$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft File: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft (raw, json) Hash identifier: ID+QKMrAHIoWsm2Fiduk0NZ/NPR4XwfI+fSglwLVaw4= Subject key identifier: 95:A9:54:FD:82:2A:93:FA:02:AF:63:20:5B:2D:24:CF:56:3B:3E:A5 Authority key identifier: 39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98 Certificate issuer: /CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798 Certificate serial: 1EE2CFB5C9133411BE6200181372D813D6EBE631 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft Manifest number: EB Signing time: Sun 25 Oct 2026 17:02:57 +0000 Manifest this update: Sun 25 Oct 2026 16:57:57 +0000 Manifest next update: Mon 26 Oct 2026 18:35:57 +0000 Files and hashes: 1: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl (hash: FckrcwLvxhwF1DGjltBYtJsWUVwO2PvDc9wl9ZKAbCE=) 2: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (hash: sJco2gFyjRbFkYkBOL4SjT5LogqtsvE6E0crTfpTSo4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 18:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e2:cf:b5:c9:13:34:11:be:62:00:18:13:72:d8:13:d6:eb:e6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798 Validity Not Before: Oct 25 16:57:57 2026 GMT Not After : Oct 26 18:35:57 2026 GMT Subject: CN=95A954FD822A93FA02AF63205B2D24CF563B3EA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:2e:da:ec:dc:9a:bc:31:bb:e8:b5:69:0a: c3:c7:d1:e8:10:3d:d4:91:6f:ff:a5:00:e1:e1:fc: e4:72:d4:c0:0a:65:0e:b9:b0:74:4f:bf:47:58:45: fe:94:eb:0f:fc:2a:49:7f:f4:27:8f:cc:21:31:d5: c6:c1:8e:25:fa:19:96:91:ac:9e:e3:b6:78:6e:49: 4b:72:04:d6:31:1e:53:dd:80:20:77:cd:26:a7:5c: 82:ff:df:0a:7f:95:c2:94:cc:7e:8e:7c:9b:d3:53: 23:79:1c:10:83:99:2c:03:73:c0:41:d1:a1:7b:8e: 9b:af:1b:1f:c4:da:6c:d0:8f:01:82:4e:d6:a2:bd: 33:ac:c2:0d:75:f6:29:7b:85:3d:3e:ad:97:45:fe: d7:4c:b3:93:e0:9c:7c:31:7c:15:11:1e:93:05:39: c0:59:f2:5f:24:a7:40:f3:6d:44:6a:3f:a7:ff:5e: a0:9f:43:9e:8d:69:35:d1:2b:13:19:15:4e:36:27: 74:f4:96:26:f5:23:21:c6:c8:9c:29:2a:30:c6:28: 75:8b:e9:9a:cc:8c:9e:b0:31:ab:74:15:fd:b7:5f: 84:91:83:11:60:d7:a5:25:36:07:32:3e:49:3b:80: 3b:45:a4:7e:98:94:aa:47:d6:08:12:fc:7f:6f:91: d0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A9:54:FD:82:2A:93:FA:02:AF:63:20:5B:2D:24:CF:56:3B:3E:A5 X509v3 Authority Key Identifier: keyid:39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c1:0a:78:ea:36:40:06:9d:64:26:6f:a5:01:c9:48:43:b5: 96:ff:ec:40:54:21:42:4c:2f:16:c8:e4:83:82:bd:ed:08:34: df:4d:d2:42:eb:ae:3d:05:59:c8:92:80:27:ac:bd:30:17:78: a5:ad:4b:3a:88:b3:e5:a5:b9:d5:44:b3:1d:2e:eb:e4:72:54: 64:8e:57:a9:41:c0:75:75:ff:13:8d:66:6d:e2:de:34:36:e5: 21:16:7d:c4:85:0d:31:7e:b4:89:b2:cf:47:28:51:83:bf:61: 83:be:bd:06:af:ef:8c:6c:3f:45:4f:cf:17:e4:ae:f0:20:c7: e9:d7:b1:6e:7b:b5:eb:58:bd:3e:e2:e0:91:e9:45:d5:86:3d: ce:b7:97:70:43:9c:cb:28:a8:07:36:3f:2a:e8:61:58:6e:e8: 3a:b1:ad:9a:ee:76:e9:4e:2a:49:33:d3:8d:89:48:b6:d1:66: 46:b1:dd:e0:13:2e:c7:6b:8e:2a:c9:92:5d:e5:25:fe:bd:f5: ac:a3:d3:13:37:1e:56:2a:58:ba:c1:9e:cd:4a:a0:9d:98:d4: 9a:f1:54:41:53:56:66:4d:dc:58:0d:ba:d1:c4:82:3c:56:93: 24:02:93:2e:85:c5:c8:f6:ad:6a:4f:80:a3:16:b5:f1:9d:04: 5a:0f:2d:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHuLPtckTNBG+YgAYE3LYE9br5jEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlFRjU2MEUwN0MwQjQyRUYwNDU3RjdENUE3MEY4REJG RjI0Qzc5ODAeFw0yNjEwMjUxNjU3NTdaFw0yNjEwMjYxODM1NTdaMDMxMTAvBgNV BAMTKDk1QTk1NEZEODIyQTkzRkEwMkFGNjMyMDVCMkQyNENGNTYzQjNFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Yi7a7NyavDG76LVpCsPH0egQ PdSRb/+lAOHh/ORy1MAKZQ65sHRPv0dYRf6U6w/8Kkl/9CePzCEx1cbBjiX6GZaR rJ7jtnhuSUtyBNYxHlPdgCB3zSanXIL/3wp/lcKUzH6OfJvTUyN5HBCDmSwDc8BB 0aF7jpuvGx/E2mzQjwGCTtaivTOswg119il7hT0+rZdF/tdMs5PgnHwxfBURHpMF OcBZ8l8kp0DzbURqP6f/XqCfQ56NaTXRKxMZFU42J3T0lib1IyHGyJwpKjDGKHWL 6ZrMjJ6wMat0Ff23X4SRgxFg16UlNgcyPkk7gDtFpH6YlKpH1ggS/H9vkdD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlalU/YIqk/oCr2MgWy0kz1Y7PqUwHwYDVR0j BBgwFoAUOe9WDgfAtC7wRX99WnD42/8kx5gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFkMzM3NzAtZjE1MS00M2YzLTk1NjktNmEyN2Q3NTA0MjQwLzAvMzlFRjU2MEUw N0MwQjQyRUYwNDU3RjdENUE3MEY4REJGRjI0Qzc5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOUVGNTYwRTA3QzBCNDJFRjA0NTdGN0Q1QTcwRjhEQkZGMjRD Nzk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFkMzM3NzAtZjE1MS00M2YzLTk1 NjktNmEyN2Q3NTA0MjQwLzAvMzlFRjU2MEUwN0MwQjQyRUYwNDU3RjdENUE3MEY4 REJGRjI0Qzc5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLBCnjqNkAGnWQmb6UByUhDtZb/7EBUIUJM LxbI5IOCve0INN9N0kLrrj0FWciSgCesvTAXeKWtSzqIs+WludVEsx0u6+RyVGSO V6lBwHV1/xONZm3i3jQ25SEWfcSFDTF+tImyz0coUYO/YYO+vQav74xsP0VPzxfk rvAgx+nXsW57tetYvT7i4JHpRdWGPc63l3BDnMsoqAc2PyroYVhu6DqxrZrudulO Kkkz042JSLbRZkax3eATLsdrjirJkl3lJf699ayj0xM3HlYqWLrBns1KoJ2Y1Jrx VEFTVmZN3FgNutHEgjxWkyQCky6Fxcj2rWpPgKMWtfGdBFoPLTg= -----END CERTIFICATE-----Generated at Mon Oct 26 07:26:08 2026 by rpki-client