$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft File: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft (raw, json) Hash identifier: RP1QP1234WRtZ2BeLE3ntfdw8Q5Rt4O1wIXwCpUcj/4= Subject key identifier: 7F:1B:F6:D7:46:D3:BE:90:80:C7:2F:BD:DC:A3:E9:0F:16:5E:99:A2 Authority key identifier: 39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98 Certificate issuer: /CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798 Certificate serial: 79CCE7282E8340500451652AD3551F6E0EA42883 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 22:02:36 +0000 Manifest this update: Fri 19 Jun 2026 21:57:36 +0000 Manifest next update: Sat 20 Jun 2026 23:20:36 +0000 Files and hashes: 1: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (hash: sJco2gFyjRbFkYkBOL4SjT5LogqtsvE6E0crTfpTSo4=) 2: 39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl (hash: I2zwVCu78gf8lSQc6jgbpeklhBdnUuAwlDeUJSGSE6M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:cc:e7:28:2e:83:40:50:04:51:65:2a:d3:55:1f:6e:0e:a4:28:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39EF560E07C0B42EF0457F7D5A70F8DBFF24C798 Validity Not Before: Jun 19 21:57:36 2026 GMT Not After : Jun 20 23:20:36 2026 GMT Subject: CN=7F1BF6D746D3BE9080C72FBDDCA3E90F165E99A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:27:31:39:72:2b:be:93:e8:27:e5:f8:26: f7:9c:79:cc:38:22:bc:c5:18:c4:03:6b:6c:8e:30: 3f:0b:92:f9:10:ef:0c:91:df:d3:f6:0c:ce:c5:02: ae:68:f7:5c:0e:6e:88:00:4a:a6:de:ba:39:26:8c: ec:5e:51:0f:d4:91:86:64:c0:1c:d0:63:ea:6f:9a: 9e:56:9e:2e:28:b0:af:e8:ac:9f:29:41:97:dd:e9: 56:cb:4d:53:fa:fa:6e:6b:37:ea:41:44:4a:95:79: 26:9b:0f:a8:e9:b1:1d:34:7b:4f:d5:7b:b8:35:c3: 13:a4:ff:1b:7d:fa:ff:1f:0b:f3:bd:0f:80:d2:76: 40:a6:1c:88:8c:c4:7c:d1:75:c8:a7:b1:0d:82:47: 44:a2:a7:c0:eb:70:b7:dc:c9:0d:af:a8:5a:cb:e6: 59:f5:99:05:b8:2f:87:a1:f7:5b:6b:b9:86:d1:46: 63:c7:ed:5d:97:0b:7f:a5:c6:34:59:a0:07:74:d8: d1:ba:7d:65:48:f1:7f:ae:09:da:3d:0d:5e:f9:44: 5e:1a:03:0a:0f:04:41:ab:3b:e0:52:e6:b2:62:2d: b9:af:d4:35:7a:d5:98:9e:4d:b8:9f:40:ae:96:fa: cf:89:8e:22:2f:0e:b5:c9:63:da:d8:1b:6f:11:6c: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1B:F6:D7:46:D3:BE:90:80:C7:2F:BD:DC:A3:E9:0F:16:5E:99:A2 X509v3 Authority Key Identifier: keyid:39:EF:56:0E:07:C0:B4:2E:F0:45:7F:7D:5A:70:F8:DB:FF:24:C7:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/39EF560E07C0B42EF0457F7D5A70F8DBFF24C798.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:15:43:fd:7a:dd:c6:5a:dd:fd:6e:35:fc:0c:ce:63:c5:c9: d4:66:de:ed:a4:6c:c7:7c:41:df:4f:b9:42:6d:85:70:67:f1: 15:db:6c:71:25:d7:a5:b8:cf:40:77:6e:7d:3d:ff:32:28:17: e0:07:49:9f:05:1a:a0:a3:4d:8d:4f:c0:05:58:b4:c5:01:a3: 08:01:45:3b:fa:b2:20:b6:3f:30:79:ce:68:cb:7e:f3:13:9f: b3:91:08:df:2d:86:13:65:28:2e:17:78:9f:ba:a7:07:a3:da: 35:61:9b:63:57:cb:50:61:19:23:59:dc:8f:57:b9:8e:fa:1c: 1b:4f:4c:8a:d2:35:8a:e2:c5:28:a5:0b:8f:ff:8a:71:d0:38: 64:40:ca:f0:90:a7:6a:89:7e:7b:5f:94:02:2c:03:96:9e:5e: 4f:36:2d:ae:10:96:e4:75:06:6f:61:1a:8b:7b:12:f9:01:2a: cd:64:9e:7e:a3:85:ef:6d:37:19:e9:b6:05:ea:dc:75:1a:1f: d1:9c:ee:61:11:3f:3b:2a:3b:33:07:68:a5:12:2a:0c:77:6e: 7a:b7:8a:59:51:35:e3:95:23:82:cf:f9:e8:0c:82:95:7e:ad: 53:e5:8a:0f:b8:ce:51:51:16:b7:bb:1a:61:2e:bd:07:15:b3: 3e:dc:12:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecznKC6DQFAEUWUq01Ufbg6kKIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlFRjU2MEUwN0MwQjQyRUYwNDU3RjdENUE3MEY4REJG RjI0Qzc5ODAeFw0yNjA2MTkyMTU3MzZaFw0yNjA2MjAyMzIwMzZaMDMxMTAvBgNV BAMTKDdGMUJGNkQ3NDZEM0JFOTA4MEM3MkZCRERDQTNFOTBGMTY1RTk5QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1ycxOXIrvpPoJ+X4Jvececw4 IrzFGMQDa2yOMD8LkvkQ7wyR39P2DM7FAq5o91wObogASqbeujkmjOxeUQ/UkYZk wBzQY+pvmp5Wni4osK/orJ8pQZfd6VbLTVP6+m5rN+pBREqVeSabD6jpsR00e0/V e7g1wxOk/xt9+v8fC/O9D4DSdkCmHIiMxHzRdcinsQ2CR0Sip8DrcLfcyQ2vqFrL 5ln1mQW4L4eh91truYbRRmPH7V2XC3+lxjRZoAd02NG6fWVI8X+uCdo9DV75RF4a AwoPBEGrO+BS5rJiLbmv1DV61ZieTbifQK6W+s+JjiIvDrXJY9rYG28RbIQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfxv210bTvpCAxy+93KPpDxZemaIwHwYDVR0j BBgwFoAUOe9WDgfAtC7wRX99WnD42/8kx5gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFkMzM3NzAtZjE1MS00M2YzLTk1NjktNmEyN2Q3NTA0MjQwLzAvMzlFRjU2MEUw N0MwQjQyRUYwNDU3RjdENUE3MEY4REJGRjI0Qzc5OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zOUVGNTYwRTA3QzBCNDJFRjA0NTdGN0Q1QTcwRjhEQkZGMjRD Nzk4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFkMzM3NzAtZjE1MS00M2YzLTk1 NjktNmEyN2Q3NTA0MjQwLzAvMzlFRjU2MEUwN0MwQjQyRUYwNDU3RjdENUE3MEY4 REJGRjI0Qzc5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEVQ/163cZa3f1uNfwMzmPFydRm3u2kbMd8 Qd9PuUJthXBn8RXbbHEl16W4z0B3bn09/zIoF+AHSZ8FGqCjTY1PwAVYtMUBowgB RTv6siC2PzB5zmjLfvMTn7ORCN8thhNlKC4XeJ+6pwej2jVhm2NXy1BhGSNZ3I9X uY76HBtPTIrSNYrixSilC4//inHQOGRAyvCQp2qJfntflAIsA5aeXk82La4QluR1 Bm9hGot7EvkBKs1knn6jhe9tNxnptgXq3HUaH9Gc7mERPzsqOzMHaKUSKgx3bnq3 illRNeOVI4LP+egMgpV+rVPlig+4zlFRFre7GmEuvQcVsz7cEkc= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:46 2026 by rpki-client