$ rpki-client -vvf rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft File: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft (raw, json) Hash identifier: WreymWpDDg1vhvD1U5NnC4bH0maSsTnFPuPBmEbZ0+0= Subject key identifier: 38:03:CE:50:D4:5B:14:19:1E:D4:4E:62:27:59:ED:4F:B8:0B:7B:EA Authority key identifier: B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 Certificate issuer: /CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Certificate serial: 43242FBBB9E399B83AB5E9350B6F067466F49980 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 03:55:57 +0000 Manifest this update: Wed 29 Jul 2026 03:50:57 +0000 Manifest next update: Thu 30 Jul 2026 05:05:57 +0000 Files and hashes: 1: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl (hash: IgGEaTxJ3rxHkPOmizniQJGpz/rNOfvMOWFqfkXFWPE=) 2: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: gCpw2vGjm5jpbPiN9g0VamqWAxByjyrdBgvX9WD/FEw=) 3: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: 7fp5Ub3jhSAS7agpOvlqaj1locBlJuu/plnhXOCrJf0=) 4: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: 3oVok3CXFl7cXz9v90zmFcUMxw7NjqzD2OW/U6gUOnc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:24:2f:bb:b9:e3:99:b8:3a:b5:e9:35:0b:6f:06:74:66:f4:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Validity Not Before: Jul 29 03:50:57 2026 GMT Not After : Jul 30 05:05:57 2026 GMT Subject: CN=3803CE50D45B14191ED44E622759ED4FB80B7BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:23:f1:da:f6:46:0e:d8:82:de:b3:f0:7a: eb:80:69:fd:5a:cb:ec:d5:ab:80:7c:34:a1:c4:d3: 03:9d:5f:63:99:1f:44:7a:4a:ee:c1:c0:dc:46:88: 09:02:40:8a:43:14:fa:96:09:c2:f0:18:90:4e:4a: 7d:14:80:57:3c:da:03:7c:fb:c5:dc:45:74:73:30: b7:a1:72:d6:57:97:a3:05:ca:0b:8e:68:3f:2c:93: 8f:cf:d8:f1:cd:87:53:ec:95:08:04:3a:51:8f:c3: 41:a2:b5:43:bd:a7:b2:e5:d5:79:58:99:8d:bd:54: 1f:e8:df:02:5c:3c:0e:8e:9a:dc:dd:d5:3c:0b:49: b3:72:4f:ee:83:9f:68:8c:a5:9b:e6:58:da:a1:42: 41:47:46:b0:93:31:2a:87:d8:76:e0:99:b3:cc:7a: 6e:a1:69:b7:e1:e2:4f:45:64:d5:81:ca:ec:8b:35: f6:e5:be:2b:8b:d7:70:09:ff:88:0e:e8:25:66:e9: 5b:6a:ab:af:51:c7:82:87:06:18:6d:de:d4:87:89: 40:2b:4c:8b:7b:56:36:07:c6:29:2f:69:d0:69:80: e7:a8:93:29:29:80:6a:a7:9b:1f:b7:d4:0f:71:0f: 13:e5:16:16:0b:e7:66:16:18:17:09:12:eb:6f:72: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:03:CE:50:D4:5B:14:19:1E:D4:4E:62:27:59:ED:4F:B8:0B:7B:EA X509v3 Authority Key Identifier: keyid:B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c4:61:a5:fb:84:20:ff:16:16:b4:e0:c3:b4:84:f8:69:b9: c6:c8:0a:29:7f:9c:fc:5d:16:77:30:dd:25:00:d5:96:c8:79: 4f:5c:c2:89:4a:1e:79:13:d8:9a:a7:a8:0d:b4:ea:6e:0b:49: f8:07:2c:1b:84:46:e3:d5:72:4a:ee:b0:62:12:bd:30:dc:73: 78:ea:51:f3:1c:d5:56:76:05:cd:9f:ab:20:b1:0c:62:a7:83: 0e:06:36:53:ce:16:5c:4d:5f:e4:2e:63:67:7d:a6:64:15:46: c3:ed:33:05:f1:bf:4a:ab:8c:34:ac:75:cf:f3:10:7f:98:62: b0:0e:20:5e:53:f0:2e:89:63:1c:86:15:f5:b8:1b:40:5a:9b: 77:34:58:99:1c:32:e4:87:64:d9:c3:7a:ae:c7:fa:57:74:98: af:00:13:07:c7:9e:b8:7c:55:9e:5f:71:8d:0f:d2:4d:32:b8: c3:fc:b1:81:c5:51:05:44:36:30:a2:d7:93:13:51:94:0a:80: 5b:a4:a1:22:ec:e3:17:34:56:9a:4a:91:5d:29:5d:20:a5:cd: 8a:16:bc:7d:c8:51:cc:e6:41:9d:18:fa:33:99:c8:d8:13:39: e5:f1:9d:f9:eb:a0:69:37:3b:92:ed:43:3d:3a:93:3d:1c:c7: 23:5a:59:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyQvu7njmbg6tek1C28GdGb0mYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJB QjhDNUY2MDAeFw0yNjA3MjkwMzUwNTdaFw0yNjA3MzAwNTA1NTdaMDMxMTAvBgNV BAMTKDM4MDNDRTUwRDQ1QjE0MTkxRUQ0NEU2MjI3NTlFRDRGQjgwQjdCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmbCPx2vZGDtiC3rPweuuAaf1a y+zVq4B8NKHE0wOdX2OZH0R6Su7BwNxGiAkCQIpDFPqWCcLwGJBOSn0UgFc82gN8 +8XcRXRzMLehctZXl6MFyguOaD8sk4/P2PHNh1PslQgEOlGPw0GitUO9p7Ll1XlY mY29VB/o3wJcPA6Omtzd1TwLSbNyT+6Dn2iMpZvmWNqhQkFHRrCTMSqH2HbgmbPM em6habfh4k9FZNWByuyLNfblviuL13AJ/4gO6CVm6Vtqq69Rx4KHBhht3tSHiUAr TIt7VjYHxikvadBpgOeokykpgGqnmx+31A9xDxPlFhYL52YWGBcJEutvcoVnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOAPOUNRbFBke1E5iJ1ntT7gLe+owHwYDVR0j BBgwFoAUsVnTPTUi0nzfz0yBkROC4quMX2AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcwYzQ3NTktNDNiOC00ZTgwLWJlOGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0Qz NTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJBQjhDNUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTU5RDMzRDM1MjJEMjdDREZDRjRDODE5MTEzODJFMkFCOEM1 RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgy RTJBQjhDNUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTEYaX7hCD/Fha04MO0hPhpucbICil/nPxd Fncw3SUA1ZbIeU9cwolKHnkT2JqnqA206m4LSfgHLBuERuPVckrusGISvTDcc3jq UfMc1VZ2Bc2fqyCxDGKngw4GNlPOFlxNX+QuY2d9pmQVRsPtMwXxv0qrjDSsdc/z EH+YYrAOIF5T8C6JYxyGFfW4G0Bam3c0WJkcMuSHZNnDeq7H+ld0mK8AEwfHnrh8 VZ5fcY0P0k0yuMP8sYHFUQVENjCi15MTUZQKgFukoSLs4xc0VppKkV0pXSClzYoW vH3IUczmQZ0Y+jOZyNgTOeXxnfnroGk3O5LtQz06kz0cxyNaWRE= -----END CERTIFICATE-----Generated at Wed Jul 29 06:36:39 2026 by rpki-client