$ rpki-client -vvf rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft File: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft (raw, json) Hash identifier: EBvxqATrgpJKHdeCAwU8xroglJ462CKY5fntg3fh2fw= Subject key identifier: 8A:82:C7:38:73:1F:E7:33:23:DC:6B:01:6B:82:4B:46:2C:F4:BF:2E Authority key identifier: B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 Certificate issuer: /CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Certificate serial: 3820C5652D92CC539E261F9E5D02688E27E4078A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 14:58:55 +0000 Manifest this update: Fri 19 Jun 2026 14:53:55 +0000 Manifest next update: Sat 20 Jun 2026 17:33:55 +0000 Files and hashes: 1: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: gCpw2vGjm5jpbPiN9g0VamqWAxByjyrdBgvX9WD/FEw=) 2: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: 7fp5Ub3jhSAS7agpOvlqaj1locBlJuu/plnhXOCrJf0=) 3: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: 3oVok3CXFl7cXz9v90zmFcUMxw7NjqzD2OW/U6gUOnc=) 4: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl (hash: LgCyK34QRR/sUjlA3LHgxX/jXPC2d2Z2Dag6Bkvzr7Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:20:c5:65:2d:92:cc:53:9e:26:1f:9e:5d:02:68:8e:27:e4:07:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Validity Not Before: Jun 19 14:53:55 2026 GMT Not After : Jun 20 17:33:55 2026 GMT Subject: CN=8A82C738731FE73323DC6B016B824B462CF4BF2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:30:8f:a9:54:cc:63:0c:a5:1b:75:49:3d: 9a:2a:f6:22:c2:37:c1:2a:af:44:0d:10:49:1c:77: 7c:b6:50:92:72:82:f9:91:37:c1:15:04:d9:2f:b7: 57:de:53:f7:a4:83:97:bb:2f:e6:b3:20:3b:08:31: ac:64:60:48:2d:e7:e4:3a:13:39:c5:0d:9b:58:31: e0:f2:c2:5b:65:50:60:dd:eb:6b:f8:ee:59:9a:d7: 8d:37:09:14:64:cd:01:7a:ef:07:20:e2:4e:67:53: dd:5d:fe:78:08:f4:45:71:20:6e:e4:32:dc:72:b2: 76:15:80:b7:c2:32:19:c7:20:04:16:8d:29:fa:a8: 9a:6d:4d:08:6c:52:d1:d7:66:89:95:dc:33:e3:88: d9:ee:7c:76:a6:0b:00:da:bf:0c:c8:82:d4:c4:5b: b2:14:3d:31:aa:93:4d:55:f2:e6:d0:a7:73:50:16: 95:4e:1f:90:dd:7f:8e:f2:eb:98:01:7b:88:7f:e5: 83:4b:39:0b:77:df:a0:b4:f6:df:9d:df:71:c5:74: 64:6f:43:e2:6a:e8:87:17:47:e6:09:bf:67:15:53: 5d:c6:28:be:ca:87:39:47:a9:56:ae:bb:44:9b:e8: 3d:a7:8f:ef:47:98:b6:35:ae:4e:fb:9e:38:df:0d: f4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:82:C7:38:73:1F:E7:33:23:DC:6B:01:6B:82:4B:46:2C:F4:BF:2E X509v3 Authority Key Identifier: keyid:B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ac:55:1a:5a:50:8b:30:b2:55:94:35:6b:e6:3d:24:5d:24: 6c:fc:6c:28:0f:93:4f:04:88:1a:62:91:fe:ad:58:13:64:86: ca:2e:7c:50:36:be:ba:55:e7:fb:cb:8b:df:dc:e0:fa:d5:a5: 6e:8e:ae:7e:ba:77:00:57:33:03:80:14:c9:fb:ac:0b:c1:46: f1:9e:34:f9:5a:1a:ad:e6:b7:f5:15:b1:52:9d:02:9c:58:62: 4d:b7:db:bf:85:41:82:c1:77:49:68:60:ce:17:3e:8d:85:6e: 23:a3:5f:11:2c:40:b0:65:80:ab:60:95:db:82:f8:e9:80:f2: 6d:37:3b:4f:3f:03:fe:b4:cb:f9:6f:38:86:a2:06:cc:a8:0e: 8d:f3:1f:cc:e7:b5:61:00:65:83:80:05:23:a1:25:9a:e7:6b: 8a:69:a7:54:10:30:fb:c9:32:0a:ac:7c:3d:d7:2a:e8:fd:9c: bf:49:82:8b:33:08:d4:a8:91:52:13:2b:7a:bf:81:1a:a9:e8: bf:f8:0e:f0:99:09:de:2d:f6:8c:0b:2c:1d:75:9c:95:67:4e: 11:c3:5c:e1:32:e1:f7:7b:c6:6b:3f:b3:4c:25:50:86:1f:77: 08:9b:ac:02:5b:55:2f:40:fe:98:1f:08:2a:4b:f2:f9:3d:5f: ff:03:b4:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCDFZS2SzFOeJh+eXQJojifkB4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJB QjhDNUY2MDAeFw0yNjA2MTkxNDUzNTVaFw0yNjA2MjAxNzMzNTVaMDMxMTAvBgNV BAMTKDhBODJDNzM4NzMxRkU3MzMyM0RDNkIwMTZCODI0QjQ2MkNGNEJGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSJTCPqVTMYwylG3VJPZoq9iLC N8Eqr0QNEEkcd3y2UJJygvmRN8EVBNkvt1feU/ekg5e7L+azIDsIMaxkYEgt5+Q6 EznFDZtYMeDywltlUGDd62v47lma1403CRRkzQF67wcg4k5nU91d/ngI9EVxIG7k MtxysnYVgLfCMhnHIAQWjSn6qJptTQhsUtHXZomV3DPjiNnufHamCwDavwzIgtTE W7IUPTGqk01V8ubQp3NQFpVOH5Ddf47y65gBe4h/5YNLOQt336C09t+d33HFdGRv Q+Jq6IcXR+YJv2cVU13GKL7KhzlHqVauu0Sb6D2nj+9HmLY1rk77njjfDfTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUioLHOHMf5zMj3GsBa4JLRiz0vy4wHwYDVR0j BBgwFoAUsVnTPTUi0nzfz0yBkROC4quMX2AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcwYzQ3NTktNDNiOC00ZTgwLWJlOGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0Qz NTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJBQjhDNUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTU5RDMzRDM1MjJEMjdDREZDRjRDODE5MTEzODJFMkFCOEM1 RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgy RTJBQjhDNUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWsVRpaUIswslWUNWvmPSRdJGz8bCgPk08E iBpikf6tWBNkhsoufFA2vrpV5/vLi9/c4PrVpW6Orn66dwBXMwOAFMn7rAvBRvGe NPlaGq3mt/UVsVKdApxYYk2327+FQYLBd0loYM4XPo2FbiOjXxEsQLBlgKtglduC +OmA8m03O08/A/60y/lvOIaiBsyoDo3zH8zntWEAZYOABSOhJZrna4ppp1QQMPvJ MgqsfD3XKuj9nL9JgoszCNSokVITK3q/gRqp6L/4DvCZCd4t9owLLB11nJVnThHD XOEy4fd7xms/s0wlUIYfdwibrAJbVS9A/pgfCCpL8vk9X/8DtKE= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:30 2026 by rpki-client