$ rpki-client -vvf rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft File: B39B19C9084084F7FCB3FAFF376368D876F66372.mft (raw, json) Hash identifier: uE7PUR+ornGwNhZS256bf07X0EahjgBMb0jv9blRp1o= Subject key identifier: 8B:91:4B:1C:43:1B:4D:C9:66:51:BB:0C:3C:DF:DC:9C:4A:94:F1:03 Authority key identifier: B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 Certificate issuer: /CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Certificate serial: 35C91FDBFB7EA5AE7A7BFFB907C2A77616BD14EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 09:18:26 +0000 Manifest this update: Thu 18 Jun 2026 09:13:26 +0000 Manifest next update: Fri 19 Jun 2026 11:31:26 +0000 Files and hashes: 1: B39B19C9084084F7FCB3FAFF376368D876F66372.crl (hash: Zm8ifZ4QnCHFMhcaPu0DqwCkS9wTAYOudvzKX3k2rXw=) 2: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: 5twMEBpUGZCFXRPaiYDXrww+UAg0G4R4iDCrbaZ4+Ho=) 3: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: CTdtRt0QWOxvthXzk1fDi0/fuxno5z52+6EZfo7nHWY=) 4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: NLnNrRvgdk9PwIX+K62kuAcQASU2Wm+4Xg+4O2CIdkc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c9:1f:db:fb:7e:a5:ae:7a:7b:ff:b9:07:c2:a7:76:16:bd:14:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Validity Not Before: Jun 18 09:13:26 2026 GMT Not After : Jun 19 11:31:26 2026 GMT Subject: CN=8B914B1C431B4DC96651BB0C3CDFDC9C4A94F103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3f:39:d5:3f:29:3a:58:96:68:74:a8:bc:aa: 70:bf:2c:9a:d8:11:a0:d6:87:98:a0:1d:be:a6:ab: ab:c6:3d:65:1b:75:4f:8a:f0:02:bb:54:20:80:ff: a1:84:e0:13:a2:d7:f7:61:3a:d6:e5:24:d4:21:26: f8:00:c0:15:02:f2:d6:01:f4:da:44:fd:0f:ac:d8: 06:3a:69:73:8d:eb:e3:cd:18:c9:1d:d5:03:8f:c9: 07:23:75:58:70:df:c2:d0:89:e1:12:ec:d8:40:80: 8c:fc:0d:9e:b3:58:89:bb:d2:d4:6c:be:36:37:bd: 0e:dd:8c:77:8d:69:74:34:0f:b4:41:7a:89:b0:63: ef:97:80:73:cc:52:2e:e9:bf:45:f1:15:25:fe:51: 2e:27:78:8c:50:c9:db:0f:b5:6c:e4:a9:f3:35:3d: 16:ca:b2:55:63:76:9e:42:14:89:7b:3b:18:54:44: 70:00:d8:e3:83:ec:52:a1:a6:d0:f1:15:55:65:18: dd:fa:0a:fc:fa:00:c7:9e:c9:58:e5:e4:55:22:23: 46:d8:ce:1d:b0:6f:91:ce:4e:ca:22:50:e0:3d:8c: 64:3a:f8:6f:76:ae:74:5d:2b:49:fa:0a:05:70:32: 31:da:c8:3b:91:81:fa:64:46:a0:9b:af:ce:46:c0: be:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:91:4B:1C:43:1B:4D:C9:66:51:BB:0C:3C:DF:DC:9C:4A:94:F1:03 X509v3 Authority Key Identifier: keyid:B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ab:50:12:a1:f1:d9:83:46:58:80:78:95:66:6b:b2:4b:96: b3:93:8e:28:fc:d3:a1:e1:dc:0f:64:46:f7:f3:9d:50:ee:88: 92:af:25:88:44:8a:20:3a:b6:07:7c:89:d7:26:cd:86:9e:52: 42:76:25:7f:6a:e8:92:0d:5b:9e:3d:a9:22:7c:1a:7c:6c:bd: 56:97:7f:19:b4:af:0d:2b:9e:5e:12:34:e1:33:10:15:fb:28: c8:6e:9b:e4:2d:ea:4b:80:08:b1:a7:e3:85:ff:02:b4:cc:13: c5:c2:74:3f:2f:d4:90:46:91:72:dd:bd:b8:88:de:a6:6e:c2: 5c:fe:95:3b:5a:2a:7f:d7:92:f4:39:ab:d0:8e:8a:00:cf:69: 7e:5a:87:9a:75:07:3f:b4:30:00:64:68:0a:f0:12:b6:a2:77: 6f:27:bd:a2:4a:93:9f:ef:ed:23:e4:b4:98:90:00:c8:c7:19: 92:8c:e1:38:c6:e9:b8:d5:61:30:44:94:b9:79:ed:f4:ce:94: 76:a4:5e:6b:84:8d:d5:2d:d0:c7:e5:ae:9e:24:82:8a:0b:7a: 9b:e4:27:56:b6:e3:e3:89:51:6f:fb:94:da:e1:db:bc:65:e5: d0:8f:01:75:86:9a:ad:50:37:ff:4d:bb:7e:7e:54:27:ae:d9: 1e:c0:13:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNckf2/t+pa56e/+5B8Kndha9FOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3 NkY2NjM3MjAeFw0yNjA2MTgwOTEzMjZaFw0yNjA2MTkxMTMxMjZaMDMxMTAvBgNV BAMTKDhCOTE0QjFDNDMxQjREQzk2NjUxQkIwQzNDREZEQzlDNEE5NEYxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDePznVPyk6WJZodKi8qnC/LJrY EaDWh5igHb6mq6vGPWUbdU+K8AK7VCCA/6GE4BOi1/dhOtblJNQhJvgAwBUC8tYB 9NpE/Q+s2AY6aXON6+PNGMkd1QOPyQcjdVhw38LQieES7NhAgIz8DZ6zWIm70tRs vjY3vQ7djHeNaXQ0D7RBeomwY++XgHPMUi7pv0XxFSX+US4neIxQydsPtWzkqfM1 PRbKslVjdp5CFIl7OxhURHAA2OOD7FKhptDxFVVlGN36Cvz6AMeeyVjl5FUiI0bY zh2wb5HOTsoiUOA9jGQ6+G92rnRdK0n6CgVwMjHayDuRgfpkRqCbr85GwL4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi5FLHEMbTclmUbsMPN/cnEqU8QMwHwYDVR0j BBgwFoAUs5sZyQhAhPf8s/r/N2No2Hb2Y3IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMyZTRmODYtNDhlNy00OGM3LWJhOTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5Qzkw ODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3NkY2NjM3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMzlCMTlDOTA4NDA4NEY3RkNCM0ZBRkYzNzYzNjhEODc2RjY2 MzcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4 RDg3NkY2NjM3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2rUBKh8dmDRliAeJVma7JLlrOTjij806Hh 3A9kRvfznVDuiJKvJYhEiiA6tgd8idcmzYaeUkJ2JX9q6JINW549qSJ8GnxsvVaX fxm0rw0rnl4SNOEzEBX7KMhum+Qt6kuACLGn44X/ArTME8XCdD8v1JBGkXLdvbiI 3qZuwlz+lTtaKn/XkvQ5q9COigDPaX5ah5p1Bz+0MABkaArwEraid28nvaJKk5/v 7SPktJiQAMjHGZKM4TjG6bjVYTBElLl57fTOlHakXmuEjdUt0Mflrp4kgooLepvk J1a24+OJUW/7lNrh27xl5dCPAXWGmq1QN/9Nu35+VCeu2R7AEy8= -----END CERTIFICATE-----Generated at Thu Jun 18 17:08:23 2026 by rpki-client