$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft File: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft (raw, json) Hash identifier: SBP6X4O8MQwjd22y/zY8dSf6WwMms6oPp0sZC/JCTA8= Subject key identifier: CB:4F:70:3E:8E:B5:BA:C2:DA:CA:1C:D6:A5:8F:77:D6:B8:D2:4C:FD Authority key identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F Certificate issuer: /CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Certificate serial: 0AB02E4A06370093AD1147FB52F7FE263274E416 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft Manifest number: B9 Signing time: Fri 18 Sep 2026 00:44:06 +0000 Manifest this update: Fri 18 Sep 2026 00:39:06 +0000 Manifest next update: Sat 19 Sep 2026 02:48:06 +0000 Files and hashes: 1: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl (hash: 8ioGVZvVmLY9gYa1UFhX+Zp9obo37YTA2f/aELjoZN4=) 2: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: IlP4XUrtIYB7cIrDzPVEacnUChoP62KcR47GYYrS40A=) 3: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: +5fvfc8ajMhGADJCEcdbEhQ6j6dAVRmNeOZFiwEvBZ8=) 4: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: k8/tG1r6Hku+axyAkhpoG9wapKfM0tuW5ME+1hieoV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 02:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b0:2e:4a:06:37:00:93:ad:11:47:fb:52:f7:fe:26:32:74:e4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Validity Not Before: Sep 18 00:39:06 2026 GMT Not After : Sep 19 02:48:06 2026 GMT Subject: CN=CB4F703E8EB5BAC2DACA1CD6A58F77D6B8D24CFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a1:24:c1:1d:1b:91:82:ba:5a:01:49:76:c1: 09:86:4b:02:cd:39:bb:cd:16:1d:5b:bd:50:16:43: 44:7a:bb:e4:0f:d0:ae:19:1d:2e:ed:20:4b:19:06: 9b:d5:42:28:1a:70:d1:4f:00:a1:d1:6a:7e:01:08: 87:48:7c:1d:e2:53:1b:c9:c9:43:8b:46:69:09:1b: a8:14:4c:1a:48:02:00:f6:83:e4:7c:b2:66:fe:f6: 16:be:61:93:91:95:c1:dc:e8:42:73:47:b7:73:3a: d9:28:17:9b:61:e7:11:49:b1:67:9f:83:85:80:04: 6d:75:21:43:ea:7c:0c:40:6a:f2:df:08:b8:98:c8: e3:80:66:72:49:7f:49:52:72:cf:b4:f3:db:ff:a0: e0:31:6e:7a:66:cd:aa:78:ba:2d:37:37:7b:fa:a6: cc:d3:09:7f:3c:d0:58:a2:63:79:b5:94:fa:ab:c8: e5:89:c5:df:7d:37:ea:93:35:9c:f3:fe:a2:66:08: 4c:d5:21:70:4b:65:e1:f1:aa:d8:d4:e3:d0:f2:cc: e1:be:61:16:39:98:98:f8:4b:44:b1:25:51:ab:9a: f7:8e:32:03:d1:f9:93:b3:c4:cc:60:91:ef:ec:99: 85:20:e5:ba:ee:65:8e:85:dd:fb:04:ec:ce:5e:47: dc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4F:70:3E:8E:B5:BA:C2:DA:CA:1C:D6:A5:8F:77:D6:B8:D2:4C:FD X509v3 Authority Key Identifier: keyid:0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:9a:d7:1f:de:2a:9f:38:7e:f2:cb:3f:3a:56:cc:6f:9b:d9: 90:12:49:40:bf:2d:27:07:ff:93:b1:19:29:5d:2c:6c:e6:3e: 93:a4:20:bc:cf:59:db:6d:47:4e:f2:e6:1a:d2:cc:6c:56:53: 89:b0:6b:16:74:5c:0e:53:b9:92:6d:64:9b:61:4c:e0:21:7a: 66:69:b9:50:25:30:9a:19:83:f5:31:4e:54:3c:ab:9b:45:7e: 88:ae:ff:4d:fc:7f:7e:80:48:31:87:4a:06:89:b3:a9:52:85: 06:19:27:32:43:14:94:cf:b9:87:68:0c:19:8f:1d:30:e5:16: da:92:48:5e:c5:40:08:46:84:6a:5a:d7:c8:7b:49:5a:d9:d3: aa:6f:39:a8:8a:46:1c:69:3a:ec:2a:fb:1d:45:e2:3a:6a:72: f5:c0:ec:c0:96:66:a7:d1:29:26:92:56:ef:61:59:82:20:9f: 57:7d:2b:5d:e2:1b:35:8f:58:ec:48:75:dc:da:2c:79:2a:25: f5:ed:80:fd:b6:23:5d:58:19:89:c7:46:92:b5:4b:0d:5d:c5: 8d:ba:24:e8:aa:b8:94:a8:06:2e:da:9b:16:2b:a5:55:ea:12: c9:46:73:01:af:47:3f:70:88:35:bc:ba:f2:d4:ca:29:92:21: 46:99:0e:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrAuSgY3AJOtEUf7Uvf+JjJ05BYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBG N0FFQzY0RjAeFw0yNjA5MTgwMDM5MDZaFw0yNjA5MTkwMjQ4MDZaMDMxMTAvBgNV BAMTKENCNEY3MDNFOEVCNUJBQzJEQUNBMUNENkE1OEY3N0Q2QjhEMjRDRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZoSTBHRuRgrpaAUl2wQmGSwLN ObvNFh1bvVAWQ0R6u+QP0K4ZHS7tIEsZBpvVQigacNFPAKHRan4BCIdIfB3iUxvJ yUOLRmkJG6gUTBpIAgD2g+R8smb+9ha+YZORlcHc6EJzR7dzOtkoF5th5xFJsWef g4WABG11IUPqfAxAavLfCLiYyOOAZnJJf0lScs+089v/oOAxbnpmzap4ui03N3v6 pszTCX880FiiY3m1lPqryOWJxd99N+qTNZzz/qJmCEzVIXBLZeHxqtjU49DyzOG+ YRY5mJj4S0SxJVGrmveOMgPR+ZOzxMxgke/smYUg5bruZY6F3fsE7M5eR9yfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy09wPo61usLayhzWpY931rjSTP0wHwYDVR0j BBgwFoAUC1mn0GauLeO5eCCu8XkasPeuxk8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2 NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBGN0FFQzY0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQjU5QTdEMDY2QUUyREUzQjk3ODIwQUVGMTc5MUFCMEY3QUVD NjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFB QjBGN0FFQzY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISa1x/eKp84fvLLPzpWzG+b2ZASSUC/LScH /5OxGSldLGzmPpOkILzPWdttR07y5hrSzGxWU4mwaxZ0XA5TuZJtZJthTOAhemZp uVAlMJoZg/UxTlQ8q5tFfoiu/038f36ASDGHSgaJs6lShQYZJzJDFJTPuYdoDBmP HTDlFtqSSF7FQAhGhGpa18h7SVrZ06pvOaiKRhxpOuwq+x1F4jpqcvXA7MCWZqfR KSaSVu9hWYIgn1d9K13iGzWPWOxIddzaLHkqJfXtgP22I11YGYnHRpK1Sw1dxY26 JOiquJSoBi7amxYrpVXqEslGcwGvRz9wiDW8uvLUyimSIUaZDtg= -----END CERTIFICATE-----Generated at Fri Sep 18 15:07:41 2026 by rpki-client