d:c3:13:ba:33:09:6b:ba:a1:51:57: f2:e8:55:c3:19:b3:f2:c8:47:07:e0:6d:72:e0:af: 81:54:64:db:99:01:52:ad:01:37:7c:c0:88:e7:54: 58:97:5d:a2:54:dd:51:7c:64:52:1f:aa:2a:93:5e: 05:0f:9a:47:6a:b0:06:1f:5b:e1:8a:a9:61:e3:c2: 29:1b:53:bd:32:88:a8:12:23:b3:bd:99:c7:01:ff: b1:1b:86:bf:08:5c:b2:aa:9a:f0:3b:2b:f0:ff:0c: a1:0d:f5:41:bc:56:cc:fb:4b:b3:cd:6c:2e:d3:b8: 1b:6e:55:92:60:2e:58:11:18:69:97:6e:d0:7a:16: 54:d5:07:a9:c4:4c:ef:7f:9c:d7:66:52:7d:a7:3c: fd:68:95:47:6d:6b:20:17:b7:7e:53:39:be:d1:be: 40:cd:b3:4a:28:6f:17:e4:13:bf:ba:ad:e1:a5:3e: 7c:82:a4:bc:2f:a3:d4:34:43:4f:1e:ac:7f:28:25: f7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:85:EE:22:E4:54:08:70:B5:8B:40:62:51:7F:A3:0A:67:7C:34:01 X509v3 Authority Key Identifier: keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:81:35:54:2b:18:08:3f:de:b9:5a:9a:07:68:6d:36:6b:a5: 5d:84:d0:3b:2b:5e:e7:4e:e6:9b:c9:0b:b3:2d:ce:ec:e2:de: f5:1e:bf:e9:8c:62:85:af:d0:19:7e:25:74:8a:cc:73:dc:6c: e4:c0:90:ea:9a:7c:c3:95:54:d1:a5:bc:c7:3a:74:cf:f0:73: 78:12:7b:91:f2:09:69:87:4f:01:95:09:6c:2f:d3:6e:a3:e4: 21:48:06:58:14:3e:be:a3:43:4d:4d:33:d7:d5:7a:3a:92:3c: a5:96:db:c2:58:2c:e2:06:f1:4f:33:7e:79:0d:47:08:70:c9: 77:3c:e4:39:7d:f2:7e:93:6b:70:2c:0c:9e:9a:e5:1f:b7:f2: b7:36:81:0b:8f:84:3b:fb:22:9a:01:70:16:01:7a:05:59:6b: 1a:dd:2f:b7:5e:59:51:7e:7b:06:c6:5f:6a:3f:d0:fb:91:9e: 73:65:35:0f:72:51:32:e1:f1:08:61:6f:43:ae:97:e0:cf:57: 5f:92:84:0c:95:67:08:b4:06:3c:10:85:85:9e:a4:01:f4:2d: d6:70:71:84:d8:e4:0b:b6:c6:fc:ff:3a:6f:b9:1f:e5:cb:c2: 99:8f:8a:d8:10:ab:16:b2:8f:e3:3f:cf:ee:49:dd:72:c0:c7: 38:52:4d:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImCHYaBn4LocLXJxBdrxIKYm7zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1 QTlBMEU4QjAeFw0yNjA2MTExNDE0MDVaFw0yNjA2MTIxNjI1MDVaMDMxMTAvBgNV BAMTKDU3ODVFRTIyRTQ1NDA4NzBCNThCNDA2MjUxN0ZBMzBBNjc3QzM0MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzA3egmBlZlX1bLIkhiLUl7xFe g99/leJeuNKGXbatH2pQ0jMYxhEC6cWILyGoxGBrbBFmuw8zEKgriKC7KHldwxO6 MwlruqFRV/LoVcMZs/LIRwfgbXLgr4FUZNuZAVKtATd8wIjnVFiXXaJU3VF8ZFIf qiqTXgUPmkdqsAYfW+GKqWHjwikbU70yiKgSI7O9mccB/7Ebhr8IXLKqmvA7K/D/ DKEN9UG8Vsz7S7PNbC7TuBtuVZJgLlgRGGmXbtB6FlTVB6nETO9/nNdmUn2nPP1o lUdtayAXt35TOb7RvkDNs0oobxfkE7+6reGlPnyCpLwvo9Q0Q08erH8oJfdfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV4XuIuRUCHC1i0BiUX+jCmd8NAEwHwYDVR0j BBgwFoAUOLkHw+LBEM5mOxaEx6rW2FqaDoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UxZWE1MTMtYWM2ZS00YTVmLWIzZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNF MkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1QTlBMEU4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEI5MDdDM0UyQzExMENFNjYzQjE2ODRDN0FBRDZEODVBOUEw RThCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2 RDg1QTlBMEU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaBNVQrGAg/3rlamgdobTZrpV2E0DsrXudO 5pvJC7Mtzuzi3vUev+mMYoWv0Bl+JXSKzHPcbOTAkOqafMOVVNGlvMc6dM/wc3gS e5HyCWmHTwGVCWwv026j5CFIBlgUPr6jQ01NM9fVejqSPKWW28JYLOIG8U8zfnkN RwhwyXc85Dl98n6Ta3AsDJ6a5R+38rc2gQuPhDv7IpoBcBYBegVZaxrdL7deWVF+ ewbGX2o/0PuRnnNlNQ9yUTLh8Qhhb0Oul+DPV1+ShAyVZwi0BjwQhYWepAH0LdZw cYTY5Au2xvz/Om+5H+XLwpmPitgQqxayj+M/z+5J3XLAxzhSTXs= -----END CERTIFICATE-----Generated at Fri Jun 12 06:03:38 2026 by rpki-client