$ rpki-client -vvf rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft File: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft (raw, json) Hash identifier: 3ZeinQcttqOJSxtWWJVWpxRCGl9kcvzL5NN/au+Vgd0= Subject key identifier: 32:7F:E1:26:17:55:4E:E9:9E:5D:5B:C8:9B:DE:02:93:1A:5E:35:A3 Authority key identifier: F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC Certificate issuer: /CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC Certificate serial: 57E7353590D252A5EE8206F3B22E349E7BE3C2B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 21:53:09 +0000 Manifest this update: Mon 20 Jul 2026 21:48:09 +0000 Manifest next update: Tue 21 Jul 2026 22:32:09 +0000 Files and hashes: 1: F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl (hash: R8XZqY+GR5NuJNPE8W+gjqZkcmzwtmVvhjhb1wNO298=) 2: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: V6br3oy3hs0OOu8Dz1+fY0LTjJEB4hDJ9zYWF2RIZyk=) 3: 3130332e3130332e3134362e302f32342d3234203d3e20313336383631.roa (hash: QcPMHSi1D0h6sl63Q5Bk6nPRJSx9aPvzxntr778pwMY=) 4: 3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (hash: LZmJi4+kQ9B/IAd5Uu1Ta66gk3Amy3FWM2SgQTprifw=) 5: 3130332e3130332e3134372e302f32342d3234203d3e20313336383631.roa (hash: AshFHMTEwPhxf5xh/Gotw2t8Qbj3ZjVgpz1z6r2Wkk0=) 6: 3130332e3130332e3134342e302f32342d3234203d3e20313336383631.roa (hash: GenO1xj3TyW94DSXBwVjhtzVjyQP5HUhJ9xzIwZlntA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e7:35:35:90:d2:52:a5:ee:82:06:f3:b2:2e:34:9e:7b:e3:c2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39DB214D9DBE3B2113CE09349A4C9C8287122BC Validity Not Before: Jul 20 21:48:09 2026 GMT Not After : Jul 21 22:32:09 2026 GMT Subject: CN=327FE12617554EE99E5D5BC89BDE02931A5E35A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:29:37:e0:41:e8:de:41:e4:b7:89:ec:44:aa: ee:7d:9d:a0:0d:38:09:9e:41:11:f2:86:0b:31:e7: 71:d2:1e:24:4d:03:1f:6a:37:d8:53:d0:7a:77:e5: ed:79:cb:cb:34:a3:5e:f8:fc:3a:57:81:72:dc:aa: dd:b2:33:1e:0d:e9:22:a6:40:09:d6:cb:81:3a:78: 35:3f:5a:5f:0d:fe:70:bd:1b:23:89:c9:aa:a2:58: 00:7c:19:71:2f:ae:8c:bb:35:96:19:14:f9:bd:25: 89:b4:e8:25:89:00:c8:cd:f3:93:6b:8b:a7:91:b8: 4c:2f:84:62:ae:c9:07:84:47:76:75:58:78:b7:eb: d7:42:26:4d:13:ef:dc:4b:6b:a8:91:55:49:36:20: 8a:da:f6:7e:1a:5b:a0:9e:88:3f:0c:9e:bd:41:e5: e8:ba:68:06:b8:0f:77:64:c9:ab:16:eb:80:37:6c: 36:c4:41:cc:b9:b1:bf:bb:57:b6:bf:61:3f:fa:b1: 86:57:6f:5b:7e:63:94:59:e6:e8:5d:dd:ac:87:f8: af:09:08:65:da:32:28:6f:6a:6b:52:0a:9c:7d:1b: 38:80:9f:2a:20:85:96:90:f8:67:13:c4:e0:79:e5: 7e:59:31:dd:b9:cb:3e:2a:28:4b:d7:c9:fd:81:15: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7F:E1:26:17:55:4E:E9:9E:5D:5B:C8:9B:DE:02:93:1A:5E:35:A3 X509v3 Authority Key Identifier: keyid:F3:9D:B2:14:D9:DB:E3:B2:11:3C:E0:93:49:A4:C9:C8:28:71:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/F39DB214D9DBE3B2113CE09349A4C9C8287122BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b2:b2:9f:a4:af:68:d4:a9:9a:d8:0e:8b:0c:5b:e8:20:01: 48:f0:20:12:0e:51:66:b9:6c:68:ed:a2:42:7e:9b:83:3c:8c: 32:bc:65:89:d2:7a:7f:d0:c5:3f:2d:04:92:c8:ba:87:ac:f6: 64:f3:25:09:5f:26:e0:88:ec:36:0d:a7:4e:47:eb:3d:de:45: 81:47:39:c1:58:d0:7f:e2:7c:79:d0:92:1c:4d:eb:7f:c5:a2: 81:3d:75:c9:f9:45:4a:14:30:fb:70:bf:85:7d:ce:2c:79:5f: a1:7f:cb:83:ed:7d:8c:6d:6a:af:81:0a:43:27:1a:0a:d7:af: cf:f3:0b:20:5e:9b:d3:46:a7:0b:a7:9e:a7:4a:64:3b:d6:13: 56:6c:2b:af:07:b1:eb:0a:5e:5a:37:a9:53:40:56:f8:d4:2d: 25:70:d1:6a:d5:31:e2:f8:d9:aa:1c:4e:e1:dd:3e:fb:4c:3a: 1d:ba:51:90:65:01:61:32:33:fb:f5:cc:df:17:46:36:ea:93: cb:05:50:bd:f1:37:d1:7c:37:58:17:c1:50:ce:d1:27:a5:7d: d5:4a:ed:87:a1:56:17:78:0b:e8:8d:2e:35:78:f3:84:02:00: 26:dd:43:76:c3:f3:bf:b6:a9:84:ff:6c:ea:b3:fb:95:dc:e6: 92:04:3a:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+c1NZDSUqXuggbzsi40nnvjwrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5REIyMTREOURCRTNCMjExM0NFMDkzNDlBNEM5Qzgy ODcxMjJCQzAeFw0yNjA3MjAyMTQ4MDlaFw0yNjA3MjEyMjMyMDlaMDMxMTAvBgNV BAMTKDMyN0ZFMTI2MTc1NTRFRTk5RTVENUJDODlCREUwMjkzMUE1RTM1QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHKTfgQejeQeS3iexEqu59naAN OAmeQRHyhgsx53HSHiRNAx9qN9hT0Hp35e15y8s0o174/DpXgXLcqt2yMx4N6SKm QAnWy4E6eDU/Wl8N/nC9GyOJyaqiWAB8GXEvroy7NZYZFPm9JYm06CWJAMjN85Nr i6eRuEwvhGKuyQeER3Z1WHi369dCJk0T79xLa6iRVUk2IIra9n4aW6CeiD8Mnr1B 5ei6aAa4D3dkyasW64A3bDbEQcy5sb+7V7a/YT/6sYZXb1t+Y5RZ5uhd3ayH+K8J CGXaMihvamtSCpx9GziAnyoghZaQ+GcTxOB55X5ZMd25yz4qKEvXyf2BFSpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMn/hJhdVTumeXVvIm94CkxpeNaMwHwYDVR0j BBgwFoAU852yFNnb47IRPOCTSaTJyChxIrwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTJlYTc3YjUtODhmNy00MDg1LWIzMzEtOTc1MDI0Y2QwNDZkLzAvRjM5REIyMTRE OURCRTNCMjExM0NFMDkzNDlBNEM5QzgyODcxMjJCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMzlEQjIxNEQ5REJFM0IyMTEzQ0UwOTM0OUE0QzlDODI4NzEy MkJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJlYTc3YjUtODhmNy00MDg1LWIz MzEtOTc1MDI0Y2QwNDZkLzAvRjM5REIyMTREOURCRTNCMjExM0NFMDkzNDlBNEM5 QzgyODcxMjJCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaysp+kr2jUqZrYDosMW+ggAUjwIBIOUWa5 bGjtokJ+m4M8jDK8ZYnSen/QxT8tBJLIuoes9mTzJQlfJuCI7DYNp05H6z3eRYFH OcFY0H/ifHnQkhxN63/FooE9dcn5RUoUMPtwv4V9zix5X6F/y4PtfYxtaq+BCkMn GgrXr8/zCyBem9NGpwunnqdKZDvWE1ZsK68HsesKXlo3qVNAVvjULSVw0WrVMeL4 2aocTuHdPvtMOh26UZBlAWEyM/v1zN8XRjbqk8sFUL3xN9F8N1gXwVDO0SelfdVK 7YehVhd4C+iNLjV484QCACbdQ3bD87+2qYT/bOqz+5Xc5pIEOr8= -----END CERTIFICATE-----Generated at Tue Jul 21 08:30:25 2026 by rpki-client