$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft File: 039655B785EC7CB007D8EC3057559737EDFECF68.mft (raw, json) Hash identifier: WqJqQDoTtcDMZtVN4FVJnGk1Dy8htGO1vE1Zu3QcNN4= Subject key identifier: EF:B7:07:67:A5:56:B4:5E:71:16:52:90:2D:34:96:C4:15:26:2E:74 Authority key identifier: 03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 Certificate issuer: /CN=039655B785EC7CB007D8EC3057559737EDFECF68 Certificate serial: 448B3B4C8D96068686C1FA445F51C03D2F94401E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 13:03:38 +0000 Manifest this update: Sun 01 Nov 2026 12:58:38 +0000 Manifest next update: Mon 02 Nov 2026 13:52:38 +0000 Files and hashes: 1: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: fDqmdlGGzbZKwo2TG5DvyQfQjo71DsLK4B+BzK5Vb+Q=) 2: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: Mw5Rq159HgAFkzwo+iOGAJH0lBRwzFfI8gCzOg4CwLQ=) 3: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: ODnRKml3wmOVpjtW+xC+dZC5mmMJA71SJG7/VtBibyg=) 4: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: C5UaoWndqT8fkT/kUA+ky572u7b6+Zi84mEQVPG7UEk=) 5: 039655B785EC7CB007D8EC3057559737EDFECF68.crl (hash: ghCmvGiIuul9Pe6SFKerKpBxoobx9YUXwih56+17Q+A=) 6: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 7J+fQcGnrWcJgu4AWb0Pueoldil+uuzO3rZSOi/YFCY=) 7: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: eQfKLmnoRcKmmSMjm7w1dd94t1neaLfEfU1VX6jNzeU=) 8: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: YWldloNKuf6nODMaL6FjFspEktId/aPkL38Pfe/uoXQ=) 9: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: wuckQGhSeNjfJUeUi1bzWu9XgRdVcXHbLO7uAW4Bwoo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 13:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8b:3b:4c:8d:96:06:86:86:c1:fa:44:5f:51:c0:3d:2f:94:40:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039655B785EC7CB007D8EC3057559737EDFECF68 Validity Not Before: Nov 1 12:58:38 2026 GMT Not After : Nov 2 13:52:38 2026 GMT Subject: CN=EFB70767A556B45E711652902D3496C415262E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ac:a9:3a:5f:a5:1c:32:0f:17:68:bd:02:e0: fc:74:77:ef:4b:fe:3b:26:3d:6e:0d:3d:0d:45:71: d7:1f:71:07:60:a6:53:04:d6:6e:ce:97:17:30:bf: 61:95:bb:6a:d1:b9:b1:f5:9b:71:9a:80:ab:97:0c: ce:90:5c:41:ab:98:3b:22:b0:17:1a:6b:d7:c7:dd: 31:0c:d6:8c:54:9a:48:43:4e:56:b2:bd:9f:7d:5a: 41:57:d8:09:d1:e4:b1:41:02:d3:24:ae:00:58:96: f9:6f:e1:ce:d2:8d:70:f7:31:d6:26:30:7e:8d:3c: 16:de:03:30:0b:ec:40:64:2f:44:72:0e:f8:99:26: 17:42:d8:c3:18:62:26:cd:20:a2:9a:3f:20:0d:cb: a5:5b:84:67:d4:07:28:cd:e6:22:d4:49:db:06:da: ff:69:e6:91:74:e2:a0:2e:56:0b:fa:bc:8c:d5:93: d2:cf:f5:60:80:f8:bb:e4:14:49:ea:e1:ef:c5:92: 4c:b2:99:5b:e3:3a:e7:97:58:ea:72:32:7e:31:43: 64:62:ae:64:72:de:63:9f:8e:85:0d:e4:82:15:42: 0a:eb:a6:5b:42:c1:6a:cd:86:16:13:fd:c5:61:d2: 93:ca:d8:9c:ea:f1:c6:ff:0e:60:cf:6e:85:c6:12: ac:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B7:07:67:A5:56:B4:5E:71:16:52:90:2D:34:96:C4:15:26:2E:74 X509v3 Authority Key Identifier: keyid:03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:98:5a:e3:12:40:0f:ec:9a:92:4f:75:2f:09:c8:0e:70:98: 93:60:fc:27:ab:18:88:bb:7f:51:b4:3f:8c:e2:89:5f:b9:ab: 08:24:d2:64:21:cf:95:8a:f8:1c:1c:12:19:ff:88:a7:b2:e5: de:07:e0:34:fc:9b:27:3e:05:bf:70:73:bb:a5:45:e4:3f:fd: 97:9b:6e:48:df:2c:39:e8:68:9e:5a:6f:e5:bd:46:0d:9d:40: f1:95:aa:1c:61:7d:b1:72:0b:b4:a6:85:30:1d:c0:e5:bc:48: 3e:44:18:41:98:8b:c1:5f:96:27:63:ab:9b:4f:1b:97:e0:7a: 64:0f:e9:16:36:4c:b9:0d:1b:bc:64:5e:5a:82:30:d4:12:e7: 6a:a2:6a:b6:0c:a3:59:c2:9a:8f:38:ed:b6:87:00:50:99:49: 9c:52:7b:22:e0:ec:6e:ea:e3:77:a9:ac:e7:ae:a6:6a:09:74: 89:92:b7:fe:81:24:6a:b9:6d:68:d6:f8:01:15:43:25:0a:42: fd:ff:03:7a:69:ea:a2:9a:93:e5:b8:53:67:13:eb:fe:0e:47: 41:21:59:db:73:d4:62:a6:5c:8e:66:a3:5c:e9:71:64:2a:7f: 2d:7d:7a:f5:4c:b6:b0:6b:77:03:ba:22:e6:69:e5:f1:20:33: c1:e6:1c:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURIs7TI2WBoaGwfpEX1HAPS+UQB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdF REZFQ0Y2ODAeFw0yNjExMDExMjU4MzhaFw0yNjExMDIxMzUyMzhaMDMxMTAvBgNV BAMTKEVGQjcwNzY3QTU1NkI0NUU3MTE2NTI5MDJEMzQ5NkM0MTUyNjJFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSrKk6X6UcMg8XaL0C4Px0d+9L /jsmPW4NPQ1FcdcfcQdgplME1m7Olxcwv2GVu2rRubH1m3GagKuXDM6QXEGrmDsi sBcaa9fH3TEM1oxUmkhDTlayvZ99WkFX2AnR5LFBAtMkrgBYlvlv4c7SjXD3MdYm MH6NPBbeAzAL7EBkL0RyDviZJhdC2MMYYibNIKKaPyANy6VbhGfUByjN5iLUSdsG 2v9p5pF04qAuVgv6vIzVk9LP9WCA+LvkFEnq4e/FkkyymVvjOueXWOpyMn4xQ2Ri rmRy3mOfjoUN5IIVQgrrpltCwWrNhhYT/cVh0pPK2Jzq8cb/DmDPboXGEqxPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU77cHZ6VWtF5xFlKQLTSWxBUmLnQwHwYDVR0j BBgwFoAUA5ZVt4XsfLAH2OwwV1WXN+3+z2gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmE0NWUtZjVkYS00NTgxLWJmZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4 NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdFREZFQ0Y2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzk2NTVCNzg1RUM3Q0IwMDdEOEVDMzA1NzU1OTczN0VERkVD RjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3 MzdFREZFQ0Y2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeYWuMSQA/smpJPdS8JyA5wmJNg/CerGIi7 f1G0P4ziiV+5qwgk0mQhz5WK+BwcEhn/iKey5d4H4DT8myc+Bb9wc7ulReQ//Zeb bkjfLDnoaJ5ab+W9Rg2dQPGVqhxhfbFyC7SmhTAdwOW8SD5EGEGYi8Fflidjq5tP G5fgemQP6RY2TLkNG7xkXlqCMNQS52qiarYMo1nCmo847baHAFCZSZxSeyLg7G7q 43eprOeupmoJdImSt/6BJGq5bWjW+AEVQyUKQv3/A3pp6qKak+W4U2cT6/4OR0Eh Wdtz1GKmXI5mo1zpcWQqfy19evVMtrBrdwO6IuZp5fEgM8HmHBg= -----END CERTIFICATE-----Generated at Sun Nov 1 19:43:03 2026 by rpki-client