$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft File: 38C91BA9AF338721219232C9918431499404172C.mft (raw, json) Hash identifier: 8BSTvlopHcrqP+iF046mZGKrICSGuOjk2PDeFLaRFSM= Subject key identifier: 75:5F:5F:60:3B:7B:B4:76:1C:A6:B6:F9:AA:FE:D2:F6:5E:B5:D3:9E Authority key identifier: 38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C Certificate issuer: /CN=38C91BA9AF338721219232C9918431499404172C Certificate serial: 3229121D5A92DB7DFC743619EAB328000D747112 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft Manifest number: EC Signing time: Sun 25 Oct 2026 20:06:51 +0000 Manifest this update: Sun 25 Oct 2026 20:01:51 +0000 Manifest next update: Mon 26 Oct 2026 23:52:51 +0000 Files and hashes: 1: 3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (hash: zOWeWT233iCaXUnNmK3rbLFG6s1ycb/WigqBJUoBSfM=) 2: 3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (hash: mu8XBJ0C/UdHjFffaiRYLXyHpdMvYTXgCTRd/6Q8yEQ=) 3: 38C91BA9AF338721219232C9918431499404172C.crl (hash: AS496IASJz2hMWaYyIyNIxBmxPR+Ou5v0phmL5vLTTY=) 4: 3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (hash: fqwIOY8dFjuWhu5mNkdGZq4kqZXdOIhE1mabARq0Xoc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:29:12:1d:5a:92:db:7d:fc:74:36:19:ea:b3:28:00:0d:74:71:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C91BA9AF338721219232C9918431499404172C Validity Not Before: Oct 25 20:01:51 2026 GMT Not After : Oct 26 23:52:51 2026 GMT Subject: CN=755F5F603B7BB4761CA6B6F9AAFED2F65EB5D39E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b0:a6:fe:cb:fd:d3:df:41:07:45:69:c8:18: a7:fe:01:92:56:97:64:18:08:14:5d:86:9b:84:c1: fb:39:0f:d3:dd:2e:39:ae:c2:6a:21:e4:a4:da:76: d9:3d:5a:ba:36:7f:30:b0:06:32:10:24:92:46:cd: 9e:c0:54:14:15:90:38:e1:7f:6f:f2:34:fc:47:2e: 9c:fd:5a:f5:89:21:03:55:50:d1:3b:49:05:e8:9d: ae:ca:60:88:2d:5a:51:a0:4a:1b:77:dd:c7:a4:8f: 83:9f:64:46:20:07:e0:71:f1:f7:c2:9c:ac:74:3b: fb:cc:14:36:3d:62:c7:2d:4a:00:14:4d:31:18:7c: c1:58:59:5f:4e:11:c9:05:4b:10:80:35:49:61:31: 37:b7:ee:9e:d2:b5:c4:53:89:18:2f:e2:f8:3e:3c: 7a:19:b5:67:9f:de:33:43:d6:ee:56:65:3c:55:37: f0:95:72:ed:f1:37:b7:e0:10:78:94:33:d9:df:b9: ce:b7:3f:64:1d:b7:51:bf:4b:91:6a:04:b2:3c:7a: cf:40:20:6b:0d:6f:5a:4b:ca:00:c8:aa:53:01:7f: 4e:c5:c7:73:e5:fd:e0:f9:ea:8b:5c:e1:07:97:cc: 7a:f4:38:05:72:76:72:9f:83:9d:a8:3f:12:6d:b8: 12:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5F:5F:60:3B:7B:B4:76:1C:A6:B6:F9:AA:FE:D2:F6:5E:B5:D3:9E X509v3 Authority Key Identifier: keyid:38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:89:b2:1e:34:45:bc:b2:60:44:49:ba:2d:c0:8c:1b:92:35: cc:d4:b9:9c:b8:62:37:99:68:ea:35:4c:90:52:cb:01:e1:8e: 22:1e:cc:23:4e:f6:4f:7e:00:f9:e2:20:bf:84:b5:87:a9:1d: 18:75:ff:14:ea:7b:bc:21:c8:bf:4e:bb:3a:31:99:61:66:ca: 72:55:12:8b:70:30:7c:70:ea:0c:31:9b:d5:d6:37:f1:7a:4c: d0:40:87:1d:89:9b:d9:e5:cc:46:31:c8:ca:e4:6f:3d:8b:4e: 8e:b6:7d:5b:83:f3:5a:4d:78:40:0d:08:11:e7:cb:ed:f3:57: d7:a0:0b:95:b7:68:56:93:4d:ad:77:2c:36:3e:57:7d:a4:59: 6d:0b:17:78:4f:9a:58:bb:6d:f2:58:25:61:e3:97:d8:12:da: f6:66:28:66:d7:fb:d9:d1:9a:09:e8:f8:39:c6:af:31:2a:c6: 14:2d:fb:50:4a:7c:47:11:ce:0b:d3:85:19:ae:1d:d7:f7:a6: ce:0b:19:2f:1c:63:48:e6:f8:d6:27:59:da:18:5b:24:87:cd: 37:92:e4:3b:ee:9d:7f:87:c2:f5:1c:72:8d:8f:f7:87:23:f5: 6e:76:f1:60:c5:7b:c8:cc:e0:65:50:9c:c4:90:c5:30:af:07: 66:58:47:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMikSHVqS2338dDYZ6rMoAA10cRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5 NDA0MTcyQzAeFw0yNjEwMjUyMDAxNTFaFw0yNjEwMjYyMzUyNTFaMDMxMTAvBgNV BAMTKDc1NUY1RjYwM0I3QkI0NzYxQ0E2QjZGOUFBRkVEMkY2NUVCNUQzOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYsKb+y/3T30EHRWnIGKf+AZJW l2QYCBRdhpuEwfs5D9PdLjmuwmoh5KTadtk9Wro2fzCwBjIQJJJGzZ7AVBQVkDjh f2/yNPxHLpz9WvWJIQNVUNE7SQXona7KYIgtWlGgSht33cekj4OfZEYgB+Bx8ffC nKx0O/vMFDY9YsctSgAUTTEYfMFYWV9OEckFSxCANUlhMTe37p7StcRTiRgv4vg+ PHoZtWef3jND1u5WZTxVN/CVcu3xN7fgEHiUM9nfuc63P2Qdt1G/S5FqBLI8es9A IGsNb1pLygDIqlMBf07Fx3Pl/eD56otc4QeXzHr0OAVydnKfg52oPxJtuBK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdV9fYDt7tHYcprb5qv7S9l61054wHwYDVR0j BBgwFoAUOMkbqa8zhyEhkjLJkYQxSZQEFywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTU0MzI0MWItY2ZkMS00Y2JiLTkyMTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlB RjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5NDA0MTcyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOEM5MUJBOUFGMzM4NzIxMjE5MjMyQzk5MTg0MzE0OTk0MDQx NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky MTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMx NDk5NDA0MTcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyJsh40RbyyYERJui3AjBuSNczUuZy4YjeZ aOo1TJBSywHhjiIezCNO9k9+APniIL+EtYepHRh1/xTqe7whyL9OuzoxmWFmynJV EotwMHxw6gwxm9XWN/F6TNBAhx2Jm9nlzEYxyMrkbz2LTo62fVuD81pNeEANCBHn y+3zV9egC5W3aFaTTa13LDY+V32kWW0LF3hPmli7bfJYJWHjl9gS2vZmKGbX+9nR mgno+DnGrzEqxhQt+1BKfEcRzgvThRmuHdf3ps4LGS8cY0jm+NYnWdoYWySHzTeS 5DvunX+HwvUcco2P94cj9W528WDFe8jM4GVQnMSQxTCvB2ZYR9g= -----END CERTIFICATE-----Generated at Mon Oct 26 02:19:42 2026 by rpki-client