$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft File: D59D3CB80F39720CC6378798AF38E978ACC61169.mft (raw, json) Hash identifier: 7b8I07HvigNP5MAt0B27LFdkb5Whm0f7OABdONcjRKk= Subject key identifier: BD:33:43:7C:D5:E5:DC:A5:85:A4:90:CA:5E:A5:8E:0A:A9:BC:7A:B9 Authority key identifier: D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69 Certificate issuer: /CN=D59D3CB80F39720CC6378798AF38E978ACC61169 Certificate serial: 4FFA52286674C9DB75BDC32B53E4EDCB1D763009 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft Manifest number: 9B Signing time: Tue 25 Aug 2026 23:05:27 +0000 Manifest this update: Tue 25 Aug 2026 23:00:27 +0000 Manifest next update: Thu 27 Aug 2026 00:45:27 +0000 Files and hashes: 1: D59D3CB80F39720CC6378798AF38E978ACC61169.crl (hash: uklLLDYyMMANHqhgoa/G2B5g3gIyw9mpm3QTUhVFq7w=) 2: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: TyeS6OFp+eX9ORLvbkAk7IV44ZT6uQE45kxcvU/K/wA=) 3: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: NXjXH8bagUMJQqwbA86uVF5uVlgJU27CgQDeHpB6ITQ=) 4: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: xDMl4fVPq1KOh6yEyAaFX1Ne1uCSqYoqoG2DK9eXVJc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 00:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fa:52:28:66:74:c9:db:75:bd:c3:2b:53:e4:ed:cb:1d:76:30:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59D3CB80F39720CC6378798AF38E978ACC61169 Validity Not Before: Aug 25 23:00:27 2026 GMT Not After : Aug 27 00:45:27 2026 GMT Subject: CN=BD33437CD5E5DCA585A490CA5EA58E0AA9BC7AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ce:4c:8b:9d:f4:54:f7:46:2a:17:9c:e8:d0: ad:c9:12:50:f6:d9:8f:13:0e:29:ca:a9:73:20:58: 20:71:fc:dc:7e:4e:74:1d:6d:7b:0b:26:47:7f:06: 84:03:6d:78:a2:39:1d:71:c2:5e:36:46:c9:28:59: 82:65:26:cb:51:84:95:2d:b9:1a:34:d1:f6:9c:93: a6:22:36:01:fa:dd:a5:d8:5e:ae:94:6d:a5:57:2f: ae:4f:f7:3a:64:d2:f2:20:5d:7b:47:e8:ba:8e:d5: 31:3b:47:79:49:88:5d:65:96:73:83:5e:22:60:11: a4:27:22:e7:06:b1:7c:11:1a:a5:60:01:23:af:62: 3e:67:6c:a8:bb:03:e9:38:fd:1c:b6:32:19:60:67: 24:91:b0:3f:4f:ef:d8:0d:04:d9:b0:26:2f:55:0f: 3b:c0:12:bb:27:93:39:ea:23:85:aa:6f:2d:7a:51: 72:01:df:56:74:2b:70:e4:3e:4f:42:75:1c:0c:de: 0a:3a:d8:bc:b4:cf:fe:a8:35:88:c6:33:30:31:61: c5:9e:55:e7:a3:32:d0:bb:11:1d:75:68:31:c5:53: 35:d9:99:f4:5e:c2:db:53:91:86:98:fc:08:54:63: 2b:ee:40:31:c1:df:7f:1b:73:0d:2d:09:c6:c5:bd: 5c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:33:43:7C:D5:E5:DC:A5:85:A4:90:CA:5E:A5:8E:0A:A9:BC:7A:B9 X509v3 Authority Key Identifier: keyid:D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6d:9a:83:a8:c9:76:f7:22:2a:f9:b8:18:06:bc:4b:b0:24: d6:5d:b5:e8:fd:0d:fb:fe:bc:e5:10:68:fc:2d:d4:9d:50:7e: aa:09:80:0f:34:5c:61:ae:dd:79:47:f9:9d:eb:eb:22:39:f5: 59:0e:5a:0b:40:f9:60:e8:82:e1:2b:0d:4a:d8:66:f9:bb:fe: 44:e4:dd:0f:6f:d9:32:f1:96:e9:40:9f:d1:9b:0a:c6:fc:d8: 6d:a8:f9:77:da:da:55:c7:ae:66:4d:12:1d:79:66:da:75:59: cd:f3:70:9b:c4:dd:f2:e3:1e:d2:63:c8:d3:0b:7f:59:c2:ad: 52:7b:60:4b:68:55:7a:92:38:ee:6d:4d:61:1e:a8:82:45:63: 1f:2a:bc:e3:3a:01:d6:a5:71:5a:b7:03:df:8e:8e:10:74:0a: 73:b4:85:50:cf:f9:3a:27:58:a5:34:ad:a5:19:37:88:e6:8c: 05:c6:05:b2:a3:1d:cf:7e:ba:cc:a9:1a:83:bc:03:5c:16:2a: 27:73:2f:3c:41:93:b2:86:07:41:f8:f8:4f:51:e0:c2:60:9b: 66:eb:0f:1e:ae:88:f4:ed:ad:90:56:24:35:6b:8b:1e:c4:93: 36:b7:df:8c:8a:5e:ef:83:25:7f:cf:ce:51:a1:61:45:1b:7e: a4:4b:91:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/pSKGZ0ydt1vcMrU+Ttyx12MAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5RDNDQjgwRjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5NzhB Q0M2MTE2OTAeFw0yNjA4MjUyMzAwMjdaFw0yNjA4MjcwMDQ1MjdaMDMxMTAvBgNV BAMTKEJEMzM0MzdDRDVFNURDQTU4NUE0OTBDQTVFQTU4RTBBQTlCQzdBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPzkyLnfRU90YqF5zo0K3JElD2 2Y8TDinKqXMgWCBx/Nx+TnQdbXsLJkd/BoQDbXiiOR1xwl42RskoWYJlJstRhJUt uRo00fack6YiNgH63aXYXq6UbaVXL65P9zpk0vIgXXtH6LqO1TE7R3lJiF1llnOD XiJgEaQnIucGsXwRGqVgASOvYj5nbKi7A+k4/Ry2MhlgZySRsD9P79gNBNmwJi9V DzvAErsnkznqI4Wqby16UXIB31Z0K3DkPk9CdRwM3go62Ly0z/6oNYjGMzAxYcWe VeejMtC7ER11aDHFUzXZmfRewttTkYaY/AhUYyvuQDHB338bcw0tCcbFvVw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvTNDfNXl3KWFpJDKXqWOCqm8erkwHwYDVR0j BBgwFoAU1Z08uA85cgzGN4eYrzjpeKzGEWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU3MDU5MjctZWM2NC00NGY1LTljOWUtYzlhNTVhNTIzYjY0LzAvRDU5RDNDQjgw RjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5NzhBQ0M2MTE2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTlEM0NCODBGMzk3MjBDQzYzNzg3OThBRjM4RTk3OEFDQzYx MTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU3MDU5MjctZWM2NC00NGY1LTlj OWUtYzlhNTVhNTIzYjY0LzAvRDU5RDNDQjgwRjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5 NzhBQ0M2MTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJptmoOoyXb3Iir5uBgGvEuwJNZdtej9Dfv+ vOUQaPwt1J1QfqoJgA80XGGu3XlH+Z3r6yI59VkOWgtA+WDoguErDUrYZvm7/kTk 3Q9v2TLxlulAn9GbCsb82G2o+Xfa2lXHrmZNEh15Ztp1Wc3zcJvE3fLjHtJjyNML f1nCrVJ7YEtoVXqSOO5tTWEeqIJFYx8qvOM6AdalcVq3A9+OjhB0CnO0hVDP+Ton WKU0raUZN4jmjAXGBbKjHc9+usypGoO8A1wWKidzLzxBk7KGB0H4+E9R4MJgm2br Dx6uiPTtrZBWJDVrix7Ekza334yKXu+DJX/PzlGhYUUbfqRLkXg= -----END CERTIFICATE-----Generated at Wed Aug 26 16:13:08 2026 by rpki-client