$ rpki-client -vvvf rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft File: B39B19C9084084F7FCB3FAFF376368D876F66372.mft (raw, json) Hash identifier: XekEPxuTWIPvonz1ohwSY3T+V7iRIFJCgA1WsN8jHwY= Subject key identifier: ED:90:43:2D:1C:E5:A0:C8:1A:9F:CF:C0:11:C4:54:DC:67:77:41:53 Authority key identifier: B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 Certificate issuer: /CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Certificate serial: 5F9D16F25015201DCB37A49A007F8B69BF52329D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft Manifest number: BF Signing time: Sun 20 Sep 2026 23:25:48 +0000 Manifest this update: Sun 20 Sep 2026 23:20:48 +0000 Manifest next update: Tue 22 Sep 2026 00:37:48 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: NLnNrRvgdk9PwIX+K62kuAcQASU2Wm+4Xg+4O2CIdkc=) 2: B39B19C9084084F7FCB3FAFF376368D876F66372.crl (hash: C9+3fWWQWT8RlfPTWubkxoaHizXFijk55LGxmpUVTfo=) 3: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: CTdtRt0QWOxvthXzk1fDi0/fuxno5z52+6EZfo7nHWY=) 4: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: 5twMEBpUGZCFXRPaiYDXrww+UAg0G4R4iDCrbaZ4+Ho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:9d:16:f2:50:15:20:1d:cb:37:a4:9a:00:7f:8b:69:bf:52:32:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Validity Not Before: Sep 20 23:20:48 2026 GMT Not After : Sep 22 00:37:48 2026 GMT Subject: CN=ED90432D1CE5A0C81A9FCFC011C454DC67774153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:54:56:35:c5:e3:63:08:a6:44:53:d5:5a:b8: cd:b2:24:ef:91:81:08:9d:a9:d3:65:9f:3f:de:6b: 5e:11:96:62:98:ac:ea:cb:6d:4d:fc:0b:83:3b:07: 78:c6:db:8d:4d:fa:bd:0b:ef:9a:b7:dc:4c:60:51: 2b:5f:d9:73:d0:8e:d8:22:15:0f:4b:bc:30:fd:bf: a1:b2:8f:02:50:39:58:59:01:d2:28:26:61:cb:5b: 29:63:3a:f4:5c:aa:be:cd:3d:4c:c9:02:8c:ff:53: bd:b2:f8:27:13:1a:8d:61:9f:6e:5e:4b:a1:5f:21: af:70:23:16:b8:53:dc:10:6b:fe:db:10:4f:f7:ee: 0d:2a:13:eb:2a:1e:36:aa:ce:3f:42:75:41:62:f3: 0e:62:03:b0:b2:7b:ff:8e:86:4e:08:64:bd:f9:d1: cb:a6:48:ac:99:3f:30:63:fe:3c:0e:9a:2d:3d:bf: 37:24:b4:3a:09:82:bf:71:4f:b9:6c:a3:78:41:ef: 25:9e:5f:ce:b0:fc:2e:a4:12:2c:9e:cf:b5:aa:48: a8:d5:ff:37:2e:1e:6f:9f:aa:68:d8:b8:7b:c3:14: 79:95:54:a1:b1:12:e7:72:ce:64:b0:89:80:cb:dd: 84:22:bd:1b:0e:af:a6:9c:07:a2:91:c6:a7:ba:5f: ac:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:90:43:2D:1C:E5:A0:C8:1A:9F:CF:C0:11:C4:54:DC:67:77:41:53 X509v3 Authority Key Identifier: keyid:B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:56:c7:35:46:39:bf:0a:e2:b0:8d:5d:4c:39:d2:c6:90:4c: 15:15:04:b2:02:67:76:0c:c4:05:a4:e3:76:3b:82:65:46:5f: 76:6a:08:5e:d0:de:c3:6e:5b:71:85:92:63:0b:f7:10:41:dd: 35:fd:db:ed:a9:4a:ca:16:01:60:19:60:79:30:0b:22:04:e5: 9e:51:70:59:41:5e:34:8c:94:13:af:1f:ff:f5:14:3b:8d:1b: 09:98:a3:f8:b1:b7:94:06:b2:a1:51:4e:18:f6:21:c8:b9:7b: 07:eb:c5:dd:8b:2c:35:19:d2:7c:57:d6:86:b2:30:af:58:f0: a3:5e:92:58:ad:56:62:29:78:31:1f:80:3f:2b:6b:bd:48:fe: a9:e0:90:b4:dd:04:7e:80:1f:f8:af:5f:37:82:42:27:12:83: f4:b7:5a:ff:95:ce:1e:3d:cb:73:90:eb:74:60:5c:5e:00:d6: b2:f2:cd:d8:17:a6:f0:be:92:41:a3:aa:e0:d5:4c:09:df:b9: 9e:40:60:f6:8a:79:0b:c7:42:8b:17:a6:1f:08:e7:5c:fe:65: eb:33:90:e5:9c:22:4d:ab:d8:e2:72:fb:d3:97:35:b2:1d:fb: 18:32:84:24:70:eb:83:03:d0:59:b6:bc:7d:d3:d0:ba:44:5e: 6b:18:bc:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX50W8lAVIB3LN6SaAH+Lab9SMp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3 NkY2NjM3MjAeFw0yNjA5MjAyMzIwNDhaFw0yNjA5MjIwMDM3NDhaMDMxMTAvBgNV BAMTKEVEOTA0MzJEMUNFNUEwQzgxQTlGQ0ZDMDExQzQ1NERDNjc3NzQxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiVFY1xeNjCKZEU9VauM2yJO+R gQidqdNlnz/ea14RlmKYrOrLbU38C4M7B3jG241N+r0L75q33ExgUStf2XPQjtgi FQ9LvDD9v6GyjwJQOVhZAdIoJmHLWyljOvRcqr7NPUzJAoz/U72y+CcTGo1hn25e S6FfIa9wIxa4U9wQa/7bEE/37g0qE+sqHjaqzj9CdUFi8w5iA7Cye/+Ohk4IZL35 0cumSKyZPzBj/jwOmi09vzcktDoJgr9xT7lso3hB7yWeX86w/C6kEiyez7WqSKjV /zcuHm+fqmjYuHvDFHmVVKGxEudyzmSwiYDL3YQivRsOr6acB6KRxqe6X6zLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7ZBDLRzloMgan8/AEcRU3Gd3QVMwHwYDVR0j BBgwFoAUs5sZyQhAhPf8s/r/N2No2Hb2Y3IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMyZTRmODYtNDhlNy00OGM3LWJhOTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5Qzkw ODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3NkY2NjM3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMzlCMTlDOTA4NDA4NEY3RkNCM0ZBRkYzNzYzNjhEODc2RjY2 MzcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4 RDg3NkY2NjM3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBWxzVGOb8K4rCNXUw50saQTBUVBLICZ3YM xAWk43Y7gmVGX3ZqCF7Q3sNuW3GFkmML9xBB3TX92+2pSsoWAWAZYHkwCyIE5Z5R cFlBXjSMlBOvH//1FDuNGwmYo/ixt5QGsqFRThj2Ici5ewfrxd2LLDUZ0nxX1oay MK9Y8KNeklitVmIpeDEfgD8ra71I/qngkLTdBH6AH/ivXzeCQicSg/S3Wv+Vzh49 y3OQ63RgXF4A1rLyzdgXpvC+kkGjquDVTAnfuZ5AYPaKeQvHQosXph8I51z+Zesz kOWcIk2r2OJy+9OXNbId+xgyhCRw64MD0Fm2vH3T0LpEXmsYvB4= -----END CERTIFICATE-----Generated at Mon Sep 21 06:29:12 2026 by rpki-client