$ rpki-client -vvf rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft File: B39B19C9084084F7FCB3FAFF376368D876F66372.mft (raw, json) Hash identifier: AytKTC4UtxoMDUkeo7+L3cvntuvknh0UnfO3/yvn1tQ= Subject key identifier: CA:22:34:71:98:75:CE:D3:C6:BE:78:C6:FE:AB:4F:06:D0:8F:9C:F4 Authority key identifier: B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 Certificate issuer: /CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Certificate serial: 5FA2AB3688E7B8CACC7C4712398E2D0845785BC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 01:24:20 +0000 Manifest this update: Sun 02 Aug 2026 01:19:20 +0000 Manifest next update: Mon 03 Aug 2026 04:30:20 +0000 Files and hashes: 1: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: CTdtRt0QWOxvthXzk1fDi0/fuxno5z52+6EZfo7nHWY=) 2: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: 5twMEBpUGZCFXRPaiYDXrww+UAg0G4R4iDCrbaZ4+Ho=) 3: B39B19C9084084F7FCB3FAFF376368D876F66372.crl (hash: fbtgkgZb/0TQUxAOGMXEPEpwjXdWuuUakhYfW2bokO4=) 4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: NLnNrRvgdk9PwIX+K62kuAcQASU2Wm+4Xg+4O2CIdkc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a2:ab:36:88:e7:b8:ca:cc:7c:47:12:39:8e:2d:08:45:78:5b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Validity Not Before: Aug 2 01:19:20 2026 GMT Not After : Aug 3 04:30:20 2026 GMT Subject: CN=CA2234719875CED3C6BE78C6FEAB4F06D08F9CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:21:48:bf:a7:41:af:77:03:07:83:99:cd:bf: ec:e3:1d:dd:a4:77:cf:5f:f1:ae:2d:cf:2b:f6:c4: a1:84:a8:29:77:78:80:f6:cd:82:55:44:a9:52:cd: f2:98:70:8b:e0:de:4b:0d:16:11:04:f2:ce:b1:72: 20:39:d5:14:43:85:b1:04:5a:0d:89:6b:a9:f5:b9: d7:f0:b3:7b:0e:b1:53:0a:dc:1a:eb:d6:31:d4:8a: 04:3f:e8:ea:84:f4:78:a2:fd:1f:40:5f:b5:9b:50: 1c:00:cf:2a:5b:19:e9:52:05:d6:9d:dd:3a:a9:d6: 3c:a7:d4:f4:72:c7:08:50:dd:25:43:94:46:ff:c8: 9b:93:8e:02:e5:13:e0:9b:50:9f:88:eb:92:43:d2: 7d:ea:23:9c:39:5d:df:f1:6a:8a:60:7d:3d:e2:7a: 0b:a8:1d:a5:f3:d7:17:e9:3c:8a:2d:b9:5a:f6:5f: a2:9f:e6:c0:4f:15:35:30:c9:60:02:80:2e:e3:e9: 19:69:ac:09:da:4f:7f:c8:e5:81:c5:1a:e6:1e:24: 37:0c:4c:54:26:b7:24:8f:73:71:cd:ac:b5:b1:d8: f7:6f:1c:0c:2a:45:62:bd:f4:86:3b:5b:40:a3:c6: ad:19:49:46:46:21:d6:3b:8c:f1:93:be:b6:1e:8b: 38:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:22:34:71:98:75:CE:D3:C6:BE:78:C6:FE:AB:4F:06:D0:8F:9C:F4 X509v3 Authority Key Identifier: keyid:B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8e:1d:4c:3a:c4:b9:db:46:19:85:7b:b2:fc:be:61:a7:dc: 73:6b:d2:b6:50:67:0d:a7:2b:90:3d:01:50:74:af:44:20:52: e4:f1:9e:cc:a2:c9:e0:04:6d:cb:34:cf:19:7f:ec:f0:ac:74: 78:9c:34:48:a5:8c:d8:10:3a:f7:de:39:68:e5:ed:5b:4d:1b: ef:dc:34:7f:bb:3d:db:e8:e7:da:b8:c8:93:d6:8c:55:56:fc: 29:dd:79:7d:9b:f8:1c:7b:b5:97:ae:a7:88:99:0b:1c:a6:9b: 54:02:df:30:de:15:e2:b4:9b:76:d0:dc:50:14:ae:86:20:c7: 91:8e:7b:1e:17:b0:b5:83:20:d9:2a:b8:0c:f3:77:db:b8:88: 4a:cf:7c:00:80:79:3b:4a:96:e8:e0:c8:7f:e5:d0:9d:33:cb: 2c:96:b5:6b:26:a9:ab:4f:56:06:e9:d6:b5:c1:fe:22:fd:ef: 05:40:62:9b:1b:53:90:8c:d4:d1:62:bc:53:9d:94:64:6d:1a: 27:35:57:77:92:58:fc:fa:1b:29:cb:f9:50:2b:1d:75:0d:5f: 20:38:e3:76:a1:c5:68:38:6d:1b:12:91:6c:cb:8a:2d:41:7d: a0:c3:ba:33:17:56:39:88:89:cb:10:f7:24:63:aa:bd:00:62: 3e:c6:f0:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6KrNojnuMrMfEcSOY4tCEV4W8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3 NkY2NjM3MjAeFw0yNjA4MDIwMTE5MjBaFw0yNjA4MDMwNDMwMjBaMDMxMTAvBgNV BAMTKENBMjIzNDcxOTg3NUNFRDNDNkJFNzhDNkZFQUI0RjA2RDA4RjlDRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/IUi/p0GvdwMHg5nNv+zjHd2k d89f8a4tzyv2xKGEqCl3eID2zYJVRKlSzfKYcIvg3ksNFhEE8s6xciA51RRDhbEE Wg2Ja6n1udfws3sOsVMK3Brr1jHUigQ/6OqE9Hii/R9AX7WbUBwAzypbGelSBdad 3Tqp1jyn1PRyxwhQ3SVDlEb/yJuTjgLlE+CbUJ+I65JD0n3qI5w5Xd/xaopgfT3i eguoHaXz1xfpPIotuVr2X6Kf5sBPFTUwyWACgC7j6RlprAnaT3/I5YHFGuYeJDcM TFQmtySPc3HNrLWx2PdvHAwqRWK99IY7W0Cjxq0ZSUZGIdY7jPGTvrYeizhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyiI0cZh1ztPGvnjG/qtPBtCPnPQwHwYDVR0j BBgwFoAUs5sZyQhAhPf8s/r/N2No2Hb2Y3IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMyZTRmODYtNDhlNy00OGM3LWJhOTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5Qzkw ODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3NkY2NjM3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMzlCMTlDOTA4NDA4NEY3RkNCM0ZBRkYzNzYzNjhEODc2RjY2 MzcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4 RDg3NkY2NjM3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyOHUw6xLnbRhmFe7L8vmGn3HNr0rZQZw2n K5A9AVB0r0QgUuTxnsyiyeAEbcs0zxl/7PCsdHicNEiljNgQOvfeOWjl7VtNG+/c NH+7Pdvo59q4yJPWjFVW/CndeX2b+Bx7tZeup4iZCxymm1QC3zDeFeK0m3bQ3FAU roYgx5GOex4XsLWDINkquAzzd9u4iErPfACAeTtKlujgyH/l0J0zyyyWtWsmqatP Vgbp1rXB/iL97wVAYpsbU5CM1NFivFOdlGRtGic1V3eSWPz6GynL+VArHXUNXyA4 43ahxWg4bRsSkWzLii1BfaDDujMXVjmIicsQ9yRjqr0AYj7G8NA= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:45 2026 by rpki-client