$ rpki-client -vvvf rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft File: B39B19C9084084F7FCB3FAFF376368D876F66372.mft (raw, json) Hash identifier: JrQFu9j7AAAkE+5/lJnXRfj0AEwSKAyzOrDAzCsDWK0= Subject key identifier: 52:D9:9A:F1:2A:9F:29:5D:B5:81:71:A0:A7:C2:2A:2F:27:23:71:AA Authority key identifier: B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 Certificate issuer: /CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Certificate serial: 773A3F321663C9CD86E3518FBC76B04B0A5A2846 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft Manifest number: 0101 Signing time: Mon 09 Nov 2026 18:18:28 +0000 Manifest this update: Mon 09 Nov 2026 18:13:28 +0000 Manifest next update: Tue 10 Nov 2026 21:16:28 +0000 Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: 5twMEBpUGZCFXRPaiYDXrww+UAg0G4R4iDCrbaZ4+Ho=) 2: B39B19C9084084F7FCB3FAFF376368D876F66372.crl (hash: Pwlb3YPVN+ya7RE93vXuLqYy5eNLrALGuqfqylBdZ7Y=) 3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: NLnNrRvgdk9PwIX+K62kuAcQASU2Wm+4Xg+4O2CIdkc=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: CTdtRt0QWOxvthXzk1fDi0/fuxno5z52+6EZfo7nHWY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 21:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:3a:3f:32:16:63:c9:cd:86:e3:51:8f:bc:76:b0:4b:0a:5a:28:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Validity Not Before: Nov 9 18:13:28 2026 GMT Not After : Nov 10 21:16:28 2026 GMT Subject: CN=52D99AF12A9F295DB58171A0A7C22A2F272371AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:6e:2b:31:e0:62:f7:5c:8f:fe:a9:1b:b5: 16:b3:41:ef:07:92:ef:a7:2a:66:1b:67:32:f9:6e: 6d:d0:ad:86:12:2d:1d:28:66:63:02:8d:d8:1e:3f: df:f9:49:3a:9d:f4:14:35:ea:77:63:c3:e8:d2:c0: 2b:79:33:10:16:f4:3f:70:e8:65:8b:7c:05:a2:c8: 65:e6:2b:ed:8f:68:2b:fa:2d:93:35:17:ef:fa:aa: ff:cd:10:1f:eb:f5:b2:5b:c4:be:07:27:b4:0e:67: 7e:25:30:d0:e4:1c:fa:d4:08:fe:fb:a9:d8:60:78: 44:8a:ab:0c:35:df:66:98:e6:ff:46:88:75:86:74: cd:56:9d:82:4b:38:fb:53:b1:04:ba:4f:4b:0d:06: ef:57:a0:6c:a8:b2:b9:78:0e:d5:20:67:70:01:f0: 79:b4:d4:4f:5b:eb:4f:38:8b:3b:ba:21:b2:f4:c6: 91:2d:42:17:e1:1d:03:49:82:61:4a:05:1b:6c:69: 02:6b:a3:88:26:65:7f:23:ce:38:66:18:ef:8b:99: 70:66:d2:f6:71:72:9d:02:af:34:99:e7:3c:df:00: 16:35:02:d7:90:d4:94:29:1e:2c:c3:fa:c5:3c:d7: d3:e1:50:3b:ad:1d:84:84:fb:6f:ba:ae:1d:0d:08: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D9:9A:F1:2A:9F:29:5D:B5:81:71:A0:A7:C2:2A:2F:27:23:71:AA X509v3 Authority Key Identifier: keyid:B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5b:87:20:34:69:a6:30:a8:59:9f:ee:c7:ba:a9:f5:c8:bb: 45:e3:71:82:f1:3f:c0:85:03:c2:c6:c6:ad:af:86:11:41:eb: 5e:2f:88:04:61:5d:f7:f1:56:8d:c3:b3:90:64:d4:d2:85:05: 75:c4:58:f8:82:a9:fc:0f:af:e5:c4:f2:47:b5:2b:5d:85:cd: dd:2b:91:09:6f:1a:d6:7b:a8:ec:61:58:aa:ca:09:a2:a9:b5: 97:1b:b5:ad:c7:7f:95:70:ce:7f:e9:10:3f:1a:a4:9c:76:d8: e9:c7:ad:2e:15:f3:78:6f:57:ff:4f:cc:29:43:0f:62:04:9e: a2:2b:14:93:34:c5:a8:d7:8a:74:30:fd:af:f0:df:ef:c6:99: 9c:7b:cc:5e:c9:c2:bf:c0:ad:3e:a9:16:bf:f8:54:42:4e:2f: c2:aa:1f:92:a1:4c:6f:b4:46:4f:7d:25:35:a2:14:4c:84:8e: 6e:d6:39:ad:10:6f:6a:39:86:c3:1e:12:a8:55:00:98:6d:ce: 0c:30:4a:ca:be:cf:86:d0:b9:a9:9b:f7:9a:8d:bf:3b:f4:ce: 25:40:d4:82:b8:fe:0b:f4:7f:ed:c5:0e:2e:46:c7:9c:b5:f7: 99:e4:d9:b0:79:14:02:d2:76:28:fe:2c:ea:40:a0:a4:b8:40: b9:cc:f8:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdzo/MhZjyc2G41GPvHawSwpaKEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3 NkY2NjM3MjAeFw0yNjExMDkxODEzMjhaFw0yNjExMTAyMTE2MjhaMDMxMTAvBgNV BAMTKDUyRDk5QUYxMkE5RjI5NURCNTgxNzFBMEE3QzIyQTJGMjcyMzcxQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFy24rMeBi91yP/qkbtRazQe8H ku+nKmYbZzL5bm3QrYYSLR0oZmMCjdgeP9/5STqd9BQ16ndjw+jSwCt5MxAW9D9w 6GWLfAWiyGXmK+2PaCv6LZM1F+/6qv/NEB/r9bJbxL4HJ7QOZ34lMNDkHPrUCP77 qdhgeESKqww132aY5v9GiHWGdM1WnYJLOPtTsQS6T0sNBu9XoGyosrl4DtUgZ3AB 8Hm01E9b6084izu6IbL0xpEtQhfhHQNJgmFKBRtsaQJro4gmZX8jzjhmGO+LmXBm 0vZxcp0CrzSZ5zzfABY1AteQ1JQpHizD+sU819PhUDutHYSE+2+6rh0NCJwpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUtma8SqfKV21gXGgp8IqLycjcaowHwYDVR0j BBgwFoAUs5sZyQhAhPf8s/r/N2No2Hb2Y3IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMyZTRmODYtNDhlNy00OGM3LWJhOTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5Qzkw ODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3NkY2NjM3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMzlCMTlDOTA4NDA4NEY3RkNCM0ZBRkYzNzYzNjhEODc2RjY2 MzcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4 RDg3NkY2NjM3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5bhyA0aaYwqFmf7se6qfXIu0XjcYLxP8CF A8LGxq2vhhFB614viARhXffxVo3Ds5Bk1NKFBXXEWPiCqfwPr+XE8ke1K12Fzd0r kQlvGtZ7qOxhWKrKCaKptZcbta3Hf5Vwzn/pED8apJx22OnHrS4V83hvV/9PzClD D2IEnqIrFJM0xajXinQw/a/w3+/GmZx7zF7Jwr/ArT6pFr/4VEJOL8KqH5KhTG+0 Rk99JTWiFEyEjm7WOa0Qb2o5hsMeEqhVAJhtzgwwSsq+z4bQuamb95qNvzv0ziVA 1IK4/gv0f+3FDi5Gx5y195nk2bB5FALSdij+LOpAoKS4QLnM+A0= -----END CERTIFICATE-----Generated at Tue Nov 10 14:08:35 2026 by rpki-client