$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft File: 039655B785EC7CB007D8EC3057559737EDFECF68.mft (raw, json) Hash identifier: k7mIDVcTm++Cm3BwEn347WMxR8mJFR553Or2Hm58Ts0= Subject key identifier: E5:18:B9:6C:AA:A3:CD:6F:2C:82:7B:D1:7B:9D:FA:19:95:01:28:54 Authority key identifier: 03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 Certificate issuer: /CN=039655B785EC7CB007D8EC3057559737EDFECF68 Certificate serial: 089D6C3025574EA98E8ECEBC769300100A0BDCD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft Manifest number: BF Signing time: Mon 21 Sep 2026 08:21:56 +0000 Manifest this update: Mon 21 Sep 2026 08:16:56 +0000 Manifest next update: Tue 22 Sep 2026 10:39:56 +0000 Files and hashes: 1: 039655B785EC7CB007D8EC3057559737EDFECF68.crl (hash: Y8LmVs4xPn+DPO3tCokfs/LLGr8LJKWUOhuSLy1jZcw=) 2: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 7J+fQcGnrWcJgu4AWb0Pueoldil+uuzO3rZSOi/YFCY=) 3: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: ODnRKml3wmOVpjtW+xC+dZC5mmMJA71SJG7/VtBibyg=) 4: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: C5UaoWndqT8fkT/kUA+ky572u7b6+Zi84mEQVPG7UEk=) 5: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: fDqmdlGGzbZKwo2TG5DvyQfQjo71DsLK4B+BzK5Vb+Q=) 6: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: Mw5Rq159HgAFkzwo+iOGAJH0lBRwzFfI8gCzOg4CwLQ=) 7: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: YWldloNKuf6nODMaL6FjFspEktId/aPkL38Pfe/uoXQ=) 8: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: eQfKLmnoRcKmmSMjm7w1dd94t1neaLfEfU1VX6jNzeU=) 9: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: wuckQGhSeNjfJUeUi1bzWu9XgRdVcXHbLO7uAW4Bwoo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9d:6c:30:25:57:4e:a9:8e:8e:ce:bc:76:93:00:10:0a:0b:dc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039655B785EC7CB007D8EC3057559737EDFECF68 Validity Not Before: Sep 21 08:16:56 2026 GMT Not After : Sep 22 10:39:56 2026 GMT Subject: CN=E518B96CAAA3CD6F2C827BD17B9DFA1995012854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:96:43:2b:3a:19:4a:c9:2f:fd:df:f2:19: dc:e5:e0:82:73:2d:52:5f:75:a4:a4:7c:0e:63:3a: 59:13:fc:fd:29:ef:6d:cb:6b:35:a3:0e:4e:4a:5e: 17:ad:dc:7e:11:92:5f:1e:73:d6:f6:85:18:b0:06: c3:93:f6:5b:3a:69:3c:f6:64:41:1b:c3:9c:ad:66: 76:c6:e4:64:24:c5:a0:3d:15:41:f9:ab:5e:fd:bc: c0:54:0c:32:55:18:37:af:6e:6d:92:86:0d:73:41: da:ab:43:41:3a:da:b4:c9:60:b4:08:42:7d:6a:e8: 1d:a2:34:12:80:bc:78:17:ea:d6:02:a5:3b:82:3e: 8d:c4:0b:9a:9b:a1:ad:47:5e:e4:80:fd:c9:33:a6: 5f:5d:89:1f:ab:d4:17:37:a6:70:45:7f:d9:57:c3: 47:01:6f:f0:e0:df:82:c5:54:38:9c:59:18:52:bf: ba:3e:1e:a5:d9:20:24:7e:98:36:d1:26:f2:f5:b2: 9f:e1:8c:03:4a:b9:f4:c8:42:3f:99:6b:0d:89:a7: 50:56:e4:3b:67:c4:5d:3c:45:d9:6a:e1:83:9c:ac: 47:0a:2b:e1:8a:38:25:4f:a1:bc:39:ad:07:4c:28: 6d:65:a6:15:ac:ce:df:5e:c7:c2:a0:63:fe:d2:72: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:18:B9:6C:AA:A3:CD:6F:2C:82:7B:D1:7B:9D:FA:19:95:01:28:54 X509v3 Authority Key Identifier: keyid:03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:58:d6:30:de:0c:39:24:cf:d4:f3:ca:12:ae:ea:5a:07:dd: a3:a2:6a:d7:11:de:c5:b0:3e:d9:51:0b:a2:73:70:84:48:e0: 37:00:64:a2:69:4f:08:3f:e0:43:7f:06:56:b7:ba:c5:e6:b8: ec:a9:15:f8:0b:b7:c5:5f:52:f5:14:2a:cc:64:77:51:bb:8a: ef:f5:eb:b8:cc:40:24:3b:e4:00:7c:34:00:dd:cd:80:23:85: a1:fa:4b:c8:e3:c9:88:ee:2f:6f:c9:14:e9:e9:8d:50:3e:7e: 0b:8a:d5:68:c1:03:e6:d4:4a:32:0b:e3:40:c0:1d:23:82:2c: ad:90:46:a6:ac:02:17:eb:d0:84:1b:d3:99:c2:90:c4:89:07: 3c:10:31:39:79:8d:c1:0b:c6:74:c8:82:ea:b6:29:8e:ba:32: af:f2:23:41:12:f5:93:44:6f:1b:3f:5e:31:38:62:e7:2d:e8: 62:0a:f0:3c:6a:28:57:5e:9b:b0:3b:a8:65:5b:96:73:f8:12: 57:ad:22:bc:10:36:98:c2:37:fe:36:66:ac:ac:eb:c5:48:2b: 53:b4:de:42:de:56:bc:78:12:49:d6:66:2f:10:fe:fc:c6:01: ae:05:d7:e5:46:19:5a:7e:0f:8d:36:40:4d:83:90:80:8f:77: 4a:98:4c:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJ1sMCVXTqmOjs68dpMAEAoL3NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdF REZFQ0Y2ODAeFw0yNjA5MjEwODE2NTZaFw0yNjA5MjIxMDM5NTZaMDMxMTAvBgNV BAMTKEU1MThCOTZDQUFBM0NENkYyQzgyN0JEMTdCOURGQTE5OTUwMTI4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC645ZDKzoZSskv/d/yGdzl4IJz LVJfdaSkfA5jOlkT/P0p723LazWjDk5KXhet3H4Rkl8ec9b2hRiwBsOT9ls6aTz2 ZEEbw5ytZnbG5GQkxaA9FUH5q179vMBUDDJVGDevbm2Shg1zQdqrQ0E62rTJYLQI Qn1q6B2iNBKAvHgX6tYCpTuCPo3EC5qboa1HXuSA/ckzpl9diR+r1Bc3pnBFf9lX w0cBb/Dg34LFVDicWRhSv7o+HqXZICR+mDbRJvL1sp/hjANKufTIQj+Zaw2Jp1BW 5DtnxF08Rdlq4YOcrEcKK+GKOCVPobw5rQdMKG1lphWszt9ex8KgY/7Schj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Ri5bKqjzW8sgnvRe536GZUBKFQwHwYDVR0j BBgwFoAUA5ZVt4XsfLAH2OwwV1WXN+3+z2gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmE0NWUtZjVkYS00NTgxLWJmZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4 NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdFREZFQ0Y2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzk2NTVCNzg1RUM3Q0IwMDdEOEVDMzA1NzU1OTczN0VERkVD RjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3 MzdFREZFQ0Y2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFY1jDeDDkkz9TzyhKu6loH3aOiatcR3sWw PtlRC6JzcIRI4DcAZKJpTwg/4EN/Bla3usXmuOypFfgLt8VfUvUUKsxkd1G7iu/1 67jMQCQ75AB8NADdzYAjhaH6S8jjyYjuL2/JFOnpjVA+fguK1WjBA+bUSjIL40DA HSOCLK2QRqasAhfr0IQb05nCkMSJBzwQMTl5jcELxnTIguq2KY66Mq/yI0ES9ZNE bxs/XjE4Yuct6GIK8DxqKFdem7A7qGVblnP4EletIrwQNpjCN/42Zqys68VIK1O0 3kLeVrx4EknWZi8Q/vzGAa4F1+VGGVp+D402QE2DkICPd0qYTLQ= -----END CERTIFICATE-----Generated at Mon Sep 21 16:58:25 2026 by rpki-client