$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft File: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft (raw, json) Hash identifier: QtcYHrPQLotms3Y+D9GimaM0CjSmigbvsf7NIUTbAkQ= Subject key identifier: 02:64:8F:70:59:2C:9D:2C:5D:A8:DA:58:2E:7F:D0:B4:E5:DB:0C:FE Authority key identifier: 39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98 Certificate issuer: /CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798 Certificate serial: 1893FBA031834E556875DDD37C85564D950E3FD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:49:52 +0000 Manifest this update: Tue 12 May 2026 21:44:52 +0000 Manifest next update: Thu 14 May 2026 00:42:52 +0000 Files and hashes: 1: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl (hash: hfwki6ap1Gfn45qHN7Z6WO1nj420lDBfcSFFB47s8dg=) 2: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (hash: sJco2gFyjRbFkYkBOL4SjT5LogqtsvE6E0crTfpTSo4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:93:fb:a0:31:83:4e:55:68:75:dd:d3:7c:85:56:4d:95:0e:3f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798 Validity Not Before: May 12 21:44:52 2026 GMT Not After : May 14 00:42:52 2026 GMT Subject: CN=02648F70592C9D2C5DA8DA582E7FD0B4E5DB0CFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:65:74:59:38:aa:22:8c:33:ae:fb:04:d9: 82:ec:8a:fb:14:d9:9d:ba:a2:88:a8:19:be:3c:ee: 90:9f:d6:aa:8a:fe:08:a9:ac:07:bc:63:e6:55:01: 28:b9:1a:78:b9:13:e7:66:df:d9:cd:60:12:1d:90: dc:50:4d:8c:9a:0f:f5:16:85:32:23:f7:1b:58:df: bf:6c:bb:93:3f:34:e9:14:a0:9d:26:a8:8b:2c:09: f6:18:9f:96:da:25:8f:e5:16:a1:10:9e:19:ef:d8: 70:98:67:6a:16:39:09:93:1d:3c:3b:43:0a:27:67: 9d:99:0d:15:5b:d3:af:62:f7:91:1d:58:84:0e:58: 2e:b5:7c:04:47:52:08:4d:8a:75:d9:51:e3:b0:c5: 6a:6c:c6:ed:c8:ec:a1:e1:84:2b:6f:90:4a:68:b1: 6a:8c:bd:76:53:30:04:31:80:13:87:fb:38:3d:1f: 68:15:1d:61:66:6b:ff:9b:2d:d7:4b:82:b3:ba:20: e8:d2:4c:0c:6c:d4:10:4c:46:89:84:98:e2:94:80: 30:cb:fe:51:ca:77:43:2d:e3:b2:04:a8:f1:ce:8a: f6:05:b7:83:1e:d1:85:ba:e8:76:22:46:47:62:68: 46:14:0d:21:b3:bc:df:3e:79:56:e0:e1:a5:f7:f0: 65:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:64:8F:70:59:2C:9D:2C:5D:A8:DA:58:2E:7F:D0:B4:E5:DB:0C:FE X509v3 Authority Key Identifier: keyid:39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:3a:28:ac:d3:df:21:20:e4:de:aa:2b:67:86:6a:4b:77:58: cc:23:1b:41:55:cc:8e:e3:18:62:8b:36:a5:c7:9f:60:be:b0: c5:a7:fd:4c:41:79:fb:41:c7:d1:0c:1b:e9:89:fc:8d:4e:fa: 1f:e8:c1:7d:87:29:4e:0d:1a:7d:52:ef:c3:ab:de:20:b6:e3: 19:b8:cf:f5:cc:2b:c5:42:40:4d:a9:d9:c5:df:f5:12:33:b6: 19:69:be:db:00:d8:aa:67:1e:9c:9a:92:97:a2:6c:99:63:47: 50:c7:18:35:46:77:77:d2:9a:c9:1c:73:27:b5:e8:61:03:0d: ed:db:f0:21:8b:4b:98:17:02:14:04:6b:27:8d:44:f3:f2:4a: 35:fd:96:6c:d1:38:79:44:e4:0c:fd:2d:fb:d4:42:9d:61:d7: 9c:bb:0d:db:27:b5:71:5c:be:01:99:6b:1e:2e:96:e6:75:09: ba:be:85:40:5e:96:10:53:fc:a4:e6:17:92:fa:88:73:9f:26: f7:60:2e:21:a7:8d:a3:e1:84:84:af:f3:4f:69:b5:f0:99:6f: 0d:24:e2:ff:48:4a:e7:3a:e3:d6:69:7b:cf:ec:2e:95:54:a1: 00:a5:fe:04:28:03:ac:a1:50:93:f7:ea:a6:08:17:8c:92:1f: c3:c5:20:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJP7oDGDTlVodd3TfIVWTZUOP9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlFRjU2MEUwN0MwQjQyRUYwNDU3RjdENUE3MEY4REJG RjI0Qzc5ODAeFw0yNjA1MTIyMTQ0NTJaFw0yNjA1MTQwMDQyNTJaMDMxMTAvBgNV BAMTKDAyNjQ4RjcwNTkyQzlEMkM1REE4REE1ODJFN0ZEMEI0RTVEQjBDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBGV0WTiqIowzrvsE2YLsivsU 2Z26ooioGb487pCf1qqK/giprAe8Y+ZVASi5Gni5E+dm39nNYBIdkNxQTYyaD/UW hTIj9xtY379su5M/NOkUoJ0mqIssCfYYn5baJY/lFqEQnhnv2HCYZ2oWOQmTHTw7 QwonZ52ZDRVb069i95EdWIQOWC61fARHUghNinXZUeOwxWpsxu3I7KHhhCtvkEpo sWqMvXZTMAQxgBOH+zg9H2gVHWFma/+bLddLgrO6IOjSTAxs1BBMRomEmOKUgDDL /lHKd0Mt47IEqPHOivYFt4Me0YW66HYiRkdiaEYUDSGzvN8+eVbg4aX38GWtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAmSPcFksnSxdqNpYLn/QtOXbDP4wHwYDVR0j BBgwFoAUOe9WDgfAtC7wRX99WnD42/8kx5gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFkMzM3NzAtZjE1MS00M2YzLTk1NjktNmEyN2Q3NTA0MjQwLzAvMzlFRjU2MEUw N0MwQjQyRUYwNDU3RjdENUE3MEY4REJGRjI0Qzc5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOUVGNTYwRTA3QzBCNDJFRjA0NTdGN0Q1QTcwRjhEQkZGMjRD Nzk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFkMzM3NzAtZjE1MS00M2YzLTk1 NjktNmEyN2Q3NTA0MjQwLzAvMzlFRjU2MEUwN0MwQjQyRUYwNDU3RjdENUE3MEY4 REJGRjI0Qzc5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKc6KKzT3yEg5N6qK2eGakt3WMwjG0FVzI7j GGKLNqXHn2C+sMWn/UxBeftBx9EMG+mJ/I1O+h/owX2HKU4NGn1S78Or3iC24xm4 z/XMK8VCQE2p2cXf9RIzthlpvtsA2KpnHpyakpeibJljR1DHGDVGd3fSmskccye1 6GEDDe3b8CGLS5gXAhQEayeNRPPySjX9lmzROHlE5Az9LfvUQp1h15y7DdsntXFc vgGZax4uluZ1Cbq+hUBelhBT/KTmF5L6iHOfJvdgLiGnjaPhhISv809ptfCZbw0k 4v9ISuc649Zpe8/sLpVUoQCl/gQoA6yhUJP36qYIF4ySH8PFIPs= -----END CERTIFICATE-----Generated at Wed May 13 15:36:07 2026 by rpki-client