$ rpki-client -vvf rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft File: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft (raw, json) Hash identifier: PD1FzmE1oYdK2GpOpjjO5oEdVLOz1epROr+5rorDhPU= Subject key identifier: 12:8E:1F:AA:74:6C:51:66:E2:D9:F7:B7:0F:C2:FF:0D:0C:B8:46:E4 Authority key identifier: F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC Certificate issuer: /CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC Certificate serial: 5948A0E96FEBBF6E558D923A500EE229F39B5648 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 14:26:42 +0000 Manifest this update: Tue 16 Jun 2026 14:21:42 +0000 Manifest next update: Wed 17 Jun 2026 17:40:42 +0000 Files and hashes: 1: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: V6br3oy3hs0OOu8Dz1+fY0LTjJEB4hDJ9zYWF2RIZyk=) 2: 3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (hash: LZmJi4+kQ9B/IAd5Uu1Ta66gk3Amy3FWM2SgQTprifw=) 3: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl (hash: GN6YPm1LgCnHuIojG42p4z3goZbBL4qdTrC2vSnqfYE=) 4: 3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa (hash: AshFHMTEwPhxf5xh/Gotw2t8Qbj3ZjVgpz1z6r2Wkk0=) 5: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (hash: GenO1xj3TyW94DSXBwVjhtzVjyQP5HUhJ9xzIwZlntA=) 6: 3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa (hash: QcPMHSi1D0h6sl63Q5Bk6nPRJSx9aPvzxntr778pwMY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:48:a0:e9:6f:eb:bf:6e:55:8d:92:3a:50:0e:e2:29:f3:9b:56:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC Validity Not Before: Jun 16 14:21:42 2026 GMT Not After : Jun 17 17:40:42 2026 GMT Subject: CN=128E1FAA746C5166E2D9F7B70FC2FF0D0CB846E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:4b:9b:a0:7b:04:b6:18:f9:4e:67:c1:9d: 26:c6:2a:24:3f:2e:dd:d4:8a:dc:b5:4e:64:f7:6f: bd:a0:7b:5f:a4:af:ed:6e:81:dd:3c:de:99:7e:b0: ef:c8:d6:65:e7:67:95:ad:26:21:6b:22:9d:e0:04: e9:ae:7c:fc:4c:e8:c0:70:a9:30:e7:bf:1e:d8:4e: 33:f2:d7:1a:08:91:e1:50:1c:a7:19:77:b9:01:6c: bd:f5:b3:d8:c6:32:b7:95:66:54:af:aa:ee:7c:f1: 68:d5:b1:65:34:f7:52:14:68:a0:5e:a1:70:17:d6: f9:21:f7:d2:1e:fc:88:98:c4:a8:17:49:0d:ba:dc: e6:93:a4:34:40:ba:a7:15:38:5f:8e:22:0d:47:55: 25:6a:3d:39:d6:29:36:7a:a9:8a:43:7e:e2:3f:9d: 28:88:80:1a:a4:4a:f5:f1:82:13:5e:df:61:70:81: 67:ed:84:b0:06:a8:a2:45:36:ff:75:8e:23:67:0d: ef:89:8c:e1:79:d2:d7:4c:4c:88:76:2a:a4:7a:4b: e8:c3:a8:07:ae:2d:68:07:10:d2:ec:33:c2:15:6c: 7e:7f:37:57:90:94:8c:f6:e3:c8:d0:e8:ac:f5:dc: 2a:ee:f2:f7:0a:86:ce:4d:a4:e2:3e:fb:d7:0e:45: 35:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8E:1F:AA:74:6C:51:66:E2:D9:F7:B7:0F:C2:FF:0D:0C:B8:46:E4 X509v3 Authority Key Identifier: keyid:F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:12:5f:58:2f:48:ca:c7:e4:90:d6:e0:bf:b1:32:71:e5:e6: 50:e5:55:20:04:36:65:74:0e:e3:85:9f:a1:d8:92:80:51:7f: 2c:79:5a:e9:4d:d0:d2:bd:bd:d1:b8:f1:97:c8:48:3a:20:38: 27:30:1d:76:dd:32:f6:5a:0e:41:89:fb:2d:e3:bd:4f:f6:a6: 4f:28:0f:48:ab:75:29:e4:05:37:2e:ad:50:72:d9:53:15:20: 60:b3:97:a4:4e:97:e2:ba:ad:80:9d:03:fb:24:a3:6a:6b:4c: 6a:a6:59:19:1d:63:4f:c6:ae:ec:3e:bd:20:07:8f:1e:d0:47: 41:bf:a4:d9:69:7c:c0:46:85:31:30:05:5d:6b:53:db:f8:aa: 89:f4:cc:d4:52:02:ba:93:2a:cc:d1:31:1a:03:ac:da:23:1f: e7:e8:3d:63:a9:6d:4a:5a:d0:48:bf:26:ac:81:ba:0a:aa:62: 26:90:44:a7:e1:1a:b2:6a:01:23:9f:2c:9d:ee:0b:fc:8b:54: 4b:54:a4:5d:d5:07:0a:a4:fc:78:72:8f:9d:f0:27:2f:b1:79: 74:31:dc:2b:53:ca:51:a2:62:0c:62:56:2b:0f:bf:90:56:f5: 3c:64:23:d3:b3:76:ee:4d:12:94:f7:78:b0:da:f4:61:85:2d: c9:b9:00:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUig6W/rv25VjZI6UA7iKfObVkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5REIyMTREOURCRTNCMjExM0NFMDkzNDlBNEM5Qzgy ODcxMjJCQzAeFw0yNjA2MTYxNDIxNDJaFw0yNjA2MTcxNzQwNDJaMDMxMTAvBgNV BAMTKDEyOEUxRkFBNzQ2QzUxNjZFMkQ5RjdCNzBGQzJGRjBEMENCODQ2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFB0uboHsEthj5TmfBnSbGKiQ/ Lt3Uity1TmT3b72ge1+kr+1ugd083pl+sO/I1mXnZ5WtJiFrIp3gBOmufPxM6MBw qTDnvx7YTjPy1xoIkeFQHKcZd7kBbL31s9jGMreVZlSvqu588WjVsWU091IUaKBe oXAX1vkh99Ie/IiYxKgXSQ263OaTpDRAuqcVOF+OIg1HVSVqPTnWKTZ6qYpDfuI/ nSiIgBqkSvXxghNe32FwgWfthLAGqKJFNv91jiNnDe+JjOF50tdMTIh2KqR6S+jD qAeuLWgHENLsM8IVbH5/N1eQlIz248jQ6Kz13Cru8vcKhs5NpOI++9cORTWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEo4fqnRsUWbi2fe3D8L/DQy4RuQwHwYDVR0j BBgwFoAU852yFNnb47IRPOCTSaTJyChxIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJlYTc3YjUtODhmNy00MDg1LWIzMzEtOTc1MDI0Y2QwNDZkLzAvRjM5REIyMTRE OURCRTNCMjExM0NFMDkzNDlBNEM5QzgyODcxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzlEQjIxNEQ5REJFM0IyMTEzQ0UwOTM0OUE0QzlDODI4NzEy MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJlYTc3YjUtODhmNy00MDg1LWIz MzEtOTc1MDI0Y2QwNDZkLzAvRjM5REIyMTREOURCRTNCMjExM0NFMDkzNDlBNEM5 QzgyODcxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKASX1gvSMrH5JDW4L+xMnHl5lDlVSAENmV0 DuOFn6HYkoBRfyx5WulN0NK9vdG48ZfISDogOCcwHXbdMvZaDkGJ+y3jvU/2pk8o D0irdSnkBTcurVBy2VMVIGCzl6ROl+K6rYCdA/sko2prTGqmWRkdY0/Gruw+vSAH jx7QR0G/pNlpfMBGhTEwBV1rU9v4qon0zNRSArqTKszRMRoDrNojH+foPWOpbUpa 0Ei/JqyBugqqYiaQRKfhGrJqASOfLJ3uC/yLVEtUpF3VBwqk/Hhyj53wJy+xeXQx 3CtTylGiYgxiVisPv5BW9TxkI9Ozdu5NEpT3eLDa9GGFLcm5AHI= -----END CERTIFICATE-----Generated at Wed Jun 17 10:41:34 2026 by rpki-client