
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft
File: 38C91BA9AF338721219232C9918431499404172C.mft (raw, json)
Hash identifier: jSGcMdvtQxCjNHRee1S4CzPITqElrzEJq5W2zJAPD8U=
Subject key identifier: 77:EF:68:3D:CC:39:37:26:0E:04:45:66:22:57:CE:C3:6E:D2:5A:08
Authority key identifier: 38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C
Certificate issuer: /CN=38C91BA9AF338721219232C9918431499404172C
Certificate serial: 0F44A5EF84658B9011CA189A10695BAD0167DF2E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 12:05:27 +0000
Manifest this update: Fri 19 Jun 2026 12:00:27 +0000
Manifest next update: Sat 20 Jun 2026 16:00:27 +0000
Files and hashes: 1: 3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (hash: zOWeWT233iCaXUnNmK3rbLFG6s1ycb/WigqBJUoBSfM=)
2: 3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (hash: fqwIOY8dFjuWhu5mNkdGZq4kqZXdOIhE1mabARq0Xoc=)
3: 38C91BA9AF338721219232C9918431499404172C.crl (hash: VAMBBNLz+c5tBlcngQw2zFovP57XzLNLhQiTlGDr9V4=)
4: 3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (hash: mu8XBJ0C/UdHjFffaiRYLXyHpdMvYTXgCTRd/6Q8yEQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl
rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:44:a5:ef:84:65:8b:90:11:ca:18:9a:10:69:5b:ad:01:67:df:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38C91BA9AF338721219232C9918431499404172C
Validity
Not Before: Jun 19 12:00:27 2026 GMT
Not After : Jun 20 16:00:27 2026 GMT
Subject: CN=77EF683DCC3937260E0445662257CEC36ED25A08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:64:b5:57:0c:ea:68:71:35:b4:69:67:77:
d7:d9:6a:20:22:f7:27:cd:86:55:45:26:2a:cc:ac:
00:f7:3d:45:a3:13:1d:2c:a8:be:18:7b:ab:4a:aa:
b1:75:a9:e3:87:b4:3f:06:46:ba:9d:ca:09:27:40:
b1:6d:5c:40:cc:5e:3d:41:3b:e5:bf:bc:2e:bc:e8:
4c:13:e4:c0:e0:94:fc:c3:cd:f5:55:f7:23:62:8f:
55:bf:2d:32:50:d7:de:3f:1a:47:8e:70:e9:7b:77:
2d:64:0b:3c:df:59:e0:4b:be:26:12:f2:f5:b8:48:
42:de:a7:b9:29:35:e0:d5:27:86:92:fd:a8:a2:2d:
23:f0:81:56:6e:91:94:53:e7:36:d5:b1:a3:c9:15:
96:bd:1a:5b:4b:96:9d:c6:fc:59:4f:79:8b:7c:cc:
a6:09:21:a3:a1:38:a4:9d:e9:40:f6:06:04:4f:e9:
57:81:0a:c4:6a:2b:1d:32:14:77:7e:78:53:f7:3b:
21:76:51:00:a4:db:6d:c2:2f:06:14:af:c8:97:e6:
28:10:72:79:17:20:ef:8a:2c:40:37:e5:86:81:91:
69:c3:25:0b:5e:8b:95:47:24:f4:b9:f7:c1:53:f1:
70:29:d3:cb:f9:47:1c:ec:4f:1b:ab:de:dd:b7:1d:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EF:68:3D:CC:39:37:26:0E:04:45:66:22:57:CE:C3:6E:D2:5A:08
X509v3 Authority Key Identifier:
keyid:38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d3:54:01:10:e2:be:c0:ec:73:d4:bc:2f:eb:35:a6:95:f6:
4d:3c:d6:8e:07:fb:da:d3:bc:c9:c7:75:e5:15:e3:3d:ba:02:
26:59:74:a4:9a:c3:f7:bc:5c:b6:8b:a1:c5:fb:ac:c5:45:de:
7c:af:05:1f:2f:12:fc:b5:06:63:50:e0:b6:d1:a3:12:09:75:
25:ff:db:ec:5c:39:5e:70:41:d7:94:81:21:13:c9:c4:98:89:
db:ab:40:47:34:41:67:04:be:52:d4:08:13:47:0f:63:22:0a:
5e:61:ed:cc:43:00:b4:b4:21:69:17:3a:d0:eb:39:94:d0:62:
9b:83:a9:ea:08:55:1c:6c:fc:1c:0a:cc:15:d4:39:d5:fd:46:
d9:0f:cf:18:ae:0f:95:7f:cb:e1:54:36:13:47:a2:d8:98:94:
23:8c:14:83:2a:78:3a:84:a9:88:be:e1:57:04:6a:8b:5e:65:
d9:24:f3:84:b8:38:f5:4d:09:f6:be:ae:d0:d8:95:4d:8a:ef:
f1:75:83:75:7d:98:9d:93:1c:eb:51:e2:94:8c:7b:76:c3:3b:
25:e0:2a:f1:af:4a:17:96:c6:33:20:cc:70:a2:a4:a4:7d:c4:
9e:41:c2:80:7f:a2:13:25:fd:fd:32:fd:2e:2c:2e:8e:c0:8d:
6b:b3:c2:28
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUD0Sl74Rli5ARyhiaEGlbrQFn3y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5
NDA0MTcyQzAeFw0yNjA2MTkxMjAwMjdaFw0yNjA2MjAxNjAwMjdaMDMxMTAvBgNV
BAMTKDc3RUY2ODNEQ0MzOTM3MjYwRTA0NDU2NjIyNTdDRUMzNkVEMjVBMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUFGS1VwzqaHE1tGlnd9fZaiAi
9yfNhlVFJirMrAD3PUWjEx0sqL4Ye6tKqrF1qeOHtD8GRrqdygknQLFtXEDMXj1B
O+W/vC686EwT5MDglPzDzfVV9yNij1W/LTJQ194/GkeOcOl7dy1kCzzfWeBLviYS
8vW4SELep7kpNeDVJ4aS/aiiLSPwgVZukZRT5zbVsaPJFZa9GltLlp3G/FlPeYt8
zKYJIaOhOKSd6UD2BgRP6VeBCsRqKx0yFHd+eFP3OyF2UQCk223CLwYUr8iX5igQ
cnkXIO+KLEA35YaBkWnDJQtei5VHJPS598FT8XAp08v5RxzsTxur3t23HdURAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUd+9oPcw5NyYOBEVmIlfOw27SWggwHwYDVR0j
BBgwFoAUOMkbqa8zhyEhkjLJkYQxSZQEFywwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTU0MzI0MWItY2ZkMS00Y2JiLTkyMTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlB
RjMzODcyMTIxOTIzMkM5OTE4NDMxNDk5NDA0MTcyQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zOEM5MUJBOUFGMzM4NzIxMjE5MjMyQzk5MTg0MzE0OTk0MDQx
NzJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky
MTktYzdhMzYyMzdjMTQ4LzAvMzhDOTFCQTlBRjMzODcyMTIxOTIzMkM5OTE4NDMx
NDk5NDA0MTcyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAADTVAEQ4r7A7HPUvC/rNaaV9k081o4H+9rT
vMnHdeUV4z26AiZZdKSaw/e8XLaLocX7rMVF3nyvBR8vEvy1BmNQ4LbRoxIJdSX/
2+xcOV5wQdeUgSETycSYidurQEc0QWcEvlLUCBNHD2MiCl5h7cxDALS0IWkXOtDr
OZTQYpuDqeoIVRxs/BwKzBXUOdX9RtkPzxiuD5V/y+FUNhNHotiYlCOMFIMqeDqE
qYi+4VcEaoteZdkk84S4OPVNCfa+rtDYlU2K7/F1g3V9mJ2THOtR4pSMe3bDOyXg
KvGvSheWxjMgzHCipKR9xJ5BwoB/ohMl/f0y/S4sLo7AjWuzwig=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:18:47 2026 by rpki-client