$ rpki-client -vvvf rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft File: B39B19C9084084F7FCB3FAFF376368D876F66372.mft (raw, json) Hash identifier: 1B5wiOoxtwIIeO/uTF3k215Tnu/hZitv4vCZGM3BFNM= Subject key identifier: 19:57:95:57:1B:7E:FE:9B:86:5E:A7:76:AD:EB:23:80:EB:46:50:42 Authority key identifier: B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 Certificate issuer: /CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Certificate serial: 6938315EB8409B5B6A8ADEF17CF224AC05779BEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 04:29:51 +0000 Manifest this update: Sat 14 Nov 2026 04:24:51 +0000 Manifest next update: Sun 15 Nov 2026 05:09:51 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: NLnNrRvgdk9PwIX+K62kuAcQASU2Wm+4Xg+4O2CIdkc=) 2: B39B19C9084084F7FCB3FAFF376368D876F66372.crl (hash: Yz7apwiXC1Ii3TyAwJ9DMm/qkACJgWAAEOVK7I/RLfI=) 3: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: CTdtRt0QWOxvthXzk1fDi0/fuxno5z52+6EZfo7nHWY=) 4: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: 5twMEBpUGZCFXRPaiYDXrww+UAg0G4R4iDCrbaZ4+Ho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 05:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:38:31:5e:b8:40:9b:5b:6a:8a:de:f1:7c:f2:24:ac:05:77:9b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Validity Not Before: Nov 14 04:24:51 2026 GMT Not After : Nov 15 05:09:51 2026 GMT Subject: CN=195795571B7EFE9B865EA776ADEB2380EB465042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ae:25:d9:96:00:6a:bd:39:e9:be:42:c5:93: 64:6e:14:15:8c:0e:5d:36:d9:82:0c:83:3e:bd:97: 44:64:ba:10:da:80:c0:17:af:55:16:1b:df:aa:61: 28:e5:2e:e5:fe:0e:b0:9b:e5:fb:47:30:91:81:f8: 5d:ae:0a:70:c7:c4:a4:43:02:a5:f3:db:de:3c:7a: 9a:16:e1:e6:dc:78:03:36:d0:e8:26:98:0f:fa:09: cc:b5:36:99:8f:b9:9f:d3:68:c5:be:4a:f6:15:fd: a4:83:8d:00:ca:f5:af:23:10:92:41:ab:6e:f8:f0: e8:7b:7f:33:db:68:eb:f7:79:ff:14:17:70:9f:bc: 2a:e4:c0:36:32:d5:3e:8d:43:06:8c:c2:5c:49:0a: 32:f2:fb:cc:be:7b:4e:04:3e:4c:44:16:b3:71:27: 75:cf:d4:cb:81:fe:d4:14:ff:f7:2c:56:98:45:56: 8a:0b:f3:86:54:d4:79:16:fe:51:b7:8c:fc:92:78: ea:44:8d:d3:8f:53:1f:a8:9a:7b:39:b3:46:2e:19: ec:4d:cb:8f:22:ae:0f:ec:5e:74:3b:01:ac:55:85: cf:24:d9:75:34:c4:57:59:68:c5:f8:e5:40:f0:5b: 4c:8a:49:44:eb:8d:a9:2c:7e:90:80:bf:13:57:5f: e8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:57:95:57:1B:7E:FE:9B:86:5E:A7:76:AD:EB:23:80:EB:46:50:42 X509v3 Authority Key Identifier: keyid:B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:98:5c:a2:bf:52:3f:8e:65:0b:27:42:be:9d:4f:4a:4d:2a: 53:3c:ad:49:51:b8:cd:2e:f1:e4:98:6a:b8:87:3b:00:06:f0: f0:9f:92:59:26:89:56:4c:98:00:34:d8:02:92:f6:a3:3c:1e: 09:c5:a1:32:97:ed:a9:d5:96:ae:f3:2c:c3:c7:43:f8:23:d3: 6a:54:04:fe:ee:94:ec:f7:cf:3c:19:c0:6c:8c:e8:8f:c8:88: 7c:ac:94:34:22:81:d6:26:4b:eb:aa:9f:f2:7b:7b:77:a2:d1: 6c:b5:46:c0:28:84:9e:f3:bd:49:a3:fa:14:8c:08:fe:b0:a4: 5b:56:1e:51:3b:de:80:e1:e2:9c:fe:a1:74:73:e9:69:0e:b8: 99:24:f8:a2:48:09:d9:84:43:05:9d:6d:5d:b1:4b:1a:2d:5a: 43:f3:14:ca:a4:9a:ae:da:99:22:86:cf:f4:e7:fb:86:da:99: 60:b4:9b:d7:54:2f:ba:9c:6d:c6:32:90:1f:ca:13:71:dd:64: 06:32:08:f4:c0:c4:24:e7:83:4b:e4:e9:a8:36:10:9d:1e:f2: c4:71:b8:b1:1b:9b:b4:81:bf:8b:91:2c:8f:c0:aa:0a:41:0e: 32:2a:9f:86:a3:51:59:f4:bf:c4:03:7b:9c:74:b8:2d:db:28: 83:ee:ea:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaTgxXrhAm1tqit7xfPIkrAV3m+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3 NkY2NjM3MjAeFw0yNjExMTQwNDI0NTFaFw0yNjExMTUwNTA5NTFaMDMxMTAvBgNV BAMTKDE5NTc5NTU3MUI3RUZFOUI4NjVFQTc3NkFERUIyMzgwRUI0NjUwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqriXZlgBqvTnpvkLFk2RuFBWM Dl022YIMgz69l0RkuhDagMAXr1UWG9+qYSjlLuX+DrCb5ftHMJGB+F2uCnDHxKRD AqXz2948epoW4ebceAM20OgmmA/6Ccy1NpmPuZ/TaMW+SvYV/aSDjQDK9a8jEJJB q2748Oh7fzPbaOv3ef8UF3CfvCrkwDYy1T6NQwaMwlxJCjLy+8y+e04EPkxEFrNx J3XP1MuB/tQU//csVphFVooL84ZU1HkW/lG3jPySeOpEjdOPUx+omns5s0YuGexN y48irg/sXnQ7AaxVhc8k2XU0xFdZaMX45UDwW0yKSUTrjaksfpCAvxNXX+j9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGVeVVxt+/puGXqd2resjgOtGUEIwHwYDVR0j BBgwFoAUs5sZyQhAhPf8s/r/N2No2Hb2Y3IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMyZTRmODYtNDhlNy00OGM3LWJhOTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5Qzkw ODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3NkY2NjM3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMzlCMTlDOTA4NDA4NEY3RkNCM0ZBRkYzNzYzNjhEODc2RjY2 MzcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4 RDg3NkY2NjM3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqYXKK/Uj+OZQsnQr6dT0pNKlM8rUlRuM0u 8eSYariHOwAG8PCfklkmiVZMmAA02AKS9qM8HgnFoTKX7anVlq7zLMPHQ/gj02pU BP7ulOz3zzwZwGyM6I/IiHyslDQigdYmS+uqn/J7e3ei0Wy1RsAohJ7zvUmj+hSM CP6wpFtWHlE73oDh4pz+oXRz6WkOuJkk+KJICdmEQwWdbV2xSxotWkPzFMqkmq7a mSKGz/Tn+4bamWC0m9dUL7qcbcYykB/KE3HdZAYyCPTAxCTng0vk6ag2EJ0e8sRx uLEbm7SBv4uRLI/AqgpBDjIqn4ajUVn0v8QDe5x0uC3bKIPu6rY= -----END CERTIFICATE-----Generated at Sat Nov 14 22:23:20 2026 by rpki-client