$ rpki-client -vvf rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft File: 039655B785EC7CB007D8EC3057559737EDFECF68.mft (raw, json) Hash identifier: EUfRhe4yd1Xc117VuYr9MnwF+XzeIbFgphT6PRP86/Q= Subject key identifier: 3A:95:57:94:D4:7D:43:94:B9:1F:A5:0E:5D:A5:FA:A6:A8:F2:FC:4E Authority key identifier: 03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 Certificate issuer: /CN=039655B785EC7CB007D8EC3057559737EDFECF68 Certificate serial: 1ED0FF2535F377ADA655ED038D89D9F47D5D21DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 01:44:58 +0000 Manifest this update: Sun 14 Jun 2026 01:39:58 +0000 Manifest next update: Mon 15 Jun 2026 04:20:58 +0000 Files and hashes: 1: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: fDqmdlGGzbZKwo2TG5DvyQfQjo71DsLK4B+BzK5Vb+Q=) 2: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: C5UaoWndqT8fkT/kUA+ky572u7b6+Zi84mEQVPG7UEk=) 3: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: YWldloNKuf6nODMaL6FjFspEktId/aPkL38Pfe/uoXQ=) 4: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: wuckQGhSeNjfJUeUi1bzWu9XgRdVcXHbLO7uAW4Bwoo=) 5: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 7J+fQcGnrWcJgu4AWb0Pueoldil+uuzO3rZSOi/YFCY=) 6: 039655B785EC7CB007D8EC3057559737EDFECF68.crl (hash: Qdqp/U7xrB65MHqZuldn5mUfhdMwG36dI/OaZcLWsBM=) 7: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: ODnRKml3wmOVpjtW+xC+dZC5mmMJA71SJG7/VtBibyg=) 8: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: Mw5Rq159HgAFkzwo+iOGAJH0lBRwzFfI8gCzOg4CwLQ=) 9: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: eQfKLmnoRcKmmSMjm7w1dd94t1neaLfEfU1VX6jNzeU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 04:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d0:ff:25:35:f3:77:ad:a6:55:ed:03:8d:89:d9:f4:7d:5d:21:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039655B785EC7CB007D8EC3057559737EDFECF68 Validity Not Before: Jun 14 01:39:58 2026 GMT Not After : Jun 15 04:20:58 2026 GMT Subject: CN=3A955794D47D4394B91FA50E5DA5FAA6A8F2FC4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4f:6d:c9:9d:50:cf:86:15:84:fa:56:57:a0: 4b:be:33:ef:41:47:1b:34:29:b9:26:ec:18:8d:61: 33:fd:c9:83:12:69:09:c6:6c:31:6d:eb:6d:d2:7e: 01:9a:1c:d2:13:25:7b:0c:ba:8c:1b:c9:d7:1c:ed: 9e:df:9c:67:08:3d:3d:3e:50:90:97:25:07:74:32: f5:87:f6:71:ac:b9:f3:1f:ad:7f:8c:eb:d5:3e:47: 3b:cd:ae:7f:ac:39:df:5e:78:95:35:4e:a2:3f:12: aa:72:fb:35:81:29:b4:27:00:bc:e1:f0:1d:a3:b4: 01:e4:a6:d7:08:0a:06:0d:40:e7:10:22:77:8a:24: 58:0d:d8:af:99:a3:b5:99:eb:8f:74:dd:99:d6:9c: 68:07:15:b8:9c:4b:4c:f0:3c:3b:fb:28:9d:13:01: a4:cc:b5:aa:5a:a9:c9:cd:75:4d:10:9c:c9:74:9a: 48:cd:23:7c:e2:7c:4c:85:05:b1:91:d2:e4:84:1c: cc:45:d0:38:1e:db:9f:54:ed:0f:98:b6:d9:36:ee: d9:7a:a5:b1:9b:bd:42:61:82:75:d0:e4:47:52:a3: 97:87:36:ed:84:53:76:01:6e:bb:58:cc:ac:79:a5: cc:92:32:ed:5b:21:64:c3:6d:69:06:56:6d:9f:40: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:95:57:94:D4:7D:43:94:B9:1F:A5:0E:5D:A5:FA:A6:A8:F2:FC:4E X509v3 Authority Key Identifier: keyid:03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:40:43:62:26:5f:69:6a:70:72:3a:dc:d5:bd:ce:eb:e8:62: 71:eb:e0:ea:31:53:0a:9f:74:4f:67:75:5c:18:0a:01:ea:14: a6:2e:6d:77:50:5f:23:97:65:1d:94:63:8a:f6:17:b0:02:c0: d0:fe:76:31:ec:98:1d:ad:ab:6c:1e:c3:bc:e6:2e:8f:1b:67: 7c:df:d3:cc:3f:58:a2:45:92:6a:1c:af:53:53:f1:3c:f2:5a: c3:25:c6:57:88:77:9a:c9:9f:a4:13:dc:95:be:0d:78:fc:8a: 3c:d8:fb:13:d2:59:7d:d4:bc:e5:ab:4a:66:e9:6b:57:8d:eb: b9:c5:d0:ab:3f:5f:56:29:08:90:3e:63:6c:0e:e7:30:7f:63: 3d:f9:e5:9d:c7:35:fa:68:4a:ee:80:bf:f4:27:b5:23:03:9b: 4e:e8:f0:2a:12:66:fd:f6:23:2a:f7:76:a3:dc:4f:3d:e3:ca: d5:db:ab:b7:da:07:9f:f0:f8:8d:b5:6b:32:83:c8:9b:da:2f: 27:28:e2:80:f0:2d:2b:ca:eb:37:c9:9a:2a:0d:7f:94:3a:38: 87:77:9b:d7:a7:d7:78:0c:04:42:e3:f7:f3:a4:1b:fe:52:3c: a3:61:b1:6a:d2:00:17:81:1d:b9:03:32:b8:87:14:b6:60:8a: 47:21:11:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtD/JTXzd62mVe0DjYnZ9H1dId4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdF REZFQ0Y2ODAeFw0yNjA2MTQwMTM5NThaFw0yNjA2MTUwNDIwNThaMDMxMTAvBgNV BAMTKDNBOTU1Nzk0RDQ3RDQzOTRCOTFGQTUwRTVEQTVGQUE2QThGMkZDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBT23JnVDPhhWE+lZXoEu+M+9B Rxs0Kbkm7BiNYTP9yYMSaQnGbDFt623SfgGaHNITJXsMuowbydcc7Z7fnGcIPT0+ UJCXJQd0MvWH9nGsufMfrX+M69U+RzvNrn+sOd9eeJU1TqI/Eqpy+zWBKbQnALzh 8B2jtAHkptcICgYNQOcQIneKJFgN2K+Zo7WZ64903ZnWnGgHFbicS0zwPDv7KJ0T AaTMtapaqcnNdU0QnMl0mkjNI3zifEyFBbGR0uSEHMxF0Dge259U7Q+Yttk27tl6 pbGbvUJhgnXQ5EdSo5eHNu2EU3YBbrtYzKx5pcySMu1bIWTDbWkGVm2fQHOHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOpVXlNR9Q5S5H6UOXaX6pqjy/E4wHwYDVR0j BBgwFoAUA5ZVt4XsfLAH2OwwV1WXN+3+z2gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmE0NWUtZjVkYS00NTgxLWJmZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4 NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdFREZFQ0Y2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzk2NTVCNzg1RUM3Q0IwMDdEOEVDMzA1NzU1OTczN0VERkVD RjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3 MzdFREZFQ0Y2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBAQ2ImX2lqcHI63NW9zuvoYnHr4OoxUwqf dE9ndVwYCgHqFKYubXdQXyOXZR2UY4r2F7ACwND+djHsmB2tq2wew7zmLo8bZ3zf 08w/WKJFkmocr1NT8TzyWsMlxleId5rJn6QT3JW+DXj8ijzY+xPSWX3UvOWrSmbp a1eN67nF0Ks/X1YpCJA+Y2wO5zB/Yz355Z3HNfpoSu6Av/QntSMDm07o8CoSZv32 Iyr3dqPcTz3jytXbq7faB5/w+I21azKDyJvaLyco4oDwLSvK6zfJmioNf5Q6OId3 m9en13gMBELj9/OkG/5SPKNhsWrSABeBHbkDMriHFLZgikchEdc= -----END CERTIFICATE-----Generated at Sun Jun 14 08:32:10 2026 by rpki-client