$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft File: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft (raw, json) Hash identifier: ULyhCrnw40iBQIUoOJOCOMJDIFStQaQBCOX+sjAkHTw= Subject key identifier: BE:DA:F6:05:90:40:15:88:77:CA:FA:CB:51:46:EB:A8:AF:14:1D:E7 Authority key identifier: 1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD Certificate issuer: /CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Certificate serial: 07B6113B2C1AA665B4091FDF125CAFD86AF39027 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:31:11 +0000 Manifest this update: Thu 24 Sep 2026 04:26:11 +0000 Manifest next update: Fri 25 Sep 2026 05:55:11 +0000 Files and hashes: 1: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: pW3XBmKi6nT+DFL99ofR2D1BtLS4+aP/u1rjwoOPDjI=) 2: 1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl (hash: PGVDVKOdqq9RcZXJm2UZuBItjGpm4K9Ft9la46/bFeA=) 3: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: uLEgNCgaAjsQjxP4KxUR5P3CjpsSxN+zwR1ag08fAfk=) 4: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: 3u+krw4MaugdVPNW0321aXdI9rwWYGxYt6HAFFT4OAw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b6:11:3b:2c:1a:a6:65:b4:09:1f:df:12:5c:af:d8:6a:f3:90:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D39B0D917480A85CBB3B0D9D09E220DBF7983AD Validity Not Before: Sep 24 04:26:11 2026 GMT Not After : Sep 25 05:55:11 2026 GMT Subject: CN=BEDAF6059040158877CAFACB5146EBA8AF141DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:33:ce:15:61:94:2a:87:26:d4:49:13:1d: d7:f0:b0:fb:1f:10:b8:7c:57:11:e4:b1:b0:5b:0a: c7:42:a3:bb:08:1f:89:8c:b4:7d:20:37:78:30:91: 84:31:cf:25:d3:32:b8:2d:f5:e3:20:ea:69:f7:b3: 90:51:58:55:1e:ed:52:b9:9c:e3:68:d6:12:d8:2e: 59:a8:44:c8:59:00:ad:24:53:82:24:8f:a1:b4:e9: aa:54:57:4e:aa:41:46:4e:11:3e:a4:9d:0a:c9:71: af:de:e4:26:45:58:84:27:02:ce:56:a2:f3:85:3e: 5f:f2:d1:86:72:a4:25:c2:ca:89:3c:1b:aa:b5:3d: 3b:73:49:6a:30:b4:8b:e0:75:c8:c8:9d:24:0f:51: 55:cc:a3:03:08:f2:0a:61:bf:00:b3:63:6b:d4:b5: c1:07:eb:ff:7b:2e:29:af:db:20:cc:28:d5:e5:47: 7b:16:70:7c:1d:cb:3c:2b:51:e1:50:6a:69:6a:95: dd:14:de:f9:54:d4:d1:de:92:d7:65:4e:dd:1b:b8: ec:9b:e9:0c:7a:00:ea:01:7c:cc:96:a1:21:6f:e7: 45:64:17:10:6c:fe:4c:9a:20:ec:65:ae:dc:f2:be: 0c:49:f6:e0:47:87:c6:94:79:2f:16:fa:7c:7f:df: b1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DA:F6:05:90:40:15:88:77:CA:FA:CB:51:46:EB:A8:AF:14:1D:E7 X509v3 Authority Key Identifier: keyid:1D:39:B0:D9:17:48:0A:85:CB:B3:B0:D9:D0:9E:22:0D:BF:79:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/1D39B0D917480A85CBB3B0D9D09E220DBF7983AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:25:d8:8b:fb:e3:ff:af:f9:55:5a:cf:ff:36:8f:73:cb:4e: 20:d7:d0:df:81:00:94:52:07:8c:7b:13:78:da:2e:21:86:11: 05:95:e5:dd:7b:0e:da:d0:1c:fd:26:5d:3d:20:e6:1d:d4:01: bd:80:26:e8:d1:b0:7c:c1:c9:f4:7b:85:66:61:8e:a7:5f:d4: 34:93:58:74:11:55:25:8e:59:88:91:1f:67:06:61:02:73:5e: f5:ca:2f:ed:77:d2:f3:ba:e9:32:b1:03:c6:35:20:31:b6:2b: a9:d9:8c:92:8a:4b:06:a7:f7:87:16:ab:21:26:a1:5e:ec:62: 0e:b7:2b:2c:f0:fb:b3:1f:7f:ac:ff:85:07:e6:69:7d:84:33: 96:93:76:ac:4b:f3:6b:53:33:00:b9:1d:b3:65:85:73:6b:04: 76:87:b6:94:28:0b:57:89:76:bb:f9:eb:cb:36:3d:2d:22:bd: 7b:be:9f:9b:a1:e8:27:60:e0:23:8d:2a:69:af:0e:3b:16:b1: 48:de:46:ac:93:6d:aa:8f:fd:e3:58:84:c0:06:5a:02:96:9f: 1a:f1:0f:81:2d:db:d8:97:b2:1f:2c:d0:e6:58:00:4c:f0:08: b0:a9:26:ff:70:04:81:5a:f3:9c:43:cb:a7:d2:a2:4f:4a:4e: 6b:6c:0e:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB7YROywapmW0CR/fElyv2GrzkCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERC Rjc5ODNBRDAeFw0yNjA5MjQwNDI2MTFaFw0yNjA5MjUwNTU1MTFaMDMxMTAvBgNV BAMTKEJFREFGNjA1OTA0MDE1ODg3N0NBRkFDQjUxNDZFQkE4QUYxNDFERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuujPOFWGUKocm1EkTHdfwsPsf ELh8VxHksbBbCsdCo7sIH4mMtH0gN3gwkYQxzyXTMrgt9eMg6mn3s5BRWFUe7VK5 nONo1hLYLlmoRMhZAK0kU4Ikj6G06apUV06qQUZOET6knQrJca/e5CZFWIQnAs5W ovOFPl/y0YZypCXCyok8G6q1PTtzSWowtIvgdcjInSQPUVXMowMI8gphvwCzY2vU tcEH6/97Limv2yDMKNXlR3sWcHwdyzwrUeFQamlqld0U3vlU1NHektdlTt0buOyb 6Qx6AOoBfMyWoSFv50VkFxBs/kyaIOxlrtzyvgxJ9uBHh8aUeS8W+nx/37FRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvtr2BZBAFYh3yvrLUUbrqK8UHecwHwYDVR0j BBgwFoAUHTmw2RdICoXLs7DZ0J4iDb95g60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJiZmFiMDktYzFlOS00NGQ4LTgxOWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkx NzQ4MEE4NUNCQjNCMEQ5RDA5RTIyMERCRjc5ODNBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRDM5QjBEOTE3NDgwQTg1Q0JCM0IwRDlEMDlFMjIwREJGNzk4 M0FELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvMUQzOUIwRDkxNzQ4MEE4NUNCQjNCMEQ5RDA5RTIy MERCRjc5ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgl2Iv74/+v+VVaz/82j3PLTiDX0N+BAJRS B4x7E3jaLiGGEQWV5d17DtrQHP0mXT0g5h3UAb2AJujRsHzByfR7hWZhjqdf1DST WHQRVSWOWYiRH2cGYQJzXvXKL+130vO66TKxA8Y1IDG2K6nZjJKKSwan94cWqyEm oV7sYg63Kyzw+7Mff6z/hQfmaX2EM5aTdqxL82tTMwC5HbNlhXNrBHaHtpQoC1eJ drv568s2PS0ivXu+n5uh6Cdg4CONKmmvDjsWsUjeRqyTbaqP/eNYhMAGWgKWnxrx D4Et29iXsh8s0OZYAEzwCLCpJv9wBIFa85xDy6fSok9KTmtsDtQ= -----END CERTIFICATE-----Generated at Thu Sep 24 10:42:07 2026 by rpki-client