$ rpki-client -vvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft File: 399FBE55CFD957C1E3849C75FE378403E394BB45.mft (raw, json) Hash identifier: 3iCcq+IwAzzXDf0jpJE7CiHbmoopSvgPHTlPE09UNaI= Subject key identifier: D5:78:0A:CB:5B:74:DE:24:B6:86:D5:B9:E1:2D:B5:D0:82:26:DC:00 Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Certificate serial: 1B98D3E947F7737204570DBCF85C37B4D85F0845 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:00:56 +0000 Manifest this update: Tue 16 Jun 2026 21:55:56 +0000 Manifest next update: Thu 18 Jun 2026 00:22:56 +0000 Files and hashes: 1: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: gmPxQm5NcqK3BCfFQb7w+dLmFYWZ/DthSfb9I0IYOOQ=) 2: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: uojxwHiaMR8PO5h26JWS2B444u+QQh72ookAa5uFqSs=) 3: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: rqJDuuQFB9Ir08Xt+9/dUd2pRxC5DTIO9a28+O4McDo=) 4: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: NrcqksrmsSbHeL16ugEy8PBgZElc8n2NevcNzHFW6Sc=) 5: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: Nda6FqqHwv307lkTxH+b0mWevIjFxVsW+c3rWmYY64U=) 6: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: zSazRb0IpJJ4cBgKA2+8jgm7s2YnWXUiU+1QnaQiN1g=) 7: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: qood+9S8zNU9X/jpjUZIu26OXyUnDxyv/AsytcFufXA=) 8: 399FBE55CFD957C1E3849C75FE378403E394BB45.crl (hash: IWCBVqc4yJanTB6YeTBR+12gK/F1LZq9jRo0TJ9TRdA=) 9: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: /vRQ0F5lBxm5YccSzuUARECi1VFqg7FRoH3qOHTCFHs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:98:d3:e9:47:f7:73:72:04:57:0d:bc:f8:5c:37:b4:d8:5f:08:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Validity Not Before: Jun 16 21:55:56 2026 GMT Not After : Jun 18 00:22:56 2026 GMT Subject: CN=D5780ACB5B74DE24B686D5B9E12DB5D08226DC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:2e:f5:86:37:c0:60:c3:57:eb:31:7a:90: e1:34:be:ad:ed:ca:71:74:75:55:3e:b3:b6:ab:cb: 2d:4f:fd:56:4e:29:a0:26:48:08:9a:c8:20:1d:88: 4a:e8:51:df:30:3b:bd:7b:aa:f8:9d:f0:a6:18:a6: a9:0c:9e:77:a9:c3:d3:f2:f3:bc:0a:d9:9d:1b:80: 9a:f3:a7:7c:aa:53:3b:5d:de:ec:58:60:76:d4:f2: fb:42:4c:7c:ee:93:ac:50:f4:8b:85:ed:a9:44:21: 28:16:18:8f:b1:b9:21:c5:c8:a2:7a:06:12:9d:b0: bc:6b:4d:d0:88:f8:85:dc:94:6f:97:69:a9:77:f6: b8:76:94:a2:de:8c:9c:f5:c0:79:b6:cd:4b:65:33: 83:4e:00:51:12:80:5d:6e:3a:90:8b:ad:16:8e:fd: 87:11:a4:f0:91:a9:36:df:56:3e:8b:23:91:75:6f: ab:fe:4a:b3:ac:93:32:18:98:bc:6f:e8:eb:17:1e: 05:96:95:52:da:2b:d5:36:81:24:de:30:19:6a:10: bd:81:9c:61:52:8a:84:52:ee:b4:fb:ca:87:61:38: e2:4a:27:b5:87:d8:11:08:ae:50:7e:5a:5c:7b:79: a2:04:58:f6:79:50:4e:5e:53:34:f2:a4:49:5c:72: ce:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:78:0A:CB:5B:74:DE:24:B6:86:D5:B9:E1:2D:B5:D0:82:26:DC:00 X509v3 Authority Key Identifier: keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d8:4c:d1:0e:b0:a1:4b:ef:00:fb:bd:bb:73:5e:4b:aa:11: a1:c2:b6:e8:17:25:ac:33:ed:0d:34:c5:f9:3f:50:76:2a:61: 54:5e:b6:40:6b:24:bf:70:80:36:ff:e8:91:dc:4f:75:26:19: ce:c4:48:97:e8:4a:83:68:0b:e1:78:ff:b1:1c:7e:d0:88:15: e2:0b:3c:c1:2e:03:f9:c7:c7:15:b1:67:3b:43:9b:f2:2e:93: a0:41:03:dc:25:48:68:6e:ab:e6:5b:0d:e5:04:e4:73:cb:5c: b0:1a:23:24:27:e2:d8:a7:a6:19:3b:66:de:3a:3a:8a:91:41: 24:b2:18:d9:d7:63:13:72:80:ed:a7:45:83:22:f3:f1:bf:10: 04:7d:8e:fc:47:fe:8f:56:e1:b8:ba:41:05:1e:41:fd:e3:cc: f0:a8:2c:0a:31:77:e7:89:79:6b:1b:8d:eb:5a:67:28:a1:18: 37:4c:d8:23:58:7d:0a:c1:09:71:19:92:1c:75:37:40:7d:4b: 36:ae:76:d3:00:ad:a3:f5:41:60:ab:3c:5f:65:c0:b7:0e:91: d3:76:a7:5f:63:0d:5a:0d:a3:56:42:9e:bd:73:a7:32:d3:db: 47:3a:91:a7:de:78:1f:cf:d8:18:13:a9:2c:ed:5f:0e:9a:a3: 3d:bd:17:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5jT6Uf3c3IEVw28+Fw3tNhfCEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNF Mzk0QkI0NTAeFw0yNjA2MTYyMTU1NTZaFw0yNjA2MTgwMDIyNTZaMDMxMTAvBgNV BAMTKEQ1NzgwQUNCNUI3NERFMjRCNjg2RDVCOUUxMkRCNUQwODIyNkRDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0iC71hjfAYMNX6zF6kOE0vq3t ynF0dVU+s7aryy1P/VZOKaAmSAiayCAdiEroUd8wO717qvid8KYYpqkMnnepw9Py 87wK2Z0bgJrzp3yqUztd3uxYYHbU8vtCTHzuk6xQ9IuF7alEISgWGI+xuSHFyKJ6 BhKdsLxrTdCI+IXclG+Xaal39rh2lKLejJz1wHm2zUtlM4NOAFESgF1uOpCLrRaO /YcRpPCRqTbfVj6LI5F1b6v+SrOskzIYmLxv6OsXHgWWlVLaK9U2gSTeMBlqEL2B nGFSioRS7rT7yodhOOJKJ7WH2BEIrlB+Wlx7eaIEWPZ5UE5eUzTypElccs7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1XgKy1t03iS2htW54S210IIm3AAwHwYDVR0j BBgwFoAUOZ++Vc/ZV8HjhJx1/jeEA+OUu0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwZGZiNWEtODQ1ZS00ZGRmLWFjYTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVD RkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNFMzk0QkI0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOTlGQkU1NUNGRDk1N0MxRTM4NDlDNzVGRTM3ODQwM0UzOTRC QjQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwZGZiNWEtODQ1ZS00ZGRmLWFj YTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0 MDNFMzk0QkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7YTNEOsKFL7wD7vbtzXkuqEaHCtugXJawz 7Q00xfk/UHYqYVRetkBrJL9wgDb/6JHcT3UmGc7ESJfoSoNoC+F4/7EcftCIFeIL PMEuA/nHxxWxZztDm/Iuk6BBA9wlSGhuq+ZbDeUE5HPLXLAaIyQn4tinphk7Zt46 OoqRQSSyGNnXYxNygO2nRYMi8/G/EAR9jvxH/o9W4bi6QQUeQf3jzPCoLAoxd+eJ eWsbjetaZyihGDdM2CNYfQrBCXEZkhx1N0B9SzaudtMAraP1QWCrPF9lwLcOkdN2 p19jDVoNo1ZCnr1zpzLT20c6kafeeB/P2BgTqSztXw6aoz29F4I= -----END CERTIFICATE-----Generated at Wed Jun 17 13:33:21 2026 by rpki-client