$ rpki-client -vvf repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft File: 39E28911B503E25DB463229AC922CAEF5693A5DD.mft (raw, json) Hash identifier: mF0bLgHploUspaEEM+eGgyAP0vU482NyYj+zNabDtcI= Subject key identifier: 00:46:A7:4E:C7:CD:05:CC:93:9B:57:84:8A:9E:16:13:6D:76:F5:29 Authority key identifier: 39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD Certificate issuer: /CN=39E28911B503E25DB463229AC922CAEF5693A5DD Certificate serial: 0796D15B2E3A5273DE03F834F33A7CDFA7A8D0BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft Manifest number: 12 Signing time: Sat 28 Feb 2026 06:30:00 +0000 Manifest this update: Sat 28 Feb 2026 06:25:00 +0000 Manifest next update: Tue 03 Mar 2026 16:57:00 +0000 Files and hashes: 1: 39E28911B503E25DB463229AC922CAEF5693A5DD.crl (hash: cSuWr4JbN4obRcScxwt5AXp8oN4Iqwa2gzXhmLbLcSA=) 2: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: ad1wd0ZIpEpyRiDtqRMVdgtKv4TeNXfOsvHmoLGBFtc=) 3: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: V6FgFuQb/8P2YK/Gbx8tP5jXLguLbqQuIRGKv1SIkcI=) 4: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: /J0shVYTQYkB9FYkHOQENvK7HQrOevFXVOREKIMBB2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.crl rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:96:d1:5b:2e:3a:52:73:de:03:f8:34:f3:3a:7c:df:a7:a8:d0:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39E28911B503E25DB463229AC922CAEF5693A5DD Validity Not Before: Feb 28 06:25:00 2026 GMT Not After : Mar 3 16:57:00 2026 GMT Subject: CN=0046A74EC7CD05CC939B57848A9E16136D76F529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f0:1a:54:15:0d:b5:dd:af:7e:d4:e2:5c:74: c7:1c:e3:6a:fb:6f:be:e8:c7:ad:b0:e1:3f:74:79: 44:4b:19:ac:98:6e:9d:35:04:46:c6:ae:c0:72:45: 7c:05:93:4a:38:2c:48:47:7b:dd:bd:40:bb:1c:80: a9:6d:a0:9c:71:38:8e:77:bb:9f:35:cb:80:9c:02: de:79:ee:c0:d0:0b:12:65:35:4e:19:de:51:9c:e4: b2:00:5e:27:3c:84:c2:5b:18:e8:b9:b6:87:35:b2: e1:2c:44:66:72:74:71:f5:67:d0:a0:b6:ab:f6:08: 2b:ab:81:fe:47:54:4a:a3:70:02:42:94:10:31:c9: 38:9b:c4:e1:69:39:35:94:37:ab:38:6f:ba:d5:2b: 78:2e:6d:cc:a9:d8:71:25:c6:93:87:e2:66:b1:78: 08:d9:eb:d8:6b:34:03:46:6f:3e:8f:c7:63:99:00: 02:4f:c3:6a:84:fb:32:18:e3:e5:4d:d4:08:85:28: 93:80:fc:f3:81:07:a0:cf:c2:30:f0:f4:dd:6a:ae: 21:4c:13:d2:ed:a3:e9:9f:18:e2:c3:15:f2:e1:ec: 87:14:e6:d3:45:d7:c8:eb:c0:38:c6:e4:73:28:95: 92:60:b8:45:e9:06:50:88:80:86:0a:86:77:b6:a1: fd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:46:A7:4E:C7:CD:05:CC:93:9B:57:84:8A:9E:16:13:6D:76:F5:29 X509v3 Authority Key Identifier: keyid:39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:e6:f1:b3:cb:69:0a:e6:b4:9e:ce:f6:2b:ff:e8:7e:9a:94: 7f:5a:c5:04:54:a6:34:69:b9:6f:72:c0:b2:2f:06:8a:ce:89: 5b:cc:02:c8:99:02:d3:33:62:11:07:29:c6:81:c2:ef:12:8f: 93:89:95:da:e0:8b:8c:fd:8f:44:e7:22:13:d0:7f:41:41:ce: ce:81:bf:e8:d9:96:2f:a5:5b:a5:6c:0c:f3:bf:bf:d5:b3:71: 18:2e:7a:e9:70:30:9e:67:ef:3f:e1:e7:a2:ac:e1:21:2d:10: fd:0b:59:6c:4e:c4:b2:19:26:bc:ea:47:ca:30:b8:b7:3a:c8: 18:a0:02:83:fa:49:f0:3c:f2:c1:75:2c:b3:f2:3d:fd:ea:57: f6:96:96:f3:3f:02:2a:6f:6a:12:47:e6:45:67:b3:50:ae:db: b8:d1:28:88:dd:c3:92:b7:77:53:2e:24:fe:5d:bb:a6:1e:f1: b9:33:04:93:e1:39:7b:d7:f8:a8:9a:97:48:1c:37:d7:19:33: dc:53:7b:30:ca:fe:b5:76:1d:18:5e:4a:be:eb:20:dd:8a:dd: a3:db:21:75:c5:82:4e:f7:60:17:14:5e:db:34:b0:0d:9e:f9: 24:7f:73:e4:1f:4c:58:ce:5a:7d:06:b7:5b:b9:45:58:54:65: 2a:49:98:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB5bRWy46UnPeA/g08zp836eo0L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlFMjg5MTFCNTAzRTI1REI0NjMyMjlBQzkyMkNBRUY1 NjkzQTVERDAeFw0yNjAyMjgwNjI1MDBaFw0yNjAzMDMxNjU3MDBaMDMxMTAvBgNV BAMTKDAwNDZBNzRFQzdDRDA1Q0M5MzlCNTc4NDhBOUUxNjEzNkQ3NkY1MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd8BpUFQ213a9+1OJcdMcc42r7 b77ox62w4T90eURLGayYbp01BEbGrsByRXwFk0o4LEhHe929QLscgKltoJxxOI53 u581y4CcAt557sDQCxJlNU4Z3lGc5LIAXic8hMJbGOi5toc1suEsRGZydHH1Z9Cg tqv2CCurgf5HVEqjcAJClBAxyTibxOFpOTWUN6s4b7rVK3gubcyp2HElxpOH4max eAjZ69hrNANGbz6Px2OZAAJPw2qE+zIY4+VN1AiFKJOA/POBB6DPwjDw9N1qriFM E9Lto+mfGOLDFfLh7IcU5tNF18jrwDjG5HMolZJguEXpBlCIgIYKhne2of3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAEanTsfNBcyTm1eEip4WE2129SkwHwYDVR0j BBgwFoAUOeKJEbUD4l20YyKaySLK71aTpd0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTYzMjNkYy1hYjI2LTQ5ZGQtOGIyYy0zMDZlNTBlZTIzYTMvMC8zOUUyODkxMUI1 MDNFMjVEQjQ2MzIyOUFDOTIyQ0FFRjU2OTNBNURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzlFMjg5MTFCNTAzRTI1REI0NjMyMjlBQzkyMkNBRUY1Njkz QTVERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDk2MzIzZGMtYWIyNi00OWRkLThi MmMtMzA2ZTUwZWUyM2EzLzAvMzlFMjg5MTFCNTAzRTI1REI0NjMyMjlBQzkyMkNB RUY1NjkzQTVERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTm8bPLaQrmtJ7O9iv/6H6alH9axQRUpjRp uW9ywLIvBorOiVvMAsiZAtMzYhEHKcaBwu8Sj5OJldrgi4z9j0TnIhPQf0FBzs6B v+jZli+lW6VsDPO/v9WzcRgueulwMJ5n7z/h56Ks4SEtEP0LWWxOxLIZJrzqR8ow uLc6yBigAoP6SfA88sF1LLPyPf3qV/aWlvM/AipvahJH5kVns1Cu27jRKIjdw5K3 d1MuJP5du6Ye8bkzBJPhOXvX+Kial0gcN9cZM9xTezDK/rV2HRheSr7rIN2K3aPb IXXFgk73YBcUXts0sA2e+SR/c+QfTFjOWn0Gt1u5RVhUZSpJmOI= -----END CERTIFICATE-----Generated at Mon Mar 2 13:35:28 2026 by rpki-client