$ rpki-client -vvf rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft File: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft (raw, json) Hash identifier: 61mrtLtf1Y1Mlr0ag7N1CJVBX1UfGzfCi+K3ZvbLGmY= Subject key identifier: B9:28:CB:62:02:37:02:B5:EB:93:66:F5:E6:DC:0B:0A:2F:6A:88:6A Authority key identifier: 38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 Certificate issuer: /CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Certificate serial: 63BCED1B0B4720694CBD549F96BB3FDE08F6EA4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 20:32:31 +0000 Manifest this update: Wed 17 Jun 2026 20:27:31 +0000 Manifest next update: Thu 18 Jun 2026 23:50:31 +0000 Files and hashes: 1: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl (hash: 1Qb7F1md0WWaj2mbVh2rMP5W+qAQ5WjYufBzWxVXmVY=) 2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: oNAyYs1M4vvZUL8ZRq7sx5Uf/aJwxuSkl8dJpKgZM5c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 23:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:bc:ed:1b:0b:47:20:69:4c:bd:54:9f:96:bb:3f:de:08:f6:ea:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Validity Not Before: Jun 17 20:27:31 2026 GMT Not After : Jun 18 23:50:31 2026 GMT Subject: CN=B928CB62023702B5EB9366F5E6DC0B0A2F6A886A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:30:fa:f7:7f:cb:5c:24:4c:b1:28:d6:39: 22:64:66:6a:64:42:db:4a:7d:e1:9e:40:5a:c3:9e: 0b:ee:3b:bb:e3:11:f2:14:8b:b2:87:17:94:92:2a: cb:ca:ae:b7:79:72:6d:bf:b5:4e:8d:48:f4:75:db: 56:9a:5a:bc:b8:7a:c6:4a:4d:b9:3b:b6:43:80:dc: f1:02:2d:f5:f6:f0:6b:9c:16:24:0a:c3:21:40:0b: 29:ab:33:04:bc:f2:f5:d4:6c:77:36:5b:9c:1b:c1: d3:32:f5:3a:5b:c8:12:e7:ce:39:ff:b9:af:38:90: 84:a0:f1:6f:17:a5:24:dd:fd:89:d9:2b:83:a7:70: 67:ad:8a:e1:fb:00:c8:27:c6:f5:21:84:06:27:d2: c8:8f:91:eb:e7:34:11:81:9d:38:31:28:f3:fb:2e: 61:08:ae:5b:31:30:1a:bd:e0:13:7c:61:7e:a2:0e: 27:31:66:b1:02:62:5f:a0:02:0f:5a:a3:4a:9f:51: ba:57:dc:41:7c:22:db:58:eb:59:5b:1d:fc:0e:f1: 3f:2b:63:5d:86:d9:cd:a4:ee:94:a5:e3:30:83:f6: 9c:4a:68:c8:79:b0:00:ee:43:32:15:63:52:b3:2c: b9:60:95:69:c9:3f:27:0e:53:c9:15:4e:9c:f7:bb: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:28:CB:62:02:37:02:B5:EB:93:66:F5:E6:DC:0B:0A:2F:6A:88:6A X509v3 Authority Key Identifier: keyid:38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:df:18:51:83:0d:ac:6b:9f:a2:55:5c:91:f4:32:42:4c:78: a4:2c:80:a7:dc:51:e0:be:70:b6:6a:4a:0b:e7:98:7e:1f:ba: fd:a0:92:25:73:0e:41:07:43:ce:21:2b:b5:0d:67:67:1c:28: a3:4f:70:30:c2:52:f3:6b:fc:af:33:85:4d:3c:b7:1e:7f:54: 81:6b:c2:a7:ac:eb:04:28:41:1b:8c:e6:10:56:69:e8:e3:86: 02:8c:a7:3e:29:6c:ff:0a:b7:19:8f:d7:47:f6:fc:37:52:c6: b9:f4:b7:3e:59:55:c5:53:bb:b2:9d:08:bf:69:31:73:e4:ad: 61:3f:45:33:f6:d0:b0:7b:e0:c2:be:0f:09:e0:b7:ed:91:33: 0d:33:64:e1:36:93:d8:b3:d4:9e:12:c6:c6:3e:f3:d4:63:f6: 66:ff:36:44:49:71:8b:ba:99:3b:36:99:d3:bc:0d:59:19:5a: f8:c4:2b:31:19:92:cb:6b:4b:8f:b3:c1:e0:14:70:ac:f6:ea: f9:4b:63:f3:d0:d7:92:15:4d:77:44:75:d1:fd:13:ad:3e:2f: 26:4a:4f:5a:e9:29:a1:91:6d:31:80:ff:16:a8:c0:1c:08:81: af:7b:37:9a:db:e1:c9:1c:64:36:5c:fa:65:8d:9d:55:3a:b4: 83:84:8a:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7ztGwtHIGlMvVSflrs/3gj26kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4 RkNBRjExMDAeFw0yNjA2MTcyMDI3MzFaFw0yNjA2MTgyMzUwMzFaMDMxMTAvBgNV BAMTKEI5MjhDQjYyMDIzNzAyQjVFQjkzNjZGNUU2REMwQjBBMkY2QTg4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdTD693/LXCRMsSjWOSJkZmpk QttKfeGeQFrDngvuO7vjEfIUi7KHF5SSKsvKrrd5cm2/tU6NSPR121aaWry4esZK Tbk7tkOA3PECLfX28GucFiQKwyFACymrMwS88vXUbHc2W5wbwdMy9TpbyBLnzjn/ ua84kISg8W8XpSTd/YnZK4OncGetiuH7AMgnxvUhhAYn0siPkevnNBGBnTgxKPP7 LmEIrlsxMBq94BN8YX6iDicxZrECYl+gAg9ao0qfUbpX3EF8IttY61lbHfwO8T8r Y12G2c2k7pSl4zCD9pxKaMh5sADuQzIVY1KzLLlglWnJPycOU8kVTpz3uw4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuSjLYgI3ArXrk2b15twLCi9qiGowHwYDVR0j BBgwFoAUOMhYlQvLVN6ulInuPAU7Wo/K8RAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFiMjY3YTQtNTAzMC00YTRmLWJiODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUw QkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4RkNBRjExMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zOEM4NTg5NTBCQ0I1NERFQUU5NDg5RUUzQzA1M0I1QThGQ0FG MTEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNC NUE4RkNBRjExMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7fGFGDDaxrn6JVXJH0MkJMeKQsgKfcUeC+ cLZqSgvnmH4fuv2gkiVzDkEHQ84hK7UNZ2ccKKNPcDDCUvNr/K8zhU08tx5/VIFr wqes6wQoQRuM5hBWaejjhgKMpz4pbP8KtxmP10f2/DdSxrn0tz5ZVcVTu7KdCL9p MXPkrWE/RTP20LB74MK+Dwngt+2RMw0zZOE2k9iz1J4SxsY+89Rj9mb/NkRJcYu6 mTs2mdO8DVkZWvjEKzEZkstrS4+zweAUcKz26vlLY/PQ15IVTXdEddH9E60+LyZK T1rpKaGRbTGA/xaowBwIga97N5rb4ckcZDZc+mWNnVU6tIOEioc= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:14 2026 by rpki-client