$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft File: D59D3CB80F39720CC6378798AF38E978ACC61169.mft (raw, json) Hash identifier: nqV+IWja4IXSGkp+goHD5KjayXMtKpltFePRoOk5zNw= Subject key identifier: 09:C3:00:89:3C:30:83:8B:A2:C3:95:9A:34:94:66:B3:10:8A:4D:F1 Authority key identifier: D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69 Certificate issuer: /CN=D59D3CB80F39720CC6378798AF38E978ACC61169 Certificate serial: 06A365E84C1BE2CD2D57029AFEE69FC7B6959191 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft Manifest number: BE Signing time: Mon 21 Sep 2026 16:42:12 +0000 Manifest this update: Mon 21 Sep 2026 16:37:12 +0000 Manifest next update: Tue 22 Sep 2026 18:25:12 +0000 Files and hashes: 1: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: NXjXH8bagUMJQqwbA86uVF5uVlgJU27CgQDeHpB6ITQ=) 2: D59D3CB80F39720CC6378798AF38E978ACC61169.crl (hash: rPQhwm3rkMHrX6qemZfmRzyXtgsad9LLRV4hDlChhQY=) 3: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: TyeS6OFp+eX9ORLvbkAk7IV44ZT6uQE45kxcvU/K/wA=) 4: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: xDMl4fVPq1KOh6yEyAaFX1Ne1uCSqYoqoG2DK9eXVJc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a3:65:e8:4c:1b:e2:cd:2d:57:02:9a:fe:e6:9f:c7:b6:95:91:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59D3CB80F39720CC6378798AF38E978ACC61169 Validity Not Before: Sep 21 16:37:12 2026 GMT Not After : Sep 22 18:25:12 2026 GMT Subject: CN=09C300893C30838BA2C3959A349466B3108A4DF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:e3:42:fb:7d:64:9a:ae:c8:6d:60:39:86: c4:85:fe:0b:7b:2b:50:d7:df:6b:ce:c1:9d:eb:9e: 08:69:12:b0:a1:de:2f:e2:fa:06:7b:0a:f4:6d:a3: 2a:73:30:db:ff:68:1a:aa:07:17:c5:0b:0c:90:ff: 5f:2e:72:72:5e:41:9b:1a:19:61:96:0d:24:ae:1f: 06:4b:5c:d3:94:a5:d8:dd:ec:fa:5c:20:f3:3b:92: cd:5c:cf:69:21:a0:46:6f:34:0f:c6:6a:a4:50:ac: 08:22:ed:87:f6:7b:ce:bc:6a:d0:99:90:ff:e5:eb: 65:da:66:94:05:59:f6:b5:3d:6d:91:2c:ea:57:42: 78:3a:47:9b:30:c4:cf:6b:fe:b4:99:65:f0:9d:2c: 0f:80:d6:d8:a3:ad:ed:3e:f5:2b:48:1a:f2:9d:0a: b9:92:aa:5d:2e:52:a2:72:6c:f3:16:b1:03:11:9c: ef:ca:dd:d9:29:a6:d5:6d:10:d9:cc:a0:c7:52:28: 44:fd:fe:81:69:14:74:14:9a:d4:a6:51:c3:4f:dd: 0b:a8:4f:60:77:0a:be:65:ce:1f:d9:de:29:04:16: f5:18:15:24:f9:23:0a:fd:0c:54:64:19:fa:5a:f9: fc:77:ce:f4:68:4d:b9:6e:5d:22:7d:66:70:d5:eb: 57:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C3:00:89:3C:30:83:8B:A2:C3:95:9A:34:94:66:B3:10:8A:4D:F1 X509v3 Authority Key Identifier: keyid:D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bc:63:82:73:41:93:20:56:c4:7a:54:ca:99:ca:f5:9e:08: d5:da:81:11:15:5d:de:95:84:15:99:fe:f9:8c:3d:bd:07:d5: 1c:fb:39:d5:24:91:75:ec:48:c3:15:96:c4:dc:e5:d5:35:04: c5:25:9b:db:5d:ca:1f:f6:13:45:3a:e2:a6:f6:b5:c8:25:8c: ea:49:cf:32:19:8e:5c:b7:16:27:d7:81:e8:f9:c5:4e:8f:5b: 5c:08:f4:f8:e2:73:22:d3:f3:65:05:70:23:03:71:68:c8:04: b7:f7:2a:1f:d9:9d:0a:4c:e8:d0:6c:a6:38:ed:0d:64:1e:0f: 3c:f5:a6:fd:84:59:51:8a:92:39:1e:f7:96:00:9f:dc:eb:eb: ae:44:f9:63:23:6b:7e:8e:a2:f2:50:55:da:a0:79:7a:a5:4f: f9:f5:09:83:1c:3d:66:60:d8:7a:62:fa:15:53:29:5a:53:18: 71:03:c3:1b:a9:a8:af:83:52:65:7f:a4:55:f5:b0:77:6b:05: b3:78:3f:73:a2:94:01:5f:9a:95:a2:cb:c3:12:af:66:b7:38: 78:46:27:02:02:e1:dc:25:cc:9b:65:d3:a3:bb:7d:61:78:18: 58:0d:6b:94:90:e0:3a:33:5f:03:38:60:a1:9b:2c:b4:0d:3c: a6:b1:f5:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBqNl6Ewb4s0tVwKa/uafx7aVkZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5RDNDQjgwRjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5NzhB Q0M2MTE2OTAeFw0yNjA5MjExNjM3MTJaFw0yNjA5MjIxODI1MTJaMDMxMTAvBgNV BAMTKDA5QzMwMDg5M0MzMDgzOEJBMkMzOTU5QTM0OTQ2NkIzMTA4QTRERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDESONC+31kmq7IbWA5hsSF/gt7 K1DX32vOwZ3rnghpErCh3i/i+gZ7CvRtoypzMNv/aBqqBxfFCwyQ/18ucnJeQZsa GWGWDSSuHwZLXNOUpdjd7PpcIPM7ks1cz2khoEZvNA/GaqRQrAgi7Yf2e868atCZ kP/l62XaZpQFWfa1PW2RLOpXQng6R5swxM9r/rSZZfCdLA+A1tijre0+9StIGvKd CrmSql0uUqJybPMWsQMRnO/K3dkpptVtENnMoMdSKET9/oFpFHQUmtSmUcNP3Quo T2B3Cr5lzh/Z3ikEFvUYFST5Iwr9DFRkGfpa+fx3zvRoTbluXSJ9ZnDV61c3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCcMAiTwwg4uiw5WaNJRmsxCKTfEwHwYDVR0j BBgwFoAU1Z08uA85cgzGN4eYrzjpeKzGEWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU3MDU5MjctZWM2NC00NGY1LTljOWUtYzlhNTVhNTIzYjY0LzAvRDU5RDNDQjgw RjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5NzhBQ0M2MTE2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTlEM0NCODBGMzk3MjBDQzYzNzg3OThBRjM4RTk3OEFDQzYx MTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU3MDU5MjctZWM2NC00NGY1LTlj OWUtYzlhNTVhNTIzYjY0LzAvRDU5RDNDQjgwRjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5 NzhBQ0M2MTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGy8Y4JzQZMgVsR6VMqZyvWeCNXagREVXd6V hBWZ/vmMPb0H1Rz7OdUkkXXsSMMVlsTc5dU1BMUlm9tdyh/2E0U64qb2tcgljOpJ zzIZjly3FifXgej5xU6PW1wI9PjicyLT82UFcCMDcWjIBLf3Kh/ZnQpM6NBspjjt DWQeDzz1pv2EWVGKkjke95YAn9zr665E+WMja36OovJQVdqgeXqlT/n1CYMcPWZg 2Hpi+hVTKVpTGHEDwxupqK+DUmV/pFX1sHdrBbN4P3OilAFfmpWiy8MSr2a3OHhG JwIC4dwlzJtl06O7fWF4GFgNa5SQ4DozXwM4YKGbLLQNPKax9c4= -----END CERTIFICATE-----Generated at Tue Sep 22 10:49:15 2026 by rpki-client