$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft File: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft (raw, json) Hash identifier: qwE5leqkosBA9pk2MPt8bcauNzC+xxGnWRmbJguP7lk= Subject key identifier: 40:8B:AF:AA:51:85:39:D3:23:20:7D:0D:B2:08:BA:38:F9:AB:65:E5 Authority key identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F Certificate issuer: /CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Certificate serial: 77140259F98005796AC3B045AE69B6A1962FD4E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft Manifest number: BF Signing time: Tue 22 Sep 2026 12:52:17 +0000 Manifest this update: Tue 22 Sep 2026 12:47:17 +0000 Manifest next update: Wed 23 Sep 2026 16:23:17 +0000 Files and hashes: 1: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl (hash: iQGpQSgpJ94R1QuQG8J7pSHn/O9UPoJrOs3vvTnD8vw=) 2: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: IlP4XUrtIYB7cIrDzPVEacnUChoP62KcR47GYYrS40A=) 3: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: k8/tG1r6Hku+axyAkhpoG9wapKfM0tuW5ME+1hieoV0=) 4: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: +5fvfc8ajMhGADJCEcdbEhQ6j6dAVRmNeOZFiwEvBZ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:14:02:59:f9:80:05:79:6a:c3:b0:45:ae:69:b6:a1:96:2f:d4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Validity Not Before: Sep 22 12:47:17 2026 GMT Not After : Sep 23 16:23:17 2026 GMT Subject: CN=408BAFAA518539D323207D0DB208BA38F9AB65E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:53:94:f1:70:c9:2e:a3:16:6a:3a:d0:9b: 7e:b3:3b:8b:01:99:c7:4e:b6:86:bc:37:ea:45:5b: 0c:4f:41:22:3e:67:99:6a:fd:78:59:5f:cf:2a:fe: 49:8a:62:c6:24:c2:ec:a4:39:da:e1:7c:8e:a5:c3: cf:c2:52:69:a4:27:a2:70:b6:d2:b2:96:5b:34:5d: b4:3e:ed:8b:9e:94:ba:d8:e9:1a:76:78:f3:6e:f5: a4:23:f3:ec:e5:17:15:3d:2c:9c:92:45:c2:b8:7d: f7:33:1c:ff:d7:a5:2c:70:db:d0:0c:06:e1:de:48: 4c:86:15:62:51:4e:00:7d:43:c3:c5:2b:f0:20:27: e0:a1:a9:73:2d:0e:6a:fb:79:7d:fa:71:14:b4:7b: e6:b1:0e:4b:5a:b2:34:ca:e7:fe:04:d6:af:b7:92: 9d:79:ba:af:08:ef:bf:10:54:43:b6:21:47:10:bf: 42:c6:31:13:42:5f:54:0c:68:ce:2a:ea:a6:ac:96: 12:6b:ef:8a:7d:d0:e5:e5:2f:ee:bd:8d:60:91:72: 30:91:b9:48:1e:35:6b:3d:22:8e:13:e3:e0:d3:8f: 4f:94:e4:21:43:a0:7d:11:be:29:47:8f:43:5e:61: ee:a1:1e:88:6f:f3:c9:6e:a1:43:02:5f:c1:13:cc: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8B:AF:AA:51:85:39:D3:23:20:7D:0D:B2:08:BA:38:F9:AB:65:E5 X509v3 Authority Key Identifier: keyid:0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6b:d0:e7:93:9f:e6:16:dc:0c:97:89:6c:68:eb:55:91:13: cc:2b:a8:d5:c5:4d:47:1e:9b:4d:0f:39:96:af:79:76:a4:2e: b3:48:93:df:c7:17:a1:34:80:ee:72:5e:34:8a:9c:d9:94:66: 74:83:16:9c:6b:5f:86:d1:64:80:6a:8e:2a:8a:bd:f0:6f:fa: 28:81:74:5b:44:7c:54:0e:0a:6b:09:7f:68:d2:ca:bb:08:96: 58:1a:03:6b:4a:2c:d5:cd:4b:bd:52:9b:87:81:40:29:be:b9: c6:1a:64:90:8f:0a:e3:3c:bd:c5:57:00:75:72:ce:51:4c:32: 13:fd:ff:a6:bf:81:e3:ad:22:79:61:69:b3:6a:ea:2b:93:70: a1:f9:2d:46:5c:fc:c6:0e:b1:07:fc:22:6b:67:03:f3:7d:32: 86:f8:dc:6a:4c:6f:47:85:6c:88:8e:b2:68:2c:d3:90:06:48: 58:b4:09:48:7b:70:a8:c4:25:a5:15:d5:66:4f:f0:bb:10:ac: 1f:38:6f:d9:b2:fa:af:cc:93:d9:d0:f3:08:b0:9f:84:cc:31: 03:4d:1b:68:dd:4c:18:80:6e:e6:cf:2c:4c:bc:b7:3e:ae:65: 9d:9e:8d:10:50:42:22:4e:87:8e:73:54:01:7e:66:32:1f:90: 6b:38:8f:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdxQCWfmABXlqw7BFrmm2oZYv1OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBG N0FFQzY0RjAeFw0yNjA5MjIxMjQ3MTdaFw0yNjA5MjMxNjIzMTdaMDMxMTAvBgNV BAMTKDQwOEJBRkFBNTE4NTM5RDMyMzIwN0QwREIyMDhCQTM4RjlBQjY1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfk1OU8XDJLqMWajrQm36zO4sB mcdOtoa8N+pFWwxPQSI+Z5lq/XhZX88q/kmKYsYkwuykOdrhfI6lw8/CUmmkJ6Jw ttKylls0XbQ+7YuelLrY6Rp2ePNu9aQj8+zlFxU9LJySRcK4ffczHP/XpSxw29AM BuHeSEyGFWJRTgB9Q8PFK/AgJ+ChqXMtDmr7eX36cRS0e+axDktasjTK5/4E1q+3 kp15uq8I778QVEO2IUcQv0LGMRNCX1QMaM4q6qaslhJr74p90OXlL+69jWCRcjCR uUgeNWs9Io4T4+DTj0+U5CFDoH0RvilHj0NeYe6hHohv88luoUMCX8ETzLSjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQIuvqlGFOdMjIH0Nsgi6OPmrZeUwHwYDVR0j BBgwFoAUC1mn0GauLeO5eCCu8XkasPeuxk8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2 NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBGN0FFQzY0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQjU5QTdEMDY2QUUyREUzQjk3ODIwQUVGMTc5MUFCMEY3QUVD NjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFB QjBGN0FFQzY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdr0OeTn+YW3AyXiWxo61WRE8wrqNXFTUce m00POZaveXakLrNIk9/HF6E0gO5yXjSKnNmUZnSDFpxrX4bRZIBqjiqKvfBv+iiB dFtEfFQOCmsJf2jSyrsIllgaA2tKLNXNS71Sm4eBQCm+ucYaZJCPCuM8vcVXAHVy zlFMMhP9/6a/geOtInlhabNq6iuTcKH5LUZc/MYOsQf8ImtnA/N9Mob43GpMb0eF bIiOsmgs05AGSFi0CUh7cKjEJaUV1WZP8LsQrB84b9my+q/Mk9nQ8wiwn4TMMQNN G2jdTBiAbubPLEy8tz6uZZ2ejRBQQiJOh45zVAF+ZjIfkGs4j2E= -----END CERTIFICATE-----Generated at Tue Sep 22 23:49:44 2026 by rpki-client