$ rpki-client -vvf rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft File: 039655B785EC7CB007D8EC3057559737EDFECF68.mft (raw, json) Hash identifier: iE8TURtCkFjDSA3QUVPNep00Q2qV2M0PN0v4wWue9e4= Subject key identifier: 1C:24:F0:22:D7:5F:87:35:90:FA:DA:14:58:88:B8:99:6B:46:36:42 Authority key identifier: 03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 Certificate issuer: /CN=039655B785EC7CB007D8EC3057559737EDFECF68 Certificate serial: 53D75D59079CD6673FACA4D87606FE72A41E950C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 12:45:40 +0000 Manifest this update: Thu 23 Jul 2026 12:40:40 +0000 Manifest next update: Fri 24 Jul 2026 13:55:40 +0000 Files and hashes: 1: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: C5UaoWndqT8fkT/kUA+ky572u7b6+Zi84mEQVPG7UEk=) 2: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 7J+fQcGnrWcJgu4AWb0Pueoldil+uuzO3rZSOi/YFCY=) 3: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: wuckQGhSeNjfJUeUi1bzWu9XgRdVcXHbLO7uAW4Bwoo=) 4: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: Mw5Rq159HgAFkzwo+iOGAJH0lBRwzFfI8gCzOg4CwLQ=) 5: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: YWldloNKuf6nODMaL6FjFspEktId/aPkL38Pfe/uoXQ=) 6: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: ODnRKml3wmOVpjtW+xC+dZC5mmMJA71SJG7/VtBibyg=) 7: 039655B785EC7CB007D8EC3057559737EDFECF68.crl (hash: HtlWLGj/xq9+VINYEnw/O2yOodx4nmsxPtde8KWpaW8=) 8: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: fDqmdlGGzbZKwo2TG5DvyQfQjo71DsLK4B+BzK5Vb+Q=) 9: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: eQfKLmnoRcKmmSMjm7w1dd94t1neaLfEfU1VX6jNzeU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d7:5d:59:07:9c:d6:67:3f:ac:a4:d8:76:06:fe:72:a4:1e:95:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039655B785EC7CB007D8EC3057559737EDFECF68 Validity Not Before: Jul 23 12:40:40 2026 GMT Not After : Jul 24 13:55:40 2026 GMT Subject: CN=1C24F022D75F873590FADA145888B8996B463642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:32:9a:0e:9f:f2:62:a2:58:5f:69:9a:ad: 87:b2:9c:37:0c:25:b8:3e:00:d9:f8:84:9f:e0:af: 0a:98:a7:5c:9c:33:61:1b:8a:85:80:a2:47:0f:66: cf:de:d0:af:ce:e0:fb:32:e5:68:cf:37:bc:21:64: 03:3b:29:7f:03:6e:96:b7:e8:a6:54:0f:cb:9a:a7: 22:ad:c1:81:50:e0:52:48:54:18:2c:5e:f5:af:02: 7d:97:fb:85:1a:de:16:1d:e1:f0:b8:3b:4e:6a:cf: d1:1d:e3:ba:db:46:55:41:48:ef:e7:a0:ce:cf:df: 64:03:5d:77:b3:a5:4a:eb:06:6f:de:ce:9b:41:8d: 7f:a2:c8:fc:02:56:17:c7:41:ab:cc:dd:d9:32:ed: 69:83:99:9f:0b:03:66:b5:76:14:19:31:21:9c:e2: 52:ac:22:46:f2:c5:17:e2:f7:ae:3a:d7:66:10:62: 66:45:4b:96:49:85:0d:87:a0:af:de:ec:0f:26:e9: 20:02:10:57:aa:f1:de:2b:be:38:5c:80:84:5a:58: 6e:9d:8f:68:1e:8e:54:52:22:03:4a:e5:a6:cb:1e: a7:e9:2d:09:57:d8:2e:51:a7:2e:69:a3:05:78:01: d3:01:2a:a1:d8:b2:ca:bd:ee:f5:7f:31:98:20:1d: b7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:24:F0:22:D7:5F:87:35:90:FA:DA:14:58:88:B8:99:6B:46:36:42 X509v3 Authority Key Identifier: keyid:03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:13:b0:69:46:fd:e6:ba:de:b2:44:af:7d:3c:97:83:7b:58: 5c:13:f0:a8:d1:20:bb:f2:dc:b9:06:dd:17:bc:47:77:97:11: 84:df:e2:78:35:da:98:08:57:01:99:36:6e:20:d3:f6:7b:3d: bf:5a:b9:24:fc:fe:5f:bb:75:ac:f5:e8:8c:28:8b:9c:24:2a: 97:ff:9f:a3:02:e1:64:92:2d:08:bc:be:f3:58:5f:35:d4:a6: 93:a0:54:7e:61:6a:eb:ad:82:36:c6:61:86:15:a6:6f:fe:05: bf:aa:b5:6c:41:11:32:8c:66:fb:3f:49:12:1b:1e:3e:96:be: 9a:2a:81:c6:13:58:d7:c5:d8:62:e5:66:cd:f3:33:69:ca:eb: 8e:62:09:14:f1:f8:98:88:72:6e:b7:87:55:84:9b:63:61:17: 93:a7:04:b5:79:fc:89:8a:bb:da:7e:bb:61:85:ce:e5:6f:80: ce:77:77:03:90:de:4a:32:27:2b:64:42:a6:aa:96:1c:fc:42: ec:e0:fa:d5:ae:ad:67:96:55:ed:5f:b1:e0:56:1f:f5:4b:ad: 1a:58:62:86:cc:92:a7:38:a9:d8:71:b5:c0:8a:b6:62:e6:33: af:35:f7:48:0d:26:ea:39:91:f3:1b:3f:91:78:ea:a9:32:47: 3c:c9:c7:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9ddWQec1mc/rKTYdgb+cqQelQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdF REZFQ0Y2ODAeFw0yNjA3MjMxMjQwNDBaFw0yNjA3MjQxMzU1NDBaMDMxMTAvBgNV BAMTKDFDMjRGMDIyRDc1Rjg3MzU5MEZBREExNDU4ODhCODk5NkI0NjM2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9DKaDp/yYqJYX2marYeynDcM Jbg+ANn4hJ/grwqYp1ycM2EbioWAokcPZs/e0K/O4Psy5WjPN7whZAM7KX8Dbpa3 6KZUD8uapyKtwYFQ4FJIVBgsXvWvAn2X+4Ua3hYd4fC4O05qz9Ed47rbRlVBSO/n oM7P32QDXXezpUrrBm/ezptBjX+iyPwCVhfHQavM3dky7WmDmZ8LA2a1dhQZMSGc 4lKsIkbyxRfi964612YQYmZFS5ZJhQ2HoK/e7A8m6SACEFeq8d4rvjhcgIRaWG6d j2gejlRSIgNK5abLHqfpLQlX2C5Rpy5powV4AdMBKqHYssq97vV/MZggHbdHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHCTwItdfhzWQ+toUWIi4mWtGNkIwHwYDVR0j BBgwFoAUA5ZVt4XsfLAH2OwwV1WXN+3+z2gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmE0NWUtZjVkYS00NTgxLWJmZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4 NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdFREZFQ0Y2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzk2NTVCNzg1RUM3Q0IwMDdEOEVDMzA1NzU1OTczN0VERkVD RjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3 MzdFREZFQ0Y2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgTsGlG/ea63rJEr308l4N7WFwT8KjRILvy 3LkG3Re8R3eXEYTf4ng12pgIVwGZNm4g0/Z7Pb9auST8/l+7daz16Iwoi5wkKpf/ n6MC4WSSLQi8vvNYXzXUppOgVH5hauutgjbGYYYVpm/+Bb+qtWxBETKMZvs/SRIb Hj6WvpoqgcYTWNfF2GLlZs3zM2nK645iCRTx+JiIcm63h1WEm2NhF5OnBLV5/ImK u9p+u2GFzuVvgM53dwOQ3koyJytkQqaqlhz8Quzg+tWurWeWVe1fseBWH/VLrRpY YobMkqc4qdhxtcCKtmLmM68190gNJuo5kfMbP5F46qkyRzzJxy8= -----END CERTIFICATE-----Generated at Fri Jul 24 04:03:57 2026 by rpki-client