$ rpki-client -vvvf rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft File: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft (raw, json) Hash identifier: 2j9XKZUpWzCIhMDHCJUJe3SoZgJei7OhthT249ZkcXg= Subject key identifier: 2D:59:FA:5E:F7:C1:04:F3:DC:77:2E:3A:15:CD:D4:58:1E:5A:78:02 Authority key identifier: B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 Certificate issuer: /CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Certificate serial: 648C8E0D6D95D86663D00D0489BB9C3B52B7FCD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft Manifest number: BC Signing time: Sun 20 Sep 2026 22:04:12 +0000 Manifest this update: Sun 20 Sep 2026 21:59:12 +0000 Manifest next update: Mon 21 Sep 2026 22:34:12 +0000 Files and hashes: 1: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl (hash: RaPlbWssPkOWfegUhPKk1LHPKAHWwDGrtUM0XGjF2hc=) 2: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: 3oVok3CXFl7cXz9v90zmFcUMxw7NjqzD2OW/U6gUOnc=) 3: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: 7fp5Ub3jhSAS7agpOvlqaj1locBlJuu/plnhXOCrJf0=) 4: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: gCpw2vGjm5jpbPiN9g0VamqWAxByjyrdBgvX9WD/FEw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8c:8e:0d:6d:95:d8:66:63:d0:0d:04:89:bb:9c:3b:52:b7:fc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Validity Not Before: Sep 20 21:59:12 2026 GMT Not After : Sep 21 22:34:12 2026 GMT Subject: CN=2D59FA5EF7C104F3DC772E3A15CDD4581E5A7802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:76:d6:60:15:19:26:c7:ca:36:87:83:59:68: a1:be:07:4f:e7:45:16:e8:04:46:9f:a8:4d:09:29: aa:a6:36:5a:06:a8:79:51:e7:f6:1f:5d:73:1d:2e: fb:b5:f2:8f:77:e3:f0:ef:56:7c:e4:40:c2:fe:3c: 9d:3b:52:26:7c:f3:2b:24:d6:03:a9:5a:5a:3a:86: a9:0d:71:d4:f0:91:42:7c:ce:2d:d4:5e:e7:d2:53: 27:c4:5b:6a:71:44:38:66:21:69:19:cc:62:e7:97: e2:cf:7c:19:af:e1:79:de:86:8f:f6:d0:7f:76:ab: 5e:c6:fc:2c:5e:ab:8f:04:6a:35:80:36:60:5c:1f: 48:c2:84:65:05:f8:ac:b0:a2:69:c2:a5:33:bb:49: 80:23:31:06:9c:d0:74:40:4c:06:da:09:63:f1:3a: 03:c7:b0:b7:c8:b6:e6:f9:93:01:e1:84:9d:96:aa: aa:58:4c:ca:5b:4f:7b:00:fb:76:fd:40:9e:87:88: b6:3c:40:9b:84:58:0a:61:0b:ce:73:2f:3e:9f:6f: b9:44:f6:ef:dd:12:0b:b5:09:ed:1c:19:c8:49:3e: 5f:ec:d7:79:62:29:6e:b2:c6:59:75:da:ce:fd:d8: 25:f6:5a:4f:dd:3d:fa:e2:b8:71:1d:05:73:41:94: 8e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:59:FA:5E:F7:C1:04:F3:DC:77:2E:3A:15:CD:D4:58:1E:5A:78:02 X509v3 Authority Key Identifier: keyid:B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:87:db:2a:db:47:c3:3c:72:4e:24:48:7d:3a:c3:b1:26:4d: e0:7b:5c:5b:20:b4:e2:89:4c:b5:ef:c9:55:4b:1f:ac:df:84: c3:a6:7b:75:42:84:86:25:5b:e3:43:6b:16:3d:9d:46:9e:c2: 87:5f:ef:a2:60:64:74:83:10:94:8b:99:e9:d1:a5:04:35:41: 26:7e:21:a8:55:49:58:10:37:0d:85:2d:74:6b:ac:75:c8:6c: aa:21:c4:33:d3:7c:84:4c:33:97:41:aa:be:61:0a:2e:d5:c4: 9f:26:ad:83:e1:e7:86:ae:cc:d5:0b:fc:18:a6:10:b2:41:83: 70:f4:3a:f8:3d:b1:c5:b3:d3:db:be:3a:0e:95:f6:ec:0e:c9: 9f:73:a9:a3:95:d1:a1:b8:13:17:5d:b7:a5:56:bd:04:ab:f7: bc:8c:9a:cd:f4:2d:73:27:cd:8d:43:af:3f:e3:4f:0c:58:12: 98:6d:3e:b2:23:8b:a3:65:d3:c6:84:30:aa:b8:31:2e:75:35: cb:2e:a2:c9:b5:16:99:5b:51:09:68:a6:64:67:84:d9:e3:e1: 22:9c:e3:36:01:0c:f0:a8:0a:36:d8:37:85:0b:d9:0f:5b:31: 1d:b9:ce:a5:0e:b2:0e:8a:40:5d:42:55:39:da:3a:2d:c7:0f: d2:c2:05:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIyODW2V2GZj0A0EibucO1K3/NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJB QjhDNUY2MDAeFw0yNjA5MjAyMTU5MTJaFw0yNjA5MjEyMjM0MTJaMDMxMTAvBgNV BAMTKDJENTlGQTVFRjdDMTA0RjNEQzc3MkUzQTE1Q0RENDU4MUU1QTc4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdtZgFRkmx8o2h4NZaKG+B0/n RRboBEafqE0JKaqmNloGqHlR5/YfXXMdLvu18o934/DvVnzkQML+PJ07UiZ88ysk 1gOpWlo6hqkNcdTwkUJ8zi3UXufSUyfEW2pxRDhmIWkZzGLnl+LPfBmv4Xneho/2 0H92q17G/Cxeq48EajWANmBcH0jChGUF+KywomnCpTO7SYAjMQac0HRATAbaCWPx OgPHsLfItub5kwHhhJ2WqqpYTMpbT3sA+3b9QJ6HiLY8QJuEWAphC85zLz6fb7lE 9u/dEgu1Ce0cGchJPl/s13liKW6yxll12s792CX2Wk/dPfriuHEdBXNBlI5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULVn6XvfBBPPcdy46Fc3UWB5aeAIwHwYDVR0j BBgwFoAUsVnTPTUi0nzfz0yBkROC4quMX2AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcwYzQ3NTktNDNiOC00ZTgwLWJlOGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0Qz NTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJBQjhDNUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTU5RDMzRDM1MjJEMjdDREZDRjRDODE5MTEzODJFMkFCOEM1 RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgy RTJBQjhDNUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaH2yrbR8M8ck4kSH06w7EmTeB7XFsgtOKJ TLXvyVVLH6zfhMOme3VChIYlW+NDaxY9nUaewodf76JgZHSDEJSLmenRpQQ1QSZ+ IahVSVgQNw2FLXRrrHXIbKohxDPTfIRMM5dBqr5hCi7VxJ8mrYPh54auzNUL/Bim ELJBg3D0Ovg9scWz09u+Og6V9uwOyZ9zqaOV0aG4Exddt6VWvQSr97yMms30LXMn zY1Drz/jTwxYEphtPrIji6Nl08aEMKq4MS51Ncsuosm1FplbUQlopmRnhNnj4SKc 4zYBDPCoCjbYN4UL2Q9bMR25zqUOsg6KQF1CVTnaOi3HD9LCBWY= -----END CERTIFICATE-----Generated at Mon Sep 21 10:40:52 2026 by rpki-client