$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft File: D59D3CB80F39720CC6378798AF38E978ACC61169.mft (raw, json) Hash identifier: wudOrMCriqJsY2x3sXm4Y555K98etTfrH5PacD397m0= Subject key identifier: 7F:4F:B6:9C:7F:6B:08:A4:67:F4:D2:ED:E6:F9:58:3A:2D:A4:9B:27 Authority key identifier: D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69 Certificate issuer: /CN=D59D3CB80F39720CC6378798AF38E978ACC61169 Certificate serial: 27229C6B94DEB6589A71F739ED7EFCA75B4AF1F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 19:29:58 +0000 Manifest this update: Wed 23 Sep 2026 19:24:58 +0000 Manifest next update: Thu 24 Sep 2026 22:25:58 +0000 Files and hashes: 1: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: xDMl4fVPq1KOh6yEyAaFX1Ne1uCSqYoqoG2DK9eXVJc=) 2: D59D3CB80F39720CC6378798AF38E978ACC61169.crl (hash: j2fbBahqg2/PK5aliHyIAibaGE54cdJE1S63lQvCtrM=) 3: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: NXjXH8bagUMJQqwbA86uVF5uVlgJU27CgQDeHpB6ITQ=) 4: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: TyeS6OFp+eX9ORLvbkAk7IV44ZT6uQE45kxcvU/K/wA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:22:9c:6b:94:de:b6:58:9a:71:f7:39:ed:7e:fc:a7:5b:4a:f1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D59D3CB80F39720CC6378798AF38E978ACC61169 Validity Not Before: Sep 23 19:24:58 2026 GMT Not After : Sep 24 22:25:58 2026 GMT Subject: CN=7F4FB69C7F6B08A467F4D2EDE6F9583A2DA49B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6c:60:23:aa:65:a3:90:5f:f4:02:dc:5f:72: af:1b:e3:26:4d:20:87:fb:2f:21:16:34:5e:2c:20: 9f:12:13:15:c8:fb:0a:c4:b9:48:2f:c6:e2:f8:57: 6d:c4:a8:ba:61:2d:a8:3d:bc:1c:a7:6a:1d:9b:59: a4:30:a0:33:81:14:83:ae:37:18:fe:bb:32:6e:47: 08:47:82:c6:c8:15:9a:89:f0:47:32:b7:7c:df:39: 53:8b:2f:93:8b:18:9d:b2:e1:4c:95:82:8c:73:a2: 16:fa:e1:87:52:5f:7e:68:45:99:7e:6f:08:c2:ce: 98:72:9f:94:ac:fa:a9:0d:4d:1f:e1:16:e2:3e:4a: e2:2d:c2:aa:6f:bf:fe:d3:23:2f:65:b7:a2:f7:c6: d3:61:9b:6e:ac:40:85:d4:f3:0c:99:c5:c6:3d:b0: 8c:b4:c8:c2:a7:a8:9c:3f:17:a7:29:c4:22:0a:f6: 57:5d:23:2c:2a:ea:3d:4c:36:ea:bc:ed:a2:d3:bf: 96:17:21:87:46:78:ee:8e:a0:80:29:a3:8f:18:2e: 4c:f4:80:96:c5:6f:35:18:98:d0:1b:a6:f8:91:5f: 12:2e:21:b1:b8:90:db:88:b1:3e:3c:bd:5a:66:71: d5:f6:3c:8f:af:1b:a1:eb:e3:e2:cd:6e:38:68:6a: 89:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4F:B6:9C:7F:6B:08:A4:67:F4:D2:ED:E6:F9:58:3A:2D:A4:9B:27 X509v3 Authority Key Identifier: keyid:D5:9D:3C:B8:0F:39:72:0C:C6:37:87:98:AF:38:E9:78:AC:C6:11:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D59D3CB80F39720CC6378798AF38E978ACC61169.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/D59D3CB80F39720CC6378798AF38E978ACC61169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:10:12:53:ff:14:bc:a0:f5:31:b2:bc:59:72:4b:0e:6a:00: 32:41:da:6e:54:1f:87:03:73:17:a4:29:65:88:92:af:72:70: ab:8a:0b:d9:20:ae:d7:70:c0:ae:63:f6:27:3b:d8:f3:75:e6: 50:a6:05:d9:ab:e8:fb:16:ac:3f:56:02:57:56:e7:44:41:b6: 52:30:0b:b3:71:22:59:90:e4:b8:59:a4:a4:d0:81:f7:1e:fb: 7d:62:0c:2c:a7:67:4c:7f:d6:74:49:db:5e:bc:f1:33:1a:8e: e7:bb:9b:6e:64:8e:5f:6e:58:a1:57:5a:73:09:5d:bf:7d:21: fa:e1:ac:98:2a:7b:7c:5e:23:40:bf:a2:a3:5a:7e:d6:3a:66: af:ce:eb:b5:6d:f1:f7:ee:2a:6d:5d:94:fc:e3:fb:75:26:ca: 0f:fe:53:fa:63:c5:17:45:5b:5e:d6:0b:f4:6b:7a:97:25:06: da:0d:27:b7:80:1b:d7:cb:6a:51:96:02:42:3f:7a:eb:9e:58: 39:c0:25:97:70:59:69:2d:7a:8a:2c:53:f2:97:fc:f8:9e:e8: 0e:b0:c9:84:f4:d8:f5:27:84:bb:70:13:57:f4:6c:5a:e5:d5: 34:e5:dd:ec:5d:f0:e0:92:f8:4f:f1:5f:7c:7f:22:82:de:fe: b6:21:10:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJyKca5Tetliacfc57X78p1tK8fkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU5RDNDQjgwRjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5NzhB Q0M2MTE2OTAeFw0yNjA5MjMxOTI0NThaFw0yNjA5MjQyMjI1NThaMDMxMTAvBgNV BAMTKDdGNEZCNjlDN0Y2QjA4QTQ2N0Y0RDJFREU2Rjk1ODNBMkRBNDlCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkbGAjqmWjkF/0Atxfcq8b4yZN IIf7LyEWNF4sIJ8SExXI+wrEuUgvxuL4V23EqLphLag9vBynah2bWaQwoDOBFIOu Nxj+uzJuRwhHgsbIFZqJ8Ecyt3zfOVOLL5OLGJ2y4UyVgoxzohb64YdSX35oRZl+ bwjCzphyn5Ss+qkNTR/hFuI+SuItwqpvv/7TIy9lt6L3xtNhm26sQIXU8wyZxcY9 sIy0yMKnqJw/F6cpxCIK9lddIywq6j1MNuq87aLTv5YXIYdGeO6OoIApo48YLkz0 gJbFbzUYmNAbpviRXxIuIbG4kNuIsT48vVpmcdX2PI+vG6Hr4+LNbjhoaonNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf0+2nH9rCKRn9NLt5vlYOi2kmycwHwYDVR0j BBgwFoAU1Z08uA85cgzGN4eYrzjpeKzGEWkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU3MDU5MjctZWM2NC00NGY1LTljOWUtYzlhNTVhNTIzYjY0LzAvRDU5RDNDQjgw RjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5NzhBQ0M2MTE2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENTlEM0NCODBGMzk3MjBDQzYzNzg3OThBRjM4RTk3OEFDQzYx MTY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU3MDU5MjctZWM2NC00NGY1LTlj OWUtYzlhNTVhNTIzYjY0LzAvRDU5RDNDQjgwRjM5NzIwQ0M2Mzc4Nzk4QUYzOEU5 NzhBQ0M2MTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAQElP/FLyg9TGyvFlySw5qADJB2m5UH4cD cxekKWWIkq9ycKuKC9kgrtdwwK5j9ic72PN15lCmBdmr6PsWrD9WAldW50RBtlIw C7NxIlmQ5LhZpKTQgfce+31iDCynZ0x/1nRJ21688TMajue7m25kjl9uWKFXWnMJ Xb99IfrhrJgqe3xeI0C/oqNaftY6Zq/O67Vt8ffuKm1dlPzj+3Umyg/+U/pjxRdF W17WC/RrepclBtoNJ7eAG9fLalGWAkI/euueWDnAJZdwWWkteoosU/KX/Pie6A6w yYT02PUnhLtwE1f0bFrl1TTl3exd8OCS+E/xX3x/IoLe/rYhEGA= -----END CERTIFICATE-----Generated at Thu Sep 24 11:02:17 2026 by rpki-client