$ rpki-client -vvvf rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft File: B39B19C9084084F7FCB3FAFF376368D876F66372.mft (raw, json) Hash identifier: bfkYordwOZIbihrAyfrJAzjzvOuhFI0HoirX5u1oIiM= Subject key identifier: 77:3D:CE:55:F3:F1:34:10:6A:BA:49:EE:E4:89:CE:BF:05:D2:D2:D4 Authority key identifier: B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 Certificate issuer: /CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Certificate serial: 07FFB18009A9B7268650A6C7B27ABCDD8D77587F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft Manifest number: BA Signing time: Thu 17 Sep 2026 08:18:48 +0000 Manifest this update: Thu 17 Sep 2026 08:13:48 +0000 Manifest next update: Fri 18 Sep 2026 08:35:48 +0000 Files and hashes: 1: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: 5twMEBpUGZCFXRPaiYDXrww+UAg0G4R4iDCrbaZ4+Ho=) 2: B39B19C9084084F7FCB3FAFF376368D876F66372.crl (hash: FdAsT570Hvo6zn2kD/OKzcPlqzR0cWzCAz9k9e2OxKY=) 3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: NLnNrRvgdk9PwIX+K62kuAcQASU2Wm+4Xg+4O2CIdkc=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: CTdtRt0QWOxvthXzk1fDi0/fuxno5z52+6EZfo7nHWY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ff:b1:80:09:a9:b7:26:86:50:a6:c7:b2:7a:bc:dd:8d:77:58:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B39B19C9084084F7FCB3FAFF376368D876F66372 Validity Not Before: Sep 17 08:13:48 2026 GMT Not After : Sep 18 08:35:48 2026 GMT Subject: CN=773DCE55F3F134106ABA49EEE489CEBF05D2D2D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:14:64:08:c9:a9:76:82:d5:b5:83:e9:d0:fc: 8d:75:87:e3:92:52:a2:b8:ea:eb:c6:2b:7b:8a:94: 85:ad:f4:d9:cc:3b:b9:cc:44:ae:b8:f5:83:f9:d5: c9:ed:fe:4c:13:fe:95:30:fd:38:b4:e5:8f:e6:c3: ca:1e:25:ba:3d:7f:d2:06:f1:98:10:22:01:94:d0: aa:cb:ef:ca:3f:53:18:6a:26:86:a4:a0:b1:65:e9: 26:fb:7f:fc:44:38:7c:47:96:af:79:a1:e3:3e:7d: 66:f8:73:eb:c3:c0:ee:93:af:fc:1c:57:1c:ea:74: 96:88:1a:11:00:df:1b:f5:e8:91:52:e2:8f:f0:1b: 1b:4d:21:1f:84:1b:af:ca:cc:ef:c7:95:39:93:f4: 5e:f6:cd:22:eb:7c:05:69:66:bf:fb:2b:a6:dd:49: 84:e2:6d:22:76:35:1e:5a:24:70:bb:76:1d:91:5d: 30:f1:c2:ed:05:2c:94:56:c1:d2:36:1e:34:72:5e: 11:23:ed:9d:bf:d3:e5:c6:b8:1c:d6:05:fb:08:1b: a0:8a:bf:da:18:9b:d6:ea:9f:7f:00:6b:57:ad:17: 29:c4:13:ef:a5:f9:1a:73:61:6a:cb:15:48:a8:58: 61:1a:f4:02:77:c1:07:be:61:16:16:e6:24:5b:d6: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3D:CE:55:F3:F1:34:10:6A:BA:49:EE:E4:89:CE:BF:05:D2:D2:D4 X509v3 Authority Key Identifier: keyid:B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:eb:19:a9:2d:33:a9:99:bb:65:80:df:b8:45:f2:9a:9e:d6: 2b:bf:1e:fd:69:81:00:25:5f:d5:9d:1a:ad:40:cf:52:ba:55: c6:2a:b8:f7:46:45:c8:34:7f:45:d8:06:f4:80:17:6f:6f:60: 63:7b:0f:fe:c7:ee:04:40:1b:09:c8:c4:fc:81:4d:25:62:ec: 01:7c:d9:ce:1d:f1:5f:b6:76:ef:2b:84:94:ef:f9:4e:73:f8: e1:85:ec:5e:76:d4:90:70:d7:8f:01:b3:82:fe:b8:d1:31:75: 83:f1:90:34:64:50:19:55:ea:3e:ef:ef:1a:f2:2f:45:94:e5: 68:c0:2d:8c:cc:da:d0:9e:50:6a:75:b0:12:c3:45:8e:ae:78: 8a:7c:05:30:13:db:1e:20:76:68:ec:4c:dc:3f:07:b3:79:2b: 4b:ca:82:1a:3c:5e:68:c5:2b:4d:d4:7e:25:4e:76:a5:fe:73: 96:6b:3f:df:2b:9e:7b:a2:f5:ee:53:c8:7a:f5:95:eb:22:bb: a1:a7:64:53:ad:6a:a4:e3:e3:c9:5a:21:5f:18:9c:9c:b9:ae: 30:89:87:fb:83:59:06:36:c6:6d:50:43:6e:a2:8a:d0:d9:c2: 80:16:33:99:08:83:06:8e:f5:65:05:d4:6c:6e:70:3c:28:7f: 46:eb:2c:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/+xgAmptyaGUKbHsnq83Y13WH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3 NkY2NjM3MjAeFw0yNjA5MTcwODEzNDhaFw0yNjA5MTgwODM1NDhaMDMxMTAvBgNV BAMTKDc3M0RDRTU1RjNGMTM0MTA2QUJBNDlFRUU0ODlDRUJGMDVEMkQyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFGQIyal2gtW1g+nQ/I11h+OS UqK46uvGK3uKlIWt9NnMO7nMRK649YP51cnt/kwT/pUw/Ti05Y/mw8oeJbo9f9IG 8ZgQIgGU0KrL78o/UxhqJoakoLFl6Sb7f/xEOHxHlq95oeM+fWb4c+vDwO6Tr/wc VxzqdJaIGhEA3xv16JFS4o/wGxtNIR+EG6/KzO/HlTmT9F72zSLrfAVpZr/7K6bd SYTibSJ2NR5aJHC7dh2RXTDxwu0FLJRWwdI2HjRyXhEj7Z2/0+XGuBzWBfsIG6CK v9oYm9bqn38Aa1etFynEE++l+RpzYWrLFUioWGEa9AJ3wQe+YRYW5iRb1ktRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdz3OVfPxNBBquknu5InOvwXS0tQwHwYDVR0j BBgwFoAUs5sZyQhAhPf8s/r/N2No2Hb2Y3IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMyZTRmODYtNDhlNy00OGM3LWJhOTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5Qzkw ODQwODRGN0ZDQjNGQUZGMzc2MzY4RDg3NkY2NjM3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CMzlCMTlDOTA4NDA4NEY3RkNCM0ZBRkYzNzYzNjhEODc2RjY2 MzcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQjM5QjE5QzkwODQwODRGN0ZDQjNGQUZGMzc2MzY4 RDg3NkY2NjM3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnrGaktM6mZu2WA37hF8pqe1iu/Hv1pgQAl X9WdGq1Az1K6VcYquPdGRcg0f0XYBvSAF29vYGN7D/7H7gRAGwnIxPyBTSVi7AF8 2c4d8V+2du8rhJTv+U5z+OGF7F521JBw148Bs4L+uNExdYPxkDRkUBlV6j7v7xry L0WU5WjALYzM2tCeUGp1sBLDRY6ueIp8BTAT2x4gdmjsTNw/B7N5K0vKgho8XmjF K03UfiVOdqX+c5ZrP98rnnui9e5TyHr1lesiu6GnZFOtaqTj48laIV8YnJy5rjCJ h/uDWQY2xm1QQ26iitDZwoAWM5kIgwaO9WUF1GxucDwof0brLJc= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:35 2026 by rpki-client