$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft File: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft (raw, json) Hash identifier: lkgGsLyxybjMXnk1xpJNAPiMgqrE5WZlkpE+7Ob5F0A= Subject key identifier: 5A:BD:D2:F6:5A:33:77:9F:83:41:3B:E5:67:E0:51:90:62:04:42:90 Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A Certificate issuer: /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A Certificate serial: 52D776E23AEB90C98A8C57AE830B71B78080BEAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft Manifest number: 32 Signing time: Fri 17 Apr 2026 04:40:43 +0000 Manifest this update: Fri 17 Apr 2026 04:35:43 +0000 Manifest next update: Mon 20 Apr 2026 05:09:43 +0000 Files and hashes: 1: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: FnkUHZBrG989K95SzJmPZ3VlJE7bRu6MxYgvfXPwI1I=) 2: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: gxDcNPkVDSFdZ41agLUQg+G8pCeb+5J4nXDU0DZLJ2Q=) 3: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: xhA/2CTOIWfVDpHM1NkVlpPmJHY6UZcMtq24fqHi4DE=) 4: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: MqAwWrLiifg0NVQLvNMyPUe2lZOdrumhHENCKuLcOOQ=) 5: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: e44E7s4PRD9CCUk2jY7ZZ7l5t8KM/OqUwkHUrfkkOcg=) 6: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: rPxNyJ1z70O0nMqBth9k9AL54wxNqFDgED4SxkwBthU=) 7: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: KyBKzIQsEpd0PgxrEi5EeRSnZ5mxNIfKVnq+jHAVmuQ=) 8: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl (hash: 4+R4J4MMzov9CZNjgjs2j4QKgaDeLuuuK5gM9Zn73kA=) 9: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: 71yRknNPky7gIICGHwyWcufvVOlV/QSbdNUKr/ErIcc=) 10: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: w6Pa9H6dXhB2Rk0qIagT2ApTDekMkBQRHE2JtUHHFYM=) 11: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: pk+TPwqQgroDMciGoscp5z8cID/jM70gaJIC3nV7COg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d7:76:e2:3a:eb:90:c9:8a:8c:57:ae:83:0b:71:b7:80:80:be:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A Validity Not Before: Apr 17 04:35:43 2026 GMT Not After : Apr 20 05:09:43 2026 GMT Subject: CN=5ABDD2F65A33779F83413BE567E0519062044290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:97:d4:d9:9e:da:45:6b:d3:05:dd:1b:90: 51:b4:84:76:d4:5b:5f:3e:0e:e8:fd:95:1d:ae:9a: 74:04:cc:30:68:dc:b3:98:5a:db:6f:7d:9d:1c:f2: ec:64:48:eb:6a:e6:a1:9c:ca:e4:30:de:7c:07:8a: 64:53:31:1d:99:4e:0d:42:52:ed:dc:95:cd:e7:aa: b1:ed:42:f9:94:55:89:91:3b:52:e3:20:46:b2:31: 79:41:80:3c:3a:f3:81:a6:d8:c2:28:fa:63:b5:0c: 2a:f6:4e:40:81:9c:71:24:f7:a4:03:55:d1:72:34: 72:f5:08:7e:77:bd:e6:f1:19:ac:52:f7:a1:49:d5: 2b:1c:85:c1:77:2c:e9:77:70:5b:6f:43:21:02:8b: 32:08:ed:a7:97:9c:d5:3d:22:4a:e1:d1:35:1d:0b: cd:88:d0:90:8f:9e:0d:89:16:96:10:71:75:1e:51: 0e:c5:73:20:cb:d4:d6:a7:ec:9f:36:1c:ee:55:5a: 4d:ee:bc:dc:65:1a:b6:5a:dd:43:06:a7:2a:a5:33: 8f:26:bd:09:d3:b7:81:d8:2d:fc:ac:a6:29:1a:9f: 1c:a4:54:cb:cb:21:2a:f2:4f:5e:aa:d9:58:b3:63: 4f:26:d3:28:52:4a:2f:d8:5f:c5:5a:ee:43:a1:77: cc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BD:D2:F6:5A:33:77:9F:83:41:3B:E5:67:E0:51:90:62:04:42:90 X509v3 Authority Key Identifier: keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:55:05:c5:18:fc:03:77:53:bb:fd:cd:06:44:52:d0:6c:8b: 6c:99:31:1f:7d:65:84:e7:07:77:a1:e2:6c:55:75:8a:63:2d: 47:7d:f3:0d:85:19:7a:e6:f2:05:6d:69:17:04:ed:34:a4:f7: 5f:08:50:6e:36:da:5a:34:01:f4:ba:54:bf:0f:fc:0c:e8:47: 88:a4:68:8b:3a:a2:16:d8:79:a7:35:4e:b3:35:5e:78:f6:c0: e9:3c:8b:7b:62:50:3d:94:28:5c:c1:6c:fd:4c:65:00:4b:38: 0f:dc:6f:5a:9d:95:cd:73:42:40:9f:7f:51:bf:93:fe:16:57: cf:f0:a3:5e:8b:b5:de:7e:79:c1:cf:72:2c:4f:7b:9c:7b:a6: b2:59:f6:db:36:26:c7:7b:15:6b:f5:bc:53:71:18:f1:aa:38: 27:8b:97:63:17:3f:23:96:90:bc:cd:98:95:b7:17:b3:64:ed: 09:72:53:da:fb:e7:ac:4f:df:ae:21:94:ab:c1:8f:e7:e7:02: 42:9a:de:be:6d:07:c4:20:e6:65:65:85:a6:dd:13:17:d7:44: 3a:9b:82:7c:73:e2:37:61:eb:33:4d:65:72:1e:53:08:41:bb: b1:21:3f:86:c3:45:ef:25:a1:f0:65:fe:46:65:36:e7:3c:dd: 6e:7c:ba:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUtd24jrrkMmKjFeugwtxt4CAvqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJCRTg2 Qjg1RkYzQTAeFw0yNjA0MTcwNDM1NDNaFw0yNjA0MjAwNTA5NDNaMDMxMTAvBgNV BAMTKDVBQkREMkY2NUEzMzc3OUY4MzQxM0JFNTY3RTA1MTkwNjIwNDQyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LZfU2Z7aRWvTBd0bkFG0hHbU W18+Duj9lR2umnQEzDBo3LOYWttvfZ0c8uxkSOtq5qGcyuQw3nwHimRTMR2ZTg1C Uu3clc3nqrHtQvmUVYmRO1LjIEayMXlBgDw684Gm2MIo+mO1DCr2TkCBnHEk96QD VdFyNHL1CH53vebxGaxS96FJ1SschcF3LOl3cFtvQyECizII7aeXnNU9Ikrh0TUd C82I0JCPng2JFpYQcXUeUQ7FcyDL1Nan7J82HO5VWk3uvNxlGrZa3UMGpyqlM48m vQnTt4HYLfyspikanxykVMvLISryT16q2VizY08m0yhSSi/YX8Va7kOhd8zZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWr3S9lozd5+DQTvlZ+BRkGIEQpAwHwYDVR0j BBgwFoAUObSqmzx/eAJh3EkGWOYr6GuF/zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjJlMWYzYy01YTQ4LTRmMzktYWFjNy1lMDEyZWQ3MDlkNmEvMC8zOUI0QUE5QjND N0Y3ODAyNjFEQzQ5MDY1OEU2MkJFODZCODVGRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJCRTg2Qjg1 RkYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIyZTFmM2MtNWE0OC00ZjM5LWFh YzctZTAxMmVkNzA5ZDZhLzAvMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJC RTg2Qjg1RkYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJVBcUY/AN3U7v9zQZEUtBsi2yZMR99ZYTn B3eh4mxVdYpjLUd98w2FGXrm8gVtaRcE7TSk918IUG422lo0AfS6VL8P/AzoR4ik aIs6ohbYeac1TrM1Xnj2wOk8i3tiUD2UKFzBbP1MZQBLOA/cb1qdlc1zQkCff1G/ k/4WV8/wo16Ltd5+ecHPcixPe5x7prJZ9ts2Jsd7FWv1vFNxGPGqOCeLl2MXPyOW kLzNmJW3F7Nk7QlyU9r756xP364hlKvBj+fnAkKa3r5tB8Qg5mVlhabdExfXRDqb gnxz4jdh6zNNZXIeUwhBu7EhP4bDRe8lofBl/kZlNuc83W58ulE= -----END CERTIFICATE-----Generated at Fri Apr 17 12:18:21 2026 by rpki-client