$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft File: 587FA9FD682D37BC3028319A65BCAECCE276314F.mft (raw, json) Hash identifier: MEb60turyOgZBtKf4NGdD6uXjFpAiSuBqGB3PTzaWwQ= Subject key identifier: 02:AC:24:67:01:3F:2B:87:7D:A8:2C:50:B7:5C:6B:E1:05:03:EA:C3 Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Certificate issuer: /CN=587FA9FD682D37BC3028319A65BCAECCE276314F Certificate serial: 28890C6A555A82F47ACA5A1806C401AA5946902B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft Manifest number: BF Signing time: Wed 23 Sep 2026 07:20:15 +0000 Manifest this update: Wed 23 Sep 2026 07:15:15 +0000 Manifest next update: Thu 24 Sep 2026 10:42:15 +0000 Files and hashes: 1: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: 7DRv9+zjmRuZ1Cj6e3MgFUBLnLf0dtLBblIHUDPlQ+w=) 2: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 5zg0GIi7yUDtLBjsDWQRXMmLy9VH8ssv+xs3UioSD6g=) 3: 587FA9FD682D37BC3028319A65BCAECCE276314F.crl (hash: 8+HXxsd8OXg/Vhm7fmQrSa1uLWMSTDtrmUQZmPhr8IM=) 4: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: VSpKbDClpDylxx1rB7LnMubAcuRSyIs4GzhBBvXtPpM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:89:0c:6a:55:5a:82:f4:7a:ca:5a:18:06:c4:01:aa:59:46:90:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Validity Not Before: Sep 23 07:15:15 2026 GMT Not After : Sep 24 10:42:15 2026 GMT Subject: CN=02AC2467013F2B877DA82C50B75C6BE10503EAC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:80:a1:6d:fb:2c:c8:c1:62:7b:31:c8:fa: 1f:26:dd:be:7d:17:dc:cd:50:af:9a:4a:a1:15:0d: ba:54:09:5d:f4:8e:57:bb:11:c8:16:0f:37:d5:38: 00:48:1d:92:61:99:60:45:c5:66:00:ae:e6:e6:90: e5:72:eb:ef:78:62:0b:74:07:62:4b:f5:7d:5f:d3: e1:93:4d:f3:2a:55:3b:75:4f:e3:67:30:3b:0b:09: 3f:af:99:3d:c0:50:1c:0a:70:95:41:55:ae:d3:1f: d2:df:e9:3a:0a:f1:bf:b5:38:5d:9b:e5:bd:96:12: 03:7a:95:51:7b:c6:38:c1:13:57:0c:b1:ce:fb:08: 6e:cd:7d:84:3c:3a:59:71:92:38:d9:75:d6:41:e0: 53:31:a6:5d:f4:e1:e2:a4:ae:95:c3:93:30:7f:7f: 67:9f:ef:74:49:75:8b:0d:e7:7d:9a:6d:69:b0:cc: f3:db:9f:4d:1d:0a:c0:41:ea:07:17:c8:16:35:34: 7c:b2:f8:a7:a6:dc:ae:2a:90:d1:e3:16:34:39:e6: ab:82:3d:18:f9:6c:6f:4f:b8:32:8d:64:44:21:a8: 7d:38:ff:4f:d3:23:23:9f:dd:2c:12:bc:f7:2a:2d: 1c:e6:89:2e:93:76:66:e1:e0:be:18:cb:e3:2d:85: c3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AC:24:67:01:3F:2B:87:7D:A8:2C:50:B7:5C:6B:E1:05:03:EA:C3 X509v3 Authority Key Identifier: keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:eb:26:29:9f:27:ec:68:3e:15:7f:a7:a9:28:95:41:31:0a: 4f:1f:00:3d:98:05:0a:12:38:67:63:51:67:70:91:a4:dc:7c: 38:4c:98:7b:5a:26:9d:85:10:f4:88:fc:4c:a3:cc:ad:75:8e: fa:71:08:b2:32:27:14:9d:61:90:54:8e:1e:d3:75:96:9c:30: 27:dd:42:c7:70:63:cf:85:2b:35:2f:a9:3f:8a:f8:47:7a:05: 50:78:2e:88:c1:ba:c2:dc:f8:e3:6f:49:81:cd:3d:ab:6a:df: 23:b9:eb:ce:85:08:77:85:6e:ca:17:e6:63:63:ef:e5:9c:bc: 72:b6:6d:ca:8c:bd:34:6b:70:ff:8e:39:45:c0:c9:f2:16:80: 97:23:58:19:be:69:28:8d:38:d4:0a:7e:e1:5e:29:08:36:e4: c7:7b:b7:9f:d2:62:29:14:e8:70:6c:d2:22:3a:aa:37:9a:c1: af:f2:79:46:5e:ea:3b:2e:5e:8a:14:64:99:aa:d4:3c:be:17: 45:83:9f:27:9b:f9:8a:99:38:aa:88:9a:9e:86:47:c8:5c:16: 25:4f:90:eb:0e:68:ca:21:c7:d2:ab:ef:7e:83:37:40:9e:7a: c4:00:bb:0c:15:6a:5b:94:60:d1:05:94:00:7f:c0:59:ee:61: 2c:21:39:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIkMalVagvR6yloYBsQBqllGkCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NF Mjc2MzE0RjAeFw0yNjA5MjMwNzE1MTVaFw0yNjA5MjQxMDQyMTVaMDMxMTAvBgNV BAMTKDAyQUMyNDY3MDEzRjJCODc3REE4MkM1MEI3NUM2QkUxMDUwM0VBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKK4ChbfssyMFiezHI+h8m3b59 F9zNUK+aSqEVDbpUCV30jle7EcgWDzfVOABIHZJhmWBFxWYArubmkOVy6+94Ygt0 B2JL9X1f0+GTTfMqVTt1T+NnMDsLCT+vmT3AUBwKcJVBVa7TH9Lf6ToK8b+1OF2b 5b2WEgN6lVF7xjjBE1cMsc77CG7NfYQ8OllxkjjZddZB4FMxpl304eKkrpXDkzB/ f2ef73RJdYsN532abWmwzPPbn00dCsBB6gcXyBY1NHyy+Kem3K4qkNHjFjQ55quC PRj5bG9PuDKNZEQhqH04/0/TIyOf3SwSvPcqLRzmiS6Tdmbh4L4Yy+MthcPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAqwkZwE/K4d9qCxQt1xr4QUD6sMwHwYDVR0j BBgwFoAUWH+p/WgtN7wwKDGaZbyuzOJ2MU8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmYTNiNjQtM2M2MS00OGQ1LWFiMGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2 ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NFMjc2MzE0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODdGQTlGRDY4MkQzN0JDMzAyODMxOUE2NUJDQUVDQ0UyNzYz MTRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FF Q0NFMjc2MzE0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMLrJimfJ+xoPhV/p6kolUExCk8fAD2YBQoS OGdjUWdwkaTcfDhMmHtaJp2FEPSI/EyjzK11jvpxCLIyJxSdYZBUjh7TdZacMCfd QsdwY8+FKzUvqT+K+Ed6BVB4LojBusLc+ONvSYHNPatq3yO5686FCHeFbsoX5mNj 7+WcvHK2bcqMvTRrcP+OOUXAyfIWgJcjWBm+aSiNONQKfuFeKQg25Md7t5/SYikU 6HBs0iI6qjeawa/yeUZe6jsuXooUZJmq1Dy+F0WDnyeb+YqZOKqImp6GR8hcFiVP kOsOaMohx9Kr736DN0CeesQAuwwValuUYNEFlAB/wFnuYSwhOZQ= -----END CERTIFICATE-----Generated at Thu Sep 24 04:27:26 2026 by rpki-client