$ rpki-client -vvvf rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft File: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft (raw, json) Hash identifier: QUIysev/zHK2ndJQ/9UXa6jx51Ad6EK1WaB6o9QjH60= Subject key identifier: ED:85:1A:5B:51:73:1F:D1:D2:4A:87:87:C5:99:6C:B1:62:31:4E:2C Authority key identifier: B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 Certificate issuer: /CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Certificate serial: 5C52AB20C4A37BD352C4A03D90DF498DB9717297 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft Manifest number: DB Signing time: Wed 14 Oct 2026 10:38:42 +0000 Manifest this update: Wed 14 Oct 2026 10:33:42 +0000 Manifest next update: Thu 15 Oct 2026 12:52:42 +0000 Files and hashes: 1: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: gCpw2vGjm5jpbPiN9g0VamqWAxByjyrdBgvX9WD/FEw=) 2: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: 7fp5Ub3jhSAS7agpOvlqaj1locBlJuu/plnhXOCrJf0=) 3: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: 3oVok3CXFl7cXz9v90zmFcUMxw7NjqzD2OW/U6gUOnc=) 4: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl (hash: 4LyNyeKEBMMD54++R+ku/MfvD6fo3nXA8BdF5rLfdtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 12:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:52:ab:20:c4:a3:7b:d3:52:c4:a0:3d:90:df:49:8d:b9:71:72:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Validity Not Before: Oct 14 10:33:42 2026 GMT Not After : Oct 15 12:52:42 2026 GMT Subject: CN=ED851A5B51731FD1D24A8787C5996CB162314E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:c0:e5:95:0f:85:14:58:ac:13:71:35:00: 13:26:82:b3:38:4a:77:d9:35:72:44:a4:2d:36:97: df:8d:08:62:51:a5:81:20:f2:ff:4e:6e:8b:68:de: 0f:f4:e7:dc:36:5f:0c:28:44:96:c9:5e:7b:d4:56: 11:1f:88:26:71:d1:42:b3:94:7b:84:64:68:9c:aa: 2f:13:dd:be:5b:ce:2a:50:47:49:e3:c7:ee:0c:5d: 20:73:87:dd:88:c8:4c:c5:0c:af:d9:93:e3:b1:56: 46:ff:84:63:f1:cd:89:f0:5a:b3:65:e7:f4:e2:2a: 08:f3:fb:d1:ef:d6:9b:96:cd:de:82:d7:58:56:38: 62:58:bf:c6:df:48:71:4b:e4:cc:d8:28:7c:96:5d: 74:cc:bb:54:e5:d8:fd:70:b5:59:de:11:c3:cb:01: fc:d2:55:b0:72:b9:ef:ca:f7:ec:b9:ab:fb:47:c6: 11:12:98:d3:e9:b7:91:79:8e:a8:b6:41:92:5f:1e: cb:e6:ff:8f:9d:e8:e9:f3:d8:8d:41:df:ad:58:b9: 16:cb:c2:e8:fe:a7:09:d9:84:65:2a:06:ab:17:03: 03:74:6d:e1:c2:06:8f:06:da:0a:1b:b6:f6:06:64: 30:11:bd:bb:9e:51:9b:11:4a:88:54:df:ed:a8:f3: b8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:85:1A:5B:51:73:1F:D1:D2:4A:87:87:C5:99:6C:B1:62:31:4E:2C X509v3 Authority Key Identifier: keyid:B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d0:74:94:79:61:3b:66:9f:13:b7:92:b6:c7:89:1f:af:11: 4d:a6:6e:3d:54:79:9d:ea:ab:e0:4c:f2:f4:5c:c1:4d:2e:1a: b7:19:1d:57:21:07:26:f8:12:ca:3e:62:f9:a4:cc:59:dc:79: 64:71:01:87:20:26:62:08:c4:fd:eb:b0:b5:c0:e7:52:d5:50: 43:d7:3e:f1:82:48:18:1c:0a:43:94:46:3d:ac:d7:b0:07:7c: 9f:98:d1:50:10:ea:9f:c2:b8:ee:ce:20:b8:17:92:d3:b3:63: cb:de:31:ad:50:8d:ab:f6:17:2f:b2:bc:ee:6d:58:18:82:4e: 42:76:49:7e:82:fa:5d:7b:f4:64:10:93:f6:9c:61:f3:84:8d: 2d:d1:4c:e5:a8:fa:ca:d1:1b:3c:84:df:ec:7f:1b:6e:40:5a: 6e:32:57:70:de:9a:12:dc:1c:46:11:96:bc:ed:d0:88:e3:b1: 6d:1c:05:b9:26:be:8f:be:d0:38:54:00:7c:e9:57:1f:f1:3e: b4:7a:75:b4:c8:c8:16:a2:94:2c:f8:00:5c:28:85:46:5a:a1: c1:67:ee:26:ad:56:9e:bd:53:9b:e7:c4:2c:7e:4a:cb:32:6e: 25:3b:a5:18:89:1d:d6:03:0a:c1:1d:6e:9d:47:84:cc:3d:f7: 5b:c2:19:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFKrIMSje9NSxKA9kN9JjblxcpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJB QjhDNUY2MDAeFw0yNjEwMTQxMDMzNDJaFw0yNjEwMTUxMjUyNDJaMDMxMTAvBgNV BAMTKEVEODUxQTVCNTE3MzFGRDFEMjRBODc4N0M1OTk2Q0IxNjIzMTRFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33cDllQ+FFFisE3E1ABMmgrM4 SnfZNXJEpC02l9+NCGJRpYEg8v9Oboto3g/059w2XwwoRJbJXnvUVhEfiCZx0UKz lHuEZGicqi8T3b5bzipQR0njx+4MXSBzh92IyEzFDK/Zk+OxVkb/hGPxzYnwWrNl 5/TiKgjz+9Hv1puWzd6C11hWOGJYv8bfSHFL5MzYKHyWXXTMu1Tl2P1wtVneEcPL AfzSVbByue/K9+y5q/tHxhESmNPpt5F5jqi2QZJfHsvm/4+d6Onz2I1B361YuRbL wuj+pwnZhGUqBqsXAwN0beHCBo8G2gobtvYGZDARvbueUZsRSohU3+2o87j1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7YUaW1FzH9HSSoeHxZlssWIxTiwwHwYDVR0j BBgwFoAUsVnTPTUi0nzfz0yBkROC4quMX2AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcwYzQ3NTktNDNiOC00ZTgwLWJlOGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0Qz NTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJBQjhDNUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTU5RDMzRDM1MjJEMjdDREZDRjRDODE5MTEzODJFMkFCOEM1 RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgy RTJBQjhDNUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjQdJR5YTtmnxO3krbHiR+vEU2mbj1UeZ3q q+BM8vRcwU0uGrcZHVchByb4Eso+YvmkzFnceWRxAYcgJmIIxP3rsLXA51LVUEPX PvGCSBgcCkOURj2s17AHfJ+Y0VAQ6p/CuO7OILgXktOzY8veMa1Qjav2Fy+yvO5t WBiCTkJ2SX6C+l179GQQk/acYfOEjS3RTOWo+srRGzyE3+x/G25AWm4yV3DemhLc HEYRlrzt0IjjsW0cBbkmvo++0DhUAHzpVx/xPrR6dbTIyBailCz4AFwohUZaocFn 7iatVp69U5vnxCx+SssybiU7pRiJHdYDCsEdbp1HhMw991vCGRU= -----END CERTIFICATE-----Generated at Thu Oct 15 02:04:24 2026 by rpki-client