$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft File: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft (raw, json) Hash identifier: mKEJ26TGDsnLHsYgv4hJ0y08oLS3UpiVb7hgvIdB3nw= Subject key identifier: 91:1A:76:14:E2:70:F6:9B:96:75:86:73:31:35:24:08:29:DE:B3:51 Authority key identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F Certificate issuer: /CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Certificate serial: 09B4D17DE5DC9D272F110F7388777A4502EF10A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:19:18 +0000 Manifest this update: Wed 17 Jun 2026 05:14:18 +0000 Manifest next update: Thu 18 Jun 2026 08:52:18 +0000 Files and hashes: 1: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl (hash: 4wYqmSrG++3DediGLHzcenyGMddIehPs5bsGJ4ompvI=) 2: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: +5fvfc8ajMhGADJCEcdbEhQ6j6dAVRmNeOZFiwEvBZ8=) 3: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: IlP4XUrtIYB7cIrDzPVEacnUChoP62KcR47GYYrS40A=) 4: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: k8/tG1r6Hku+axyAkhpoG9wapKfM0tuW5ME+1hieoV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b4:d1:7d:e5:dc:9d:27:2f:11:0f:73:88:77:7a:45:02:ef:10:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Validity Not Before: Jun 17 05:14:18 2026 GMT Not After : Jun 18 08:52:18 2026 GMT Subject: CN=911A7614E270F69B967586733135240829DEB351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1e:8e:94:62:16:87:20:13:bb:ad:80:7c:e6: da:f3:4f:24:29:81:f1:d6:ed:8e:15:47:ce:85:89: a3:34:7c:40:93:2a:78:60:f2:41:65:cd:40:47:17: db:86:20:c3:f2:c0:72:64:b4:d7:ea:29:a2:ed:c2: 84:b0:8d:b9:1c:59:9f:70:c0:5c:64:56:92:99:f0: 32:63:c5:23:e6:d9:16:02:7c:ea:b5:0d:c4:6a:fe: 16:be:e9:91:71:be:22:00:f6:cf:96:d8:f3:07:71: fb:7c:6c:d1:54:0d:5a:b5:7f:47:d1:2e:df:36:fa: bd:fa:fe:03:35:bd:54:a8:fe:3a:de:76:e4:a3:24: e8:8d:b8:17:13:20:0e:e0:e8:1a:25:95:9c:56:8d: 1d:25:c0:32:d6:b2:ea:bd:be:17:cf:2e:4d:53:d1: a0:d6:d3:d1:30:80:7b:78:21:56:0e:9f:42:6a:39: 44:63:8e:f9:e1:57:a2:bb:9a:2a:60:2e:92:31:09: 9d:7d:db:d2:15:6d:f3:22:61:b4:d9:a7:fc:de:62: f0:3d:7f:ba:a7:e5:7d:2a:cb:0c:c7:8c:19:87:bc: 44:e2:74:1c:d8:e4:d7:ef:88:21:90:61:48:c7:95: 75:d6:7a:0a:9c:1c:3a:2b:c6:b6:10:18:6d:cd:c9: 74:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1A:76:14:E2:70:F6:9B:96:75:86:73:31:35:24:08:29:DE:B3:51 X509v3 Authority Key Identifier: keyid:0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9d:31:a6:5c:d6:e8:89:89:b2:c1:6d:3d:10:26:32:76:05: 9e:6a:e2:b0:dc:47:91:d5:f0:fe:92:33:77:53:0b:f8:05:c8: 05:e9:e7:23:b2:cc:34:76:43:57:a8:28:b0:d1:b4:d1:03:b9: a5:7a:15:07:f1:74:46:c3:83:c6:38:c5:22:f4:70:fd:63:f4: 19:06:b2:fe:63:85:ab:ca:5e:c8:3f:e2:70:db:f5:46:7f:d8: 7c:b6:4f:b6:6a:75:bc:55:e6:37:55:84:40:bd:3c:66:35:27: 64:7c:0e:5a:86:74:38:38:44:6b:4f:41:f2:3e:e0:84:93:0c: d3:9d:a7:86:95:7c:7b:3a:91:6a:f5:76:47:2e:f9:ef:75:d3: 3e:4b:d3:ee:b7:0f:16:17:91:53:af:5b:4d:67:af:2a:7e:cb: ac:99:c5:c3:08:50:dc:09:ec:04:0c:2a:fc:fa:6d:ea:29:7c: 8e:3e:55:db:33:c6:b6:74:67:f6:cf:54:ca:8c:19:86:dc:ac: 4e:b1:95:be:aa:2a:1f:fc:e7:ed:16:3b:cf:24:18:1e:25:51: 26:13:4f:a6:f9:6e:e5:5b:21:ca:08:68:d5:f3:86:5c:96:cb: 9a:37:20:87:6f:4e:9b:90:e8:c2:20:06:fa:e8:4f:4c:1a:e8: 67:f6:c6:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbTRfeXcnScvEQ9ziHd6RQLvEKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBG N0FFQzY0RjAeFw0yNjA2MTcwNTE0MThaFw0yNjA2MTgwODUyMThaMDMxMTAvBgNV BAMTKDkxMUE3NjE0RTI3MEY2OUI5Njc1ODY3MzMxMzUyNDA4MjlERUIzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcHo6UYhaHIBO7rYB85trzTyQp gfHW7Y4VR86FiaM0fECTKnhg8kFlzUBHF9uGIMPywHJktNfqKaLtwoSwjbkcWZ9w wFxkVpKZ8DJjxSPm2RYCfOq1DcRq/ha+6ZFxviIA9s+W2PMHcft8bNFUDVq1f0fR Lt82+r36/gM1vVSo/jreduSjJOiNuBcTIA7g6BollZxWjR0lwDLWsuq9vhfPLk1T 0aDW09EwgHt4IVYOn0JqOURjjvnhV6K7mipgLpIxCZ1929IVbfMiYbTZp/zeYvA9 f7qn5X0qywzHjBmHvETidBzY5NfviCGQYUjHlXXWegqcHDorxrYQGG3NyXSfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkRp2FOJw9puWdYZzMTUkCCnes1EwHwYDVR0j BBgwFoAUC1mn0GauLeO5eCCu8XkasPeuxk8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2 NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBGN0FFQzY0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQjU5QTdEMDY2QUUyREUzQjk3ODIwQUVGMTc5MUFCMEY3QUVD NjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFB QjBGN0FFQzY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+dMaZc1uiJibLBbT0QJjJ2BZ5q4rDcR5HV 8P6SM3dTC/gFyAXp5yOyzDR2Q1eoKLDRtNEDuaV6FQfxdEbDg8Y4xSL0cP1j9BkG sv5jhavKXsg/4nDb9UZ/2Hy2T7ZqdbxV5jdVhEC9PGY1J2R8DlqGdDg4RGtPQfI+ 4ISTDNOdp4aVfHs6kWr1dkcu+e910z5L0+63DxYXkVOvW01nryp+y6yZxcMIUNwJ 7AQMKvz6beopfI4+VdszxrZ0Z/bPVMqMGYbcrE6xlb6qKh/85+0WO88kGB4lUSYT T6b5buVbIcoIaNXzhlyWy5o3IIdvTpuQ6MIgBvroT0wa6Gf2xqE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:20 2026 by rpki-client