$ rpki-client -vvf rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft File: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft (raw, json) Hash identifier: 2ZO9ecyDvFRDgx/KlqHX+tf1FZ7sTTa3xg8wnuKf2Lg= Subject key identifier: D3:00:F2:EF:55:8D:00:AB:34:19:C3:BE:AA:5A:C8:78:63:B3:AD:C3 Authority key identifier: 1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD Certificate issuer: /CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Certificate serial: 5FB6AC0F62EE0C222A73B12F755BF6C45C6917C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:46:02 +0000 Manifest this update: Tue 12 May 2026 19:41:02 +0000 Manifest next update: Wed 13 May 2026 19:55:02 +0000 Files and hashes: 1: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: 3u+krw4MaugdVPNW0321aXdI9rwWYGxYt6HAFFT4OAw=) 2: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl (hash: DPgFtPWDu/RrNi7h7A+JcfFtqNYl8M7th+nGMe6rxCY=) 3: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: pW3XBmKi6nT+DFL99ofR2D1BtLS4+aP/u1rjwoOPDjI=) 4: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: uLEgNCgaAjsQjxP4KxUR5P3CjpsSxN+zwR1ag08fAfk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b6:ac:0f:62:ee:0c:22:2a:73:b1:2f:75:5b:f6:c4:5c:69:17:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Validity Not Before: May 12 19:41:02 2026 GMT Not After : May 13 19:55:02 2026 GMT Subject: CN=D300F2EF558D00AB3419C3BEAA5AC87863B3ADC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:54:90:2a:ce:25:fa:14:0c:80:e1:b6:8e:90: de:42:84:5a:c9:8e:d9:b7:aa:a2:fc:f6:90:b7:f7: 1a:78:4e:32:86:0c:3a:5f:1d:1d:4c:a4:e4:30:dc: 20:9b:98:f8:31:5e:48:66:6f:34:a6:28:e4:ac:b5: 68:c2:15:70:05:44:e7:41:c9:a2:df:6a:a4:1a:5b: e3:6e:35:d3:4f:74:4a:dd:9f:b5:4a:0f:34:a2:46: 67:57:40:56:a3:7a:93:e2:16:3a:c4:5d:00:94:7f: 5c:ee:15:fe:5a:0e:34:7c:c7:b0:22:d5:f4:2a:8a: 98:6f:3f:41:17:71:c7:55:68:57:13:06:52:ee:c0: 58:66:4e:31:ea:f3:3e:a2:7a:4e:dc:b8:34:4a:52: 30:7c:7a:13:0d:62:62:72:b4:41:b4:1b:41:67:19: 46:9b:17:43:7f:c1:72:6c:df:0a:5e:93:16:59:1b: 89:38:ec:6e:15:09:86:db:35:99:a6:2a:41:06:d7: 82:5f:4a:a6:a5:64:60:2b:21:2e:91:26:3c:2a:f0: e3:43:ed:4d:bc:5a:80:e5:a7:bc:b9:bf:3b:6c:7b: 41:db:e3:2e:4a:2f:6c:4b:28:3a:25:b3:3e:49:c8: f8:ed:5d:c8:50:a1:0d:b3:5c:e2:86:67:a7:d5:39: 6d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:00:F2:EF:55:8D:00:AB:34:19:C3:BE:AA:5A:C8:78:63:B3:AD:C3 X509v3 Authority Key Identifier: keyid:1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:fe:0e:ad:36:3c:2e:f1:db:bd:0d:bc:73:f1:78:39:50:21: 03:ad:53:d5:6a:0b:52:f4:07:2d:2f:f2:3c:41:69:8b:80:d7: a9:90:55:f9:9e:31:1a:6e:aa:9a:29:a2:00:d5:94:2c:9e:d0: fc:94:39:f8:83:13:60:1f:cd:d2:eb:a2:ee:0f:b9:52:75:f6: ce:1e:b8:65:c2:16:07:29:4e:f0:2c:e5:37:2d:4a:3a:75:68: c3:8c:a7:6f:ad:94:7e:e2:30:3f:c4:ab:60:af:ca:48:ec:b9: f2:57:bb:25:8e:3c:26:b4:01:8e:a0:a6:95:de:d9:cf:51:6c: f7:fa:3d:64:ad:6f:a0:d1:50:b4:e4:b7:6e:3a:d4:3d:36:2f: 8b:02:01:59:fc:e0:70:a8:13:12:0e:c8:ed:6b:e7:7a:e2:d2: 6a:a9:b5:16:b1:96:fc:ed:a7:19:15:ba:c2:be:2b:25:ae:96: b3:26:5b:c2:72:1e:17:98:a5:22:c1:18:60:4e:3d:b3:e4:c4: aa:b3:98:5d:c2:81:87:de:5c:39:6f:05:74:6e:39:15:4f:0c: ed:df:1c:d8:f2:de:d6:a7:66:c9:0b:0f:c4:7a:5c:ea:46:d2: 5b:81:f5:62:cc:a9:81:8b:32:b1:18:a3:7d:b0:d3:40:2a:e5: ab:5b:47:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX7asD2LuDCIqc7EvdVv2xFxpF8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERC Rjc5ODNBRDAeFw0yNjA1MTIxOTQxMDJaFw0yNjA1MTMxOTU1MDJaMDMxMTAvBgNV BAMTKEQzMDBGMkVGNTU4RDAwQUIzNDE5QzNCRUFBNUFDODc4NjNCM0FEQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWVJAqziX6FAyA4baOkN5ChFrJ jtm3qqL89pC39xp4TjKGDDpfHR1MpOQw3CCbmPgxXkhmbzSmKOSstWjCFXAFROdB yaLfaqQaW+NuNdNPdErdn7VKDzSiRmdXQFajepPiFjrEXQCUf1zuFf5aDjR8x7Ai 1fQqiphvP0EXccdVaFcTBlLuwFhmTjHq8z6iek7cuDRKUjB8ehMNYmJytEG0G0Fn GUabF0N/wXJs3wpekxZZG4k47G4VCYbbNZmmKkEG14JfSqalZGArIS6RJjwq8OND 7U28WoDlp7y5vztse0Hb4y5KL2xLKDolsz5JyPjtXchQoQ2zXOKGZ6fVOW0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wDy71WNAKs0GcO+qlrIeGOzrcMwHwYDVR0j BBgwFoAUHTmw2RdICoXLs7DZ0J4iDb95g60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJiZmFiMDktYzFlOS00NGQ4LTgxOWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkx NzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERCRjc5ODNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDM5QjBEOTE3NDgwQTg1Q0JCM0IwRDlEMDlFMjIwREJGNzk4 M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIy MERCRjc5ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAD+Dq02PC7x270NvHPxeDlQIQOtU9VqC1L0 By0v8jxBaYuA16mQVfmeMRpuqpopogDVlCye0PyUOfiDE2AfzdLrou4PuVJ19s4e uGXCFgcpTvAs5TctSjp1aMOMp2+tlH7iMD/Eq2CvykjsufJXuyWOPCa0AY6gppXe 2c9RbPf6PWStb6DRULTkt2461D02L4sCAVn84HCoExIOyO1r53ri0mqptRaxlvzt pxkVusK+KyWulrMmW8JyHheYpSLBGGBOPbPkxKqzmF3CgYfeXDlvBXRuORVPDO3f HNjy3tanZskLD8R6XOpG0luB9WLMqYGLMrEYo32w00Aq5atbRxU= -----END CERTIFICATE-----Generated at Wed May 13 00:43:39 2026 by rpki-client