$ rpki-client -vvf repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft File: 39E28911B503E25DB463229AC922CAEF5693A5DD.mft (raw, json) Hash identifier: ry40CefnXuoeKCCsZgIb3W1a6A9P1DxWPq/MCgRy7dg= Subject key identifier: DB:77:3D:BC:5E:C8:DB:7A:F4:02:F6:BA:E0:1C:5A:B8:80:03:85:07 Authority key identifier: 39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD Certificate issuer: /CN=39E28911B503E25DB463229AC922CAEF5693A5DD Certificate serial: 38A598E9824CE7B71ED6C68552BE780B3B13A5AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft Manifest number: 1D Signing time: Wed 25 Mar 2026 03:30:00 +0000 Manifest this update: Wed 25 Mar 2026 03:25:00 +0000 Manifest next update: Sat 28 Mar 2026 07:36:00 +0000 Files and hashes: 1: 39E28911B503E25DB463229AC922CAEF5693A5DD.crl (hash: WeeqCY8DFNRUsg2W9GrKIyf57xttPhIYBucvD82Dolg=) 2: 3136332e36312e362e302f32332d3234203d3e20313534343134.roa (hash: ad1wd0ZIpEpyRiDtqRMVdgtKv4TeNXfOsvHmoLGBFtc=) 3: 3136332e36312e362e302f32342d3234203d3e20313534343134.roa (hash: /J0shVYTQYkB9FYkHOQENvK7HQrOevFXVOREKIMBB2w=) 4: 3136332e36312e372e302f32342d3234203d3e20313534343134.roa (hash: V6FgFuQb/8P2YK/Gbx8tP5jXLguLbqQuIRGKv1SIkcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.crl rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a5:98:e9:82:4c:e7:b7:1e:d6:c6:85:52:be:78:0b:3b:13:a5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39E28911B503E25DB463229AC922CAEF5693A5DD Validity Not Before: Mar 25 03:25:00 2026 GMT Not After : Mar 28 07:36:00 2026 GMT Subject: CN=DB773DBC5EC8DB7AF402F6BAE01C5AB880038507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:dd:66:41:9b:ec:df:87:0d:08:b2:2e:e4: 04:bd:41:62:db:0c:0c:fc:a3:11:e9:b3:60:38:f2: ae:ff:dc:de:39:ad:e4:e3:8f:1b:7f:e1:dd:90:ad: 61:77:48:d3:dc:e2:a5:7d:f9:50:d8:7b:5a:a8:12: 07:db:bc:09:af:c4:4f:16:eb:65:0a:39:bb:b4:f9: b5:d9:6d:13:6b:ac:76:ae:b0:0b:2c:16:c4:a6:5e: 42:99:bb:dc:f5:69:1a:de:05:c1:64:8e:08:7e:7f: ba:24:45:e4:01:8f:d2:14:e8:41:53:ee:1a:bd:86: a4:c4:7b:81:29:70:5c:c6:74:45:96:a0:be:41:66: 70:e3:0b:48:60:47:fe:be:c0:74:39:d0:bc:2a:ae: c1:0c:4d:ce:31:38:71:83:b0:0f:c6:d6:23:aa:d6: 7b:be:e4:e7:4c:2b:5e:77:9f:44:c1:00:7c:d8:4c: 9d:b9:a6:0d:d2:7c:a1:71:83:7d:81:68:60:4b:3a: d6:32:de:27:07:75:97:7b:15:33:ec:3b:ec:b1:7b: 97:7a:c7:93:32:98:61:e5:0a:c1:8f:83:24:4d:60: 45:28:bb:e7:27:4a:db:4a:86:03:ed:9a:20:b0:20: 6a:e8:bb:02:7d:25:05:a8:91:af:c1:62:64:9d:05: 7d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:77:3D:BC:5E:C8:DB:7A:F4:02:F6:BA:E0:1C:5A:B8:80:03:85:07 X509v3 Authority Key Identifier: keyid:39:E2:89:11:B5:03:E2:5D:B4:63:22:9A:C9:22:CA:EF:56:93:A5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39E28911B503E25DB463229AC922CAEF5693A5DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/096323dc-ab26-49dd-8b2c-306e50ee23a3/0/39E28911B503E25DB463229AC922CAEF5693A5DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:be:d0:75:55:14:48:bf:b3:fc:d9:ce:21:47:97:05:f4:39: c3:0f:ff:a5:b9:24:40:a3:3f:5d:78:5a:ad:4f:9e:bf:bf:6b: 62:f1:6e:35:72:1d:67:ae:d6:29:9f:40:a7:f6:0f:3e:c4:a9: 7c:ca:00:30:79:19:6a:39:fd:e8:3d:a5:39:7d:67:d2:f1:4f: d8:11:d0:da:eb:76:da:11:bc:21:49:f2:29:ef:22:46:71:a7: 2e:c4:3b:6a:0d:68:73:4b:fd:f7:a1:43:e0:7c:fc:d1:ec:1a: 01:97:5a:6a:32:78:dc:19:76:fb:06:63:bf:40:83:84:ad:bf: 4b:3d:2a:7c:a9:5b:3b:ef:14:9b:7e:8c:9a:58:2a:09:b7:70: 27:cc:12:13:02:91:29:95:34:a8:d8:61:98:a3:e2:4a:56:f7: fe:a0:7f:a2:e2:8e:48:89:04:4f:c5:37:3d:4a:f4:59:b3:5c: 56:c6:54:98:98:4b:72:38:27:dd:35:a8:12:c2:f1:63:47:f1: 14:9d:dc:52:4e:1b:31:36:9b:33:e6:0f:62:19:73:ec:ab:0f: 87:26:5e:e3:50:18:cc:40:76:13:9f:4f:54:4f:be:5c:2a:79: c0:94:5d:1b:14:e2:8e:54:09:1d:5d:79:51:ea:ec:43:65:72: 9d:9b:90:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKWY6YJM57ce1saFUr54CzsTpa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlFMjg5MTFCNTAzRTI1REI0NjMyMjlBQzkyMkNBRUY1 NjkzQTVERDAeFw0yNjAzMjUwMzI1MDBaFw0yNjAzMjgwNzM2MDBaMDMxMTAvBgNV BAMTKERCNzczREJDNUVDOERCN0FGNDAyRjZCQUUwMUM1QUI4ODAwMzg1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWt1mQZvs34cNCLIu5AS9QWLb DAz8oxHps2A48q7/3N45reTjjxt/4d2QrWF3SNPc4qV9+VDYe1qoEgfbvAmvxE8W 62UKObu0+bXZbRNrrHausAssFsSmXkKZu9z1aRreBcFkjgh+f7okReQBj9IU6EFT 7hq9hqTEe4EpcFzGdEWWoL5BZnDjC0hgR/6+wHQ50LwqrsEMTc4xOHGDsA/G1iOq 1nu+5OdMK153n0TBAHzYTJ25pg3SfKFxg32BaGBLOtYy3icHdZd7FTPsO+yxe5d6 x5MymGHlCsGPgyRNYEUou+cnSttKhgPtmiCwIGrouwJ9JQWoka/BYmSdBX13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU23c9vF7I23r0Ava64BxauIADhQcwHwYDVR0j BBgwFoAUOeKJEbUD4l20YyKaySLK71aTpd0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTYzMjNkYy1hYjI2LTQ5ZGQtOGIyYy0zMDZlNTBlZTIzYTMvMC8zOUUyODkxMUI1 MDNFMjVEQjQ2MzIyOUFDOTIyQ0FFRjU2OTNBNURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzlFMjg5MTFCNTAzRTI1REI0NjMyMjlBQzkyMkNBRUY1Njkz QTVERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDk2MzIzZGMtYWIyNi00OWRkLThi MmMtMzA2ZTUwZWUyM2EzLzAvMzlFMjg5MTFCNTAzRTI1REI0NjMyMjlBQzkyMkNB RUY1NjkzQTVERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMq+0HVVFEi/s/zZziFHlwX0OcMP/6W5JECj P114Wq1Pnr+/a2LxbjVyHWeu1imfQKf2Dz7EqXzKADB5GWo5/eg9pTl9Z9LxT9gR 0NrrdtoRvCFJ8invIkZxpy7EO2oNaHNL/fehQ+B8/NHsGgGXWmoyeNwZdvsGY79A g4Stv0s9KnypWzvvFJt+jJpYKgm3cCfMEhMCkSmVNKjYYZij4kpW9/6gf6LijkiJ BE/FNz1K9FmzXFbGVJiYS3I4J901qBLC8WNH8RSd3FJOGzE2mzPmD2IZc+yrD4cm XuNQGMxAdhOfT1RPvlwqecCUXRsU4o5UCR1deVHq7ENlcp2bkDw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:33:47 2026 by rpki-client