$ rpki-client -vvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft File: 399FBE55CFD957C1E3849C75FE378403E394BB45.mft (raw, json) Hash identifier: d028KA8mo7jshl+4wv2bJYSlpwxp8FqY/ZeO+0Vwy4I= Subject key identifier: A7:41:2A:6F:A5:F3:3B:01:11:AC:49:A4:08:1B:0F:0F:D9:DB:14:50 Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Certificate serial: 538E5C9BE0279C6AB236A211827A6A39DD9F1090 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:22:19 +0000 Manifest this update: Tue 12 May 2026 23:17:19 +0000 Manifest next update: Thu 14 May 2026 00:03:19 +0000 Files and hashes: 1: 399FBE55CFD957C1E3849C75FE378403E394BB45.crl (hash: oX1dTeTYFA37OvY5a3h81FQ+eB3aFsyswX3AsvUyN7k=) 2: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: qood+9S8zNU9X/jpjUZIu26OXyUnDxyv/AsytcFufXA=) 3: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: rqJDuuQFB9Ir08Xt+9/dUd2pRxC5DTIO9a28+O4McDo=) 4: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: NrcqksrmsSbHeL16ugEy8PBgZElc8n2NevcNzHFW6Sc=) 5: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: uojxwHiaMR8PO5h26JWS2B444u+QQh72ookAa5uFqSs=) 6: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: /vRQ0F5lBxm5YccSzuUARECi1VFqg7FRoH3qOHTCFHs=) 7: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: zSazRb0IpJJ4cBgKA2+8jgm7s2YnWXUiU+1QnaQiN1g=) 8: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: gmPxQm5NcqK3BCfFQb7w+dLmFYWZ/DthSfb9I0IYOOQ=) 9: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: Nda6FqqHwv307lkTxH+b0mWevIjFxVsW+c3rWmYY64U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8e:5c:9b:e0:27:9c:6a:b2:36:a2:11:82:7a:6a:39:dd:9f:10:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Validity Not Before: May 12 23:17:19 2026 GMT Not After : May 14 00:03:19 2026 GMT Subject: CN=A7412A6FA5F33B0111AC49A4081B0F0FD9DB1450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:8b:69:df:7c:68:aa:cc:e4:cc:8a:34:27: a3:65:74:5b:d3:77:dd:bd:48:a9:7c:9b:52:7a:5e: 62:91:8a:1f:8d:be:f4:2b:a2:0c:46:3a:49:1b:a9: 47:f1:f4:3c:77:53:08:09:14:5a:6f:b2:16:a7:00: b5:18:cb:76:8d:88:97:80:de:d2:8b:f0:db:8b:d1: 75:db:87:82:69:ea:da:1a:d2:48:db:f2:71:9c:b6: 9b:15:e4:9c:c1:ef:3a:9c:b7:df:56:e4:81:99:3d: 1d:62:5d:1b:e4:d3:bb:f3:1a:f5:7a:ba:12:b6:0a: 30:52:5b:66:80:76:ff:5a:13:34:00:a2:5a:0b:07: 06:7e:c9:80:ca:22:3a:1a:57:b2:7b:68:16:5d:2a: d0:89:5f:61:b7:88:26:9b:c4:8f:61:9d:b0:76:9c: 85:8d:b4:34:cc:f8:5c:a0:86:23:0f:cd:45:14:65: b6:cc:57:09:79:84:d1:d6:f4:66:65:e7:09:1a:26: 30:54:fd:54:7e:ea:0c:04:0d:71:ac:84:4b:2e:82: 64:05:f4:75:9b:5d:4e:34:71:2c:ac:5b:ca:05:7e: 34:95:a4:5b:d1:6d:47:a9:98:10:53:ad:9d:c9:47: 10:4c:c8:ae:69:fb:71:66:2b:87:13:d5:37:a9:7a: 77:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:41:2A:6F:A5:F3:3B:01:11:AC:49:A4:08:1B:0F:0F:D9:DB:14:50 X509v3 Authority Key Identifier: keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ff:00:a4:8b:80:b3:7b:80:0a:79:ff:56:10:68:02:74:81: c1:7f:3a:93:5e:4c:8a:9a:41:09:c8:83:68:af:d3:34:a5:3d: 48:f8:50:92:21:4c:f6:4a:81:38:58:4e:9c:77:3f:6f:c7:7e: 4a:d8:e6:7d:f9:81:79:07:ec:75:2e:2e:16:ad:c8:a8:a2:1b: df:ba:23:ac:6f:24:32:45:ab:d3:7a:61:a2:8d:b6:c8:21:e9: 45:d5:08:c9:41:ed:12:e9:41:7b:84:eb:a4:f9:f9:3e:da:3e: 81:9f:25:db:9e:dd:46:61:02:1d:3f:2f:02:28:0a:3d:de:37: 8f:75:c2:bf:20:78:25:24:e0:96:8a:9f:61:1d:b2:0f:c2:41: 40:9d:8b:c7:20:ab:21:c2:b1:47:b7:4f:15:15:c2:74:a6:40: 76:e7:84:d1:ad:e2:2f:db:ca:f1:ba:18:11:56:b6:18:8d:52: bf:92:54:7e:7e:57:e7:7c:62:75:7d:e2:39:bd:fa:bd:14:9a: eb:95:db:95:b2:69:75:73:ba:76:85:a2:1d:28:fd:70:62:50: 07:2a:ee:97:8e:23:4a:5c:9d:c8:e3:32:37:de:a5:dc:ce:f5: 6c:26:b8:c2:ba:84:00:a9:89:01:23:68:b0:a8:36:7b:01:18: b8:a3:13:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU45cm+AnnGqyNqIRgnpqOd2fEJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNF Mzk0QkI0NTAeFw0yNjA1MTIyMzE3MTlaFw0yNjA1MTQwMDAzMTlaMDMxMTAvBgNV BAMTKEE3NDEyQTZGQTVGMzNCMDExMUFDNDlBNDA4MUIwRjBGRDlEQjE0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Sotp33xoqszkzIo0J6NldFvT d929SKl8m1J6XmKRih+NvvQrogxGOkkbqUfx9Dx3UwgJFFpvshanALUYy3aNiJeA 3tKL8NuL0XXbh4Jp6toa0kjb8nGctpsV5JzB7zqct99W5IGZPR1iXRvk07vzGvV6 uhK2CjBSW2aAdv9aEzQAoloLBwZ+yYDKIjoaV7J7aBZdKtCJX2G3iCabxI9hnbB2 nIWNtDTM+FyghiMPzUUUZbbMVwl5hNHW9GZl5wkaJjBU/VR+6gwEDXGshEsugmQF 9HWbXU40cSysW8oFfjSVpFvRbUepmBBTrZ3JRxBMyK5p+3FmK4cT1TependTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp0Eqb6XzOwERrEmkCBsPD9nbFFAwHwYDVR0j BBgwFoAUOZ++Vc/ZV8HjhJx1/jeEA+OUu0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwZGZiNWEtODQ1ZS00ZGRmLWFjYTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVD RkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNFMzk0QkI0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOTlGQkU1NUNGRDk1N0MxRTM4NDlDNzVGRTM3ODQwM0UzOTRC QjQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwZGZiNWEtODQ1ZS00ZGRmLWFj YTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0 MDNFMzk0QkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJX/AKSLgLN7gAp5/1YQaAJ0gcF/OpNeTIqa QQnIg2iv0zSlPUj4UJIhTPZKgThYTpx3P2/HfkrY5n35gXkH7HUuLhatyKiiG9+6 I6xvJDJFq9N6YaKNtsgh6UXVCMlB7RLpQXuE66T5+T7aPoGfJdue3UZhAh0/LwIo Cj3eN491wr8geCUk4JaKn2Edsg/CQUCdi8cgqyHCsUe3TxUVwnSmQHbnhNGt4i/b yvG6GBFWthiNUr+SVH5+V+d8YnV94jm9+r0UmuuV25WyaXVzunaFoh0o/XBiUAcq 7peOI0pcncjjMjfepdzO9WwmuMK6hACpiQEjaLCoNnsBGLijE6g= -----END CERTIFICATE-----Generated at Wed May 13 02:50:55 2026 by rpki-client