$ rpki-client -vvf rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft File: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft (raw, json) Hash identifier: q2lg9Ak4HgwPjDlxNxufGU7xgQ5pYz7mqMMNAdMjxG8= Subject key identifier: 63:9F:D4:11:D4:3C:E2:3C:36:41:51:11:B3:9E:52:EB:C5:05:B1:5C Authority key identifier: 1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD Certificate issuer: /CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Certificate serial: 108BE74AEF48BE0FEDFF0645473EFABC24DD7CFC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:04:50 +0000 Manifest this update: Tue 16 Jun 2026 16:59:50 +0000 Manifest next update: Wed 17 Jun 2026 17:16:50 +0000 Files and hashes: 1: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: pW3XBmKi6nT+DFL99ofR2D1BtLS4+aP/u1rjwoOPDjI=) 2: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: uLEgNCgaAjsQjxP4KxUR5P3CjpsSxN+zwR1ag08fAfk=) 3: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: 3u+krw4MaugdVPNW0321aXdI9rwWYGxYt6HAFFT4OAw=) 4: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl (hash: Se3OOt0UqEmu/AWJVu0d0R2IiL6MqmwPT5CjulbHFlE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:8b:e7:4a:ef:48:be:0f:ed:ff:06:45:47:3e:fa:bc:24:dd:7c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Validity Not Before: Jun 16 16:59:50 2026 GMT Not After : Jun 17 17:16:50 2026 GMT Subject: CN=639FD411D43CE23C36415111B39E52EBC505B15C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:64:58:f4:70:18:0b:0e:42:0a:02:b2:20: ec:eb:a2:8a:00:e1:26:d5:ec:f8:56:bf:24:20:39: 38:3c:70:7c:c7:0e:43:c0:9b:48:24:d6:69:38:4f: 2d:8c:a8:40:fb:e8:51:78:28:b0:38:6e:36:9f:42: 34:80:6d:3a:89:1f:7c:93:88:93:8d:3a:a8:d4:f1: ff:c4:ad:dc:60:2f:0d:2e:56:a1:ca:4f:e6:4c:7f: 48:cd:bb:46:2d:06:d6:87:4e:02:fd:bd:4b:2c:70: b1:63:5b:0c:15:69:2c:82:04:fa:15:f4:18:69:0f: a3:de:2f:e7:89:21:17:bf:2f:82:91:0e:39:7b:0f: 13:97:6d:58:48:0e:f0:1f:bf:b3:87:e9:d8:8f:7c: 8f:eb:b6:b7:ec:ea:32:8a:59:dc:a1:6a:a7:68:76: 87:67:cf:b6:ed:be:a8:94:0e:c0:be:25:26:e9:55: 01:62:fb:1f:1f:8e:75:3a:2e:ef:0c:bb:aa:31:d3: 03:dd:db:bf:99:90:a2:0e:05:c1:0b:2e:3f:e7:b9: 54:fd:d5:96:5a:39:27:d2:cd:3d:38:0a:47:ef:0b: 2d:1b:15:f9:15:1e:c7:3b:34:ec:a3:82:eb:88:33: 76:72:45:64:0d:00:8f:0d:94:10:89:9c:a4:ea:20: ec:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9F:D4:11:D4:3C:E2:3C:36:41:51:11:B3:9E:52:EB:C5:05:B1:5C X509v3 Authority Key Identifier: keyid:1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:8b:e9:72:d5:b8:24:ec:f7:85:31:95:4a:23:06:06:14:e1: 90:cf:1f:43:be:f6:87:f1:85:7d:f2:78:85:12:0a:d4:69:69: aa:dd:54:48:b5:99:16:55:f7:81:b7:1e:e8:63:90:ef:23:73: 00:29:50:52:1d:83:ec:f0:7d:bc:ca:30:82:0a:ba:dd:54:13: 81:8f:0d:76:e5:98:dd:e0:a0:4e:2c:64:cf:d8:7a:25:e9:19: 12:08:5c:f6:67:17:17:ef:97:75:a2:d6:9c:5d:9e:35:c5:e3: 7b:00:d8:90:b4:de:ff:15:40:3c:4a:82:8d:a6:57:d1:7f:31: 9b:b6:be:14:15:ca:e2:10:63:7b:e6:ec:e6:20:80:40:60:1c: 8d:55:9e:5c:a9:0a:33:4c:a3:32:0e:06:07:f5:83:a6:cd:d4: a8:8e:66:4b:c8:3f:23:7a:6c:6b:18:55:60:42:73:b5:21:81: 93:cc:d3:ca:fc:56:bc:df:56:12:34:37:52:08:bd:09:44:b1: 44:fb:a7:0d:7a:f2:cc:1a:e3:a4:20:a6:42:51:00:f0:20:3f: e1:03:7b:fc:b8:e9:97:a3:d4:f3:c9:99:31:37:ec:f5:ba:b9: d2:3c:ab:fc:28:34:55:87:85:2b:0a:9c:04:e6:2b:77:9e:c0: 85:31:c4:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIvnSu9Ivg/t/wZFRz76vCTdfPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERC Rjc5ODNBRDAeFw0yNjA2MTYxNjU5NTBaFw0yNjA2MTcxNzE2NTBaMDMxMTAvBgNV BAMTKDYzOUZENDExRDQzQ0UyM0MzNjQxNTExMUIzOUU1MkVCQzUwNUIxNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzWRY9HAYCw5CCgKyIOzroooA 4SbV7PhWvyQgOTg8cHzHDkPAm0gk1mk4Ty2MqED76FF4KLA4bjafQjSAbTqJH3yT iJONOqjU8f/ErdxgLw0uVqHKT+ZMf0jNu0YtBtaHTgL9vUsscLFjWwwVaSyCBPoV 9BhpD6PeL+eJIRe/L4KRDjl7DxOXbVhIDvAfv7OH6diPfI/rtrfs6jKKWdyhaqdo dodnz7btvqiUDsC+JSbpVQFi+x8fjnU6Lu8Mu6ox0wPd27+ZkKIOBcELLj/nuVT9 1ZZaOSfSzT04CkfvCy0bFfkVHsc7NOyjguuIM3ZyRWQNAI8NlBCJnKTqIOyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY5/UEdQ84jw2QVERs55S68UFsVwwHwYDVR0j BBgwFoAUHTmw2RdICoXLs7DZ0J4iDb95g60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJiZmFiMDktYzFlOS00NGQ4LTgxOWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkx NzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERCRjc5ODNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDM5QjBEOTE3NDgwQTg1Q0JCM0IwRDlEMDlFMjIwREJGNzk4 M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIy MERCRjc5ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESL6XLVuCTs94UxlUojBgYU4ZDPH0O+9ofx hX3yeIUSCtRpaardVEi1mRZV94G3HuhjkO8jcwApUFIdg+zwfbzKMIIKut1UE4GP DXblmN3goE4sZM/YeiXpGRIIXPZnFxfvl3Wi1pxdnjXF43sA2JC03v8VQDxKgo2m V9F/MZu2vhQVyuIQY3vm7OYggEBgHI1VnlypCjNMozIOBgf1g6bN1KiOZkvIPyN6 bGsYVWBCc7UhgZPM08r8VrzfVhI0N1IIvQlEsUT7pw168swa46QgpkJRAPAgP+ED e/y46Zej1PPJmTE37PW6udI8q/woNFWHhSsKnATmK3eewIUxxCY= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:36 2026 by rpki-client