$ rpki-client -vvf rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft File: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft (raw, json) Hash identifier: DvFSsAZE/6ssakiO7vqhamPB+fN/rBPlQSGJznGML88= Subject key identifier: 80:3B:1B:4F:0D:E3:05:46:1E:DB:C7:D6:35:23:33:80:5C:74:A2:39 Authority key identifier: B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 Certificate issuer: /CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Certificate serial: 2D9EDD1467E08BACE5A126B84D778C336F2E0981 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 13:10:42 +0000 Manifest this update: Sat 13 Jun 2026 13:05:42 +0000 Manifest next update: Sun 14 Jun 2026 15:17:42 +0000 Files and hashes: 1: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: 7fp5Ub3jhSAS7agpOvlqaj1locBlJuu/plnhXOCrJf0=) 2: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl (hash: IQlup6muqOvzSuyHMXcslggIQH1LLFarjMjIhOaWKmo=) 3: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: 3oVok3CXFl7cXz9v90zmFcUMxw7NjqzD2OW/U6gUOnc=) 4: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: gCpw2vGjm5jpbPiN9g0VamqWAxByjyrdBgvX9WD/FEw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9e:dd:14:67:e0:8b:ac:e5:a1:26:b8:4d:77:8c:33:6f:2e:09:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Validity Not Before: Jun 13 13:05:42 2026 GMT Not After : Jun 14 15:17:42 2026 GMT Subject: CN=803B1B4F0DE305461EDBC7D6352333805C74A239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:98:91:a2:45:6b:41:c4:75:4d:d9:47:aa: 39:57:1d:52:94:72:30:45:f3:5a:6b:f1:e6:ab:38: d1:54:f4:7b:d0:f7:07:58:11:f6:06:24:21:cb:1c: 20:ed:50:66:a0:e2:92:bb:2e:08:3f:c3:bc:db:c2: 97:95:9b:fe:4c:9d:3b:55:65:85:24:3e:ef:1e:cc: 9a:6c:8e:2d:b8:17:1d:d2:d3:d7:07:50:d6:b1:30: a6:af:60:26:e1:11:fa:f0:3f:83:f5:4a:86:54:14: 81:d6:54:a0:21:76:29:60:45:e7:93:5d:28:51:2b: 4d:6e:13:59:b8:97:e6:22:12:da:e7:ce:ae:7b:86: d4:01:10:89:75:df:fc:f7:0b:0b:15:f7:2a:ff:b1: ad:65:9d:89:d5:b1:92:4e:19:f8:35:ea:1d:8b:bc: 1c:f6:1b:25:5c:a6:9f:79:b5:47:ad:62:d9:57:e2: 59:59:5d:ee:00:81:d6:9f:05:70:f2:39:b2:6e:dd: b8:1f:89:6a:ff:92:de:3f:00:1b:ec:06:f4:51:b6: 9e:85:8b:5b:03:3f:a2:d1:12:eb:71:d5:c7:34:50: ea:66:54:53:d3:d8:39:7d:5b:7b:5a:e0:22:51:45: 07:03:1e:fe:b5:eb:e1:99:9d:ce:99:05:7a:2b:a8: 52:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3B:1B:4F:0D:E3:05:46:1E:DB:C7:D6:35:23:33:80:5C:74:A2:39 X509v3 Authority Key Identifier: keyid:B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:97:3f:9c:52:dc:ae:0d:6f:e4:af:62:cf:04:9c:fc:c0:7a: 06:b9:7d:92:bf:9d:26:74:2e:a4:71:a7:f0:fd:31:b0:6d:f2: 27:51:3f:a5:94:ec:58:35:da:32:2e:59:ea:df:ff:42:5d:06: 45:61:b0:82:4a:8e:3d:9f:74:46:d4:30:00:bc:8e:34:8c:76: 98:66:db:69:75:d7:88:23:9b:da:d2:21:af:b2:59:db:e3:1d: aa:e0:d4:0a:22:56:b6:10:48:42:d1:25:be:59:0c:d0:47:42: a8:2a:a5:38:e5:aa:7e:35:50:e8:aa:25:26:fb:6f:85:a0:5c: 86:54:d5:0f:58:b1:2e:56:bc:b6:fb:10:4b:d2:81:8d:4a:c4: cc:97:7e:cf:d5:4a:ca:8d:fe:3e:af:d3:9c:0b:6c:e9:a7:17: c3:52:60:05:c8:55:66:27:16:c3:32:de:eb:eb:c3:1d:d5:f3: 9e:e1:77:a9:34:0d:3e:fb:24:5f:de:e5:59:ed:37:20:8b:51: 98:dc:fd:e6:a6:04:d9:15:58:82:e0:97:80:0a:b8:f5:19:68: 6f:62:47:94:e5:7e:c3:24:9c:5e:88:b5:97:39:64:d5:d7:7a: 09:86:89:fc:75:63:fd:33:e2:b8:5c:6f:62:70:15:3e:b2:b9: 8f:e5:c5:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZ7dFGfgi6zloSa4TXeMM28uCYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJB QjhDNUY2MDAeFw0yNjA2MTMxMzA1NDJaFw0yNjA2MTQxNTE3NDJaMDMxMTAvBgNV BAMTKDgwM0IxQjRGMERFMzA1NDYxRURCQzdENjM1MjMzMzgwNUM3NEEyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5m5iRokVrQcR1TdlHqjlXHVKU cjBF81pr8earONFU9HvQ9wdYEfYGJCHLHCDtUGag4pK7Lgg/w7zbwpeVm/5MnTtV ZYUkPu8ezJpsji24Fx3S09cHUNaxMKavYCbhEfrwP4P1SoZUFIHWVKAhdilgReeT XShRK01uE1m4l+YiEtrnzq57htQBEIl13/z3CwsV9yr/sa1lnYnVsZJOGfg16h2L vBz2GyVcpp95tUetYtlX4llZXe4AgdafBXDyObJu3bgfiWr/kt4/ABvsBvRRtp6F i1sDP6LREutx1cc0UOpmVFPT2Dl9W3ta4CJRRQcDHv616+GZnc6ZBXorqFIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgDsbTw3jBUYe28fWNSMzgFx0ojkwHwYDVR0j BBgwFoAUsVnTPTUi0nzfz0yBkROC4quMX2AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcwYzQ3NTktNDNiOC00ZTgwLWJlOGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0Qz NTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJBQjhDNUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTU5RDMzRDM1MjJEMjdDREZDRjRDODE5MTEzODJFMkFCOEM1 RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgy RTJBQjhDNUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGXP5xS3K4Nb+SvYs8EnPzAega5fZK/nSZ0 LqRxp/D9MbBt8idRP6WU7Fg12jIuWerf/0JdBkVhsIJKjj2fdEbUMAC8jjSMdphm 22l114gjm9rSIa+yWdvjHarg1AoiVrYQSELRJb5ZDNBHQqgqpTjlqn41UOiqJSb7 b4WgXIZU1Q9YsS5WvLb7EEvSgY1KxMyXfs/VSsqN/j6v05wLbOmnF8NSYAXIVWYn FsMy3uvrwx3V857hd6k0DT77JF/e5VntNyCLUZjc/eamBNkVWILgl4AKuPUZaG9i R5TlfsMknF6ItZc5ZNXXegmGifx1Y/0z4rhcb2JwFT6yuY/lxTA= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:42 2026 by rpki-client