$ rpki-client -vvf rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft File: 399FBE55CFD957C1E3849C75FE378403E394BB45.mft (raw, json) Hash identifier: oNPzua647Vpm4DVGSv2Ia3/fyYeyD+FtvQglV96vMHA= Subject key identifier: 64:E3:4B:6F:BA:AA:08:7D:31:C3:BF:22:3D:C6:DA:96:0B:8C:98:7E Authority key identifier: 39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 Certificate issuer: /CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Certificate serial: 084319FE5B61BBB0D740BAADDC03F185B7F505E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 17:33:11 +0000 Manifest this update: Mon 20 Jul 2026 17:28:11 +0000 Manifest next update: Tue 21 Jul 2026 20:19:11 +0000 Files and hashes: 1: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: zSazRb0IpJJ4cBgKA2+8jgm7s2YnWXUiU+1QnaQiN1g=) 2: 399FBE55CFD957C1E3849C75FE378403E394BB45.crl (hash: K79F1IQF4FutON1iXEC/kn9xKKLvRQHzTQr9xwQQ7S8=) 3: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: gmPxQm5NcqK3BCfFQb7w+dLmFYWZ/DthSfb9I0IYOOQ=) 4: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: uojxwHiaMR8PO5h26JWS2B444u+QQh72ookAa5uFqSs=) 5: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: rqJDuuQFB9Ir08Xt+9/dUd2pRxC5DTIO9a28+O4McDo=) 6: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: qood+9S8zNU9X/jpjUZIu26OXyUnDxyv/AsytcFufXA=) 7: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: NrcqksrmsSbHeL16ugEy8PBgZElc8n2NevcNzHFW6Sc=) 8: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: Nda6FqqHwv307lkTxH+b0mWevIjFxVsW+c3rWmYY64U=) 9: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: /vRQ0F5lBxm5YccSzuUARECi1VFqg7FRoH3qOHTCFHs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:43:19:fe:5b:61:bb:b0:d7:40:ba:ad:dc:03:f1:85:b7:f5:05:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399FBE55CFD957C1E3849C75FE378403E394BB45 Validity Not Before: Jul 20 17:28:11 2026 GMT Not After : Jul 21 20:19:11 2026 GMT Subject: CN=64E34B6FBAAA087D31C3BF223DC6DA960B8C987E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:81:85:8a:05:38:f8:b8:0e:93:f1:ac:1d: 57:5e:64:66:4e:7c:a0:fb:e1:f3:17:a6:33:45:50: 55:3a:36:41:f6:fe:13:2a:78:29:09:14:88:07:aa: 23:8b:35:c5:a3:08:b7:f7:7f:7d:12:55:af:db:be: 7e:e1:ae:97:92:a2:c5:62:4c:f3:8a:ff:8d:60:f7: cd:0d:0c:d6:92:7e:77:84:af:bf:d6:a3:cc:78:8c: 39:89:d6:0f:61:01:48:f9:98:9b:3b:9e:de:ef:cb: b4:01:b5:78:5e:f2:da:d4:03:24:22:52:2e:34:d0: c7:c5:6f:9c:c1:be:a2:9a:fd:1e:ab:45:6c:bb:21: 8b:40:a9:83:81:1e:35:6d:41:34:df:3c:06:ff:bb: bd:78:06:78:28:76:76:98:30:a6:ef:c0:b7:6b:85: 41:15:c9:0d:2c:df:76:e1:30:70:15:d1:18:ad:00: 21:25:e0:dd:4a:bb:4b:fc:ec:c2:89:5b:98:de:e0: c4:18:88:7e:20:82:cb:fe:bd:02:56:d3:8a:d8:0d: 02:4a:f3:40:1f:78:b1:78:24:e7:8e:c4:62:ea:f1: 1b:ab:72:8e:83:50:99:ca:5f:5d:07:12:98:30:83: 8a:50:94:ed:26:34:e5:b6:c0:36:dd:bb:e6:77:82: 21:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E3:4B:6F:BA:AA:08:7D:31:C3:BF:22:3D:C6:DA:96:0B:8C:98:7E X509v3 Authority Key Identifier: keyid:39:9F:BE:55:CF:D9:57:C1:E3:84:9C:75:FE:37:84:03:E3:94:BB:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/399FBE55CFD957C1E3849C75FE378403E394BB45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/399FBE55CFD957C1E3849C75FE378403E394BB45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:04:09:e0:11:b5:f2:17:b0:ac:a6:b0:f2:0d:d3:fc:17:33: 42:35:26:59:bd:a2:d1:74:07:f3:8e:d1:5c:72:2f:dc:b1:97: 46:c8:be:94:30:e3:99:1d:47:46:bd:2e:14:b1:d0:10:f4:05: fc:06:e4:c5:7d:49:36:55:d2:98:06:c1:1f:77:f9:aa:61:c8: 11:f7:c3:d0:52:db:59:03:eb:9d:6b:b6:26:04:8d:59:37:a6: 35:c9:2a:b9:9f:19:7d:18:93:68:54:94:48:15:5f:7c:05:fa: c7:aa:96:2e:d8:25:43:a3:41:36:49:be:06:77:93:0e:3b:c5: ed:23:c8:db:b8:bc:a3:c1:09:7d:94:92:76:12:82:20:e8:1b: 12:60:51:c6:62:0c:6e:25:f9:7f:ee:c7:20:81:aa:74:50:f8: 3c:65:e9:5a:8f:32:8b:41:01:37:fe:64:6b:78:f1:92:56:a1: 12:7e:33:c0:c4:64:21:e0:52:8e:e1:95:30:7a:b8:4c:47:d0: 24:b8:41:91:cb:a6:11:98:eb:5b:9b:3c:99:c9:18:74:27:3e: 46:65:57:18:ff:2c:39:9c:f5:ce:d5:55:7d:e2:61:56:10:46: bd:9a:1d:9f:de:93:47:f6:8f:6b:b6:9d:c4:f3:1d:9f:5f:4f: 20:1b:5a:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCEMZ/lthu7DXQLqt3APxhbf1BeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNF Mzk0QkI0NTAeFw0yNjA3MjAxNzI4MTFaFw0yNjA3MjEyMDE5MTFaMDMxMTAvBgNV BAMTKDY0RTM0QjZGQkFBQTA4N0QzMUMzQkYyMjNEQzZEQTk2MEI4Qzk4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUYGFigU4+LgOk/GsHVdeZGZO fKD74fMXpjNFUFU6NkH2/hMqeCkJFIgHqiOLNcWjCLf3f30SVa/bvn7hrpeSosVi TPOK/41g980NDNaSfneEr7/Wo8x4jDmJ1g9hAUj5mJs7nt7vy7QBtXhe8trUAyQi Ui400MfFb5zBvqKa/R6rRWy7IYtAqYOBHjVtQTTfPAb/u714BngodnaYMKbvwLdr hUEVyQ0s33bhMHAV0RitACEl4N1Ku0v87MKJW5je4MQYiH4ggsv+vQJW04rYDQJK 80AfeLF4JOeOxGLq8Rurco6DUJnKX10HEpgwg4pQlO0mNOW2wDbdu+Z3giGRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZONLb7qqCH0xw78iPcbalguMmH4wHwYDVR0j BBgwFoAUOZ++Vc/ZV8HjhJx1/jeEA+OUu0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcwZGZiNWEtODQ1ZS00ZGRmLWFjYTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVD RkQ5NTdDMUUzODQ5Qzc1RkUzNzg0MDNFMzk0QkI0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOTlGQkU1NUNGRDk1N0MxRTM4NDlDNzVGRTM3ODQwM0UzOTRC QjQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcwZGZiNWEtODQ1ZS00ZGRmLWFj YTctYTliMzFjMzFkZmY0LzAvMzk5RkJFNTVDRkQ5NTdDMUUzODQ5Qzc1RkUzNzg0 MDNFMzk0QkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMECeARtfIXsKymsPIN0/wXM0I1Jlm9otF0 B/OO0VxyL9yxl0bIvpQw45kdR0a9LhSx0BD0BfwG5MV9STZV0pgGwR93+aphyBH3 w9BS21kD651rtiYEjVk3pjXJKrmfGX0Yk2hUlEgVX3wF+seqli7YJUOjQTZJvgZ3 kw47xe0jyNu4vKPBCX2UknYSgiDoGxJgUcZiDG4l+X/uxyCBqnRQ+Dxl6VqPMotB ATf+ZGt48ZJWoRJ+M8DEZCHgUo7hlTB6uExH0CS4QZHLphGY61ubPJnJGHQnPkZl Vxj/LDmc9c7VVX3iYVYQRr2aHZ/ek0f2j2u2ncTzHZ9fTyAbWgA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:40:29 2026 by rpki-client