$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft File: 039655B785EC7CB007D8EC3057559737EDFECF68.mft (raw, json) Hash identifier: Zb6cbt6N8jBSpHW3aY0z0i9Xq/cmFJuGGByNTRNOApc= Subject key identifier: 10:46:B3:5D:AA:2F:86:B5:E4:65:06:C6:D4:67:87:85:85:32:55:CB Authority key identifier: 03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 Certificate issuer: /CN=039655B785EC7CB007D8EC3057559737EDFECF68 Certificate serial: 25EE2CA230AC0F56C2A31A46228187D9C7DE49D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 20:14:07 +0000 Manifest this update: Wed 16 Sep 2026 20:09:07 +0000 Manifest next update: Thu 17 Sep 2026 21:17:07 +0000 Files and hashes: 1: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: ODnRKml3wmOVpjtW+xC+dZC5mmMJA71SJG7/VtBibyg=) 2: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: wuckQGhSeNjfJUeUi1bzWu9XgRdVcXHbLO7uAW4Bwoo=) 3: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: Mw5Rq159HgAFkzwo+iOGAJH0lBRwzFfI8gCzOg4CwLQ=) 4: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: C5UaoWndqT8fkT/kUA+ky572u7b6+Zi84mEQVPG7UEk=) 5: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: YWldloNKuf6nODMaL6FjFspEktId/aPkL38Pfe/uoXQ=) 6: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 7J+fQcGnrWcJgu4AWb0Pueoldil+uuzO3rZSOi/YFCY=) 7: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: fDqmdlGGzbZKwo2TG5DvyQfQjo71DsLK4B+BzK5Vb+Q=) 8: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: eQfKLmnoRcKmmSMjm7w1dd94t1neaLfEfU1VX6jNzeU=) 9: 039655B785EC7CB007D8EC3057559737EDFECF68.crl (hash: ntEO75GJJsEcsXKT2sdzPpo91HSgQFBs1zYUM0rrC8s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ee:2c:a2:30:ac:0f:56:c2:a3:1a:46:22:81:87:d9:c7:de:49:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039655B785EC7CB007D8EC3057559737EDFECF68 Validity Not Before: Sep 16 20:09:07 2026 GMT Not After : Sep 17 21:17:07 2026 GMT Subject: CN=1046B35DAA2F86B5E46506C6D4678785853255CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:9a:d0:32:1b:d3:fe:a0:f3:be:f6:31:33: 54:ef:5c:34:61:9a:dc:d0:5a:0b:3a:00:03:55:fe: 7e:34:f2:7f:e6:4c:fc:cc:ce:f5:e7:93:06:2c:8c: 41:1d:6e:dc:58:59:48:bd:a3:6c:18:f4:40:20:23: ac:e8:5d:f9:18:7d:7b:e8:a0:0a:bc:6c:dc:fc:b4: bb:42:1b:4c:a2:dd:0c:35:1e:74:6a:62:1e:36:80: 1c:3c:53:3d:24:92:5e:08:d9:0a:96:6a:8a:dd:3c: 76:a2:11:d0:f3:7d:2e:30:c5:a9:5a:45:2b:69:3c: ae:fd:02:44:b1:0f:0b:38:20:f9:9b:66:cc:8a:17: c1:85:4d:26:bc:93:d6:29:4d:f2:dc:c4:1a:ba:80: 1a:05:84:7a:a3:72:ae:fe:ca:ac:2f:93:70:ec:f3: eb:cb:8d:51:8e:13:f9:73:01:13:1f:0e:0d:3f:ea: 99:46:e0:f1:f0:bc:c6:6d:0b:8d:44:e8:48:2d:78: 1a:a5:91:0b:53:31:05:21:c3:33:82:52:6c:ca:e8: 72:fe:e6:44:3d:06:25:e5:7f:70:4c:b8:7a:46:4d: 48:92:6b:17:39:3f:98:d3:76:4a:78:70:af:4c:9a: 08:8e:e0:8d:e7:f4:b8:f9:c5:e2:1a:9c:c9:ba:af: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:46:B3:5D:AA:2F:86:B5:E4:65:06:C6:D4:67:87:85:85:32:55:CB X509v3 Authority Key Identifier: keyid:03:96:55:B7:85:EC:7C:B0:07:D8:EC:30:57:55:97:37:ED:FE:CF:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/039655B785EC7CB007D8EC3057559737EDFECF68.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/039655B785EC7CB007D8EC3057559737EDFECF68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:21:ca:ab:f6:04:2f:4e:46:7e:bd:af:a5:81:2e:12:29:cf: e4:44:65:ee:e3:c2:a3:fa:a4:49:51:4b:79:61:ad:0c:ef:63: 9b:09:f2:0d:b2:d3:75:0d:fc:c2:81:12:8e:5a:80:e5:f8:f9: 5d:92:fa:4d:4b:be:ff:65:7b:08:86:6c:42:01:84:95:84:bb: 65:5d:58:5e:5c:1c:fb:e4:24:75:a4:67:32:1f:48:40:bd:46: 7d:a7:7a:80:7c:1e:dc:3a:b8:36:87:ef:08:e3:c4:9a:c6:6b: f1:1a:65:fe:85:32:d2:78:d6:71:5f:b7:2b:e5:2a:70:78:6d: dc:c4:50:60:2d:80:38:3e:51:39:c7:c5:35:33:96:d0:15:25: 5a:4b:cc:90:ff:04:08:63:52:4d:10:50:0d:1e:14:35:27:35: b5:fa:ff:8a:ba:cc:43:8a:89:1e:15:e7:9f:1f:47:0b:8e:d8: 95:0a:e0:37:25:ae:13:ee:44:4e:7b:e1:8d:89:21:7c:1f:e7: 9f:69:f0:ee:ba:11:3f:35:4a:40:9d:68:23:6b:04:28:28:99: fc:3a:b9:c0:a6:91:a9:db:fe:05:99:f6:a3:57:60:49:a2:f6: 85:78:8e:08:c6:d2:a3:fa:71:92:bf:22:00:1f:ba:4f:bc:bb: 02:82:cc:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJe4sojCsD1bCoxpGIoGH2cfeSdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdF REZFQ0Y2ODAeFw0yNjA5MTYyMDA5MDdaFw0yNjA5MTcyMTE3MDdaMDMxMTAvBgNV BAMTKDEwNDZCMzVEQUEyRjg2QjVFNDY1MDZDNkQ0Njc4Nzg1ODUzMjU1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qZrQMhvT/qDzvvYxM1TvXDRh mtzQWgs6AANV/n408n/mTPzMzvXnkwYsjEEdbtxYWUi9o2wY9EAgI6zoXfkYfXvo oAq8bNz8tLtCG0yi3Qw1HnRqYh42gBw8Uz0kkl4I2QqWaordPHaiEdDzfS4wxala RStpPK79AkSxDws4IPmbZsyKF8GFTSa8k9YpTfLcxBq6gBoFhHqjcq7+yqwvk3Ds 8+vLjVGOE/lzARMfDg0/6plG4PHwvMZtC41E6EgteBqlkQtTMQUhwzOCUmzK6HL+ 5kQ9BiXlf3BMuHpGTUiSaxc5P5jTdkp4cK9MmgiO4I3n9Lj5xeIanMm6r4mTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEEazXaovhrXkZQbG1GeHhYUyVcswHwYDVR0j BBgwFoAUA5ZVt4XsfLAH2OwwV1WXN+3+z2gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmE0NWUtZjVkYS00NTgxLWJmZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4 NUVDN0NCMDA3RDhFQzMwNTc1NTk3MzdFREZFQ0Y2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMzk2NTVCNzg1RUM3Q0IwMDdEOEVDMzA1NzU1OTczN0VERkVD RjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvMDM5NjU1Qjc4NUVDN0NCMDA3RDhFQzMwNTc1NTk3 MzdFREZFQ0Y2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUhyqv2BC9ORn69r6WBLhIpz+REZe7jwqP6 pElRS3lhrQzvY5sJ8g2y03UN/MKBEo5agOX4+V2S+k1Lvv9lewiGbEIBhJWEu2Vd WF5cHPvkJHWkZzIfSEC9Rn2neoB8Htw6uDaH7wjjxJrGa/EaZf6FMtJ41nFftyvl KnB4bdzEUGAtgDg+UTnHxTUzltAVJVpLzJD/BAhjUk0QUA0eFDUnNbX6/4q6zEOK iR4V558fRwuO2JUK4DclrhPuRE574Y2JIXwf559p8O66ET81SkCdaCNrBCgomfw6 ucCmkanb/gWZ9qNXYEmi9oV4jgjG0qP6cZK/IgAfuk+8uwKCzG0= -----END CERTIFICATE-----Generated at Thu Sep 17 09:21:15 2026 by rpki-client