$ rpki-client -vvvf rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft File: B39B19C9084084F7FCB3FAFF376368D876F66372.mft (raw, json) Hash identifier: VLqcSlNRGDEq7xpBkyGBo6wqbCtce841FbW0YZ2H3rk= Subject key identifier: 59:2D:66:B4:F9:03:C5:2B:AE:AD:05:14:A8:FB:5F:7F:13:4F:1A:A1 Authority key identifier: B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 Certificate issuer: /CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Certificate serial: 61AFFB0460A43F61ACA4EEC1F0CF029FDF7FA5F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft Manifest number: F8 Signing time: Mon 02 Nov 2026 23:47:12 +0000 Manifest this update: Mon 02 Nov 2026 23:42:12 +0000 Manifest next update: Wed 04 Nov 2026 01:00:12 +0000 Files and hashes: 1: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: CTdtRt0QWOxvthXzk1fDi0/fuxno5z52+6EZfo7nHWY=) 2: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: 5twMEBpUGZCFXRPaiYDXrww+UAg0G4R4iDCrbaZ4+Ho=) 3: B39B19C9084084F7FCB3FAFF376368D876F66372.crl (hash: zs+0/UJnG3+xjh48uDnzrrRh+4ODXXp81/pJjaT3giE=) 4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: NLnNrRvgdk9PwIX+K62kuAcQASU2Wm+4Xg+4O2CIdkc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 01:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:af:fb:04:60:a4:3f:61:ac:a4:ee:c1:f0:cf:02:9f:df:7f:a5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Validity Not Before: Nov 2 23:42:12 2026 GMT Not After : Nov 4 01:00:12 2026 GMT Subject: CN=592D66B4F903C52BAEAD0514A8FB5F7F134F1AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:89:da:b3:9a:b9:12:52:31:be:e7:11:4e: a2:18:de:63:e2:b3:0b:6c:b7:5c:91:34:34:3c:e0: c9:0d:1a:4e:83:fe:e5:59:75:85:6e:f4:ec:50:4f: b3:de:7d:ed:98:be:04:43:af:c3:06:02:c2:0f:b0: 7a:37:d8:18:82:59:75:42:2a:3a:24:42:87:3f:85: f1:40:8c:2c:04:a3:ce:75:62:59:9d:b9:d4:f6:7a: f4:36:e2:54:10:46:c8:80:5c:25:cc:ce:cd:85:ed: 93:a5:3b:2f:40:e7:75:0a:cd:2c:90:69:a6:b4:25: 53:74:b6:cc:5f:87:e0:a3:ec:65:02:c1:01:f4:7a: 36:25:cf:80:d6:e9:e2:94:bd:2c:05:a5:07:61:3a: bc:59:00:98:92:4d:e9:bb:06:a7:ed:a1:55:b1:8a: 33:b9:f1:bb:53:c5:f0:7f:07:69:60:4e:84:f1:05: 60:c1:b0:71:68:1e:ac:90:58:e8:91:e8:b3:b1:2a: 2c:e2:c0:f2:9e:38:27:f5:6b:02:2e:0d:04:ed:bc: 66:d3:98:44:b8:77:98:16:1a:ef:e2:f1:fe:47:b2: ea:d6:5e:45:80:83:3c:26:32:94:6f:1e:9e:3c:53: b4:ff:35:08:69:9f:a2:22:38:1c:24:83:42:38:2e: ff:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2D:66:B4:F9:03:C5:2B:AE:AD:05:14:A8:FB:5F:7F:13:4F:1A:A1 X509v3 Authority Key Identifier: keyid:B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c5:45:cd:3e:09:a7:7d:90:59:a0:3f:cd:a1:2d:71:35:dd: 1d:e3:58:6d:e7:b0:ba:3c:eb:74:b7:83:ad:1f:06:8e:6a:90: b5:10:59:ce:20:d4:73:c3:ea:7c:31:1b:ba:f1:ca:38:4d:70: 95:47:24:e5:51:7c:9d:48:ed:2c:36:c6:75:4d:39:5b:2d:80: ae:9c:0c:13:12:e8:93:70:75:92:ef:9e:a4:f6:67:2e:f4:b4: 1c:c7:49:fa:e5:ab:8a:fb:00:1b:1a:c5:8a:79:d2:45:ee:0a: 9e:82:f9:cb:d3:da:7d:4c:61:86:5e:45:62:ce:ef:a2:3a:f3: ae:d6:16:bb:b2:8f:ee:46:51:bc:a6:69:d3:84:c8:1c:53:00: b9:a2:78:8b:1c:18:de:b2:11:72:a8:08:4a:db:37:d4:8c:73: 18:d9:3b:b7:c6:c9:16:9c:99:ad:f8:67:be:b8:42:ba:4e:d6: 9f:a8:14:e6:a9:be:0b:df:4e:db:ef:50:b6:64:dc:9c:57:58: 02:1c:39:9b:30:1d:1a:4d:a3:31:64:56:a4:fa:9f:b7:b5:81: c4:34:7c:ec:7f:db:f0:69:f8:b3:4d:1f:0e:1a:19:4f:f1:5b: ef:60:a7:54:8e:9a:2e:91:81:4d:5e:ec:c5:99:d6:c0:ee:48: fc:74:1f:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYa/7BGCkP2GspO7B8M8Cn99/pfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3 NkY2NjM3MjAeFw0yNjExMDIyMzQyMTJaFw0yNjExMDQwMTAwMTJaMDMxMTAvBgNV BAMTKDU5MkQ2NkI0RjkwM0M1MkJBRUFEMDUxNEE4RkI1RjdGMTM0RjFBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb5onas5q5ElIxvucRTqIY3mPi swtst1yRNDQ84MkNGk6D/uVZdYVu9OxQT7Pefe2YvgRDr8MGAsIPsHo32BiCWXVC KjokQoc/hfFAjCwEo851YlmdudT2evQ24lQQRsiAXCXMzs2F7ZOlOy9A53UKzSyQ aaa0JVN0tsxfh+Cj7GUCwQH0ejYlz4DW6eKUvSwFpQdhOrxZAJiSTem7BqftoVWx ijO58btTxfB/B2lgToTxBWDBsHFoHqyQWOiR6LOxKiziwPKeOCf1awIuDQTtvGbT mES4d5gWGu/i8f5HsurWXkWAgzwmMpRvHp48U7T/NQhpn6IiOBwkg0I4Lv+JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWS1mtPkDxSuurQUUqPtffxNPGqEwHwYDVR0j BBgwFoAUs5sZyQhAhPf8s/r/N2No2Hb2Y3IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMyZTRmODYtNDhlNy00OGM3LWJhOTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5Qzkw ODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3NkY2NjM3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMzlCMTlDOTA4NDA4NEY3RkNCM0ZBRkYzNzYzNjhEODc2RjY2 MzcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4 RDg3NkY2NjM3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/FRc0+Cad9kFmgP82hLXE13R3jWG3nsLo8 63S3g60fBo5qkLUQWc4g1HPD6nwxG7rxyjhNcJVHJOVRfJ1I7Sw2xnVNOVstgK6c DBMS6JNwdZLvnqT2Zy70tBzHSfrlq4r7ABsaxYp50kXuCp6C+cvT2n1MYYZeRWLO 76I6867WFruyj+5GUbymadOEyBxTALmieIscGN6yEXKoCErbN9SMcxjZO7fGyRac ma34Z764QrpO1p+oFOapvgvfTtvvULZk3JxXWAIcOZswHRpNozFkVqT6n7e1gcQ0 fOx/2/Bp+LNNHw4aGU/xW+9gp1SOmi6RgU1e7MWZ1sDuSPx0H54= -----END CERTIFICATE-----Generated at Tue Nov 3 16:24:36 2026 by rpki-client