$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft File: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft (raw, json) Hash identifier: ocCh3NynUxhS94OLc6vw2zEva3ybLAxQNwFSCIU/sPc= Subject key identifier: 9A:B4:7B:3C:5A:24:AD:56:6A:45:E8:E7:F2:0F:99:9D:C9:AD:1E:4C Authority key identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F Certificate issuer: /CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Certificate serial: 22675523C61A063160C71E222EA71DA731818B96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft Manifest number: F5 Signing time: Tue 03 Nov 2026 01:54:55 +0000 Manifest this update: Tue 03 Nov 2026 01:49:55 +0000 Manifest next update: Wed 04 Nov 2026 03:57:55 +0000 Files and hashes: 1: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl (hash: 3x78nLBza3WVaQ4pFfC79oZqPBCTUAQEmjUjzOHurR8=) 2: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: +5fvfc8ajMhGADJCEcdbEhQ6j6dAVRmNeOZFiwEvBZ8=) 3: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: k8/tG1r6Hku+axyAkhpoG9wapKfM0tuW5ME+1hieoV0=) 4: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: IlP4XUrtIYB7cIrDzPVEacnUChoP62KcR47GYYrS40A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 03:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:67:55:23:c6:1a:06:31:60:c7:1e:22:2e:a7:1d:a7:31:81:8b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Validity Not Before: Nov 3 01:49:55 2026 GMT Not After : Nov 4 03:57:55 2026 GMT Subject: CN=9AB47B3C5A24AD566A45E8E7F20F999DC9AD1E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:99:94:89:b2:48:fe:28:87:ba:15:88:79: 67:1f:e7:ab:f0:0e:54:d5:77:70:6d:29:f5:1b:3c: fb:d5:8a:3e:18:cf:33:68:ce:de:d8:be:e4:f9:2d: b3:bf:20:db:d3:96:cc:31:66:51:f4:cc:47:2d:a9: e6:b2:44:e4:5c:4d:9c:11:ba:fe:61:3c:93:2b:75: 94:98:76:ac:29:30:24:84:39:ed:57:d5:ee:88:09: 61:60:39:d7:d5:95:18:c5:6a:8f:a7:27:c8:68:66: 25:55:cd:c5:73:60:3e:9c:e6:ec:27:bb:35:51:f2: a1:08:44:e6:bc:5a:5b:ca:7d:d1:c2:a2:b1:27:66: 4c:1c:ed:6f:ef:7a:1f:3e:ea:43:51:be:46:7f:8e: f3:36:9a:e1:23:0c:63:2a:72:cb:af:18:5f:24:33: b5:b6:a6:bc:98:76:91:a5:da:8c:e8:a1:c1:e5:0c: a6:4a:00:7f:62:a3:75:3c:33:b2:ee:58:58:90:b5: d7:98:b0:44:56:1a:76:7d:74:49:04:f9:ae:c8:91: 47:6a:26:2a:5e:1d:5a:fe:ea:82:f8:93:f8:4a:9a: 6c:13:b1:54:57:7d:6b:71:bf:ca:56:55:bd:b4:2b: 63:9f:79:a1:10:8a:ff:bf:59:0d:67:d1:57:22:64: 03:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B4:7B:3C:5A:24:AD:56:6A:45:E8:E7:F2:0F:99:9D:C9:AD:1E:4C X509v3 Authority Key Identifier: keyid:0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e9:e9:1e:42:1c:28:e7:85:0b:58:79:62:4d:9d:f3:7c:55: 05:d6:8c:1e:3c:85:db:d6:7e:34:08:1b:8c:2e:e4:d2:ee:9f: d3:af:31:f6:fe:81:28:32:0d:d4:fa:34:cf:95:d8:2d:84:0b: 12:95:6e:2a:f0:fe:ad:3d:25:a5:15:03:34:a5:4c:c4:42:5e: 83:97:ad:9b:25:ad:ee:61:58:b8:2e:4a:4a:2e:02:83:60:d9: d0:c3:90:97:9e:34:b5:2b:60:1b:41:88:27:3a:49:ea:f4:de: 22:27:72:74:60:33:09:87:e1:8e:79:70:71:5a:71:66:8e:02: 25:7b:b3:35:9e:dc:c6:35:60:3b:0b:04:0e:3a:da:4c:cf:1e: 18:cc:9c:0b:5f:79:23:27:c2:0a:60:e8:c3:79:00:61:6d:7f: 63:38:a3:54:ad:bb:0a:4b:89:16:bd:4b:78:e3:db:3c:78:a6: 43:e9:cd:ab:65:d3:fd:b5:22:8c:b4:2a:af:cd:64:52:db:87: ba:46:39:7e:a6:d4:41:b2:2c:d8:8e:93:3c:75:63:b7:12:42: 09:d5:67:91:47:01:2a:54:e1:10:e8:87:72:1f:94:37:0b:b7: a3:37:c6:90:00:cc:f2:72:b7:7b:06:97:71:d6:67:18:17:b9: 4d:8f:43:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImdVI8YaBjFgxx4iLqcdpzGBi5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBG N0FFQzY0RjAeFw0yNjExMDMwMTQ5NTVaFw0yNjExMDQwMzU3NTVaMDMxMTAvBgNV BAMTKDlBQjQ3QjNDNUEyNEFENTY2QTQ1RThFN0YyMEY5OTlEQzlBRDFFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdZmUibJI/iiHuhWIeWcf56vw DlTVd3BtKfUbPPvVij4YzzNozt7YvuT5LbO/INvTlswxZlH0zEctqeayRORcTZwR uv5hPJMrdZSYdqwpMCSEOe1X1e6ICWFgOdfVlRjFao+nJ8hoZiVVzcVzYD6c5uwn uzVR8qEIROa8WlvKfdHCorEnZkwc7W/veh8+6kNRvkZ/jvM2muEjDGMqcsuvGF8k M7W2pryYdpGl2ozoocHlDKZKAH9io3U8M7LuWFiQtdeYsERWGnZ9dEkE+a7IkUdq JipeHVr+6oL4k/hKmmwTsVRXfWtxv8pWVb20K2OfeaEQiv+/WQ1n0VciZAOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmrR7PFokrVZqRejn8g+ZncmtHkwwHwYDVR0j BBgwFoAUC1mn0GauLeO5eCCu8XkasPeuxk8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2 NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBGN0FFQzY0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQjU5QTdEMDY2QUUyREUzQjk3ODIwQUVGMTc5MUFCMEY3QUVD NjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFB QjBGN0FFQzY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPp6R5CHCjnhQtYeWJNnfN8VQXWjB48hdvW fjQIG4wu5NLun9OvMfb+gSgyDdT6NM+V2C2ECxKVbirw/q09JaUVAzSlTMRCXoOX rZslre5hWLguSkouAoNg2dDDkJeeNLUrYBtBiCc6Ser03iIncnRgMwmH4Y55cHFa cWaOAiV7szWe3MY1YDsLBA462kzPHhjMnAtfeSMnwgpg6MN5AGFtf2M4o1StuwpL iRa9S3jj2zx4pkPpzatl0/21Ioy0Kq/NZFLbh7pGOX6m1EGyLNiOkzx1Y7cSQgnV Z5FHASpU4RDoh3IflDcLt6M3xpAAzPJyt3sGl3HWZxgXuU2PQ+U= -----END CERTIFICATE-----Generated at Tue Nov 3 16:27:24 2026 by rpki-client