$ rpki-client -vvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft File: 399FBE55CFD957C1E3849C75FE378403E394BB45.mft (raw, json) Hash identifier: japPHsIu693fzmR8xM4yqzdI2RtaxjmLNz9N6EDA0KM= Subject key identifier: 06:A8:11:10:C0:6F:AB:FD:02:B9:1A:42:35:AC:23:5F:D2:C5:3A:DD Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Certificate serial: 7FE203AE85F771F74FDCE11E4D74963439B4DCE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:38:18 +0000 Manifest this update: Tue 02 Jun 2026 10:33:18 +0000 Manifest next update: Wed 03 Jun 2026 14:14:18 +0000 Files and hashes: 1: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: NrcqksrmsSbHeL16ugEy8PBgZElc8n2NevcNzHFW6Sc=) 2: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: qood+9S8zNU9X/jpjUZIu26OXyUnDxyv/AsytcFufXA=) 3: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: Nda6FqqHwv307lkTxH+b0mWevIjFxVsW+c3rWmYY64U=) 4: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: /vRQ0F5lBxm5YccSzuUARECi1VFqg7FRoH3qOHTCFHs=) 5: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: zSazRb0IpJJ4cBgKA2+8jgm7s2YnWXUiU+1QnaQiN1g=) 6: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: gmPxQm5NcqK3BCfFQb7w+dLmFYWZ/DthSfb9I0IYOOQ=) 7: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: uojxwHiaMR8PO5h26JWS2B444u+QQh72ookAa5uFqSs=) 8: 399FBE55CFD957C1E3849C75FE378403E394BB45.crl (hash: d/3BKOGmhascLi7qWFeEic3m79herdP0kI5XT5lrUeY=) 9: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: rqJDuuQFB9Ir08Xt+9/dUd2pRxC5DTIO9a28+O4McDo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e2:03:ae:85:f7:71:f7:4f:dc:e1:1e:4d:74:96:34:39:b4:dc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Validity Not Before: Jun 2 10:33:18 2026 GMT Not After : Jun 3 14:14:18 2026 GMT Subject: CN=06A81110C06FABFD02B91A4235AC235FD2C53ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ea:8e:33:0b:c1:a5:7a:3f:a1:30:0b:55:98: 88:ab:ce:91:d1:67:a8:98:ca:b9:3f:0c:53:c0:5f: 10:56:6e:2f:11:5f:81:79:06:d4:17:34:c3:e7:5b: fa:3c:59:8b:f4:9f:7a:aa:1a:10:5d:fd:2c:f5:47: ea:9a:f8:ba:15:6c:41:f6:19:dd:48:b1:90:57:53: 04:a8:6b:bb:1b:0c:51:76:a1:14:f3:d8:42:76:3b: 30:22:ef:d8:63:0d:34:a4:9c:ad:5b:d7:93:d5:fe: 85:d5:a1:81:dc:4c:54:38:9b:82:ba:6a:82:c6:cf: ba:a3:95:f0:36:24:e5:02:b0:10:e8:43:f8:f0:56: b6:10:a2:3c:10:d7:5d:6a:2c:ea:ce:1e:c6:46:ba: 28:26:0e:7d:64:3b:da:ce:28:38:52:bf:c5:39:69: f8:35:57:13:b4:2d:00:41:fb:ff:83:5c:a2:a0:02: 5e:f4:df:49:93:4e:5e:25:42:13:5e:0e:45:19:39: b8:63:44:69:54:5c:b7:48:49:7d:90:21:6e:05:ff: ff:8f:fc:40:9e:75:cb:58:fd:16:81:81:1b:f9:62: 32:ad:9e:bf:23:1b:95:6d:c7:b4:89:d4:09:e6:8c: 08:1f:1a:8a:bf:fc:bc:b2:a7:98:61:45:bb:75:22: 32:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A8:11:10:C0:6F:AB:FD:02:B9:1A:42:35:AC:23:5F:D2:C5:3A:DD X509v3 Authority Key Identifier: keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fc:28:e1:74:97:14:33:4d:88:fb:a7:ed:b6:e5:7f:a2:e3: 42:4e:98:c5:f2:84:09:56:f8:ef:f3:b1:64:3c:49:6d:8c:10: a5:fe:e0:07:2f:c1:1e:30:5e:6a:14:de:03:f9:4c:9a:89:f1: c0:84:11:32:0d:54:f4:a7:9d:4e:dd:06:65:3d:87:72:58:22: 72:1d:8a:ae:95:50:75:2e:3b:6c:6e:91:f4:3b:bd:f2:1f:ff: 94:7a:ac:5f:8d:4e:3b:c5:a5:e3:6c:32:8b:66:0c:02:9f:23: 4c:1a:97:be:e5:ea:a4:79:df:32:0c:51:d6:86:3c:cb:11:b8: ae:58:75:de:a6:7b:57:81:cc:55:06:52:4d:cc:c8:8a:66:f7: f0:7e:0d:3b:34:37:76:ce:3a:4e:3a:2c:9d:ce:d6:4f:6c:b6: 96:92:21:19:46:ea:66:b5:19:a2:ed:ba:1c:29:90:c5:c2:2d: ae:b0:ff:f2:29:86:a1:1d:b3:41:9c:45:c1:b2:11:86:0b:e2: e5:c7:c9:64:6d:a4:87:79:16:d2:3d:8e:f5:98:cc:43:6e:24: f5:1f:65:3f:20:46:e0:68:d9:80:58:fc:4f:f4:be:95:e9:10: ed:04:d6:ac:ab:83:de:74:6e:c1:7d:67:a0:e0:af:f6:6d:5d: ab:f3:f9:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+IDroX3cfdP3OEeTXSWNDm03OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNF Mzk0QkI0NTAeFw0yNjA2MDIxMDMzMThaFw0yNjA2MDMxNDE0MThaMDMxMTAvBgNV BAMTKDA2QTgxMTEwQzA2RkFCRkQwMkI5MUE0MjM1QUMyMzVGRDJDNTNBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh6o4zC8Glej+hMAtVmIirzpHR Z6iYyrk/DFPAXxBWbi8RX4F5BtQXNMPnW/o8WYv0n3qqGhBd/Sz1R+qa+LoVbEH2 Gd1IsZBXUwSoa7sbDFF2oRTz2EJ2OzAi79hjDTSknK1b15PV/oXVoYHcTFQ4m4K6 aoLGz7qjlfA2JOUCsBDoQ/jwVrYQojwQ111qLOrOHsZGuigmDn1kO9rOKDhSv8U5 afg1VxO0LQBB+/+DXKKgAl7030mTTl4lQhNeDkUZObhjRGlUXLdISX2QIW4F//+P /ECedctY/RaBgRv5YjKtnr8jG5Vtx7SJ1AnmjAgfGoq//Lyyp5hhRbt1IjLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBqgREMBvq/0CuRpCNawjX9LFOt0wHwYDVR0j BBgwFoAUOZ++Vc/ZV8HjhJx1/jeEA+OUu0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwZGZiNWEtODQ1ZS00ZGRmLWFjYTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVD RkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNFMzk0QkI0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOTlGQkU1NUNGRDk1N0MxRTM4NDlDNzVGRTM3ODQwM0UzOTRC QjQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwZGZiNWEtODQ1ZS00ZGRmLWFj YTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0 MDNFMzk0QkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIf8KOF0lxQzTYj7p+225X+i40JOmMXyhAlW +O/zsWQ8SW2MEKX+4AcvwR4wXmoU3gP5TJqJ8cCEETINVPSnnU7dBmU9h3JYInId iq6VUHUuO2xukfQ7vfIf/5R6rF+NTjvFpeNsMotmDAKfI0wal77l6qR53zIMUdaG PMsRuK5Ydd6me1eBzFUGUk3MyIpm9/B+DTs0N3bOOk46LJ3O1k9stpaSIRlG6ma1 GaLtuhwpkMXCLa6w//IphqEds0GcRcGyEYYL4uXHyWRtpId5FtI9jvWYzENuJPUf ZT8gRuBo2YBY/E/0vpXpEO0E1qyrg950bsF9Z6Dgr/ZtXavz+Ss= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:52 2026 by rpki-client