$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft File: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft (raw, json) Hash identifier: OGbsKFy/okaKyscgV1xRKscT1BT9DaLPrWl7E0EGlxE= Subject key identifier: 76:0D:FC:27:E3:B3:37:F3:FC:D6:86:D9:07:D9:97:67:43:CE:17:40 Authority key identifier: 1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD Certificate issuer: /CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Certificate serial: 52F09BD6CC44D2AC132908ECB8CFEF19E8CA35FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 01:56:31 +0000 Manifest this update: Sun 15 Nov 2026 01:51:31 +0000 Manifest next update: Mon 16 Nov 2026 03:00:31 +0000 Files and hashes: 1: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: 3u+krw4MaugdVPNW0321aXdI9rwWYGxYt6HAFFT4OAw=) 2: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl (hash: 6g2CinsOkT512Yk8CUWMmWBCwRMtkwu/BKU1l9OIOP0=) 3: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: pW3XBmKi6nT+DFL99ofR2D1BtLS4+aP/u1rjwoOPDjI=) 4: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: uLEgNCgaAjsQjxP4KxUR5P3CjpsSxN+zwR1ag08fAfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f0:9b:d6:cc:44:d2:ac:13:29:08:ec:b8:cf:ef:19:e8:ca:35:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Validity Not Before: Nov 15 01:51:31 2026 GMT Not After : Nov 16 03:00:31 2026 GMT Subject: CN=760DFC27E3B337F3FCD686D907D9976743CE1740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:01:cf:18:79:1a:b5:08:23:ff:f7:f8:a8: 68:8e:ff:34:b8:2b:e3:58:5b:99:57:0f:40:fc:a6: 2b:49:c6:61:c8:3d:29:55:61:ad:a8:51:47:3b:32: 1a:2e:79:55:ee:a4:9d:4d:0a:80:1a:f5:9f:55:6f: 47:2c:5e:3a:20:53:1f:23:83:29:52:28:49:53:a0: 36:95:89:1d:26:de:cc:47:aa:01:e8:12:df:e7:8f: 07:e4:2b:cf:4c:2e:87:a1:9c:5a:01:0c:d4:5e:ae: 89:ad:6c:16:28:76:5a:62:8e:30:41:fc:39:47:e5: e5:50:82:14:91:01:85:15:1c:12:91:29:eb:3b:46: ab:d5:8e:49:c8:40:0c:fe:5e:e6:69:e6:27:3d:64: 31:b5:e6:0a:1b:0e:18:50:95:eb:ee:f5:d7:0e:3c: 88:f0:26:b9:33:5d:6a:7d:3a:b6:18:c3:f5:3e:5d: 4b:8f:ee:6f:1d:d1:a3:e0:e5:9d:ef:75:00:6c:70: ab:58:a5:97:c8:f7:6a:bc:7d:44:d0:7a:13:c2:25: 23:e7:da:2c:e1:97:5d:2b:a9:50:87:50:e9:96:27: 8d:be:f2:c1:bf:57:a9:6f:99:b2:03:82:65:89:55: d9:01:87:4d:99:1e:57:3c:f9:a1:b6:38:3e:67:25: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0D:FC:27:E3:B3:37:F3:FC:D6:86:D9:07:D9:97:67:43:CE:17:40 X509v3 Authority Key Identifier: keyid:1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e8:bb:89:58:8e:c2:cb:c2:8a:fa:7e:4e:66:db:11:ce:35: ec:98:29:9f:f3:2c:6b:94:ad:76:c2:c0:8f:35:70:e7:1b:c8: 63:d3:fa:26:3c:08:26:df:3b:de:a3:6c:ab:15:aa:4f:c8:c0: 80:1d:ad:a9:27:7b:f8:02:36:ba:77:04:8c:a7:d2:e6:f3:f1: 4c:d1:71:8d:e1:cc:e7:1a:c1:73:34:d2:05:17:52:56:8d:1b: 00:72:72:82:1a:c0:c2:7e:96:77:a8:d3:78:d2:8e:f4:c0:46: fd:ff:e9:36:fd:fd:5c:d8:3d:ec:00:42:a6:be:c4:2a:3f:6a: 88:fa:4e:c6:1c:46:37:a5:59:28:65:ec:61:ef:1d:f9:82:50: 93:c3:f7:ba:d6:85:77:b1:7d:f2:9b:61:c3:72:3d:cb:f0:a8: e2:aa:1e:80:b0:4f:78:d8:c9:b8:f0:f6:b8:ca:a9:a4:a0:0e: e8:44:2d:10:2c:32:86:ac:80:3d:0c:81:59:50:a9:64:b2:cc: 1b:00:26:0a:92:6a:08:72:73:6c:c4:9c:f1:3e:27:d8:ac:12: 94:ec:f7:44:5a:95:63:0a:6c:fd:81:20:91:3e:ac:2e:2b:53: 0a:11:5e:37:bc:f2:9c:90:f6:50:61:72:95:b7:98:73:8f:72: 81:fb:f0:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUvCb1sxE0qwTKQjsuM/vGejKNf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERC Rjc5ODNBRDAeFw0yNjExMTUwMTUxMzFaFw0yNjExMTYwMzAwMzFaMDMxMTAvBgNV BAMTKDc2MERGQzI3RTNCMzM3RjNGQ0Q2ODZEOTA3RDk5NzY3NDNDRTE3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfnQHPGHkatQgj//f4qGiO/zS4 K+NYW5lXD0D8pitJxmHIPSlVYa2oUUc7MhoueVXupJ1NCoAa9Z9Vb0csXjogUx8j gylSKElToDaViR0m3sxHqgHoEt/njwfkK89MLoehnFoBDNReromtbBYodlpijjBB /DlH5eVQghSRAYUVHBKRKes7RqvVjknIQAz+XuZp5ic9ZDG15gobDhhQlevu9dcO PIjwJrkzXWp9OrYYw/U+XUuP7m8d0aPg5Z3vdQBscKtYpZfI92q8fUTQehPCJSPn 2izhl10rqVCHUOmWJ42+8sG/V6lvmbIDgmWJVdkBh02ZHlc8+aG2OD5nJTIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdg38J+OzN/P81obZB9mXZ0POF0AwHwYDVR0j BBgwFoAUHTmw2RdICoXLs7DZ0J4iDb95g60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJiZmFiMDktYzFlOS00NGQ4LTgxOWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkx NzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERCRjc5ODNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDM5QjBEOTE3NDgwQTg1Q0JCM0IwRDlEMDlFMjIwREJGNzk4 M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIy MERCRjc5ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHou4lYjsLLwor6fk5m2xHONeyYKZ/zLGuU rXbCwI81cOcbyGPT+iY8CCbfO96jbKsVqk/IwIAdrakne/gCNrp3BIyn0ubz8UzR cY3hzOcawXM00gUXUlaNGwBycoIawMJ+lneo03jSjvTARv3/6Tb9/VzYPewAQqa+ xCo/aoj6TsYcRjelWShl7GHvHfmCUJPD97rWhXexffKbYcNyPcvwqOKqHoCwT3jY ybjw9rjKqaSgDuhELRAsMoasgD0MgVlQqWSyzBsAJgqSaghyc2zEnPE+J9isEpTs 90RalWMKbP2BIJE+rC4rUwoRXje88pyQ9lBhcpW3mHOPcoH78Bk= -----END CERTIFICATE-----Generated at Sun Nov 15 18:44:53 2026 by rpki-client