$ rpki-client -vvf rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft File: 039655B785EC7CB007D8EC3057559737EDFECF68.mft (raw, json) Hash identifier: Ih3zzl47raQvjAtXAQV94UqPc9wr26D6B0jYanOI/nc= Subject key identifier: CC:89:1A:6B:A6:40:22:CA:21:E6:E8:D2:AC:C4:4F:7F:77:D6:75:53 Authority key identifier: 03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 Certificate issuer: /CN=039655B785EC7CB007D8EC3057559737EDFECF68 Certificate serial: 1AA46C6215CE86DDA72ED64090DD824C58889183 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:09:01 +0000 Manifest this update: Mon 20 Jul 2026 18:04:01 +0000 Manifest next update: Tue 21 Jul 2026 19:00:01 +0000 Files and hashes: 1: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: YWldloNKuf6nODMaL6FjFspEktId/aPkL38Pfe/uoXQ=) 2: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: wuckQGhSeNjfJUeUi1bzWu9XgRdVcXHbLO7uAW4Bwoo=) 3: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: eQfKLmnoRcKmmSMjm7w1dd94t1neaLfEfU1VX6jNzeU=) 4: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: fDqmdlGGzbZKwo2TG5DvyQfQjo71DsLK4B+BzK5Vb+Q=) 5: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: ODnRKml3wmOVpjtW+xC+dZC5mmMJA71SJG7/VtBibyg=) 6: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: Mw5Rq159HgAFkzwo+iOGAJH0lBRwzFfI8gCzOg4CwLQ=) 7: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 7J+fQcGnrWcJgu4AWb0Pueoldil+uuzO3rZSOi/YFCY=) 8: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: C5UaoWndqT8fkT/kUA+ky572u7b6+Zi84mEQVPG7UEk=) 9: 039655B785EC7CB007D8EC3057559737EDFECF68.crl (hash: Nri9FHDwgsM2d3hsM3H37xX7+plzRUezXDXnf3DmL7M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a4:6c:62:15:ce:86:dd:a7:2e:d6:40:90:dd:82:4c:58:88:91:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039655B785EC7CB007D8EC3057559737EDFECF68 Validity Not Before: Jul 20 18:04:01 2026 GMT Not After : Jul 21 19:00:01 2026 GMT Subject: CN=CC891A6BA64022CA21E6E8D2ACC44F7F77D67553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:61:c8:33:98:b6:84:e6:2a:a1:cf:98:81:ac: a5:e3:25:67:f8:f2:59:0b:95:d8:bc:3e:cc:60:2e: bd:1d:cf:54:9e:07:d0:d4:5d:0f:2f:53:c0:d5:6d: 08:a6:99:74:87:d1:77:55:e6:90:43:0c:a2:e4:51: 99:12:46:6d:a8:a9:97:26:9e:66:5a:fc:3d:f1:9c: f8:93:b0:9f:1c:af:c9:7b:39:1b:8b:8b:e0:11:ab: 8c:fb:7c:40:27:99:01:18:1e:04:4a:6e:91:97:93: 62:3d:48:6f:34:3c:0d:eb:f5:8b:4d:26:3a:9a:3f: ed:7e:f0:2e:97:49:ac:fb:b9:65:59:01:22:d0:13: 34:df:98:3d:62:15:20:e8:93:2a:d2:99:b7:17:43: 9c:f0:10:fa:37:ce:a3:e8:67:b7:45:6a:90:d8:34: 91:f9:1c:9d:95:97:f5:2d:7b:f5:20:11:4d:e7:78: 31:e7:e0:c1:1b:be:d5:78:cd:4b:70:fd:c5:95:83: 2b:60:6d:52:d4:21:5f:c2:7f:75:bd:0b:f1:eb:79: 8e:ae:9d:06:99:ae:54:d9:97:f0:ce:cb:2d:84:12: a3:23:68:58:75:f8:1d:96:a1:9b:6d:3a:a2:02:90: a1:ce:e3:a5:6d:3d:b9:d1:09:0f:c5:93:b9:e0:49: c2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:89:1A:6B:A6:40:22:CA:21:E6:E8:D2:AC:C4:4F:7F:77:D6:75:53 X509v3 Authority Key Identifier: keyid:03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:61:b9:ab:92:fb:e7:5d:ab:09:f2:0b:d3:bd:b0:93:0a:2f: 21:53:e6:a0:36:0c:1a:36:90:01:ce:27:83:f5:23:35:4b:7a: 6e:2d:25:07:d1:ef:86:c6:05:26:bb:a8:df:fe:9e:45:2e:80: f2:ad:3a:29:b7:ad:ea:33:35:e8:ae:c6:32:c1:76:dd:25:b0: 38:ee:45:28:3b:cc:94:dc:e8:96:64:ca:21:5d:8f:11:75:f5: 92:35:e8:36:a0:88:54:03:4d:55:b5:7e:e6:9e:26:c0:a1:fb: 73:f8:31:ea:34:76:3a:f6:5d:d6:e2:4b:78:2f:ae:df:ac:71: 7f:8b:d5:8e:1a:89:0a:35:e3:b4:cd:c0:e5:7d:c7:ba:b3:37: 76:55:3b:99:e6:dd:cd:2a:52:07:40:ce:b4:c8:87:bd:b3:56: 79:82:b5:e4:6e:76:2c:c9:87:3e:dd:99:4a:88:3f:d0:ff:32: bc:11:e0:f5:9a:c4:d8:04:7b:0a:46:13:11:e5:57:f1:a6:98: f1:13:aa:81:72:1d:8e:a1:a7:72:fc:d8:fe:b1:27:f3:f4:fd: f0:d2:fc:df:5a:03:b8:6a:90:76:f6:05:d6:c5:e9:ca:e0:2b: 46:3e:90:a3:7a:ad:71:8e:8b:af:50:e0:9e:45:3f:ef:2a:a7: e9:6d:f9:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqRsYhXOht2nLtZAkN2CTFiIkYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdF REZFQ0Y2ODAeFw0yNjA3MjAxODA0MDFaFw0yNjA3MjExOTAwMDFaMDMxMTAvBgNV BAMTKENDODkxQTZCQTY0MDIyQ0EyMUU2RThEMkFDQzQ0RjdGNzdENjc1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdYcgzmLaE5iqhz5iBrKXjJWf4 8lkLldi8PsxgLr0dz1SeB9DUXQ8vU8DVbQimmXSH0XdV5pBDDKLkUZkSRm2oqZcm nmZa/D3xnPiTsJ8cr8l7ORuLi+ARq4z7fEAnmQEYHgRKbpGXk2I9SG80PA3r9YtN JjqaP+1+8C6XSaz7uWVZASLQEzTfmD1iFSDokyrSmbcXQ5zwEPo3zqPoZ7dFapDY NJH5HJ2Vl/Ute/UgEU3neDHn4MEbvtV4zUtw/cWVgytgbVLUIV/Cf3W9C/HreY6u nQaZrlTZl/DOyy2EEqMjaFh1+B2WoZttOqICkKHO46VtPbnRCQ/Fk7ngScKbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzIkaa6ZAIsoh5ujSrMRPf3fWdVMwHwYDVR0j BBgwFoAUA5ZVt4XsfLAH2OwwV1WXN+3+z2gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmE0NWUtZjVkYS00NTgxLWJmZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4 NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdFREZFQ0Y2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzk2NTVCNzg1RUM3Q0IwMDdEOEVDMzA1NzU1OTczN0VERkVD RjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3 MzdFREZFQ0Y2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExhuauS++ddqwnyC9O9sJMKLyFT5qA2DBo2 kAHOJ4P1IzVLem4tJQfR74bGBSa7qN/+nkUugPKtOim3reozNeiuxjLBdt0lsDju RSg7zJTc6JZkyiFdjxF19ZI16DagiFQDTVW1fuaeJsCh+3P4Meo0djr2XdbiS3gv rt+scX+L1Y4aiQo147TNwOV9x7qzN3ZVO5nm3c0qUgdAzrTIh72zVnmCteRudizJ hz7dmUqIP9D/MrwR4PWaxNgEewpGExHlV/GmmPETqoFyHY6hp3L82P6xJ/P0/fDS /N9aA7hqkHb2BdbF6crgK0Y+kKN6rXGOi69Q4J5FP+8qp+lt+VM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:26:20 2026 by rpki-client