$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft File: 3559C104797053AE8E5C72BE7726BF44C2878CF1.mft (raw, json) Hash identifier: 6qzUSpdv/3W+ugXocIA4HGZoXnEAcYT21Yqk/yhEdXU= Subject key identifier: 71:50:A4:27:4D:23:F4:EA:80:72:87:AE:6D:D2:03:D5:1F:AA:B5:5E Authority key identifier: 35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1 Certificate issuer: /CN=3559C104797053AE8E5C72BE7726BF44C2878CF1 Certificate serial: 53A6A6AD77252CF6150B4EA082CEE4F8F166623E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:42:11 +0000 Manifest this update: Mon 21 Sep 2026 20:37:11 +0000 Manifest next update: Tue 22 Sep 2026 22:14:11 +0000 Files and hashes: 1: 3559C104797053AE8E5C72BE7726BF44C2878CF1.crl (hash: Y2p9odOmv7hnOHIQ6uBJq92EZHNl7LM2vE1LL3YOWR4=) 2: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: TDHHkU7auhZbGybqQy/XY5A0u3/rxbPGk544rbieSIw=) 3: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: eqd0E+Lb4EVtDoQqymHQTLKTQ6HfKOpFx++L2qv+u+A=) 4: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: fC4L8rYhZI0UDA/WORkA1APzTZ9nOmT1ddK9x1B6L7w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a6:a6:ad:77:25:2c:f6:15:0b:4e:a0:82:ce:e4:f8:f1:66:62:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3559C104797053AE8E5C72BE7726BF44C2878CF1 Validity Not Before: Sep 21 20:37:11 2026 GMT Not After : Sep 22 22:14:11 2026 GMT Subject: CN=7150A4274D23F4EA807287AE6DD203D51FAAB55E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:27:11:cc:49:7a:71:e0:96:b8:cf:ec:0a: 49:0e:37:4d:ec:ca:d1:4b:d9:c9:17:7a:f2:a9:e5: 23:64:da:c6:29:1b:c7:9d:21:27:d6:43:f6:81:6d: 8c:5b:54:5c:94:86:45:81:c2:b2:53:96:45:ab:88: c2:99:fd:99:c0:31:d7:4d:5f:de:01:cc:83:a2:62: e8:2c:55:6e:20:31:b8:5a:01:2b:7b:11:42:1a:c8: e1:65:96:0c:0e:c6:fd:9b:69:15:aa:71:c1:da:6c: d9:5f:a0:09:3f:dd:e5:e2:c3:f5:76:48:22:45:70: 67:ed:d9:19:ad:74:52:28:7f:70:39:56:d0:e4:7b: 71:53:7d:3e:5a:f6:c2:44:51:97:b3:a0:0a:16:a3: 71:d1:ae:81:24:50:99:57:92:d9:dd:b3:86:22:f1: a8:27:f1:d9:9a:41:0d:24:bf:cb:02:f1:07:e5:0f: f5:09:6d:e3:3b:74:96:7d:15:4d:af:de:d7:0b:be: 03:b1:d8:cf:09:d9:c3:71:1f:4c:07:1b:f0:12:e1: 17:d2:3d:cc:87:f0:64:f4:45:b1:48:97:a1:36:0d: a4:7c:de:51:11:f9:59:bc:0b:56:34:d1:36:48:f4: 91:64:2c:a5:4c:58:20:58:db:59:aa:43:c3:cd:05: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:50:A4:27:4D:23:F4:EA:80:72:87:AE:6D:D2:03:D5:1F:AA:B5:5E X509v3 Authority Key Identifier: keyid:35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:95:ec:99:09:03:f3:c9:50:34:f3:c3:9f:6d:47:7c:55:b4: 51:db:13:6d:e4:41:e4:a4:d2:4d:97:0e:61:19:d5:2c:42:2d: 08:dd:9f:89:f9:4b:c4:48:37:80:8b:87:bc:dc:60:b6:00:72: 57:3e:5f:08:7d:4d:83:53:93:95:88:01:f4:96:d9:b6:1a:9a: 70:ec:81:35:5a:e7:1a:22:68:bb:53:4d:9a:ad:da:85:7b:f6: 70:ec:2c:b9:8b:1d:f2:f0:d2:2e:18:12:97:9c:85:f1:cb:b4: c5:aa:92:1d:08:a7:22:c6:1b:96:bc:50:7b:e5:75:f2:35:17: a1:a2:8d:96:4e:71:f2:ca:28:ba:d7:4b:b5:7e:ab:15:ce:b0: 8c:0b:9d:79:b0:30:ca:42:cf:e5:8f:42:02:03:5a:51:d3:9d: 17:5a:94:61:d6:92:88:78:71:f0:15:53:0e:1a:29:62:5f:ff: 75:80:22:42:9f:19:a7:aa:55:74:08:7a:0c:f6:55:72:9a:aa: de:a7:05:5d:23:89:98:9e:87:d5:93:32:68:dd:24:cf:ef:78: f9:e5:ef:cd:1d:1b:2a:f3:a0:f4:6c:fa:84:36:f3:5a:55:b4: 8e:6c:21:f7:c6:87:91:da:3a:00:6c:c2:d8:26:f8:b9:ad:9a: e6:9a:d2:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU6amrXclLPYVC06ggs7k+PFmYj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1OUMxMDQ3OTcwNTNBRThFNUM3MkJFNzcyNkJGNDRD Mjg3OENGMTAeFw0yNjA5MjEyMDM3MTFaFw0yNjA5MjIyMjE0MTFaMDMxMTAvBgNV BAMTKDcxNTBBNDI3NEQyM0Y0RUE4MDcyODdBRTZERDIwM0Q1MUZBQUI1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0jycRzEl6ceCWuM/sCkkON03s ytFL2ckXevKp5SNk2sYpG8edISfWQ/aBbYxbVFyUhkWBwrJTlkWriMKZ/ZnAMddN X94BzIOiYugsVW4gMbhaASt7EUIayOFllgwOxv2baRWqccHabNlfoAk/3eXiw/V2 SCJFcGft2RmtdFIof3A5VtDke3FTfT5a9sJEUZezoAoWo3HRroEkUJlXktnds4Yi 8agn8dmaQQ0kv8sC8QflD/UJbeM7dJZ9FU2v3tcLvgOx2M8J2cNxH0wHG/AS4RfS PcyH8GT0RbFIl6E2DaR83lER+Vm8C1Y00TZI9JFkLKVMWCBY21mqQ8PNBbYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcVCkJ00j9OqAcoeubdID1R+qtV4wHwYDVR0j BBgwFoAUNVnBBHlwU66OXHK+dya/RMKHjPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFmMTZjNDUtOTZmYi00YzkyLTgwNGUtNjRiMGJmMjgwMzAyLzAvMzU1OUMxMDQ3 OTcwNTNBRThFNUM3MkJFNzcyNkJGNDRDMjg3OENGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTU5QzEwNDc5NzA1M0FFOEU1QzcyQkU3NzI2QkY0NEMyODc4 Q0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw NGUtNjRiMGJmMjgwMzAyLzAvMzU1OUMxMDQ3OTcwNTNBRThFNUM3MkJFNzcyNkJG NDRDMjg3OENGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASV7JkJA/PJUDTzw59tR3xVtFHbE23kQeSk 0k2XDmEZ1SxCLQjdn4n5S8RIN4CLh7zcYLYAclc+Xwh9TYNTk5WIAfSW2bYamnDs gTVa5xoiaLtTTZqt2oV79nDsLLmLHfLw0i4YEpechfHLtMWqkh0IpyLGG5a8UHvl dfI1F6GijZZOcfLKKLrXS7V+qxXOsIwLnXmwMMpCz+WPQgIDWlHTnRdalGHWkoh4 cfAVUw4aKWJf/3WAIkKfGaeqVXQIegz2VXKaqt6nBV0jiZieh9WTMmjdJM/vePnl 780dGyrzoPRs+oQ281pVtI5sIffGh5HaOgBswtgm+Lmtmuaa0nU= -----END CERTIFICATE-----Generated at Tue Sep 22 03:29:48 2026 by rpki-client