$ rpki-client -vvf rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft File: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft (raw, json) Hash identifier: E8Ca/BtCSJQGlu0aWbG/DBe0I+KNdBw4XBwuPLLliBs= Subject key identifier: 68:E8:84:34:3E:59:B2:C7:6D:AC:2E:AB:42:FF:5D:B0:E3:A5:9C:42 Authority key identifier: B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 Certificate issuer: /CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Certificate serial: 77B67350AD6B0481ED9015A320A9E4F033985DFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:40:47 +0000 Manifest this update: Tue 05 May 2026 08:35:47 +0000 Manifest next update: Wed 06 May 2026 12:20:47 +0000 Files and hashes: 1: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl (hash: EuxxiayVp6hSYQaDeY9lbbuk3cKrw+Sn+NXl3FT2egA=) 2: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: 3oVok3CXFl7cXz9v90zmFcUMxw7NjqzD2OW/U6gUOnc=) 3: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: 7fp5Ub3jhSAS7agpOvlqaj1locBlJuu/plnhXOCrJf0=) 4: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: gCpw2vGjm5jpbPiN9g0VamqWAxByjyrdBgvX9WD/FEw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b6:73:50:ad:6b:04:81:ed:90:15:a3:20:a9:e4:f0:33:98:5d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Validity Not Before: May 5 08:35:47 2026 GMT Not After : May 6 12:20:47 2026 GMT Subject: CN=68E884343E59B2C76DAC2EAB42FF5DB0E3A59C42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:b1:de:09:4e:50:cb:4f:07:71:b3:92:d5: 12:96:b9:fb:53:e2:97:78:56:49:b3:86:7d:38:c0: 1c:9a:c0:8e:05:6e:ae:a2:ea:9d:c8:cb:84:4f:f5: 6d:63:58:63:71:09:6d:5f:6c:8f:97:e2:8d:2d:e3: 63:d0:37:14:63:74:59:71:03:e3:8c:10:dc:0c:35: 9e:3d:bf:e3:e1:5e:aa:32:f5:63:33:db:83:35:1a: e1:49:98:b0:d1:0b:b8:ae:40:7d:f4:42:b4:68:e7: 76:fe:50:d5:35:a8:f9:dc:11:52:bd:c9:a4:98:fe: 4f:66:29:ed:85:11:f5:5d:a5:21:b2:a8:5c:5f:39: 62:8f:6d:85:ec:35:2b:5a:b0:f9:e8:9b:e5:54:7a: a6:92:92:84:58:72:0a:6f:35:c0:df:95:0d:90:08: 09:9d:74:f9:19:4d:9f:1f:04:8d:3e:e9:e7:c2:54: b5:cb:5d:98:4b:c1:8e:99:82:bc:58:b1:49:3e:21: c3:27:65:08:6c:be:eb:92:c9:69:59:8d:37:f4:43: db:4e:7a:d3:1a:ce:ac:59:47:36:21:f6:21:51:dc: 95:a4:ab:5c:e3:41:d6:3f:1b:84:37:6f:16:13:0a: 47:15:f7:dd:85:2d:57:18:00:f0:84:c4:fe:0f:18: 2b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E8:84:34:3E:59:B2:C7:6D:AC:2E:AB:42:FF:5D:B0:E3:A5:9C:42 X509v3 Authority Key Identifier: keyid:B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:de:69:fb:e1:b6:48:c2:72:fa:20:3f:74:c0:d1:75:3e:ae: e5:b9:02:93:fc:f1:2d:47:57:2c:b8:36:ce:6f:7d:f7:ac:92: 9f:cc:38:d2:26:04:81:85:6f:66:84:39:ff:2d:24:54:c5:90: 59:4b:92:31:b1:4e:ce:4f:37:24:56:1b:6c:88:76:5a:89:91: 0d:70:bc:27:4d:6c:56:97:2a:ed:59:9c:92:9c:a4:b7:ee:cc: a3:ad:10:4c:8d:48:60:61:6b:2d:d7:be:d5:36:8a:1f:c4:8d: 83:58:68:d6:1f:dd:16:39:fb:27:fa:64:65:24:d0:cb:d0:76: d9:d3:e4:a6:e0:25:a9:f4:48:a7:1a:da:01:81:80:3c:00:bc: b4:4c:2a:e9:d5:af:a0:bd:b0:fe:fa:ee:ac:2f:12:39:39:09: 28:95:26:c7:2c:24:b2:e2:b0:af:46:79:02:1e:f0:78:44:44: 52:80:03:53:4b:b1:b1:31:10:1d:49:f1:f5:74:2d:01:8e:d2: 29:1d:e2:fc:87:12:cf:24:d0:db:a9:63:1a:bc:af:c3:ab:bb: 54:fe:0f:a9:a1:b2:7d:15:a0:b9:9d:f6:d3:3e:89:c6:0b:13: 2d:7e:59:c6:82:33:58:4a:61:f0:4c:af:35:b6:8f:73:91:08: 38:33:bd:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7ZzUK1rBIHtkBWjIKnk8DOYXfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJB QjhDNUY2MDAeFw0yNjA1MDUwODM1NDdaFw0yNjA1MDYxMjIwNDdaMDMxMTAvBgNV BAMTKDY4RTg4NDM0M0U1OUIyQzc2REFDMkVBQjQyRkY1REIwRTNBNTlDNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsbHeCU5Qy08HcbOS1RKWuftT 4pd4Vkmzhn04wByawI4Fbq6i6p3Iy4RP9W1jWGNxCW1fbI+X4o0t42PQNxRjdFlx A+OMENwMNZ49v+PhXqoy9WMz24M1GuFJmLDRC7iuQH30QrRo53b+UNU1qPncEVK9 yaSY/k9mKe2FEfVdpSGyqFxfOWKPbYXsNStasPnom+VUeqaSkoRYcgpvNcDflQ2Q CAmddPkZTZ8fBI0+6efCVLXLXZhLwY6ZgrxYsUk+IcMnZQhsvuuSyWlZjTf0Q9tO etMazqxZRzYh9iFR3JWkq1zjQdY/G4Q3bxYTCkcV992FLVcYAPCExP4PGCt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaOiEND5ZssdtrC6rQv9dsOOlnEIwHwYDVR0j BBgwFoAUsVnTPTUi0nzfz0yBkROC4quMX2AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcwYzQ3NTktNDNiOC00ZTgwLWJlOGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0Qz NTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJBQjhDNUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTU5RDMzRDM1MjJEMjdDREZDRjRDODE5MTEzODJFMkFCOEM1 RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgy RTJBQjhDNUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjeafvhtkjCcvogP3TA0XU+ruW5ApP88S1H Vyy4Ns5vffeskp/MONImBIGFb2aEOf8tJFTFkFlLkjGxTs5PNyRWG2yIdlqJkQ1w vCdNbFaXKu1ZnJKcpLfuzKOtEEyNSGBhay3XvtU2ih/EjYNYaNYf3RY5+yf6ZGUk 0MvQdtnT5KbgJan0SKca2gGBgDwAvLRMKunVr6C9sP767qwvEjk5CSiVJscsJLLi sK9GeQIe8HhERFKAA1NLsbExEB1J8fV0LQGO0ikd4vyHEs8k0NupYxq8r8Oru1T+ D6mhsn0VoLmd9tM+icYLEy1+WcaCM1hKYfBMrzW2j3ORCDgzvW0= -----END CERTIFICATE-----Generated at Tue May 5 14:19:47 2026 by rpki-client