$ rpki-client -vvvf rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft File: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft (raw, json) Hash identifier: ImG8pXPw1xwD6I2ZM+ARgDmeqBWI1hhFtSSnJ41T37M= Subject key identifier: C3:C6:15:83:12:00:F7:D2:8E:74:61:D7:15:29:9B:75:B1:E3:DE:36 Authority key identifier: F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC Certificate issuer: /CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC Certificate serial: 78631CB808E6DD7EC981B4097BD2012692EADAB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:07:43 +0000 Manifest this update: Mon 21 Sep 2026 13:02:43 +0000 Manifest next update: Tue 22 Sep 2026 15:00:43 +0000 Files and hashes: 1: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (hash: GenO1xj3TyW94DSXBwVjhtzVjyQP5HUhJ9xzIwZlntA=) 2: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl (hash: rLCMiNxCivfn25iHt6dwICCEHpjVef6sqMdbohqR2Sc=) 3: 3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (hash: LZmJi4+kQ9B/IAd5Uu1Ta66gk3Amy3FWM2SgQTprifw=) 4: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: V6br3oy3hs0OOu8Dz1+fY0LTjJEB4hDJ9zYWF2RIZyk=) 5: 3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa (hash: AshFHMTEwPhxf5xh/Gotw2t8Qbj3ZjVgpz1z6r2Wkk0=) 6: 3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa (hash: QcPMHSi1D0h6sl63Q5Bk6nPRJSx9aPvzxntr778pwMY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:63:1c:b8:08:e6:dd:7e:c9:81:b4:09:7b:d2:01:26:92:ea:da:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC Validity Not Before: Sep 21 13:02:43 2026 GMT Not After : Sep 22 15:00:43 2026 GMT Subject: CN=C3C615831200F7D28E7461D715299B75B1E3DE36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4e:a3:52:31:3c:e3:dc:38:2a:7c:20:fd:72: d4:9f:d3:21:f6:a7:64:0c:f0:09:2c:db:db:59:6f: 76:93:58:d2:4a:b9:b0:58:b3:0f:69:2e:6c:3c:c2: b7:cc:65:7d:3d:b0:8b:14:f8:7b:2a:80:b9:45:ff: 58:e1:b1:d0:d9:07:1e:75:ff:b3:81:a5:4b:6d:89: 19:85:fd:18:b0:bf:2c:ed:ca:04:bc:c1:bd:00:6d: 6e:32:3f:49:45:e8:f1:fc:33:ef:47:fb:e0:b4:0c: 00:a0:be:fb:d5:17:6d:30:23:ad:56:d2:8a:80:75: 36:06:4d:14:0c:62:e3:d4:cf:94:fd:a3:cf:e3:e1: fb:dd:d9:35:b1:c5:24:8d:df:22:fb:26:ee:00:83: 0b:96:7a:63:d6:83:08:dc:65:89:5e:a6:91:57:3a: 7c:f0:11:6b:ba:e7:46:43:4b:51:13:c1:4c:bc:bc: 94:ef:91:68:53:0b:e0:aa:f0:56:c3:81:5d:07:c0: 4f:3a:19:b3:6a:51:f7:5a:69:d0:e6:6a:f9:33:e3: cb:63:9f:fd:d4:5a:45:84:e1:6f:0d:1a:6a:9d:5f: b9:c5:24:46:e3:e0:9d:f5:e7:0f:69:e7:b7:85:90: 0f:2d:c3:a8:22:2d:b9:80:12:a0:e6:4e:5b:35:3d: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C6:15:83:12:00:F7:D2:8E:74:61:D7:15:29:9B:75:B1:E3:DE:36 X509v3 Authority Key Identifier: keyid:F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:46:d7:bd:ca:35:fe:73:94:99:06:f9:bd:9f:f5:03:be:61: bf:39:54:27:2c:19:50:46:59:23:b2:59:fc:2e:56:ff:61:ab: 10:c4:81:4b:2d:2f:bf:ab:46:52:14:9f:c0:db:81:75:60:c0: 37:05:09:89:82:10:49:d5:a2:9c:db:00:35:02:83:a4:6b:2f: a3:53:61:70:19:8a:f7:80:aa:70:f8:f8:86:31:79:98:29:a4: 87:81:88:68:f5:35:a0:56:9d:41:88:39:4a:4d:e3:58:7b:19: 80:81:12:fc:81:b0:23:64:c9:0c:4f:20:54:0e:5e:1f:97:64: 69:1a:df:5f:82:a4:a2:61:25:2e:3a:1a:4f:3d:44:58:53:11: 48:90:31:84:d0:ea:f6:a4:79:e7:42:11:43:e0:31:75:35:82: 73:ad:d3:10:61:ce:62:44:8e:d7:6c:c8:e9:18:d2:d9:dd:73: af:71:2e:5b:30:5f:e3:0f:0c:3a:22:0c:2d:36:be:66:4e:7f: dc:f0:b9:23:10:35:e0:3d:28:a2:7d:c9:23:43:23:35:44:84: 33:f8:04:ed:96:be:1f:1f:f6:75:8b:01:7b:71:40:c6:76:0b: 63:a9:6a:56:74:a9:23:12:11:02:7d:85:16:7e:8a:97:d5:47: d3:6a:d8:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeGMcuAjm3X7JgbQJe9IBJpLq2rYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5REIyMTREOURCRTNCMjExM0NFMDkzNDlBNEM5Qzgy ODcxMjJCQzAeFw0yNjA5MjExMzAyNDNaFw0yNjA5MjIxNTAwNDNaMDMxMTAvBgNV BAMTKEMzQzYxNTgzMTIwMEY3RDI4RTc0NjFENzE1Mjk5Qjc1QjFFM0RFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuTqNSMTzj3DgqfCD9ctSf0yH2 p2QM8Aks29tZb3aTWNJKubBYsw9pLmw8wrfMZX09sIsU+HsqgLlF/1jhsdDZBx51 /7OBpUttiRmF/RiwvyztygS8wb0AbW4yP0lF6PH8M+9H++C0DACgvvvVF20wI61W 0oqAdTYGTRQMYuPUz5T9o8/j4fvd2TWxxSSN3yL7Ju4AgwuWemPWgwjcZYleppFX OnzwEWu650ZDS1ETwUy8vJTvkWhTC+Cq8FbDgV0HwE86GbNqUfdaadDmavkz48tj n/3UWkWE4W8NGmqdX7nFJEbj4J315w9p57eFkA8tw6giLbmAEqDmTls1PcnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw8YVgxIA99KOdGHXFSmbdbHj3jYwHwYDVR0j BBgwFoAU852yFNnb47IRPOCTSaTJyChxIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJlYTc3YjUtODhmNy00MDg1LWIzMzEtOTc1MDI0Y2QwNDZkLzAvRjM5REIyMTRE OURCRTNCMjExM0NFMDkzNDlBNEM5QzgyODcxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzlEQjIxNEQ5REJFM0IyMTEzQ0UwOTM0OUE0QzlDODI4NzEy MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJlYTc3YjUtODhmNy00MDg1LWIz MzEtOTc1MDI0Y2QwNDZkLzAvRjM5REIyMTREOURCRTNCMjExM0NFMDkzNDlBNEM5 QzgyODcxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9G173KNf5zlJkG+b2f9QO+Yb85VCcsGVBG WSOyWfwuVv9hqxDEgUstL7+rRlIUn8DbgXVgwDcFCYmCEEnVopzbADUCg6RrL6NT YXAZiveAqnD4+IYxeZgppIeBiGj1NaBWnUGIOUpN41h7GYCBEvyBsCNkyQxPIFQO Xh+XZGka31+CpKJhJS46Gk89RFhTEUiQMYTQ6vakeedCEUPgMXU1gnOt0xBhzmJE jtdsyOkY0tndc69xLlswX+MPDDoiDC02vmZOf9zwuSMQNeA9KKJ9ySNDIzVEhDP4 BO2Wvh8f9nWLAXtxQMZ2C2OpalZ0qSMSEQJ9hRZ+ipfVR9Nq2F4= -----END CERTIFICATE-----Generated at Mon Sep 21 23:30:24 2026 by rpki-client