$ rpki-client -vvf repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft File: 39E28911B503E25DB463229AC922CAEF5693A5DD.mft (raw, json) Hash identifier: oCSHuq0dwuyv02rpCaqhYtgjK1a9L+LOBBvleyEMtOc= Subject key identifier: EC:A4:CC:3D:6A:B4:F1:4C:0B:C1:9B:3B:ED:8F:D0:49:4F:9F:93:4D Authority key identifier: 39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD Certificate issuer: /CN=39E28911B503E25DB463229AC922CAEF5693A5DD Certificate serial: 6E2663DB2089FC522E903D646052AC5A052C983E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft Manifest number: 27 Signing time: Thu 16 Apr 2026 06:50:00 +0000 Manifest this update: Thu 16 Apr 2026 06:45:00 +0000 Manifest next update: Sun 19 Apr 2026 08:21:00 +0000 Files and hashes: 1: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: /J0shVYTQYkB9FYkHOQENvK7HQrOevFXVOREKIMBB2w=) 2: 39E28911B503E25DB463229AC922CAEF5693A5DD.crl (hash: vOmKoptoezzh5lDAVo3EWi2TUR8vH4VNFqBJG9gK8hU=) 3: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: V6FgFuQb/8P2YK/Gbx8tP5jXLguLbqQuIRGKv1SIkcI=) 4: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: ad1wd0ZIpEpyRiDtqRMVdgtKv4TeNXfOsvHmoLGBFtc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.crl rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:26:63:db:20:89:fc:52:2e:90:3d:64:60:52:ac:5a:05:2c:98:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39E28911B503E25DB463229AC922CAEF5693A5DD Validity Not Before: Apr 16 06:45:00 2026 GMT Not After : Apr 19 08:21:00 2026 GMT Subject: CN=ECA4CC3D6AB4F14C0BC19B3BED8FD0494F9F934D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:14:46:49:7a:11:d8:12:1f:b8:ef:49:fc: 4b:f3:85:1d:1f:4c:d4:2b:00:5a:00:a2:c1:e2:a8: 64:e6:a1:3f:38:38:10:88:81:86:76:a0:ef:d0:12: c4:8b:1c:e5:29:b4:03:b2:b3:d8:cb:5d:ed:b3:c5: 28:79:bc:70:f9:60:7a:5d:8e:f5:44:9f:8a:2b:26: 6f:de:19:cf:f8:c0:b1:3b:ca:b6:bf:f5:fc:1d:1e: 3f:69:9a:35:5c:2e:d2:d6:4e:1e:5b:a4:b4:63:20: 5d:3e:75:68:15:aa:e3:e8:83:74:98:21:52:47:37: e5:31:58:d2:77:7c:ad:9d:98:41:85:2a:2b:f5:a2: d8:ce:66:18:13:c2:45:cb:5f:34:28:a6:41:1c:88: 6c:66:31:c1:9c:c1:56:66:52:da:5f:98:9a:25:f7: d2:0b:ce:86:21:a3:ce:d9:41:42:f4:77:d8:ce:08: 84:eb:53:3f:57:0a:e4:a1:15:cb:24:f2:d4:41:1f: 0b:8c:ff:78:03:51:64:12:37:4c:63:e9:f6:d4:7f: c6:e2:da:5d:bf:a9:81:10:8a:a3:0a:15:16:01:3b: 73:07:69:fd:ba:04:93:de:a9:6f:51:7e:3e:09:14: c1:77:bc:99:24:c9:48:d3:4e:cf:05:07:db:e6:de: ec:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A4:CC:3D:6A:B4:F1:4C:0B:C1:9B:3B:ED:8F:D0:49:4F:9F:93:4D X509v3 Authority Key Identifier: keyid:39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:3d:ad:67:bd:dc:18:8e:08:c0:a6:e8:17:ea:99:da:a7:7e: 51:21:58:fc:06:ad:59:c4:7f:48:18:6e:31:49:86:72:fe:b0: 23:68:4a:99:3d:37:31:cf:ce:ed:bc:65:11:2a:b0:19:3f:6f: a9:ca:9d:04:45:a4:db:f8:08:c7:70:1d:3c:60:2c:a2:4e:90: f6:4a:0e:26:b1:b3:3c:f3:dd:6f:08:5c:68:36:f9:18:50:6a: c9:96:b7:af:d8:cd:44:21:9c:e9:75:97:57:50:ad:35:26:c5: 89:9e:86:13:66:a2:53:ef:4c:13:af:77:56:a6:fc:04:d6:14: bc:ca:7f:7f:9c:ee:ab:46:4e:f9:9d:ab:96:81:eb:2d:cb:9f: ed:6f:92:ed:18:79:05:c9:dc:86:e6:30:9a:86:ea:0e:f1:2f: 95:99:f6:39:01:f9:56:30:72:b5:3d:bd:38:7d:2b:c8:32:1b: 11:65:0c:b9:47:9f:10:fd:67:93:3c:89:68:eb:77:a8:f8:32: cf:cb:18:3d:b8:bc:52:9b:a2:bf:bd:1a:53:bb:22:59:31:a3: 4a:6c:8e:a7:70:d4:42:f6:7f:72:32:47:21:fe:4b:2c:67:77: 89:3b:a5:7f:3c:92:4f:94:26:1d:b6:3c:54:d6:22:67:c9:35: e4:2e:a6:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbiZj2yCJ/FIukD1kYFKsWgUsmD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlFMjg5MTFCNTAzRTI1REI0NjMyMjlBQzkyMkNBRUY1 NjkzQTVERDAeFw0yNjA0MTYwNjQ1MDBaFw0yNjA0MTkwODIxMDBaMDMxMTAvBgNV BAMTKEVDQTRDQzNENkFCNEYxNEMwQkMxOUIzQkVEOEZEMDQ5NEY5RjkzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMxRGSXoR2BIfuO9J/EvzhR0f TNQrAFoAosHiqGTmoT84OBCIgYZ2oO/QEsSLHOUptAOys9jLXe2zxSh5vHD5YHpd jvVEn4orJm/eGc/4wLE7yra/9fwdHj9pmjVcLtLWTh5bpLRjIF0+dWgVquPog3SY IVJHN+UxWNJ3fK2dmEGFKiv1otjOZhgTwkXLXzQopkEciGxmMcGcwVZmUtpfmJol 99ILzoYho87ZQUL0d9jOCITrUz9XCuShFcsk8tRBHwuM/3gDUWQSN0xj6fbUf8bi 2l2/qYEQiqMKFRYBO3MHaf26BJPeqW9Rfj4JFMF3vJkkyUjTTs8FB9vm3uxLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7KTMPWq08UwLwZs77Y/QSU+fk00wHwYDVR0j BBgwFoAUOeKJEbUD4l20YyKaySLK71aTpd0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTYzMjNkYy1hYjI2LTQ5ZGQtOGIyYy0zMDZlNTBlZTIzYTMvMC8zOUUyODkxMUI1 MDNFMjVEQjQ2MzIyOUFDOTIyQ0FFRjU2OTNBNURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzlFMjg5MTFCNTAzRTI1REI0NjMyMjlBQzkyMkNBRUY1Njkz QTVERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDk2MzIzZGMtYWIyNi00OWRkLThi MmMtMzA2ZTUwZWUyM2EzLzAvMzlFMjg5MTFCNTAzRTI1REI0NjMyMjlBQzkyMkNB RUY1NjkzQTVERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHc9rWe93BiOCMCm6BfqmdqnflEhWPwGrVnE f0gYbjFJhnL+sCNoSpk9NzHPzu28ZREqsBk/b6nKnQRFpNv4CMdwHTxgLKJOkPZK Diaxszzz3W8IXGg2+RhQasmWt6/YzUQhnOl1l1dQrTUmxYmehhNmolPvTBOvd1am /ATWFLzKf3+c7qtGTvmdq5aB6y3Ln+1vku0YeQXJ3IbmMJqG6g7xL5WZ9jkB+VYw crU9vTh9K8gyGxFlDLlHnxD9Z5M8iWjrd6j4Ms/LGD24vFKbor+9GlO7Ilkxo0ps jqdw1EL2f3IyRyH+Syxnd4k7pX88kk+UJh22PFTWImfJNeQupkc= -----END CERTIFICATE-----Generated at Fri Apr 17 22:50:32 2026 by rpki-client