$ rpki-client -vvvf rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft File: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft (raw, json) Hash identifier: 1nUUy2/8StN/LxHqmFKy6FtyXudCSQYI7jVhNs81AaQ= Subject key identifier: 68:9A:2E:2B:CC:70:59:CE:7B:DE:B4:E9:EC:44:F5:2E:96:B9:82:E5 Authority key identifier: B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 Certificate issuer: /CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Certificate serial: 5A96A4DAC90A1463B170EA765A83B1760FEFFB47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 15:14:42 +0000 Manifest this update: Thu 24 Sep 2026 15:09:42 +0000 Manifest next update: Fri 25 Sep 2026 18:40:42 +0000 Files and hashes: 1: B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl (hash: +or8Q0BGxkgL/Suz95FPe7+rUUpxofA4Zn3QIUcREcM=) 2: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: 7fp5Ub3jhSAS7agpOvlqaj1locBlJuu/plnhXOCrJf0=) 3: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: 3oVok3CXFl7cXz9v90zmFcUMxw7NjqzD2OW/U6gUOnc=) 4: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: gCpw2vGjm5jpbPiN9g0VamqWAxByjyrdBgvX9WD/FEw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:96:a4:da:c9:0a:14:63:b1:70:ea:76:5a:83:b1:76:0f:ef:fb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B159D33D3522D27CDFCF4C81911382E2AB8C5F60 Validity Not Before: Sep 24 15:09:42 2026 GMT Not After : Sep 25 18:40:42 2026 GMT Subject: CN=689A2E2BCC7059CE7BDEB4E9EC44F52E96B982E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:61:37:ad:e5:1d:4d:8f:f4:5a:92:7c:60:f3: 94:a4:88:ce:e2:b9:97:af:1d:5a:f9:ab:32:b5:6b: d6:d8:eb:03:ec:16:04:a8:0c:23:5e:69:8f:53:65: bc:6d:db:a2:cc:42:d3:c0:62:1e:00:0c:11:f8:c2: c6:e4:a4:d1:f0:28:3d:41:e9:2d:98:e7:97:71:56: ee:53:78:eb:4f:11:c8:74:0e:aa:58:82:81:d6:3f: a4:3c:00:5e:5a:68:ed:1b:0a:17:f2:6c:46:b5:63: 8b:bd:4b:6a:f3:cf:8a:30:a5:b7:c0:b1:66:bd:52: a4:f8:04:9f:75:b7:18:a6:b1:4e:c1:fa:28:9e:05: 7b:61:b9:e0:01:d4:8f:0a:ea:c5:b2:b4:7c:6a:95: c8:bd:ca:19:44:58:6a:26:41:3b:10:60:c2:df:b2: 37:15:6b:2a:82:20:db:03:1f:2b:c0:c2:d6:7a:dc: 92:80:fe:07:27:e6:5e:74:ca:23:fe:5d:4d:c0:3a: ad:0b:22:d4:e6:4f:fc:b1:fe:ea:50:ed:40:ff:56: ff:58:5d:31:c9:77:5e:70:2f:59:c7:ab:94:a0:61: ac:b1:52:a0:6c:b8:c1:62:ea:c2:84:0b:89:c0:56: a1:a0:46:54:08:d0:62:f6:85:7d:80:6c:e2:b1:23: 57:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9A:2E:2B:CC:70:59:CE:7B:DE:B4:E9:EC:44:F5:2E:96:B9:82:E5 X509v3 Authority Key Identifier: keyid:B1:59:D3:3D:35:22:D2:7C:DF:CF:4C:81:91:13:82:E2:AB:8C:5F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/B159D33D3522D27CDFCF4C81911382E2AB8C5F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a3:d2:c9:77:30:29:8d:a9:d3:65:ca:bd:9b:1a:be:ee:e6: 19:43:95:99:39:04:61:2f:85:35:02:d7:3d:32:66:ec:97:32: fb:d0:00:ac:ae:47:e8:d3:b2:ce:a3:eb:39:dd:c5:0e:45:13: b9:b1:5c:d3:3e:e6:5e:a1:d8:ec:ad:da:15:08:47:04:e4:b9: ac:64:78:80:bf:58:53:ba:cb:d4:4f:e1:8c:b1:9a:f4:e5:58: 94:0f:5b:63:63:00:cf:2d:c8:87:5a:97:c3:67:0d:69:9e:9f: 15:5e:87:99:53:71:6c:c0:20:0d:3b:66:bd:1f:6d:29:86:ef: 41:a9:56:29:10:dc:0e:71:f3:ad:a3:ed:ed:39:b6:3c:6a:61: 06:50:4b:29:29:49:e9:fa:54:f5:89:9a:ab:d2:16:c5:07:61: 80:5b:8c:5b:5b:77:30:25:d0:fd:d3:8b:27:2a:61:ff:33:c8: fc:66:72:75:ee:38:d9:da:ec:57:43:4b:0d:6c:eb:18:47:5d: 0c:84:df:24:e1:20:32:01:20:65:07:d7:7e:71:e8:90:10:d7: a9:43:b2:20:a8:57:6b:9c:a7:82:5d:d3:e8:22:c9:51:09:89: 37:81:b9:01:0a:0a:1b:26:f1:12:a3:54:f9:6f:5d:fd:d6:0e: 35:06:17:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpak2skKFGOxcOp2WoOxdg/v+0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJB QjhDNUY2MDAeFw0yNjA5MjQxNTA5NDJaFw0yNjA5MjUxODQwNDJaMDMxMTAvBgNV BAMTKDY4OUEyRTJCQ0M3MDU5Q0U3QkRFQjRFOUVDNDRGNTJFOTZCOTgyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMYTet5R1Nj/Raknxg85SkiM7i uZevHVr5qzK1a9bY6wPsFgSoDCNeaY9TZbxt26LMQtPAYh4ADBH4wsbkpNHwKD1B 6S2Y55dxVu5TeOtPEch0DqpYgoHWP6Q8AF5aaO0bChfybEa1Y4u9S2rzz4owpbfA sWa9UqT4BJ91tximsU7B+iieBXthueAB1I8K6sWytHxqlci9yhlEWGomQTsQYMLf sjcVayqCINsDHyvAwtZ63JKA/gcn5l50yiP+XU3AOq0LItTmT/yx/upQ7UD/Vv9Y XTHJd15wL1nHq5SgYayxUqBsuMFi6sKEC4nAVqGgRlQI0GL2hX2AbOKxI1d3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaJouK8xwWc573rTp7ET1Lpa5guUwHwYDVR0j BBgwFoAUsVnTPTUi0nzfz0yBkROC4quMX2AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcwYzQ3NTktNDNiOC00ZTgwLWJlOGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0Qz NTIyRDI3Q0RGQ0Y0QzgxOTExMzgyRTJBQjhDNUY2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTU5RDMzRDM1MjJEMjdDREZDRjRDODE5MTEzODJFMkFCOEM1 RjYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQjE1OUQzM0QzNTIyRDI3Q0RGQ0Y0QzgxOTExMzgy RTJBQjhDNUY2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEej0sl3MCmNqdNlyr2bGr7u5hlDlZk5BGEv hTUC1z0yZuyXMvvQAKyuR+jTss6j6zndxQ5FE7mxXNM+5l6h2Oyt2hUIRwTkuaxk eIC/WFO6y9RP4YyxmvTlWJQPW2NjAM8tyIdal8NnDWmenxVeh5lTcWzAIA07Zr0f bSmG70GpVikQ3A5x862j7e05tjxqYQZQSykpSen6VPWJmqvSFsUHYYBbjFtbdzAl 0P3TiycqYf8zyPxmcnXuONna7FdDSw1s6xhHXQyE3yThIDIBIGUH135x6JAQ16lD siCoV2ucp4Jd0+giyVEJiTeBuQEKChsm8RKjVPlvXf3WDjUGF0o= -----END CERTIFICATE-----Generated at Thu Sep 24 21:17:30 2026 by rpki-client