$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft File: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft (raw, json) Hash identifier: NK3OrFR7IzSVJzTPdNsC4/JqvlPTuJkeyIpJ+1SoM64= Subject key identifier: 0C:96:8F:EC:A7:BD:06:A9:50:35:F4:55:88:C9:8A:FD:85:A7:FC:4F Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A Certificate issuer: /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A Certificate serial: 52DA3789E3090818B80EE4F533399924B09CBE19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft Manifest number: 36 Signing time: Sun 26 Apr 2026 00:10:44 +0000 Manifest this update: Sun 26 Apr 2026 00:05:44 +0000 Manifest next update: Wed 29 Apr 2026 11:21:44 +0000 Files and hashes: 1: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: 71yRknNPky7gIICGHwyWcufvVOlV/QSbdNUKr/ErIcc=) 2: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: pk+TPwqQgroDMciGoscp5z8cID/jM70gaJIC3nV7COg=) 3: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: MqAwWrLiifg0NVQLvNMyPUe2lZOdrumhHENCKuLcOOQ=) 4: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: xhA/2CTOIWfVDpHM1NkVlpPmJHY6UZcMtq24fqHi4DE=) 5: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: gxDcNPkVDSFdZ41agLUQg+G8pCeb+5J4nXDU0DZLJ2Q=) 6: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: rPxNyJ1z70O0nMqBth9k9AL54wxNqFDgED4SxkwBthU=) 7: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: FnkUHZBrG989K95SzJmPZ3VlJE7bRu6MxYgvfXPwI1I=) 8: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl (hash: +bq/bl0wCWxIAVIXFFuMtg3m095DTerdADovXgmjhjk=) 9: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: w6Pa9H6dXhB2Rk0qIagT2ApTDekMkBQRHE2JtUHHFYM=) 10: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: KyBKzIQsEpd0PgxrEi5EeRSnZ5mxNIfKVnq+jHAVmuQ=) 11: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: e44E7s4PRD9CCUk2jY7ZZ7l5t8KM/OqUwkHUrfkkOcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 11:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:da:37:89:e3:09:08:18:b8:0e:e4:f5:33:39:99:24:b0:9c:be:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A Validity Not Before: Apr 26 00:05:44 2026 GMT Not After : Apr 29 11:21:44 2026 GMT Subject: CN=0C968FECA7BD06A95035F45588C98AFD85A7FC4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:a3:f3:c5:a0:48:c8:50:30:46:f1:36:47: de:f9:c6:45:88:9c:79:25:57:56:b8:7d:be:f2:03: 05:05:db:e8:58:96:d5:00:3d:d1:54:cf:e1:dc:c1: ba:a7:ed:12:49:ba:e5:c8:fe:62:a2:8e:10:cd:2b: 54:55:6d:4e:c1:49:0a:fe:80:d8:25:d8:2c:0d:37: f7:1a:72:83:b9:d2:97:75:d2:fd:67:30:c3:e5:e4: 1a:a4:31:7d:79:a3:3c:f1:99:c2:73:07:db:21:a5: 1c:ca:82:83:d8:88:b5:5b:22:a9:e1:af:8f:c3:51: 1a:18:c5:9b:6e:cf:88:0d:82:ac:50:2b:e1:d7:f2: 58:95:18:03:cf:1f:f2:e8:23:52:28:07:80:8e:5e: 21:c3:7a:9d:fc:37:d9:20:ac:2d:fb:03:3e:12:f6: 54:d5:a9:f5:c0:d7:fc:48:89:0a:11:0e:15:2f:35: bb:b1:aa:12:23:2f:03:83:cf:89:4a:52:ab:a9:6d: 23:e7:1e:b7:32:bf:13:89:9c:b4:e4:51:17:7e:45: d2:d5:67:0e:68:cc:02:d2:9b:0f:4d:f2:8f:86:57: d5:6a:6b:54:ba:8b:39:91:1c:b1:0a:d9:74:39:83: d5:67:da:52:da:46:26:d8:7f:2f:07:0a:23:ad:3c: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:96:8F:EC:A7:BD:06:A9:50:35:F4:55:88:C9:8A:FD:85:A7:FC:4F X509v3 Authority Key Identifier: keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:73:e4:30:4e:02:71:5c:54:b0:e5:b1:c9:9c:74:65:bf:1f: 99:a9:db:a3:f3:a3:57:c4:d6:13:b5:f5:87:1a:8f:48:7f:ef: 12:2f:1c:cb:a5:fc:9c:42:ba:5b:f6:7c:b6:94:66:ef:bb:6e: 89:3d:b5:3c:42:4b:bd:9c:49:b7:0e:fa:04:c8:45:fb:c0:6e: 01:64:1a:cb:b9:cc:14:b9:72:94:48:a8:b6:5c:e4:d8:b4:88: 76:8f:ea:e6:34:a7:46:80:bb:04:2e:4e:26:20:df:fc:b1:54: a4:ad:4e:f3:62:5c:70:62:69:d8:4d:4e:b6:ad:f7:76:d9:1d: bd:d7:e7:12:9a:59:9a:48:0b:f6:5a:05:cf:23:f9:e1:7b:ba: f6:10:17:73:45:ab:f8:98:02:6c:d7:87:1f:d9:b2:00:be:54: 2e:c9:86:57:05:75:f8:2e:1f:50:65:41:ad:4a:98:66:e5:50: 8b:56:a8:e7:ea:2f:24:14:49:84:1b:ee:a0:97:a3:32:f9:78: bb:c3:47:32:4b:87:45:37:5c:a5:7a:f1:52:4f:9b:79:d6:33: 90:d6:77:49:b7:03:4f:90:ed:37:bc:19:1e:07:ba:86:e7:84: 6a:9d:97:7d:d0:a1:e1:67:49:88:a5:59:2b:28:3c:b6:1a:44: ae:76:d1:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUto3ieMJCBi4DuT1MzmZJLCcvhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJCRTg2 Qjg1RkYzQTAeFw0yNjA0MjYwMDA1NDRaFw0yNjA0MjkxMTIxNDRaMDMxMTAvBgNV BAMTKDBDOTY4RkVDQTdCRDA2QTk1MDM1RjQ1NTg4Qzk4QUZEODVBN0ZDNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGc6PzxaBIyFAwRvE2R975xkWI nHklV1a4fb7yAwUF2+hYltUAPdFUz+Hcwbqn7RJJuuXI/mKijhDNK1RVbU7BSQr+ gNgl2CwNN/cacoO50pd10v1nMMPl5BqkMX15ozzxmcJzB9shpRzKgoPYiLVbIqnh r4/DURoYxZtuz4gNgqxQK+HX8liVGAPPH/LoI1IoB4COXiHDep38N9kgrC37Az4S 9lTVqfXA1/xIiQoRDhUvNbuxqhIjLwODz4lKUqupbSPnHrcyvxOJnLTkURd+RdLV Zw5ozALSmw9N8o+GV9Vqa1S6izmRHLEK2XQ5g9Vn2lLaRibYfy8HCiOtPN/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDJaP7Ke9BqlQNfRViMmK/YWn/E8wHwYDVR0j BBgwFoAUObSqmzx/eAJh3EkGWOYr6GuF/zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjJlMWYzYy01YTQ4LTRmMzktYWFjNy1lMDEyZWQ3MDlkNmEvMC8zOUI0QUE5QjND N0Y3ODAyNjFEQzQ5MDY1OEU2MkJFODZCODVGRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJCRTg2Qjg1 RkYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIyZTFmM2MtNWE0OC00ZjM5LWFh YzctZTAxMmVkNzA5ZDZhLzAvMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJC RTg2Qjg1RkYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpz5DBOAnFcVLDlscmcdGW/H5mp26Pzo1fE 1hO19Ycaj0h/7xIvHMul/JxCulv2fLaUZu+7bok9tTxCS72cSbcO+gTIRfvAbgFk Gsu5zBS5cpRIqLZc5Ni0iHaP6uY0p0aAuwQuTiYg3/yxVKStTvNiXHBiadhNTrat 93bZHb3X5xKaWZpIC/ZaBc8j+eF7uvYQF3NFq/iYAmzXhx/ZsgC+VC7JhlcFdfgu H1BlQa1KmGblUItWqOfqLyQUSYQb7qCXozL5eLvDRzJLh0U3XKV68VJPm3nWM5DW d0m3A0+Q7Te8GR4HuobnhGqdl33QoeFnSYilWSsoPLYaRK520TU= -----END CERTIFICATE-----Generated at Mon Apr 27 19:48:49 2026 by rpki-client