$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft File: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft (raw, json) Hash identifier: P05pqhWsTLi3zrYtfCl4CrqePhoYe/3vR2kxqvOZecw= Subject key identifier: 67:80:28:93:61:F7:88:81:81:69:D7:57:29:0A:C5:FB:64:89:D5:86 Authority key identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F Certificate issuer: /CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Certificate serial: 1954D91DAED9DC7432315556B05A9812702FF719 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:07:17 +0000 Manifest this update: Thu 17 Sep 2026 07:02:17 +0000 Manifest next update: Fri 18 Sep 2026 08:43:17 +0000 Files and hashes: 1: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl (hash: k5QUrgxjGBXk7MW/5Qv/o/kn/Nvm1sRqrn5aYZYPea0=) 2: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: k8/tG1r6Hku+axyAkhpoG9wapKfM0tuW5ME+1hieoV0=) 3: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: IlP4XUrtIYB7cIrDzPVEacnUChoP62KcR47GYYrS40A=) 4: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: +5fvfc8ajMhGADJCEcdbEhQ6j6dAVRmNeOZFiwEvBZ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:54:d9:1d:ae:d9:dc:74:32:31:55:56:b0:5a:98:12:70:2f:f7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Validity Not Before: Sep 17 07:02:17 2026 GMT Not After : Sep 18 08:43:17 2026 GMT Subject: CN=6780289361F788818169D757290AC5FB6489D586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:ca:1e:3f:b0:36:91:c6:83:0e:cc:3e:a2: 8b:d0:4d:0c:84:bc:1e:05:99:5a:fe:f1:7b:50:a7: f9:21:91:52:60:1e:92:04:7f:4c:f5:06:2b:1f:7f: d4:20:9f:5a:30:8d:1a:51:74:8d:ff:42:05:78:48: 6c:a5:18:3a:93:1c:0c:5f:12:92:98:81:75:c9:ee: 71:13:5a:c7:f9:6b:df:d8:14:ad:92:e5:74:d8:08: 86:a6:e9:ba:d1:76:0c:67:bf:64:94:39:2d:a8:9f: 04:68:87:ad:d3:0d:1a:71:51:7f:f1:3a:9d:b0:2a: eb:c1:db:d3:9c:c2:ed:eb:8c:26:44:0d:11:d9:b2: 00:fc:bb:e6:1a:fe:bd:6b:1a:e9:8e:4e:9d:b5:b9: 98:9b:e3:88:81:b4:97:24:a7:42:07:68:00:8e:a2: 18:15:28:72:fd:45:5f:e5:c1:5c:08:b1:81:ec:68: b2:52:f3:14:97:46:f9:08:f3:4c:23:d2:32:ce:34: b0:40:5a:fb:c7:9a:f9:61:95:ae:aa:3b:01:dc:7e: 64:bb:65:3d:7d:a4:88:bb:d1:db:a6:80:3e:6f:bd: 3b:1b:55:03:a4:4d:89:f4:d3:06:0b:fb:d2:9b:9b: 66:72:6e:26:5f:92:20:53:0b:42:15:f8:4a:e2:65: f6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:80:28:93:61:F7:88:81:81:69:D7:57:29:0A:C5:FB:64:89:D5:86 X509v3 Authority Key Identifier: keyid:0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:0f:f8:eb:d6:fe:e0:14:2b:6c:d2:a8:3f:06:63:08:9f:1b: 96:7b:a2:44:6f:79:7d:3b:f1:55:e7:3f:9a:75:56:d0:f3:a2: 95:8a:0b:5f:24:ef:1f:d0:9e:ca:dc:21:8d:33:c4:10:bf:7c: 45:7b:82:e9:5d:8d:fc:01:77:db:ad:39:1b:ff:5e:45:58:c2: d6:f1:87:64:9f:a2:bb:f0:65:f0:85:55:eb:bb:5d:62:21:c2: 71:59:ab:ac:51:de:e5:20:5e:1a:49:6c:fc:10:08:27:c9:ef: c6:6f:c1:6c:5f:82:b7:18:bd:82:11:2c:d8:4b:26:f4:74:92: 33:0e:bd:81:55:49:f7:ea:c0:7f:56:7c:27:85:83:c5:cd:4a: 0b:c7:4c:87:a8:b7:1a:34:cb:8f:b0:59:71:6b:93:ec:c8:cd: 5f:b1:68:76:ac:85:b1:26:00:af:9f:67:14:39:7a:fc:ad:15: 55:94:c7:2a:09:46:0b:c8:c8:b1:b4:ec:f4:c3:c8:f8:82:3a: bd:1f:ca:c9:47:39:8e:19:6c:1e:b6:79:55:e7:7b:47:92:3e: 46:cd:7e:31:c4:a1:0b:06:84:a2:86:39:f1:14:30:f6:a2:a0: 61:0f:7e:8c:78:38:5e:30:3d:d6:5d:2c:e7:9e:16:9c:a7:f7: 09:51:ca:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVTZHa7Z3HQyMVVWsFqYEnAv9xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBG N0FFQzY0RjAeFw0yNjA5MTcwNzAyMTdaFw0yNjA5MTgwODQzMTdaMDMxMTAvBgNV BAMTKDY3ODAyODkzNjFGNzg4ODE4MTY5RDc1NzI5MEFDNUZCNjQ4OUQ1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPcoeP7A2kcaDDsw+oovQTQyE vB4FmVr+8XtQp/khkVJgHpIEf0z1Bisff9Qgn1owjRpRdI3/QgV4SGylGDqTHAxf EpKYgXXJ7nETWsf5a9/YFK2S5XTYCIam6brRdgxnv2SUOS2onwRoh63TDRpxUX/x Op2wKuvB29Ocwu3rjCZEDRHZsgD8u+Ya/r1rGumOTp21uZib44iBtJckp0IHaACO ohgVKHL9RV/lwVwIsYHsaLJS8xSXRvkI80wj0jLONLBAWvvHmvlhla6qOwHcfmS7 ZT19pIi70dumgD5vvTsbVQOkTYn00wYL+9Kbm2ZybiZfkiBTC0IV+EriZfZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ4Aok2H3iIGBaddXKQrF+2SJ1YYwHwYDVR0j BBgwFoAUC1mn0GauLeO5eCCu8XkasPeuxk8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2 NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBGN0FFQzY0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQjU5QTdEMDY2QUUyREUzQjk3ODIwQUVGMTc5MUFCMEY3QUVD NjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFB QjBGN0FFQzY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIP+OvW/uAUK2zSqD8GYwifG5Z7okRveX07 8VXnP5p1VtDzopWKC18k7x/QnsrcIY0zxBC/fEV7guldjfwBd9utORv/XkVYwtbx h2SforvwZfCFVeu7XWIhwnFZq6xR3uUgXhpJbPwQCCfJ78ZvwWxfgrcYvYIRLNhL JvR0kjMOvYFVSffqwH9WfCeFg8XNSgvHTIeotxo0y4+wWXFrk+zIzV+xaHashbEm AK+fZxQ5evytFVWUxyoJRgvIyLG07PTDyPiCOr0fyslHOY4ZbB62eVXne0eSPkbN fjHEoQsGhKKGOfEUMPaioGEPfox4OF4wPdZdLOeeFpyn9wlRyvM= -----END CERTIFICATE-----Generated at Thu Sep 17 16:50:23 2026 by rpki-client