$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft File: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft (raw, json) Hash identifier: 9moHAxgkIHNHLxzmcUKeorEvibmccl52gQSxyohsMGM= Subject key identifier: 74:99:5C:C3:6E:A6:55:9C:A3:1E:01:11:9E:11:5B:1B:FC:35:AB:8C Authority key identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F Certificate issuer: /CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Certificate serial: 36406B5B42253F30A97416F1F1C7700A8806E714 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:17:37 +0000 Manifest this update: Thu 23 Jul 2026 10:12:37 +0000 Manifest next update: Fri 24 Jul 2026 13:45:37 +0000 Files and hashes: 1: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: +5fvfc8ajMhGADJCEcdbEhQ6j6dAVRmNeOZFiwEvBZ8=) 2: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: IlP4XUrtIYB7cIrDzPVEacnUChoP62KcR47GYYrS40A=) 3: 0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl (hash: SJ5kvtoAsitGpEKUamIfn+QBfY32v9duI1+dalzMzcI=) 4: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: k8/tG1r6Hku+axyAkhpoG9wapKfM0tuW5ME+1hieoV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:40:6b:5b:42:25:3f:30:a9:74:16:f1:f1:c7:70:0a:88:06:e7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F Validity Not Before: Jul 23 10:12:37 2026 GMT Not After : Jul 24 13:45:37 2026 GMT Subject: CN=74995CC36EA6559CA31E01119E115B1BFC35AB8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:22:0d:1f:89:b1:36:f2:4c:e4:45:77:71: 1f:90:2f:2a:e1:3e:72:f1:58:80:72:6e:de:15:82: 4e:89:d1:65:0c:77:fa:30:14:ee:9b:61:ac:30:ce: b2:3c:e0:f1:a3:41:76:8f:8d:d0:3c:dd:f0:b6:a5: 69:4a:4f:4f:44:18:9c:7a:58:2d:10:55:4c:f1:aa: 99:2b:00:e7:51:c6:a7:48:a9:2f:51:fb:d3:b4:f6: 18:71:9a:7b:c7:9c:18:e7:b6:15:3a:3a:0c:52:bc: ce:f6:22:a9:c9:46:9f:9f:4e:64:b2:d6:a3:2c:90: d3:5d:d8:3c:cc:c6:c8:f0:50:1e:04:ff:7d:0b:f4: 15:b7:d5:73:05:ae:ec:10:c1:72:8d:b7:51:b9:32: cd:ca:36:4d:37:a3:6d:0a:cb:b7:42:6d:39:e6:e7: d6:5c:07:dc:e3:4d:95:91:69:7a:73:f9:71:01:1b: 8e:c4:0b:74:b2:61:63:b9:23:c3:b4:10:6f:d3:55: 05:b9:1f:9f:1f:39:4c:6b:18:a9:f3:57:94:1e:83: e1:af:47:2f:70:a4:14:be:8c:03:b1:0a:58:66:67: d5:15:52:c1:eb:bd:a4:8d:4c:6b:97:e9:3b:5f:c4: 29:39:83:64:a2:6b:68:f1:96:9c:23:6b:01:de:eb: b4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:99:5C:C3:6E:A6:55:9C:A3:1E:01:11:9E:11:5B:1B:FC:35:AB:8C X509v3 Authority Key Identifier: keyid:0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:cf:fc:7a:3f:3e:70:ea:0f:23:78:05:27:e7:f5:74:a2:a8: 87:1c:c4:9e:64:44:bd:24:28:1a:ce:4a:3f:06:4d:57:02:5b: 2e:26:e5:82:7d:e4:ce:c1:7a:64:bb:a6:6a:c3:2c:4e:3d:a7: b7:e5:18:f0:0b:e8:e6:96:ab:43:2c:75:59:d4:67:54:c4:d1: 9c:eb:1e:a4:b7:7b:4b:a1:04:ef:5d:de:e3:c5:45:d0:84:da: 1a:55:dc:c0:36:d7:88:42:a0:44:51:fd:7d:f1:4f:28:25:2b: 66:88:ed:1e:2c:a5:bc:1d:d3:64:e2:ab:aa:f6:70:19:7d:ce: fe:f3:1c:6f:fd:ec:df:76:e6:2b:a2:10:b5:42:e9:4c:94:72: fc:95:51:0a:f9:f0:95:a5:e1:56:72:81:96:b6:b8:8f:4c:42: 9d:53:b8:0c:44:75:eb:36:f1:f7:41:49:d8:26:24:63:a3:8c: dd:32:cc:c3:c9:85:7c:53:ae:ca:3a:2d:cf:c8:d7:10:4d:0d: 07:4d:37:a6:93:06:7c:e4:6b:dc:da:14:9a:7e:ef:e5:dd:09: bd:df:20:77:75:22:e4:c3:bb:a6:ca:de:9c:a0:19:cd:75:3e: 34:9d:3c:5c:b8:26:71:92:ac:94:a3:58:b8:f2:2d:97:f4:b6: 96:0a:83:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkBrW0IlPzCpdBbx8cdwCogG5xQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBG N0FFQzY0RjAeFw0yNjA3MjMxMDEyMzdaFw0yNjA3MjQxMzQ1MzdaMDMxMTAvBgNV BAMTKDc0OTk1Q0MzNkVBNjU1OUNBMzFFMDExMTlFMTE1QjFCRkMzNUFCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwyINH4mxNvJM5EV3cR+QLyrh PnLxWIBybt4Vgk6J0WUMd/owFO6bYawwzrI84PGjQXaPjdA83fC2pWlKT09EGJx6 WC0QVUzxqpkrAOdRxqdIqS9R+9O09hhxmnvHnBjnthU6OgxSvM72IqnJRp+fTmSy 1qMskNNd2DzMxsjwUB4E/30L9BW31XMFruwQwXKNt1G5Ms3KNk03o20Ky7dCbTnm 59ZcB9zjTZWRaXpz+XEBG47EC3SyYWO5I8O0EG/TVQW5H58fOUxrGKnzV5Qeg+Gv Ry9wpBS+jAOxClhmZ9UVUsHrvaSNTGuX6TtfxCk5g2Sia2jxlpwjawHe67QbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdJlcw26mVZyjHgERnhFbG/w1q4wwHwYDVR0j BBgwFoAUC1mn0GauLeO5eCCu8XkasPeuxk8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2 NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBGN0FFQzY0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQjU5QTdEMDY2QUUyREUzQjk3ODIwQUVGMTc5MUFCMEY3QUVD NjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFB QjBGN0FFQzY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjP/Ho/PnDqDyN4BSfn9XSiqIccxJ5kRL0k KBrOSj8GTVcCWy4m5YJ95M7BemS7pmrDLE49p7flGPAL6OaWq0MsdVnUZ1TE0Zzr HqS3e0uhBO9d3uPFRdCE2hpV3MA214hCoERR/X3xTyglK2aI7R4spbwd02Tiq6r2 cBl9zv7zHG/97N925iuiELVC6UyUcvyVUQr58JWl4VZygZa2uI9MQp1TuAxEdes2 8fdBSdgmJGOjjN0yzMPJhXxTrso6Lc/I1xBNDQdNN6aTBnzka9zaFJp+7+XdCb3f IHd1IuTDu6bK3pygGc11PjSdPFy4JnGSrJSjWLjyLZf0tpYKg+8= -----END CERTIFICATE-----Generated at Fri Jul 24 05:19:39 2026 by rpki-client