$ rpki-client -vvf rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft File: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft (raw, json) Hash identifier: InuEjwcMiaXC9kkBddk8zf45rnbIVNcFFJcnN5YTEGQ= Subject key identifier: 14:4B:EF:E7:39:C9:AE:42:5D:92:C1:B2:8F:FC:6F:B9:7F:77:1C:7F Authority key identifier: B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 Certificate issuer: /CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Certificate serial: 62898E5B0FEB124932296D58D991549A32AF9A86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft Manifest number: 91 Signing time: Wed 19 Aug 2026 11:27:56 +0000 Manifest this update: Wed 19 Aug 2026 11:22:56 +0000 Manifest next update: Thu 20 Aug 2026 14:48:56 +0000 Files and hashes: 1: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: 3oVok3CXFl7cXz9v90zmFcUMxw7NjqzD2OW/U6gUOnc=) 2: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl (hash: lHj/6lhJvsn09jm5clKOGufhC9lAn6slYgSlZgQdHKA=) 3: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: 7fp5Ub3jhSAS7agpOvlqaj1locBlJuu/plnhXOCrJf0=) 4: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: gCpw2vGjm5jpbPiN9g0VamqWAxByjyrdBgvX9WD/FEw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 14:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:89:8e:5b:0f:eb:12:49:32:29:6d:58:d9:91:54:9a:32:af:9a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Validity Not Before: Aug 19 11:22:56 2026 GMT Not After : Aug 20 14:48:56 2026 GMT Subject: CN=144BEFE739C9AE425D92C1B28FFC6FB97F771C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:aa:7b:ee:2b:16:1d:32:e4:4a:64:83:f7:27: 9e:29:65:3a:b7:33:75:4c:5d:a0:d6:df:df:54:62: e7:8e:3d:22:d9:fa:e9:af:8d:43:20:26:15:3f:f4: 8e:65:24:73:2a:16:cc:a6:83:d1:f6:ae:b1:29:cf: 4d:7d:ba:6d:0d:f8:f3:b7:d5:50:e1:e9:17:ad:a3: b0:91:eb:53:55:fc:b1:2e:3c:05:b3:fb:8a:3a:da: 50:c6:04:a5:25:23:74:e9:00:dd:04:45:29:3b:46: cd:7f:d6:9a:06:a9:4e:a7:25:d4:6d:2c:4f:54:79: fe:d3:19:17:58:2c:bf:20:02:fa:d5:1b:d9:a6:f3: 70:19:e2:a4:93:49:f8:d9:47:43:3d:08:7c:09:3e: 43:6e:95:72:96:3e:dc:e0:95:ff:3c:44:f9:df:72: 2c:5a:8a:ef:66:a5:dd:63:77:da:6b:f6:d9:6c:fc: b8:61:78:4f:79:ac:c8:22:61:9c:55:13:81:f5:8a: f4:d2:f7:83:2d:5d:9f:42:7a:ed:0e:01:bc:d3:e3: 86:73:d1:14:ae:4e:5a:22:2f:53:6f:ad:9a:a3:fd: 7e:4c:b8:d7:7d:84:36:f8:66:c3:f1:ab:90:f0:0c: a0:63:5f:6d:d6:af:b6:28:d6:7c:4a:31:3d:f0:f7: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4B:EF:E7:39:C9:AE:42:5D:92:C1:B2:8F:FC:6F:B9:7F:77:1C:7F X509v3 Authority Key Identifier: keyid:B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:38:c2:5a:de:89:55:cb:14:bf:61:b5:67:9b:be:59:aa:db: 3b:4e:63:57:0f:2f:64:a8:1c:4a:0c:a7:49:db:63:3f:29:15: a6:af:d9:16:be:e5:69:bc:2d:90:f9:aa:cc:24:b8:81:85:a9: 4e:e5:a1:d7:42:79:b7:bf:4a:f9:2b:c4:b3:37:53:4d:63:c2: 87:dc:d8:8c:39:2d:af:36:da:f6:c4:01:e4:30:a0:6c:d6:28: 02:9b:32:cc:9b:10:f1:13:c6:af:12:5c:ce:b8:0d:33:3b:74: 65:a3:d6:6c:b3:98:78:23:ec:aa:8e:f5:c9:72:e2:79:b8:77: aa:44:35:3b:d1:52:75:b3:20:72:5b:cc:a3:9e:a7:17:ff:b4: 52:ef:f6:bb:30:2b:3a:e1:3c:b7:54:2c:02:f9:02:ad:f2:4b: 20:32:b7:e3:b9:7f:a7:46:6f:56:f7:76:7b:a3:8e:f3:f2:3f: 60:6c:56:f9:57:cc:2e:e7:de:dc:a7:aa:59:d3:65:fb:68:26: 0f:18:bc:ac:30:22:54:73:1e:5f:61:13:29:e6:06:35:fd:ae: 62:8a:fc:00:c3:c2:02:e1:35:bd:4f:b0:c5:1f:2c:c4:87:ef: 0d:96:0e:d9:2f:ff:ab:6a:96:e7:8b:b5:07:4a:f2:a0:20:41: 93:f2:f2:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYomOWw/rEkkyKW1Y2ZFUmjKvmoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJB QjhDNUY2MDAeFw0yNjA4MTkxMTIyNTZaFw0yNjA4MjAxNDQ4NTZaMDMxMTAvBgNV BAMTKDE0NEJFRkU3MzlDOUFFNDI1RDkyQzFCMjhGRkM2RkI5N0Y3NzFDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqnvuKxYdMuRKZIP3J54pZTq3 M3VMXaDW399UYueOPSLZ+umvjUMgJhU/9I5lJHMqFsymg9H2rrEpz019um0N+PO3 1VDh6Reto7CR61NV/LEuPAWz+4o62lDGBKUlI3TpAN0ERSk7Rs1/1poGqU6nJdRt LE9Uef7TGRdYLL8gAvrVG9mm83AZ4qSTSfjZR0M9CHwJPkNulXKWPtzglf88RPnf cixaiu9mpd1jd9pr9tls/LhheE95rMgiYZxVE4H1ivTS94MtXZ9Ceu0OAbzT44Zz 0RSuTloiL1NvrZqj/X5MuNd9hDb4ZsPxq5DwDKBjX23Wr7Yo1nxKMT3w9wD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFEvv5znJrkJdksGyj/xvuX93HH8wHwYDVR0j BBgwFoAUsVnTPTUi0nzfz0yBkROC4quMX2AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcwYzQ3NTktNDNiOC00ZTgwLWJlOGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0Qz NTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJBQjhDNUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTU5RDMzRDM1MjJEMjdDREZDRjRDODE5MTEzODJFMkFCOEM1 RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgy RTJBQjhDNUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABw4wlreiVXLFL9htWebvlmq2ztOY1cPL2So HEoMp0nbYz8pFaav2Ra+5Wm8LZD5qswkuIGFqU7loddCebe/SvkrxLM3U01jwofc 2Iw5La822vbEAeQwoGzWKAKbMsybEPETxq8SXM64DTM7dGWj1myzmHgj7KqO9cly 4nm4d6pENTvRUnWzIHJbzKOepxf/tFLv9rswKzrhPLdULAL5Aq3ySyAyt+O5f6dG b1b3dnujjvPyP2BsVvlXzC7n3tynqlnTZftoJg8YvKwwIlRzHl9hEynmBjX9rmKK /ADDwgLhNb1PsMUfLMSH7w2WDtkv/6tqlueLtQdK8qAgQZPy8vM= -----END CERTIFICATE-----Generated at Thu Aug 20 07:03:52 2026 by rpki-client