$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft File: 3559C104797053AE8E5C72BE7726BF44C2878CF1.mft (raw, json) Hash identifier: 2T3R0FCKO6E2JfXgLdoatmfUU9YQm1pcK65RD4fy0f0= Subject key identifier: 8A:1B:20:78:BD:22:C2:B7:E0:51:28:D2:44:5E:FD:B5:30:4E:3C:BD Authority key identifier: 35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1 Certificate issuer: /CN=3559C104797053AE8E5C72BE7726BF44C2878CF1 Certificate serial: 53A6ABFF3D670A617595C8135924F390C6E3E13A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 14:58:49 +0000 Manifest this update: Fri 25 Sep 2026 14:53:49 +0000 Manifest next update: Sat 26 Sep 2026 18:15:49 +0000 Files and hashes: 1: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: fC4L8rYhZI0UDA/WORkA1APzTZ9nOmT1ddK9x1B6L7w=) 2: 3559C104797053AE8E5C72BE7726BF44C2878CF1.crl (hash: 8zZN9IxNQrRS8hQ2IwfuXlQGV/PfADivjVLCSlzEsbI=) 3: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: TDHHkU7auhZbGybqQy/XY5A0u3/rxbPGk544rbieSIw=) 4: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: eqd0E+Lb4EVtDoQqymHQTLKTQ6HfKOpFx++L2qv+u+A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a6:ab:ff:3d:67:0a:61:75:95:c8:13:59:24:f3:90:c6:e3:e1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3559C104797053AE8E5C72BE7726BF44C2878CF1 Validity Not Before: Sep 25 14:53:49 2026 GMT Not After : Sep 26 18:15:49 2026 GMT Subject: CN=8A1B2078BD22C2B7E05128D2445EFDB5304E3CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:62:61:f5:08:01:ad:bc:36:08:12:59:65:bc: 01:84:dc:79:17:a0:fa:15:92:b5:8a:90:4a:02:63: 28:bc:7f:92:45:71:a0:d5:08:69:eb:22:ea:d8:93: 0b:3a:7f:3b:1f:a6:aa:33:9c:31:1b:10:80:08:a3: f2:10:dd:fe:67:5c:11:1a:77:95:22:90:7b:e7:e5: 54:b4:e7:12:d7:e4:51:32:e8:a1:76:fb:ed:4a:6d: ab:68:5e:53:1a:ce:3f:37:ef:5b:d1:47:27:99:09: 98:5b:b3:3c:8b:cb:df:b7:f3:9c:d8:2f:95:1b:c3: f4:d9:f6:ae:b5:5b:96:64:0f:98:f6:d4:51:07:43: fa:6d:2b:5d:ac:48:2c:05:41:8c:af:68:ee:c5:2d: 79:be:ce:e7:05:da:5b:25:ff:9c:43:4e:14:90:44: b1:fa:30:d3:20:24:46:0a:4c:87:25:8e:86:6a:e6: 5d:18:e8:ec:a5:5a:9b:78:c8:35:a6:41:3c:08:9f: 37:a7:81:97:59:b0:43:3f:83:f9:86:27:fc:b2:6d: a3:c2:4a:13:4c:f8:41:27:e5:58:0d:b0:e0:8c:cd: fe:c1:7c:29:af:1f:1a:a0:92:36:31:6f:b8:f4:b9: e6:9b:ba:4b:03:2c:01:4b:8f:9a:0e:92:61:d5:86: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1B:20:78:BD:22:C2:B7:E0:51:28:D2:44:5E:FD:B5:30:4E:3C:BD X509v3 Authority Key Identifier: keyid:35:59:C1:04:79:70:53:AE:8E:5C:72:BE:77:26:BF:44:C2:87:8C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3559C104797053AE8E5C72BE7726BF44C2878CF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3559C104797053AE8E5C72BE7726BF44C2878CF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:31:ac:58:6b:48:a1:44:0a:af:fa:06:cf:f4:a8:65:0c:26: c7:b3:f0:6a:09:31:94:a4:39:a1:7c:84:46:0d:84:36:8a:4f: 36:39:bd:7f:af:66:fa:f7:91:87:4a:be:c4:ea:99:51:75:61: f4:f2:80:63:52:83:c4:d3:45:9f:94:97:b0:03:51:4f:b3:68: 1c:47:b9:60:eb:69:dd:3e:6d:f6:8f:71:e8:a8:00:9a:b8:fd: 56:95:06:c7:56:39:18:e1:ba:3d:c9:ab:bf:92:2c:2e:05:5c: a0:57:b9:d3:5d:8e:b9:e8:29:e8:f5:e1:4f:c2:9d:cd:30:9a: ac:ac:64:7f:d0:86:6d:9a:9e:0f:83:33:95:9c:54:50:d5:9e: 9e:80:d5:c2:14:a2:7b:9f:09:9d:c0:f9:51:2d:ac:96:47:0b: e9:c9:55:90:29:47:75:f4:58:24:b9:27:be:82:50:07:6b:40: 4a:38:94:84:79:28:c1:2d:20:e4:7e:b9:9f:91:17:b3:d2:47: 47:1f:46:24:1e:47:1c:ad:a7:f8:19:2c:6d:95:f2:ea:ec:3e: 25:3a:f4:4a:55:29:0b:6f:e2:61:f8:83:ed:9d:4d:cc:d8:a6: d0:6f:3b:f4:e5:55:f6:dd:b7:f0:82:0d:bd:88:b8:bd:2c:4a: bd:4b:d8:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU6ar/z1nCmF1lcgTWSTzkMbj4TowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1OUMxMDQ3OTcwNTNBRThFNUM3MkJFNzcyNkJGNDRD Mjg3OENGMTAeFw0yNjA5MjUxNDUzNDlaFw0yNjA5MjYxODE1NDlaMDMxMTAvBgNV BAMTKDhBMUIyMDc4QkQyMkMyQjdFMDUxMjhEMjQ0NUVGREI1MzA0RTNDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPYmH1CAGtvDYIElllvAGE3HkX oPoVkrWKkEoCYyi8f5JFcaDVCGnrIurYkws6fzsfpqoznDEbEIAIo/IQ3f5nXBEa d5UikHvn5VS05xLX5FEy6KF2++1KbatoXlMazj8371vRRyeZCZhbszyLy9+385zY L5Ubw/TZ9q61W5ZkD5j21FEHQ/ptK12sSCwFQYyvaO7FLXm+zucF2lsl/5xDThSQ RLH6MNMgJEYKTIcljoZq5l0Y6OylWpt4yDWmQTwInzengZdZsEM/g/mGJ/yybaPC ShNM+EEn5VgNsOCMzf7BfCmvHxqgkjYxb7j0ueabuksDLAFLj5oOkmHVhuH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUihsgeL0iwrfgUSjSRF79tTBOPL0wHwYDVR0j BBgwFoAUNVnBBHlwU66OXHK+dya/RMKHjPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTFmMTZjNDUtOTZmYi00YzkyLTgwNGUtNjRiMGJmMjgwMzAyLzAvMzU1OUMxMDQ3 OTcwNTNBRThFNUM3MkJFNzcyNkJGNDRDMjg3OENGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNTU5QzEwNDc5NzA1M0FFOEU1QzcyQkU3NzI2QkY0NEMyODc4 Q0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw NGUtNjRiMGJmMjgwMzAyLzAvMzU1OUMxMDQ3OTcwNTNBRThFNUM3MkJFNzcyNkJG NDRDMjg3OENGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgxrFhrSKFECq/6Bs/0qGUMJsez8GoJMZSk OaF8hEYNhDaKTzY5vX+vZvr3kYdKvsTqmVF1YfTygGNSg8TTRZ+Ul7ADUU+zaBxH uWDrad0+bfaPceioAJq4/VaVBsdWORjhuj3Jq7+SLC4FXKBXudNdjrnoKej14U/C nc0wmqysZH/Qhm2ang+DM5WcVFDVnp6A1cIUonufCZ3A+VEtrJZHC+nJVZApR3X0 WCS5J76CUAdrQEo4lIR5KMEtIOR+uZ+RF7PSR0cfRiQeRxytp/gZLG2V8ursPiU6 9EpVKQtv4mH4g+2dTczYptBvO/TlVfbdt/CCDb2IuL0sSr1L2EA= -----END CERTIFICATE-----Generated at Fri Sep 25 19:51:33 2026 by rpki-client