$ rpki-client -vvf rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft File: B39B19C9084084F7FCB3FAFF376368D876F66372.mft (raw, json) Hash identifier: +BV2ZP1f35bXqSOxpj4P9Yrkoi3bhlXbDC8Ps5u762s= Subject key identifier: 2A:BC:0E:A5:29:D2:11:27:AE:E0:31:AE:BC:FE:E4:DE:5F:15:E5:C7 Authority key identifier: B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 Certificate issuer: /CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Certificate serial: 0B7D0EF25FF3CF1BCC0FF999DC9B013393FD4073 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 11:25:51 +0000 Manifest this update: Tue 28 Jul 2026 11:20:51 +0000 Manifest next update: Wed 29 Jul 2026 14:50:51 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: NLnNrRvgdk9PwIX+K62kuAcQASU2Wm+4Xg+4O2CIdkc=) 2: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: 5twMEBpUGZCFXRPaiYDXrww+UAg0G4R4iDCrbaZ4+Ho=) 3: B39B19C9084084F7FCB3FAFF376368D876F66372.crl (hash: XblgYr+SwXv5N6IAhm875uXCtKcUi8n6mDY377pZYgI=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: CTdtRt0QWOxvthXzk1fDi0/fuxno5z52+6EZfo7nHWY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7d:0e:f2:5f:f3:cf:1b:cc:0f:f9:99:dc:9b:01:33:93:fd:40:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Validity Not Before: Jul 28 11:20:51 2026 GMT Not After : Jul 29 14:50:51 2026 GMT Subject: CN=2ABC0EA529D21127AEE031AEBCFEE4DE5F15E5C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:67:bb:c5:d6:8a:31:ad:9b:e8:b4:f8:54:db: 99:f6:29:16:39:ff:4b:c4:35:e5:5a:16:04:75:9a: a2:cc:28:a4:75:8c:bc:cf:93:d5:16:81:e1:ee:87: 67:3c:0c:6a:e1:b3:60:f9:85:c6:e4:59:f6:50:5f: 7e:e9:60:e9:ff:a6:07:98:e4:78:41:86:5d:6c:7e: bc:0c:17:4f:44:5b:9c:4a:85:6e:e8:5a:25:84:c4: e0:ee:f8:63:a7:88:74:75:ec:19:1d:71:7d:b9:17: 00:fb:ee:3b:d9:c6:ee:53:4d:7d:a9:21:a1:b7:ed: 6d:7e:60:3d:84:d7:f0:2f:89:f2:db:a0:67:f2:24: ec:7d:55:f0:11:75:fe:12:10:47:b4:98:8b:8b:8a: 43:75:d4:85:80:34:17:55:70:72:a6:bb:d9:19:b2: 94:56:4b:1c:5e:a0:1c:d7:05:ba:8b:29:cd:44:41: 24:db:0d:c0:13:cc:24:b2:33:03:87:9c:4e:c9:37: 66:90:28:ce:2e:0d:ae:af:3e:8a:31:ef:68:4b:a7: 36:4f:63:8d:d8:7b:48:f4:96:34:3e:e3:2d:c8:89: 15:f4:d2:b6:5c:a9:fd:ae:72:37:f2:df:18:6c:ac: d9:56:8c:3a:3a:d7:78:87:f7:3e:4a:25:7c:02:33: 43:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BC:0E:A5:29:D2:11:27:AE:E0:31:AE:BC:FE:E4:DE:5F:15:E5:C7 X509v3 Authority Key Identifier: keyid:B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:54:6c:e6:26:fb:ca:d4:0b:89:86:37:7b:0a:1f:44:75:a1: c0:f0:8d:45:00:10:4d:81:9c:c1:de:7c:c8:d1:c9:98:77:5b: 22:34:3c:0a:56:0f:99:84:a5:3f:7b:2a:79:4b:36:a8:67:49: bb:3b:51:f1:78:cb:37:20:35:88:29:43:ba:55:e7:22:0e:20: f2:f0:89:46:29:38:2c:6c:e5:06:3a:1a:23:08:37:9e:12:20: b7:d4:30:dd:2a:ce:0f:72:c4:5f:a9:b9:b1:01:5d:d5:bb:ca: cd:d7:0b:d5:54:56:5d:81:64:94:94:6f:7e:37:f9:b0:7f:e3: fc:49:c7:c3:81:23:71:f4:b7:9b:76:8d:b1:4c:ad:ee:1b:f3: c0:be:4a:86:6d:08:78:a8:10:53:e2:59:92:5c:29:40:16:48: 91:3b:81:b6:fc:93:c8:60:13:db:cc:7f:e3:d3:c7:34:87:e3: 8e:30:08:98:c9:c6:c5:a9:55:56:3c:a9:1d:86:eb:ae:a6:76: ba:24:14:5d:06:c1:47:a5:c0:71:a5:9a:f6:1b:ea:23:62:f5: 3c:20:89:cd:92:76:ea:90:bc:12:90:fa:5c:68:6a:78:39:1a: 9a:bc:97:37:c5:ed:b0:c4:4b:7a:f0:19:cb:1f:da:52:03:e2: 38:70:d0:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC30O8l/zzxvMD/mZ3JsBM5P9QHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3 NkY2NjM3MjAeFw0yNjA3MjgxMTIwNTFaFw0yNjA3MjkxNDUwNTFaMDMxMTAvBgNV BAMTKDJBQkMwRUE1MjlEMjExMjdBRUUwMzFBRUJDRkVFNERFNUYxNUU1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZ7vF1ooxrZvotPhU25n2KRY5 /0vENeVaFgR1mqLMKKR1jLzPk9UWgeHuh2c8DGrhs2D5hcbkWfZQX37pYOn/pgeY 5HhBhl1sfrwMF09EW5xKhW7oWiWExODu+GOniHR17BkdcX25FwD77jvZxu5TTX2p IaG37W1+YD2E1/AvifLboGfyJOx9VfARdf4SEEe0mIuLikN11IWANBdVcHKmu9kZ spRWSxxeoBzXBbqLKc1EQSTbDcATzCSyMwOHnE7JN2aQKM4uDa6vPoox72hLpzZP Y43Ye0j0ljQ+4y3IiRX00rZcqf2ucjfy3xhsrNlWjDo613iH9z5KJXwCM0NRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKrwOpSnSESeu4DGuvP7k3l8V5ccwHwYDVR0j BBgwFoAUs5sZyQhAhPf8s/r/N2No2Hb2Y3IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMyZTRmODYtNDhlNy00OGM3LWJhOTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5Qzkw ODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3NkY2NjM3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMzlCMTlDOTA4NDA4NEY3RkNCM0ZBRkYzNzYzNjhEODc2RjY2 MzcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4 RDg3NkY2NjM3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNUbOYm+8rUC4mGN3sKH0R1ocDwjUUAEE2B nMHefMjRyZh3WyI0PApWD5mEpT97KnlLNqhnSbs7UfF4yzcgNYgpQ7pV5yIOIPLw iUYpOCxs5QY6GiMIN54SILfUMN0qzg9yxF+pubEBXdW7ys3XC9VUVl2BZJSUb343 +bB/4/xJx8OBI3H0t5t2jbFMre4b88C+SoZtCHioEFPiWZJcKUAWSJE7gbb8k8hg E9vMf+PTxzSH444wCJjJxsWpVVY8qR2G666mdrokFF0GwUelwHGlmvYb6iNi9Twg ic2SduqQvBKQ+lxoang5Gpq8lzfF7bDES3rwGcsf2lID4jhw0K0= -----END CERTIFICATE-----Generated at Wed Jul 29 00:05:26 2026 by rpki-client