$ rpki-client -vvf rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft File: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft (raw, json) Hash identifier: gpsz6YU0F5dK1Zjuzk9wiUig+2QhHmjUa0aODHCziiQ= Subject key identifier: 00:5C:89:1A:14:C4:1E:1A:88:77:56:1A:B1:BD:8A:FD:EF:62:38:30 Authority key identifier: F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC Certificate issuer: /CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC Certificate serial: 0F87142E46A17E96A39137BD922BED659250A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:25:48 +0000 Manifest this update: Tue 12 May 2026 09:20:48 +0000 Manifest next update: Wed 13 May 2026 10:41:48 +0000 Files and hashes: 1: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: V6br3oy3hs0OOu8Dz1+fY0LTjJEB4hDJ9zYWF2RIZyk=) 2: 3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa (hash: AshFHMTEwPhxf5xh/Gotw2t8Qbj3ZjVgpz1z6r2Wkk0=) 3: 3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa (hash: QcPMHSi1D0h6sl63Q5Bk6nPRJSx9aPvzxntr778pwMY=) 4: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl (hash: GT+qR78v9xHY+EHWQ8XNq1eUk8ch7K1Y6ucUl7p6bBA=) 5: 3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (hash: LZmJi4+kQ9B/IAd5Uu1Ta66gk3Amy3FWM2SgQTprifw=) 6: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (hash: GenO1xj3TyW94DSXBwVjhtzVjyQP5HUhJ9xzIwZlntA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:87:14:2e:46:a1:7e:96:a3:91:37:bd:92:2b:ed:65:92:50:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC Validity Not Before: May 12 09:20:48 2026 GMT Not After : May 13 10:41:48 2026 GMT Subject: CN=005C891A14C41E1A8877561AB1BD8AFDEF623830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:5a:4e:83:3c:ee:99:46:66:43:cf:64:5f: 3c:8f:a4:5d:39:03:c2:5d:7c:08:36:a3:89:08:14: 5b:84:e9:f6:cd:ca:95:f8:a8:c8:b9:11:0c:2e:58: 19:f4:69:c1:8d:34:a0:11:48:58:82:50:31:fb:aa: ed:de:30:f8:be:35:74:d1:1c:40:41:15:e4:fa:50: ee:ae:af:06:d3:cb:89:d8:b5:52:5c:5b:1b:2c:1f: f0:ac:14:f7:8f:ac:3b:97:b4:79:7f:49:bd:63:2e: b6:47:88:76:5e:30:34:b2:c5:b3:ba:9a:84:8c:dd: 4d:ed:10:8f:f6:8f:2a:ca:97:8b:85:b9:fb:2b:c1: 99:49:d3:5f:32:f2:a1:d8:12:01:76:47:97:79:5c: 9a:f4:f9:af:69:89:a7:ca:14:83:32:94:ae:a6:95: 16:21:d0:62:6d:23:20:09:8d:95:24:61:18:9c:63: 83:db:30:fc:8a:53:8c:75:70:06:94:73:3e:c8:e4: 3d:1d:58:50:73:c1:5d:02:2d:96:3b:4b:df:17:66: c6:3f:5b:aa:dd:6e:5d:8c:df:c4:4e:0d:2f:ac:3a: 38:aa:3b:dd:98:b4:91:c5:78:11:d7:07:ca:b0:2e: 90:3f:ff:32:9f:9d:f4:4d:30:df:b8:eb:2c:d3:9c: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5C:89:1A:14:C4:1E:1A:88:77:56:1A:B1:BD:8A:FD:EF:62:38:30 X509v3 Authority Key Identifier: keyid:F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:64:ba:1e:89:31:6b:57:af:a8:cb:6c:c2:7f:2f:d2:be:c0: d5:df:26:71:57:4b:54:a9:5e:57:43:cd:e7:2f:16:47:03:b6: 71:75:ef:3c:09:af:4a:33:47:f7:2f:3e:98:3e:18:54:1f:c4: 0e:b5:45:cf:98:de:3d:f9:6a:fd:86:dc:6b:41:07:3f:fd:be: 67:9e:26:8a:68:83:bf:23:91:8f:56:dc:c7:f7:24:39:32:48: 2c:51:0b:ea:19:d6:df:b5:d7:a8:d9:56:93:18:27:28:82:26: 62:20:7f:13:3c:a4:7c:db:b0:d9:85:14:3f:f8:ef:27:9d:72: 25:ac:48:b5:42:17:11:71:24:7c:cf:21:26:60:d7:b6:26:61: 5d:45:b5:c2:b2:8a:4f:0c:57:bb:6b:d4:a3:eb:a4:2f:1d:0f: b8:17:b5:d4:3c:19:ff:ba:62:d6:72:ab:ec:0a:f3:ab:d0:95: 25:23:b1:91:aa:7c:16:79:a7:92:11:65:37:2f:8c:de:54:5f: 50:be:7d:6f:83:4b:c3:e0:b2:33:e8:3b:cf:3e:3f:71:a8:6a: cd:67:5d:4c:ed:d8:be:85:da:9c:2f:51:d6:40:c0:a2:b2:0c: 02:b5:69:30:b9:09:8d:c0:4e:bf:cd:a7:9f:e7:aa:25:87:48: ed:90:e4:ec -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITD4cULkahfpajkTe9kivtZZJQoTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGMzlEQjIxNEQ5REJFM0IyMTEzQ0UwOTM0OUE0QzlDODI4 NzEyMkJDMB4XDTI2MDUxMjA5MjA0OFoXDTI2MDUxMzEwNDE0OFowMzExMC8GA1UE AxMoMDA1Qzg5MUExNEM0MUUxQTg4Nzc1NjFBQjFCRDhBRkRFRjYyMzgzMDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM7EWk6DPO6ZRmZDz2RfPI+kXTkD wl18CDajiQgUW4Tp9s3KlfioyLkRDC5YGfRpwY00oBFIWIJQMfuq7d4w+L41dNEc QEEV5PpQ7q6vBtPLidi1UlxbGywf8KwU94+sO5e0eX9JvWMutkeIdl4wNLLFs7qa hIzdTe0Qj/aPKsqXi4W5+yvBmUnTXzLyodgSAXZHl3lcmvT5r2mJp8oUgzKUrqaV FiHQYm0jIAmNlSRhGJxjg9sw/IpTjHVwBpRzPsjkPR1YUHPBXQItljtL3xdmxj9b qt1uXYzfxE4NL6w6OKo73Zi0kcV4EdcHyrAukD//Mp+d9E0w37jrLNOcOx8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQAXIkaFMQeGoh3VhqxvYr972I4MDAfBgNVHSME GDAWgBTznbIU2dvjshE84JNJpMnIKHEivDAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8x MmVhNzdiNS04OGY3LTQwODUtYjMzMS05NzUwMjRjZDA0NmQvMC9GMzlEQjIxNEQ5 REJFM0IyMTEzQ0UwOTM0OUE0QzlDODI4NzEyMkJDLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xL0YzOURCMjE0RDlEQkUzQjIxMTNDRTA5MzQ5QTRDOUM4Mjg3MTIy QkMuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xMmVhNzdiNS04OGY3LTQwODUtYjMz MS05NzUwMjRjZDA0NmQvMC9GMzlEQjIxNEQ5REJFM0IyMTEzQ0UwOTM0OUE0QzlD ODI4NzEyMkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAsGS6Hokxa1evqMtswn8v0r7A1d8mcVdLVKle V0PN5y8WRwO2cXXvPAmvSjNH9y8+mD4YVB/EDrVFz5jePflq/Ybca0EHP/2+Z54m imiDvyORj1bcx/ckOTJILFEL6hnW37XXqNlWkxgnKIImYiB/EzykfNuw2YUUP/jv J51yJaxItUIXEXEkfM8hJmDXtiZhXUW1wrKKTwxXu2vUo+ukLx0PuBe11DwZ/7pi 1nKr7Arzq9CVJSOxkap8FnmnkhFlNy+M3lRfUL59b4NLw+CyM+g7zz4/cahqzWdd TO3YvoXanC9R1kDAorIMArVpMLkJjcBOv82nn+eqJYdI7ZDk7A== -----END CERTIFICATE-----Generated at Wed May 13 00:44:23 2026 by rpki-client