$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft File: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft (raw, json) Hash identifier: RCq+yX76Glb/jzmkTbT4Z9RKJPe8TN40LIDcEsTkH8s= Subject key identifier: 06:89:6C:11:41:EF:77:C7:2D:13:A8:71:FA:10:20:67:45:66:8F:3D Authority key identifier: 38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 Certificate issuer: /CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Certificate serial: 0E3212B4F7E15991A926AD6F6A8892F2CE236FF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 08:23:56 +0000 Manifest this update: Thu 17 Sep 2026 08:18:56 +0000 Manifest next update: Fri 18 Sep 2026 10:40:56 +0000 Files and hashes: 1: 38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl (hash: NICwkokN5Yr/9uhRlm5qz+voyDGv0rN4g8TKG2Vea9c=) 2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: oNAyYs1M4vvZUL8ZRq7sx5Uf/aJwxuSkl8dJpKgZM5c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:32:12:b4:f7:e1:59:91:a9:26:ad:6f:6a:88:92:f2:ce:23:6f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38C858950BCB54DEAE9489EE3C053B5A8FCAF110 Validity Not Before: Sep 17 08:18:56 2026 GMT Not After : Sep 18 10:40:56 2026 GMT Subject: CN=06896C1141EF77C72D13A871FA10206745668F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:b4:b6:b8:8e:b1:51:32:ec:8f:2e:c6:c1: 1a:49:7d:83:ab:bd:94:ea:f1:71:f2:e8:df:e5:78: 49:7c:d4:ca:25:ee:c0:23:ac:a9:ad:d7:2a:a4:24: 70:ae:25:73:74:ae:8f:d2:68:58:58:78:8c:2e:f3: c3:12:5e:ca:d3:ed:54:4d:33:38:b8:00:98:88:e2: ea:6e:f4:f1:58:6b:a6:37:b4:fa:24:c7:79:51:b5: f4:e0:a6:68:a5:bf:56:0e:18:b4:33:d2:44:ca:1d: 2d:37:a4:c2:2c:63:b9:49:d1:05:13:0b:0a:c9:31: 18:ef:61:c1:9e:a0:78:31:c1:67:49:3c:03:2a:65: ae:f5:4c:5d:21:99:24:29:dc:99:a9:02:55:61:cf: df:31:73:bf:84:ef:83:c0:b0:30:3b:5e:3b:bc:67: 4c:5e:d7:0c:bc:dd:5a:a9:af:fa:ee:f8:d6:2a:09: 0e:c8:58:de:78:8d:cd:5c:ff:07:07:f6:2a:72:c5: 86:a7:90:a5:46:d3:d9:8d:a6:4d:50:1c:da:73:a8: 3f:82:0f:66:2f:f9:36:a2:a1:db:65:03:9e:a9:a1: 70:9b:a9:19:e0:dd:8c:5d:3a:38:f5:93:23:23:30: a3:c4:dc:f2:2e:35:7a:5d:89:c9:fd:6f:8f:74:e3: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:89:6C:11:41:EF:77:C7:2D:13:A8:71:FA:10:20:67:45:66:8F:3D X509v3 Authority Key Identifier: keyid:38:C8:58:95:0B:CB:54:DE:AE:94:89:EE:3C:05:3B:5A:8F:CA:F1:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/38C858950BCB54DEAE9489EE3C053B5A8FCAF110.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d9:2c:9e:8e:4c:2a:fa:d1:72:1b:44:93:ec:40:f2:51:6c: 20:33:f7:22:f0:f4:3a:99:b9:b1:d6:c1:de:0d:de:de:47:d5: c6:cd:58:18:b3:71:38:bc:0f:3f:82:af:e5:b4:df:b8:22:55: 6f:ed:66:91:20:eb:1f:57:35:b8:c7:b2:fe:2c:c8:1d:97:b5: 1b:d2:a6:2b:06:8e:42:a6:58:05:fb:69:b9:68:d6:72:3b:d8: 4a:88:40:77:db:42:cc:b3:56:f3:6c:d9:cf:26:87:4a:fc:03: 18:77:2f:28:fb:91:fd:05:b0:4f:b1:c1:66:4a:f8:3e:66:c8: 09:50:3a:76:27:39:91:df:89:26:69:da:03:bb:fc:38:68:dd: ec:1d:cf:3c:bd:a9:7b:3f:ad:2a:b1:1c:f4:af:2c:fb:24:07: 63:f1:48:ec:5f:30:4f:fc:e0:b5:84:fe:dc:dd:27:dd:d7:4e: f7:2b:33:fa:a5:89:40:be:e6:a8:7e:dc:7b:22:81:02:b9:01: e4:9d:45:cd:94:59:cb:84:a8:52:89:94:9a:be:42:95:39:5c: da:f3:10:48:d3:f4:a8:7e:3c:04:68:e8:72:a9:a0:cb:6e:48: 0f:f9:92:72:71:02:da:9a:f5:ce:b5:84:15:7d:42:5f:cf:a7: c6:1e:ba:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjIStPfhWZGpJq1vaoiS8s4jb/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4 RkNBRjExMDAeFw0yNjA5MTcwODE4NTZaFw0yNjA5MTgxMDQwNTZaMDMxMTAvBgNV BAMTKDA2ODk2QzExNDFFRjc3QzcyRDEzQTg3MUZBMTAyMDY3NDU2NjhGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCre7S2uI6xUTLsjy7GwRpJfYOr vZTq8XHy6N/leEl81Mol7sAjrKmt1yqkJHCuJXN0ro/SaFhYeIwu88MSXsrT7VRN Mzi4AJiI4upu9PFYa6Y3tPokx3lRtfTgpmilv1YOGLQz0kTKHS03pMIsY7lJ0QUT CwrJMRjvYcGeoHgxwWdJPAMqZa71TF0hmSQp3JmpAlVhz98xc7+E74PAsDA7Xju8 Z0xe1wy83Vqpr/ru+NYqCQ7IWN54jc1c/wcH9ipyxYankKVG09mNpk1QHNpzqD+C D2Yv+TaiodtlA56poXCbqRng3YxdOjj1kyMjMKPE3PIuNXpdicn9b49049TZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBolsEUHvd8ctE6hx+hAgZ0Vmjz0wHwYDVR0j BBgwFoAUOMhYlQvLVN6ulInuPAU7Wo/K8RAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjFiMjY3YTQtNTAzMC00YTRmLWJiODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUw QkNCNTRERUFFOTQ4OUVFM0MwNTNCNUE4RkNBRjExMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zOEM4NTg5NTBCQ0I1NERFQUU5NDg5RUUzQzA1M0I1QThGQ0FG MTEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvMzhDODU4OTUwQkNCNTRERUFFOTQ4OUVFM0MwNTNC NUE4RkNBRjExMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbZLJ6OTCr60XIbRJPsQPJRbCAz9yLw9DqZ ubHWwd4N3t5H1cbNWBizcTi8Dz+Cr+W037giVW/tZpEg6x9XNbjHsv4syB2XtRvS pisGjkKmWAX7ablo1nI72EqIQHfbQsyzVvNs2c8mh0r8Axh3Lyj7kf0FsE+xwWZK +D5myAlQOnYnOZHfiSZp2gO7/Dho3ewdzzy9qXs/rSqxHPSvLPskB2PxSOxfME/8 4LWE/tzdJ93XTvcrM/qliUC+5qh+3HsigQK5AeSdRc2UWcuEqFKJlJq+QpU5XNrz EEjT9Kh+PARo6HKpoMtuSA/5knJxAtqa9c61hBV9Ql/Pp8Yeuqk= -----END CERTIFICATE-----Generated at Thu Sep 17 19:18:41 2026 by rpki-client