$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft File: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft (raw, json) Hash identifier: tjCyv1VbbRk5VoMiepU/uT+hVF4Mo3VboxW/Col0Yqo= Subject key identifier: F7:0C:39:B7:08:D1:9D:24:B8:F3:85:A7:CE:B8:3C:BF:04:7E:AB:82 Authority key identifier: 38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B Certificate issuer: /CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Certificate serial: 1379D9FD5B1BB63E6A61A93C2D6DA640EB6F827E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft Manifest number: 73 Signing time: Mon 27 Jul 2026 04:48:47 +0000 Manifest this update: Mon 27 Jul 2026 04:43:47 +0000 Manifest next update: Tue 28 Jul 2026 06:59:47 +0000 Files and hashes: 1: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: ObskdzHhJM5YPi+vb1AkQ8nGE9gX1uyY1inXWD6vNXo=) 2: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: +hu0CwIQk5R0Cx8ZxKSynMp86E6i1MoIZ/GUTrtz3uk=) 3: 38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl (hash: /YcUr/+TPps1THb3ZvZazXj5zFLe9nNv6dlF4mNKYJQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:79:d9:fd:5b:1b:b6:3e:6a:61:a9:3c:2d:6d:a6:40:eb:6f:82:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B Validity Not Before: Jul 27 04:43:47 2026 GMT Not After : Jul 28 06:59:47 2026 GMT Subject: CN=F70C39B708D19D24B8F385A7CEB83CBF047EAB82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:be:97:06:41:0d:cf:5b:12:1c:95:d6:bc: 53:d4:2f:44:87:da:8d:ff:ed:17:d6:29:1a:64:27: dc:fb:39:37:02:61:1f:2c:34:8c:fa:cc:f9:0a:02: ec:e8:28:82:fc:7f:b7:9f:ad:9e:9d:2c:55:fa:dd: 4c:02:3d:f7:6a:61:43:fd:e8:cf:b6:9e:fa:a9:7f: 94:c9:b4:6a:81:85:0c:d5:0a:c0:fa:b9:ac:4d:13: 94:3c:39:26:04:81:04:22:27:26:4d:48:5d:3a:a7: bf:a3:f7:e1:5c:bd:b9:c2:4b:b6:e0:07:de:c9:85: 9c:11:b9:f5:b6:68:31:eb:f8:d1:dd:3a:71:b2:0c: 5c:43:31:22:63:2e:e2:ae:34:c1:32:c7:c4:db:14: 35:1c:a5:11:00:93:ae:f8:f9:c9:30:71:89:f6:b0: b6:00:0c:48:f1:80:ba:c2:d8:a0:70:03:4f:34:03: 4c:37:73:ae:5c:e7:07:8f:df:cc:ea:ec:18:18:5d: 65:f0:3e:00:a5:09:6e:00:68:79:4f:a8:3d:fc:5d: 5f:15:c3:04:0a:8f:9a:9e:02:cc:70:ba:de:78:1e: a3:de:d3:1e:aa:5c:ce:cc:1d:97:6c:a8:16:c9:76: 25:3c:69:9f:37:e8:1e:93:08:c4:2e:e1:29:f9:f2: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0C:39:B7:08:D1:9D:24:B8:F3:85:A7:CE:B8:3C:BF:04:7E:AB:82 X509v3 Authority Key Identifier: keyid:38:B9:07:C3:E2:C1:10:CE:66:3B:16:84:C7:AA:D6:D8:5A:9A:0E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/38B907C3E2C110CE663B1684C7AAD6D85A9A0E8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:83:1a:61:e2:ab:21:cc:32:f4:43:74:94:d7:32:ab:ec:f6: c4:34:c2:ec:65:54:6b:97:ed:84:1d:bb:b8:1e:cf:a3:43:da: ea:4f:44:d6:c4:f3:88:09:c6:e2:d2:06:05:24:da:64:98:de: 5d:f0:c3:bc:31:e6:80:1d:7d:9f:03:fb:24:63:32:c7:97:10: 28:73:09:7e:44:a4:c7:b6:d7:0e:fc:69:8b:a6:39:02:60:2a: 85:5f:e3:5a:37:46:4d:ba:de:96:b0:ef:88:97:d3:4b:90:b7: 8b:e3:7d:81:3a:b1:e4:2b:12:13:dd:ae:a4:69:de:1c:05:3c: 91:0a:78:52:f8:d7:58:84:0e:fb:d3:e8:a0:b7:3e:f7:1c:94: a9:31:a2:7b:9b:a3:43:c9:e2:79:45:5f:2f:87:41:f4:e3:8e: 30:b7:e7:bb:60:c8:37:41:83:42:44:67:a9:f2:e4:3c:20:95: 4d:10:0a:59:ae:c2:9c:d2:d8:77:14:5d:60:66:0a:8d:35:b5: 77:17:ae:c6:5f:b6:d5:7c:93:a0:65:86:bd:d0:c2:56:95:eb: e9:1d:a6:0b:ac:32:ba:0a:c3:d8:82:75:59:ec:8a:c4:fd:29: f2:6b:2f:97:1b:28:bc:bf:3f:32:6e:36:bc:98:cd:fe:68:25: 88:4c:4a:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3nZ/Vsbtj5qYak8LW2mQOtvgn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1 QTlBMEU4QjAeFw0yNjA3MjcwNDQzNDdaFw0yNjA3MjgwNjU5NDdaMDMxMTAvBgNV BAMTKEY3MEMzOUI3MDhEMTlEMjRCOEYzODVBN0NFQjgzQ0JGMDQ3RUFCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoRr6XBkENz1sSHJXWvFPUL0SH 2o3/7RfWKRpkJ9z7OTcCYR8sNIz6zPkKAuzoKIL8f7efrZ6dLFX63UwCPfdqYUP9 6M+2nvqpf5TJtGqBhQzVCsD6uaxNE5Q8OSYEgQQiJyZNSF06p7+j9+FcvbnCS7bg B97JhZwRufW2aDHr+NHdOnGyDFxDMSJjLuKuNMEyx8TbFDUcpREAk674+ckwcYn2 sLYADEjxgLrC2KBwA080A0w3c65c5weP38zq7BgYXWXwPgClCW4AaHlPqD38XV8V wwQKj5qeAsxwut54HqPe0x6qXM7MHZdsqBbJdiU8aZ836B6TCMQu4Sn58vyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ww5twjRnSS484Wnzrg8vwR+q4IwHwYDVR0j BBgwFoAUOLkHw+LBEM5mOxaEx6rW2FqaDoswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2UxZWE1MTMtYWM2ZS00YTVmLWIzZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNF MkMxMTBDRTY2M0IxNjg0QzdBQUQ2RDg1QTlBMEU4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEI5MDdDM0UyQzExMENFNjYzQjE2ODRDN0FBRDZEODVBOUEw RThCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMzhCOTA3QzNFMkMxMTBDRTY2M0IxNjg0QzdBQUQ2 RDg1QTlBMEU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKDGmHiqyHMMvRDdJTXMqvs9sQ0wuxlVGuX 7YQdu7gez6ND2upPRNbE84gJxuLSBgUk2mSY3l3ww7wx5oAdfZ8D+yRjMseXEChz CX5EpMe21w78aYumOQJgKoVf41o3Rk263paw74iX00uQt4vjfYE6seQrEhPdrqRp 3hwFPJEKeFL411iEDvvT6KC3PvcclKkxonubo0PJ4nlFXy+HQfTjjjC357tgyDdB g0JEZ6ny5DwglU0QClmuwpzS2HcUXWBmCo01tXcXrsZfttV8k6Blhr3QwlaV6+kd pgusMroKw9iCdVnsisT9KfJrL5cbKLy/PzJuNryYzf5oJYhMSl4= -----END CERTIFICATE-----Generated at Mon Jul 27 14:20:06 2026 by rpki-client