$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft File: D59D3CB80F39720CC6378798AF38E978ACC61169.mft (raw, json) Hash identifier: e6mAgdOSBoWe7H6M8oMneD6Kj0zxhVW8O7eSMDpJ5j0= Subject key identifier: 13:17:E9:15:54:A8:BF:E3:83:F9:E3:73:7C:79:7C:A5:CB:CF:E5:F6 Authority key identifier: D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69 Certificate issuer: /CN=D59D3CB80F39720CC6378798AF38E978ACC61169 Certificate serial: 016E42320DABDDF51329D976C9EFB73E5CFC8680 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 14:28:46 +0000 Manifest this update: Thu 24 Sep 2026 14:23:46 +0000 Manifest next update: Fri 25 Sep 2026 15:48:46 +0000 Files and hashes: 1: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: xDMl4fVPq1KOh6yEyAaFX1Ne1uCSqYoqoG2DK9eXVJc=) 2: D59D3CB80F39720CC6378798AF38E978ACC61169.crl (hash: asqlkcnARf8YNv0Q3ac/xXE+PIn9jqhC2sS+paih2s8=) 3: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: TyeS6OFp+eX9ORLvbkAk7IV44ZT6uQE45kxcvU/K/wA=) 4: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: NXjXH8bagUMJQqwbA86uVF5uVlgJU27CgQDeHpB6ITQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:6e:42:32:0d:ab:dd:f5:13:29:d9:76:c9:ef:b7:3e:5c:fc:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59D3CB80F39720CC6378798AF38E978ACC61169 Validity Not Before: Sep 24 14:23:46 2026 GMT Not After : Sep 25 15:48:46 2026 GMT Subject: CN=1317E91554A8BFE383F9E3737C797CA5CBCFE5F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0a:fa:26:e1:31:21:54:aa:64:f8:99:cc:72: 55:c5:8e:de:eb:57:26:fc:6f:19:f4:fb:2b:14:99: cb:06:38:e5:03:6a:0b:e9:59:f9:cf:7c:32:00:54: 7b:ad:69:ac:2f:47:70:48:9e:31:17:48:ba:c7:1e: 8c:b2:0e:eb:83:55:c3:95:2f:9a:d5:d7:a0:f7:50: 9f:e4:9c:db:93:b3:93:df:23:95:d8:8c:d0:96:c6: 10:16:26:91:3b:9b:4c:85:b1:5f:fa:8d:57:1c:9c: e4:5f:3d:ae:a4:fe:5a:af:86:6a:78:6a:d9:41:52: d8:1d:1d:a9:eb:fa:0b:65:9b:c5:a9:75:5f:45:bb: cb:5c:b1:92:fe:02:bd:a8:70:92:65:1b:85:9d:bf: 6f:d2:08:c4:42:dd:b2:14:13:cf:51:87:03:7d:b0: 6a:08:af:95:81:bf:e3:41:23:4f:a6:b9:3f:ac:48: c7:2b:c3:6f:1f:5f:c6:e3:02:e1:5f:73:0f:0f:7d: f0:8f:d2:26:1d:5f:d9:8c:10:9f:4b:ce:9a:3b:e8: 3e:fb:91:0c:ae:39:69:d9:e4:d1:ea:c0:89:21:23: da:e0:f9:26:bf:e7:a5:90:23:da:08:a6:ca:03:75: 41:12:5f:a4:c5:60:2f:23:97:65:13:0a:74:61:37: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:17:E9:15:54:A8:BF:E3:83:F9:E3:73:7C:79:7C:A5:CB:CF:E5:F6 X509v3 Authority Key Identifier: keyid:D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ef:6d:25:9b:af:76:8a:18:d5:82:9a:af:3c:04:95:07:31: f2:1b:ed:9d:cc:15:90:2b:b7:a4:8d:fd:73:9e:62:76:4f:e9: 9e:3c:a2:15:12:19:b3:71:d6:38:9c:fc:98:ba:68:85:2b:b6: f1:37:1c:fc:a9:fc:8a:9f:4b:0d:76:2a:88:68:3e:19:4a:61: 63:dd:6b:3e:a4:7f:8a:5d:2f:b0:67:66:87:52:27:c4:67:3e: 57:b1:8e:e8:a0:44:4b:d8:59:52:22:c2:bb:03:10:72:1d:7e: 40:22:84:c5:ae:fd:0d:4b:7a:44:89:b1:52:0c:92:ec:0b:db: f4:79:91:88:ce:6e:c9:8d:93:b1:c7:fe:71:62:11:f3:c8:49: b3:00:3f:8c:8d:9d:a9:04:fc:a5:9c:e9:64:b4:3f:c1:6c:05: c3:50:bb:ca:89:ef:8a:b4:c1:af:f7:23:06:90:2f:55:c2:55: 2f:b5:bb:da:60:20:55:e8:36:2e:ee:f9:cc:4c:49:14:a9:56: c3:07:2e:e1:64:ad:d8:52:7b:79:3a:fb:58:23:af:51:c1:1f: a6:85:bf:e8:c3:82:43:c3:f4:02:73:78:72:5d:30:ac:49:0d: 43:b5:13:7f:3b:fa:c6:77:7b:23:c8:86:f5:d0:02:04:cb:c4: 8b:3b:32:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAW5CMg2r3fUTKdl2ye+3Plz8hoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5RDNDQjgwRjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5NzhB Q0M2MTE2OTAeFw0yNjA5MjQxNDIzNDZaFw0yNjA5MjUxNTQ4NDZaMDMxMTAvBgNV BAMTKDEzMTdFOTE1NTRBOEJGRTM4M0Y5RTM3MzdDNzk3Q0E1Q0JDRkU1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmCvom4TEhVKpk+JnMclXFjt7r Vyb8bxn0+ysUmcsGOOUDagvpWfnPfDIAVHutaawvR3BInjEXSLrHHoyyDuuDVcOV L5rV16D3UJ/knNuTs5PfI5XYjNCWxhAWJpE7m0yFsV/6jVccnORfPa6k/lqvhmp4 atlBUtgdHanr+gtlm8WpdV9Fu8tcsZL+Ar2ocJJlG4Wdv2/SCMRC3bIUE89RhwN9 sGoIr5WBv+NBI0+muT+sSMcrw28fX8bjAuFfcw8PffCP0iYdX9mMEJ9Lzpo76D77 kQyuOWnZ5NHqwIkhI9rg+Sa/56WQI9oIpsoDdUESX6TFYC8jl2UTCnRhN7/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUExfpFVSov+OD+eNzfHl8pcvP5fYwHwYDVR0j BBgwFoAU1Z08uA85cgzGN4eYrzjpeKzGEWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU3MDU5MjctZWM2NC00NGY1LTljOWUtYzlhNTVhNTIzYjY0LzAvRDU5RDNDQjgw RjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5NzhBQ0M2MTE2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTlEM0NCODBGMzk3MjBDQzYzNzg3OThBRjM4RTk3OEFDQzYx MTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU3MDU5MjctZWM2NC00NGY1LTlj OWUtYzlhNTVhNTIzYjY0LzAvRDU5RDNDQjgwRjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5 NzhBQ0M2MTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALjvbSWbr3aKGNWCmq88BJUHMfIb7Z3MFZAr t6SN/XOeYnZP6Z48ohUSGbNx1jic/Ji6aIUrtvE3HPyp/IqfSw12KohoPhlKYWPd az6kf4pdL7BnZodSJ8RnPlexjuigREvYWVIiwrsDEHIdfkAihMWu/Q1LekSJsVIM kuwL2/R5kYjObsmNk7HH/nFiEfPISbMAP4yNnakE/KWc6WS0P8FsBcNQu8qJ74q0 wa/3IwaQL1XCVS+1u9pgIFXoNi7u+cxMSRSpVsMHLuFkrdhSe3k6+1gjr1HBH6aF v+jDgkPD9AJzeHJdMKxJDUO1E387+sZ3eyPIhvXQAgTLxIs7Mns= -----END CERTIFICATE-----Generated at Fri Sep 25 00:02:04 2026 by rpki-client