$ rpki-client -vvf rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft File: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft (raw, json) Hash identifier: fO6hEdUpj+TcUiTiLX6ytjdYz6b9rebLF9RPfjNCu8U= Subject key identifier: B6:05:39:83:12:D5:21:07:80:E6:56:6F:8F:43:D9:2A:1C:6F:E5:A1 Authority key identifier: 1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD Certificate issuer: /CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Certificate serial: 6D6819AB13D2F59179CCB831A15EED15C7EA7311 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:32:24 +0000 Manifest this update: Fri 24 Jul 2026 02:27:24 +0000 Manifest next update: Sat 25 Jul 2026 05:49:24 +0000 Files and hashes: 1: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl (hash: EAjeWbOJBSl7xBfsrwx7SiQHdqJIGKZjrCyJhnkcRtM=) 2: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: 3u+krw4MaugdVPNW0321aXdI9rwWYGxYt6HAFFT4OAw=) 3: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: pW3XBmKi6nT+DFL99ofR2D1BtLS4+aP/u1rjwoOPDjI=) 4: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: uLEgNCgaAjsQjxP4KxUR5P3CjpsSxN+zwR1ag08fAfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:68:19:ab:13:d2:f5:91:79:cc:b8:31:a1:5e:ed:15:c7:ea:73:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Validity Not Before: Jul 24 02:27:24 2026 GMT Not After : Jul 25 05:49:24 2026 GMT Subject: CN=B605398312D5210780E6566F8F43D92A1C6FE5A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:bc:47:13:c5:5f:b0:d0:be:5e:6f:a8:e0: a5:dc:31:4e:9e:4b:3f:6c:6b:d2:87:0a:7a:10:bd: 17:15:ed:85:1b:5e:97:4c:0f:bf:76:95:e5:52:c0: 13:82:fe:87:a0:b9:e8:c1:94:04:d3:d1:a6:6a:09: b4:ab:f9:85:94:b4:cb:50:31:14:74:e0:c4:33:84: ce:04:56:52:84:9e:29:02:80:7f:75:e2:5f:b6:31: 0b:c4:0b:17:1e:57:fb:2e:6a:16:4a:54:02:c5:b4: 1c:25:14:6e:05:2c:80:fd:6e:eb:04:34:55:37:e5: 5a:22:24:bd:d0:7c:3d:0d:56:37:55:0a:8e:2b:57: 2e:66:d6:4d:e1:d0:b9:5c:d2:d3:08:fe:1c:81:f4: 75:6c:fd:9e:c6:7f:80:dc:da:c0:01:3b:6f:2a:4b: 7b:8b:47:72:55:73:12:b5:ae:72:4b:5f:53:1e:7b: 9c:be:c3:e8:fb:22:12:e4:97:4a:5e:23:ea:31:c9: dd:2c:02:7c:82:93:06:30:d7:7e:83:55:ee:df:85: 68:79:59:c9:e2:d2:4e:10:05:d5:c4:91:b9:74:d3: 39:17:a6:0b:8a:64:0d:a8:44:94:a8:fa:c8:89:47: 5e:42:b8:52:1e:97:3a:fa:7c:c0:25:37:36:7e:5c: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:05:39:83:12:D5:21:07:80:E6:56:6F:8F:43:D9:2A:1C:6F:E5:A1 X509v3 Authority Key Identifier: keyid:1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:19:c8:64:9a:79:83:c7:10:f8:4b:03:31:b2:b0:fe:f4:86: b6:04:1d:6c:eb:a1:7f:dd:9c:10:36:6a:35:d0:03:1a:17:b6: 84:56:8f:1f:ed:d8:40:d9:f2:af:0c:c1:93:79:fd:9d:17:48: a6:0b:96:09:c2:22:b1:89:f2:e8:9e:e3:ac:56:a1:99:73:67: 8d:db:b4:6b:90:f4:eb:c3:e4:b8:53:96:90:1e:aa:69:f6:89: 37:4d:fa:5a:6f:15:1b:59:e5:27:f9:08:24:6e:9d:46:9f:78: e3:cb:f8:41:cf:78:fc:5b:ea:6d:c7:05:f3:b3:4d:86:ab:f5: 79:0d:04:99:ad:93:87:86:a3:1c:cf:36:32:c2:f7:5c:4e:d7: c0:3c:74:56:46:6e:2c:dd:ff:d1:00:0c:5e:0f:d1:b6:7a:16: 38:08:c5:51:b6:29:f0:b0:bd:bc:2c:36:d4:93:71:08:1b:16: 0b:90:bb:46:a4:9c:9d:60:e8:02:82:d4:84:e7:94:bd:94:76: d4:67:83:bd:2e:f4:e5:26:37:83:ba:71:4d:99:c4:9a:81:11: f2:b8:6e:5b:50:93:90:9a:fc:80:2b:fb:50:01:1f:88:2b:bf: 40:f4:92:5d:bf:f6:f8:9d:33:e4:42:29:d1:a8:1e:b8:22:ab: 89:d9:c3:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWgZqxPS9ZF5zLgxoV7tFcfqcxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERC Rjc5ODNBRDAeFw0yNjA3MjQwMjI3MjRaFw0yNjA3MjUwNTQ5MjRaMDMxMTAvBgNV BAMTKEI2MDUzOTgzMTJENTIxMDc4MEU2NTY2RjhGNDNEOTJBMUM2RkU1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCd7xHE8VfsNC+Xm+o4KXcMU6e Sz9sa9KHCnoQvRcV7YUbXpdMD792leVSwBOC/oeguejBlATT0aZqCbSr+YWUtMtQ MRR04MQzhM4EVlKEnikCgH914l+2MQvECxceV/suahZKVALFtBwlFG4FLID9busE NFU35VoiJL3QfD0NVjdVCo4rVy5m1k3h0Llc0tMI/hyB9HVs/Z7Gf4Dc2sABO28q S3uLR3JVcxK1rnJLX1Mee5y+w+j7IhLkl0peI+oxyd0sAnyCkwYw136DVe7fhWh5 Wcni0k4QBdXEkbl00zkXpguKZA2oRJSo+siJR15CuFIelzr6fMAlNzZ+XAIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtgU5gxLVIQeA5lZvj0PZKhxv5aEwHwYDVR0j BBgwFoAUHTmw2RdICoXLs7DZ0J4iDb95g60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJiZmFiMDktYzFlOS00NGQ4LTgxOWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkx NzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERCRjc5ODNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDM5QjBEOTE3NDgwQTg1Q0JCM0IwRDlEMDlFMjIwREJGNzk4 M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIy MERCRjc5ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4ZyGSaeYPHEPhLAzGysP70hrYEHWzroX/d nBA2ajXQAxoXtoRWjx/t2EDZ8q8MwZN5/Z0XSKYLlgnCIrGJ8uie46xWoZlzZ43b tGuQ9OvD5LhTlpAeqmn2iTdN+lpvFRtZ5Sf5CCRunUafeOPL+EHPePxb6m3HBfOz TYar9XkNBJmtk4eGoxzPNjLC91xO18A8dFZGbizd/9EADF4P0bZ6FjgIxVG2KfCw vbwsNtSTcQgbFguQu0aknJ1g6AKC1ITnlL2UdtRng70u9OUmN4O6cU2ZxJqBEfK4 bltQk5Ca/IAr+1ABH4grv0D0kl2/9vidM+RCKdGoHrgiq4nZw9Q= -----END CERTIFICATE-----Generated at Fri Jul 24 08:52:21 2026 by rpki-client