$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft File: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft (raw, json) Hash identifier: /nYa+HiEgjJgmQufDJ++1q/DYUTq6z3J4HOPkxaxgD8= Subject key identifier: CB:AE:B2:E8:42:C1:F7:3D:97:A1:66:78:E5:B6:BC:96:AF:FB:CC:3A Authority key identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F Certificate issuer: /CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Certificate serial: 1A11A92C658FA459D2FA7F6E483E1E3B90DC6537 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 11:26:32 +0000 Manifest this update: Sun 02 Aug 2026 11:21:32 +0000 Manifest next update: Mon 03 Aug 2026 14:33:32 +0000 Files and hashes: 1: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl (hash: ea0nwbuiG/VEZDwGm0bPzao3I74jKZperTckEL6cg9k=) 2: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: IlP4XUrtIYB7cIrDzPVEacnUChoP62KcR47GYYrS40A=) 3: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: +5fvfc8ajMhGADJCEcdbEhQ6j6dAVRmNeOZFiwEvBZ8=) 4: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: k8/tG1r6Hku+axyAkhpoG9wapKfM0tuW5ME+1hieoV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 14:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:11:a9:2c:65:8f:a4:59:d2:fa:7f:6e:48:3e:1e:3b:90:dc:65:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Validity Not Before: Aug 2 11:21:32 2026 GMT Not After : Aug 3 14:33:32 2026 GMT Subject: CN=CBAEB2E842C1F73D97A16678E5B6BC96AFFBCC3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:ea:e3:50:8c:e7:8f:7f:9a:56:e6:a3:5f: c1:34:5b:aa:c2:af:24:8a:18:b0:42:2f:d2:a0:00: f6:c2:8f:b8:fd:6a:05:5c:0e:85:e9:b2:91:0c:78: e3:2c:55:0f:0f:eb:4a:d2:f9:7b:2a:af:37:25:8d: c8:50:9d:56:94:db:b5:71:dd:3d:bb:a2:52:bb:be: 6a:a8:57:aa:44:3d:42:d3:70:34:20:0c:71:7f:82: 15:0a:d7:19:19:98:89:c0:58:38:a5:e0:cb:c3:23: 3c:f7:9e:c4:c6:cb:56:80:2f:24:90:76:9f:ff:45: a1:a2:38:7f:b8:6f:73:cf:ae:81:49:05:68:1a:e2: 2f:f1:61:76:d2:cb:f6:92:50:22:33:7c:71:31:9e: aa:64:26:20:87:ad:c0:64:ae:9d:22:0e:40:fa:c0: b7:67:7a:20:01:80:25:cb:1b:4a:14:0f:31:61:b8: b6:af:44:3d:ec:9e:e1:5e:ef:db:d9:5e:d5:d8:21: 84:8e:fe:6e:e3:69:c6:58:1f:69:7d:59:f0:e6:7e: 63:ab:bc:b7:44:69:08:17:52:4a:b8:04:cf:69:73: 54:98:50:e3:3c:eb:8c:94:6d:2f:25:4f:b7:e8:61: b9:2b:a4:d7:dd:38:f7:14:76:36:bc:18:59:4d:0d: 89:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AE:B2:E8:42:C1:F7:3D:97:A1:66:78:E5:B6:BC:96:AF:FB:CC:3A X509v3 Authority Key Identifier: keyid:0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8e:01:f9:31:fc:39:30:f2:58:39:4c:45:63:c4:3b:47:bd: 4a:75:df:ae:99:52:95:48:86:57:59:5f:8c:3e:e3:4f:4c:24: 5c:c4:36:44:88:95:d5:a1:e4:96:7a:74:78:6f:22:23:39:64: 43:a0:f9:7e:ed:57:27:0b:87:6a:6f:a0:3f:ee:29:9e:ba:bd: 0f:67:30:e4:ea:ad:0c:c7:9b:19:36:d8:ab:f2:be:81:75:7a: ef:7f:24:80:6f:ca:12:5f:af:72:c8:92:51:ef:44:e9:8a:bd: c2:31:41:a0:8e:89:ca:ac:9e:60:52:4a:22:6e:97:af:a8:cf: 44:d3:f8:d0:6b:6f:f3:b7:38:4d:fe:67:5d:ce:ec:08:6f:64: 74:76:13:bb:39:cf:7f:eb:5e:d0:10:0e:76:bf:9c:f8:4c:74: dc:ea:54:7d:ac:03:62:46:65:2f:e0:00:09:65:f2:ca:de:c7: ed:25:34:a7:96:fd:df:a3:e9:43:ed:99:4a:cb:c8:92:85:f1: 1d:bc:7e:e0:0c:1f:0b:ca:f4:8f:41:63:14:72:de:4c:f3:95: ed:09:04:c6:20:8d:27:f1:63:47:8b:41:0f:e2:59:9f:65:b0: d1:b9:9d:ad:4e:4a:28:9f:51:d0:75:dc:5a:03:73:bb:41:72: 08:77:34:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhGpLGWPpFnS+n9uSD4eO5DcZTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBG N0FFQzY0RjAeFw0yNjA4MDIxMTIxMzJaFw0yNjA4MDMxNDMzMzJaMDMxMTAvBgNV BAMTKENCQUVCMkU4NDJDMUY3M0Q5N0ExNjY3OEU1QjZCQzk2QUZGQkNDM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/urjUIznj3+aVuajX8E0W6rC rySKGLBCL9KgAPbCj7j9agVcDoXpspEMeOMsVQ8P60rS+XsqrzcljchQnVaU27Vx 3T27olK7vmqoV6pEPULTcDQgDHF/ghUK1xkZmInAWDil4MvDIzz3nsTGy1aALySQ dp//RaGiOH+4b3PProFJBWga4i/xYXbSy/aSUCIzfHExnqpkJiCHrcBkrp0iDkD6 wLdneiABgCXLG0oUDzFhuLavRD3snuFe79vZXtXYIYSO/m7jacZYH2l9WfDmfmOr vLdEaQgXUkq4BM9pc1SYUOM864yUbS8lT7foYbkrpNfdOPcUdja8GFlNDYnNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy66y6ELB9z2XoWZ45ba8lq/7zDowHwYDVR0j BBgwFoAUC1mn0GauLeO5eCCu8XkasPeuxk8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2 NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBGN0FFQzY0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQjU5QTdEMDY2QUUyREUzQjk3ODIwQUVGMTc5MUFCMEY3QUVD NjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFB QjBGN0FFQzY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+OAfkx/Dkw8lg5TEVjxDtHvUp1366ZUpVI hldZX4w+409MJFzENkSIldWh5JZ6dHhvIiM5ZEOg+X7tVycLh2pvoD/uKZ66vQ9n MOTqrQzHmxk22KvyvoF1eu9/JIBvyhJfr3LIklHvROmKvcIxQaCOicqsnmBSSiJu l6+oz0TT+NBrb/O3OE3+Z13O7AhvZHR2E7s5z3/rXtAQDna/nPhMdNzqVH2sA2JG ZS/gAAll8srex+0lNKeW/d+j6UPtmUrLyJKF8R28fuAMHwvK9I9BYxRy3kzzle0J BMYgjSfxY0eLQQ/iWZ9lsNG5na1OSiifUdB13FoDc7tBcgh3NPU= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:52 2026 by rpki-client