$ rpki-client -vvf rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft File: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft (raw, json) Hash identifier: OE40KvVM9rbV8XZ66Vc5duNVfby+3aRa6Gm7SfwKojo= Subject key identifier: 04:5C:55:2B:BC:16:FA:9C:C6:3E:9F:AC:DE:64:A9:AC:09:23:AD:FB Authority key identifier: F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC Certificate issuer: /CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC Certificate serial: 0D5DC373E9E83184C2C315E1B7AB998DB08CCE67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:51:40 +0000 Manifest this update: Thu 23 Jul 2026 21:46:40 +0000 Manifest next update: Fri 24 Jul 2026 23:01:40 +0000 Files and hashes: 1: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl (hash: gDvpN73zqTXyuUgd3hg7V0jWELxeErEOlLfwujWwVoU=) 2: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (hash: GenO1xj3TyW94DSXBwVjhtzVjyQP5HUhJ9xzIwZlntA=) 3: 3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (hash: LZmJi4+kQ9B/IAd5Uu1Ta66gk3Amy3FWM2SgQTprifw=) 4: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: V6br3oy3hs0OOu8Dz1+fY0LTjJEB4hDJ9zYWF2RIZyk=) 5: 3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa (hash: QcPMHSi1D0h6sl63Q5Bk6nPRJSx9aPvzxntr778pwMY=) 6: 3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa (hash: AshFHMTEwPhxf5xh/Gotw2t8Qbj3ZjVgpz1z6r2Wkk0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:5d:c3:73:e9:e8:31:84:c2:c3:15:e1:b7:ab:99:8d:b0:8c:ce:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC Validity Not Before: Jul 23 21:46:40 2026 GMT Not After : Jul 24 23:01:40 2026 GMT Subject: CN=045C552BBC16FA9CC63E9FACDE64A9AC0923ADFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:f5:81:11:8b:c9:bd:88:28:90:d3:79:d9: 9f:ee:4e:d9:58:b5:1d:9c:60:ec:df:9f:9e:fa:7d: ab:74:57:75:e7:f9:ee:ab:3c:08:b1:bd:d0:3a:a6: de:9d:ab:a0:4b:91:44:59:90:ef:5e:cb:36:75:43: b1:93:d1:bb:2f:48:28:be:d1:92:17:39:dd:81:34: b3:05:36:70:1f:2d:20:8f:8f:e2:07:2b:59:91:7e: 05:65:e9:24:9c:fd:c5:c4:a0:cb:5f:59:7d:18:2e: ab:10:7b:a4:a3:c7:14:68:26:1f:5d:82:54:12:47: 64:5c:6f:93:3f:b9:00:a7:fc:f5:81:8a:f5:21:ec: 14:bc:c6:9d:21:62:80:88:c1:ce:c1:d8:a3:c0:a3: 80:0b:9a:51:37:3e:7b:e3:83:7f:46:b3:83:53:d0: e0:b4:32:ca:5e:b5:d0:ad:01:33:41:2d:07:0f:9a: 17:9f:8c:ae:30:cc:2d:f2:a1:36:6d:69:9d:f3:37: f2:f3:cb:99:ce:f2:91:16:a0:79:0c:99:4d:ee:1d: 27:3d:57:3c:9f:cf:af:ed:e8:ee:56:95:06:98:24: 3e:26:9f:c7:68:df:b5:40:e0:3d:9e:a1:57:c6:40: 47:68:19:fe:89:54:e4:50:7f:80:c0:78:fd:46:15: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5C:55:2B:BC:16:FA:9C:C6:3E:9F:AC:DE:64:A9:AC:09:23:AD:FB X509v3 Authority Key Identifier: keyid:F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b6:ab:bf:f8:74:b4:04:f3:3f:32:b6:5c:da:61:9c:b4:f1: b5:09:2e:1c:fd:ac:2a:cf:c4:c1:8b:44:0e:5a:97:fa:58:ad: 99:49:1a:3f:30:81:ee:b0:e5:cd:87:f5:8e:92:45:57:86:68: 6d:47:62:b1:a1:52:85:a7:b2:f9:b2:69:1a:ee:e2:77:6a:68: 17:99:a6:f6:50:4d:80:1a:c3:61:21:86:ab:02:51:0c:4a:e5: 21:68:b7:fa:62:8d:31:b5:54:8e:91:c1:6e:7b:84:ab:33:ad: 00:a0:97:9a:45:3f:00:eb:86:c5:a2:0b:58:e5:06:3e:a8:4c: e7:21:c7:ec:b0:21:76:5a:c7:bb:1a:97:75:e5:4a:75:78:13: 64:ed:4e:c8:80:e1:08:27:f3:bd:12:30:3c:d8:b9:6a:7b:dd: f4:33:60:b9:31:4a:6b:6f:ac:db:1e:e0:63:50:71:8b:3b:2c: ae:a3:34:03:b6:66:5a:02:e2:24:76:5b:0c:1b:a9:42:ad:a2: c2:61:d2:0f:6c:cf:25:a3:d7:e3:8a:17:d8:4d:f4:77:8c:2e: 98:71:79:24:bf:89:1e:8d:76:cc:2d:09:1d:ef:55:53:15:62: de:f3:5b:5a:86:35:e4:66:d9:4f:cb:33:5d:0d:a0:bd:50:00: 67:e0:ff:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDV3Dc+noMYTCwxXht6uZjbCMzmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5REIyMTREOURCRTNCMjExM0NFMDkzNDlBNEM5Qzgy ODcxMjJCQzAeFw0yNjA3MjMyMTQ2NDBaFw0yNjA3MjQyMzAxNDBaMDMxMTAvBgNV BAMTKDA0NUM1NTJCQkMxNkZBOUNDNjNFOUZBQ0RFNjRBOUFDMDkyM0FERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TPWBEYvJvYgokNN52Z/uTtlY tR2cYOzfn576fat0V3Xn+e6rPAixvdA6pt6dq6BLkURZkO9eyzZ1Q7GT0bsvSCi+ 0ZIXOd2BNLMFNnAfLSCPj+IHK1mRfgVl6SSc/cXEoMtfWX0YLqsQe6SjxxRoJh9d glQSR2Rcb5M/uQCn/PWBivUh7BS8xp0hYoCIwc7B2KPAo4ALmlE3Pnvjg39Gs4NT 0OC0MspetdCtATNBLQcPmhefjK4wzC3yoTZtaZ3zN/Lzy5nO8pEWoHkMmU3uHSc9 Vzyfz6/t6O5WlQaYJD4mn8do37VA4D2eoVfGQEdoGf6JVORQf4DAeP1GFfSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBFxVK7wW+pzGPp+s3mSprAkjrfswHwYDVR0j BBgwFoAU852yFNnb47IRPOCTSaTJyChxIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJlYTc3YjUtODhmNy00MDg1LWIzMzEtOTc1MDI0Y2QwNDZkLzAvRjM5REIyMTRE OURCRTNCMjExM0NFMDkzNDlBNEM5QzgyODcxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzlEQjIxNEQ5REJFM0IyMTEzQ0UwOTM0OUE0QzlDODI4NzEy MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJlYTc3YjUtODhmNy00MDg1LWIz MzEtOTc1MDI0Y2QwNDZkLzAvRjM5REIyMTREOURCRTNCMjExM0NFMDkzNDlBNEM5 QzgyODcxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABe2q7/4dLQE8z8ytlzaYZy08bUJLhz9rCrP xMGLRA5al/pYrZlJGj8wge6w5c2H9Y6SRVeGaG1HYrGhUoWnsvmyaRru4ndqaBeZ pvZQTYAaw2EhhqsCUQxK5SFot/pijTG1VI6RwW57hKszrQCgl5pFPwDrhsWiC1jl Bj6oTOchx+ywIXZax7sal3XlSnV4E2TtTsiA4Qgn870SMDzYuWp73fQzYLkxSmtv rNse4GNQcYs7LK6jNAO2ZloC4iR2WwwbqUKtosJh0g9szyWj1+OKF9hN9HeMLphx eSS/iR6NdswtCR3vVVMVYt7zW1qGNeRm2U/LM10NoL1QAGfg/zU= -----END CERTIFICATE-----Generated at Fri Jul 24 12:35:41 2026 by rpki-client