$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft File: 039655B785EC7CB007D8EC3057559737EDFECF68.mft (raw, json) Hash identifier: X2eUj9bjG15lS35p/BHUjOYFyINf/v5Tx1o3zzN92Qs= Subject key identifier: E2:4A:18:6F:9D:92:9B:12:73:B9:9E:30:1A:5F:CB:B0:8C:8A:5B:53 Authority key identifier: 03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 Certificate issuer: /CN=039655B785EC7CB007D8EC3057559737EDFECF68 Certificate serial: 4E440870986856FE855245D69384118BD7464038 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 05:46:20 +0000 Manifest this update: Sun 15 Nov 2026 05:41:20 +0000 Manifest next update: Mon 16 Nov 2026 07:12:20 +0000 Files and hashes: 1: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 7J+fQcGnrWcJgu4AWb0Pueoldil+uuzO3rZSOi/YFCY=) 2: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: Mw5Rq159HgAFkzwo+iOGAJH0lBRwzFfI8gCzOg4CwLQ=) 3: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: C5UaoWndqT8fkT/kUA+ky572u7b6+Zi84mEQVPG7UEk=) 4: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: YWldloNKuf6nODMaL6FjFspEktId/aPkL38Pfe/uoXQ=) 5: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: ODnRKml3wmOVpjtW+xC+dZC5mmMJA71SJG7/VtBibyg=) 6: 039655B785EC7CB007D8EC3057559737EDFECF68.crl (hash: O6ZDgSanqNpDuJnCKitD8Vhnbj1RDfZ7wPuC2hYoTp0=) 7: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: fDqmdlGGzbZKwo2TG5DvyQfQjo71DsLK4B+BzK5Vb+Q=) 8: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: wuckQGhSeNjfJUeUi1bzWu9XgRdVcXHbLO7uAW4Bwoo=) 9: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: eQfKLmnoRcKmmSMjm7w1dd94t1neaLfEfU1VX6jNzeU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:44:08:70:98:68:56:fe:85:52:45:d6:93:84:11:8b:d7:46:40:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039655B785EC7CB007D8EC3057559737EDFECF68 Validity Not Before: Nov 15 05:41:20 2026 GMT Not After : Nov 16 07:12:20 2026 GMT Subject: CN=E24A186F9D929B1273B99E301A5FCBB08C8A5B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:54:ff:da:7a:7c:37:47:2b:c5:43:0c:51:b4: 79:48:f8:71:1c:9b:2f:e6:98:a3:67:db:38:73:41: 88:71:89:22:b6:39:73:b8:10:a4:4c:0f:d7:cd:a6: ce:72:b2:c5:b7:a0:93:24:11:e3:35:d9:84:2e:3b: d9:5d:4c:90:7b:06:25:ca:86:b5:8b:bd:cc:bf:8c: f0:d8:90:8a:3f:5d:a1:1c:3c:9f:dd:ab:39:03:14: d7:a1:f1:04:f5:db:d5:30:cc:28:2e:01:38:8f:10: e3:f7:a3:7f:ac:ad:58:53:41:e5:23:0a:d5:e5:f3: 39:5c:44:4b:9b:fe:08:fa:11:97:0f:ef:60:5a:be: 49:c8:66:28:69:cf:4c:d9:a8:d6:27:8a:18:e1:3b: 9e:21:87:f2:90:d4:b0:e4:b5:ec:8f:93:9c:43:e2: c4:80:cd:1f:1f:f4:08:7d:0c:6d:7d:4b:93:0f:ac: 94:80:02:ee:b2:1e:42:b9:23:6c:9a:5b:e0:1c:44: 1a:c0:a1:69:f4:e7:42:22:de:68:5c:cf:ca:50:6c: eb:b3:89:f6:e8:f2:11:e5:8c:6a:2f:43:de:64:8a: b5:b2:64:89:a4:65:da:f0:4a:3d:46:00:19:5f:bf: fe:59:3e:55:b5:83:02:91:1b:2d:bc:e5:71:8e:d5: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4A:18:6F:9D:92:9B:12:73:B9:9E:30:1A:5F:CB:B0:8C:8A:5B:53 X509v3 Authority Key Identifier: keyid:03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:04:02:dc:41:11:a6:a3:c3:53:dd:07:08:91:f4:9a:ee:f5: 3b:3c:89:0d:f8:a0:07:e5:dc:80:a6:f0:53:1a:8f:a7:37:43: d0:ec:4e:f3:62:3d:54:b7:a0:46:79:94:95:db:1e:34:b2:a0: 6a:d7:49:3b:7c:a8:4a:1c:45:65:83:09:c7:9a:b8:14:9a:36: 33:9c:82:a4:bf:6d:e5:30:7d:5b:eb:7f:12:25:c2:ce:ed:54: 98:8f:2b:ec:32:4c:7c:2e:ba:72:10:8a:b6:fd:84:16:2b:82: 85:17:18:6a:0c:05:a2:65:7d:94:8e:11:85:f9:8d:f6:a7:75: a4:85:40:27:df:13:14:67:27:7d:0b:ca:10:f3:7e:08:18:b5: 27:ab:a8:58:55:3c:b9:a6:3e:60:15:be:19:d9:ef:30:c8:99: 76:5f:5d:b8:04:3a:57:d8:fe:52:c5:fa:83:10:b5:25:6e:48: 90:b5:6d:47:92:9d:60:0e:6d:08:38:10:5c:56:84:c6:de:f3: 3f:f6:5e:2d:d3:5f:43:71:84:b7:8d:d6:9a:45:e5:0f:f8:ca: 11:a4:7a:a2:60:4e:4b:45:df:e5:41:be:09:7d:3f:18:dd:e8: 54:2a:ac:f0:40:21:f8:96:37:37:5b:d8:1c:61:db:40:f4:85: 35:b8:3e:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTkQIcJhoVv6FUkXWk4QRi9dGQDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdF REZFQ0Y2ODAeFw0yNjExMTUwNTQxMjBaFw0yNjExMTYwNzEyMjBaMDMxMTAvBgNV BAMTKEUyNEExODZGOUQ5MjlCMTI3M0I5OUUzMDFBNUZDQkIwOEM4QTVCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVP/aenw3RyvFQwxRtHlI+HEc my/mmKNn2zhzQYhxiSK2OXO4EKRMD9fNps5yssW3oJMkEeM12YQuO9ldTJB7BiXK hrWLvcy/jPDYkIo/XaEcPJ/dqzkDFNeh8QT129UwzCguATiPEOP3o3+srVhTQeUj CtXl8zlcREub/gj6EZcP72BavknIZihpz0zZqNYnihjhO54hh/KQ1LDkteyPk5xD 4sSAzR8f9Ah9DG19S5MPrJSAAu6yHkK5I2yaW+AcRBrAoWn050Ii3mhcz8pQbOuz ifbo8hHljGovQ95kirWyZImkZdrwSj1GABlfv/5ZPlW1gwKRGy285XGO1VzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4koYb52SmxJzuZ4wGl/LsIyKW1MwHwYDVR0j BBgwFoAUA5ZVt4XsfLAH2OwwV1WXN+3+z2gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmE0NWUtZjVkYS00NTgxLWJmZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4 NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdFREZFQ0Y2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzk2NTVCNzg1RUM3Q0IwMDdEOEVDMzA1NzU1OTczN0VERkVD RjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3 MzdFREZFQ0Y2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgEAtxBEaajw1PdBwiR9Jru9Ts8iQ34oAfl 3ICm8FMaj6c3Q9DsTvNiPVS3oEZ5lJXbHjSyoGrXSTt8qEocRWWDCceauBSaNjOc gqS/beUwfVvrfxIlws7tVJiPK+wyTHwuunIQirb9hBYrgoUXGGoMBaJlfZSOEYX5 jfandaSFQCffExRnJ30LyhDzfggYtSerqFhVPLmmPmAVvhnZ7zDImXZfXbgEOlfY /lLF+oMQtSVuSJC1bUeSnWAObQg4EFxWhMbe8z/2Xi3TX0NxhLeN1ppF5Q/4yhGk eqJgTktF3+VBvgl9Pxjd6FQqrPBAIfiWNzdb2Bxh20D0hTW4Puc= -----END CERTIFICATE-----Generated at Sun Nov 15 10:41:44 2026 by rpki-client