$ rpki-client -vvf rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft File: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft (raw, json) Hash identifier: mDViY6XRJ9j9cqVRbngcjDMYHOfh63q9zagH9sEgB1I= Subject key identifier: 89:31:0A:A2:1C:26:F5:FE:6B:99:68:0D:34:6D:39:FB:AA:5B:0C:04 Authority key identifier: A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC Certificate issuer: /CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Certificate serial: 5A55CF230F9BD2DB83D6566CFCA47FBC77FD9566 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 04:14:12 +0000 Manifest this update: Sat 13 Jun 2026 04:09:12 +0000 Manifest next update: Sun 14 Jun 2026 07:39:12 +0000 Files and hashes: 1: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: b8kZYL8oI1P/7ClfsU26nDRuP+nZXNyKDNgSZ4R1ACk=) 2: A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl (hash: s36WtIJdN1BZzkorrTYyGTJbOFAd+UNNuICyj/LzT/4=) 3: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: 1g2WZIx9KqbiuQj/CWy92fVr9rJvVDZ62oh+oM6NT5Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 07:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:55:cf:23:0f:9b:d2:db:83:d6:56:6c:fc:a4:7f:bc:77:fd:95:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC Validity Not Before: Jun 13 04:09:12 2026 GMT Not After : Jun 14 07:39:12 2026 GMT Subject: CN=89310AA21C26F5FE6B99680D346D39FBAA5B0C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:47:da:4f:c6:6d:b0:9d:67:2b:50:1b:00:26: f0:40:7b:14:b0:28:dc:d7:b7:cc:c9:d3:9f:ca:1e: 0e:cd:61:70:3d:00:33:95:e4:32:84:2f:ae:57:5d: 8b:10:24:1b:da:9e:fc:95:c5:09:7f:53:fb:2d:93: 67:76:a9:3f:32:cc:0f:b9:b7:1f:99:a8:7b:91:77: b1:6e:9d:eb:3f:60:60:75:82:7c:c6:80:25:17:dc: 27:9c:8e:fb:de:b3:64:d6:d1:f4:1b:68:c3:fa:ff: 30:0a:d3:a8:31:c4:c6:01:95:62:25:ad:1e:ce:14: 43:cb:5e:a4:22:fc:a8:28:5f:b6:97:e7:76:d1:14: 34:37:69:d6:21:91:e5:ac:d5:45:91:9e:5d:6b:84: 24:d9:bc:6a:22:31:cf:c7:8b:2c:6b:fa:ed:d4:cd: 35:ce:1c:09:e7:0a:fd:5e:88:b3:98:e3:26:c5:bf: 12:a0:ac:0c:75:ba:ce:df:66:f2:da:65:1f:3f:87: b9:a5:ce:8c:b2:1e:a3:2a:02:8a:d3:da:38:13:b8: 81:c2:26:63:41:ef:1f:05:a6:ce:dc:8d:33:b4:f3: ce:d3:b2:a4:2b:48:da:4a:4c:bf:0c:81:36:a4:a4: b7:af:91:9c:1c:8e:30:c2:08:d9:e2:81:df:73:c9: 59:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:31:0A:A2:1C:26:F5:FE:6B:99:68:0D:34:6D:39:FB:AA:5B:0C:04 X509v3 Authority Key Identifier: keyid:A3:90:07:F3:E2:A2:8B:8E:7C:0B:7A:A9:25:9C:72:64:DA:1E:23:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/A39007F3E2A28B8E7C0B7AA9259C7264DA1E23BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:07:bb:ed:eb:12:d8:b7:25:c6:96:f0:41:6e:1d:6b:18:d1: 14:f3:f7:8f:16:21:55:7d:36:f2:00:20:bf:05:28:44:87:5f: 49:5c:45:af:df:7a:ab:01:d3:bc:e5:3b:90:ff:89:a7:31:9c: 85:b7:26:a9:e5:dc:df:8b:81:e2:79:b1:64:54:e5:a8:af:f5: 31:6b:41:86:db:1d:14:81:89:ff:ff:4c:8d:28:7b:21:c9:d3: 24:34:58:d9:7f:a0:56:9b:2c:bd:12:ba:3f:29:38:e5:b9:91: 17:38:8e:90:87:0d:54:3d:6e:2e:4d:7f:e5:43:49:9e:f4:85: 82:24:d9:aa:55:23:34:37:7b:48:77:84:17:9e:77:a5:60:bc: cc:e0:3e:96:98:6c:44:cd:e1:60:5b:d5:c0:5f:c4:2a:d2:95: b6:24:15:17:49:a0:0b:39:88:d7:56:6a:5b:33:f9:b1:31:a1: 34:2a:a3:9c:02:b9:97:25:50:ec:4d:a2:d3:aa:d8:ad:9c:22: 4b:fa:3d:20:08:8d:ee:1d:ad:27:40:da:85:58:9d:ba:e2:f2: 8d:83:de:c1:6a:0f:ad:b5:3d:0d:6c:5e:f4:c3:73:5c:0e:b4: 7c:40:3e:95:66:a5:73:ac:4a:57:b8:e5:e7:aa:1c:a9:6b:a5: b9:ca:44:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlXPIw+b0tuD1lZs/KR/vHf9lWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5QzcyNjRE QTFFMjNCQzAeFw0yNjA2MTMwNDA5MTJaFw0yNjA2MTQwNzM5MTJaMDMxMTAvBgNV BAMTKDg5MzEwQUEyMUMyNkY1RkU2Qjk5NjgwRDM0NkQzOUZCQUE1QjBDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXR9pPxm2wnWcrUBsAJvBAexSw KNzXt8zJ05/KHg7NYXA9ADOV5DKEL65XXYsQJBvanvyVxQl/U/stk2d2qT8yzA+5 tx+ZqHuRd7Funes/YGB1gnzGgCUX3Cecjvves2TW0fQbaMP6/zAK06gxxMYBlWIl rR7OFEPLXqQi/KgoX7aX53bRFDQ3adYhkeWs1UWRnl1rhCTZvGoiMc/Hiyxr+u3U zTXOHAnnCv1eiLOY4ybFvxKgrAx1us7fZvLaZR8/h7mlzoyyHqMqAorT2jgTuIHC JmNB7x8Fps7cjTO0887TsqQrSNpKTL8MgTakpLevkZwcjjDCCNnigd9zyVmFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiTEKohwm9f5rmWgNNG05+6pbDAQwHwYDVR0j BBgwFoAUo5AH8+Kii458C3qpJZxyZNoeI7wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNlNDE3N2QtODA5My00NDdjLTg3YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNF MkEyOEI4RTdDMEI3QUE5MjU5QzcyNjREQTFFMjNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMzkwMDdGM0UyQTI4QjhFN0MwQjdBQTkyNTlDNzI2NERBMUUy M0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQTM5MDA3RjNFMkEyOEI4RTdDMEI3QUE5MjU5Qzcy NjREQTFFMjNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwHu+3rEti3JcaW8EFuHWsY0RTz948WIVV9 NvIAIL8FKESHX0lcRa/feqsB07zlO5D/iacxnIW3Jqnl3N+LgeJ5sWRU5aiv9TFr QYbbHRSBif//TI0oeyHJ0yQ0WNl/oFabLL0Suj8pOOW5kRc4jpCHDVQ9bi5Nf+VD SZ70hYIk2apVIzQ3e0h3hBeed6VgvMzgPpaYbETN4WBb1cBfxCrSlbYkFRdJoAs5 iNdWalsz+bExoTQqo5wCuZclUOxNotOq2K2cIkv6PSAIje4drSdA2oVYnbri8o2D 3sFqD621PQ1sXvTDc1wOtHxAPpVmpXOsSle45eeqHKlrpbnKRC4= -----END CERTIFICATE-----Generated at Sat Jun 13 23:25:48 2026 by rpki-client