$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft File: 587FA9FD682D37BC3028319A65BCAECCE276314F.mft (raw, json) Hash identifier: 8iCjjcIXRjnJkemOGXvYtabYrhfj34iNvilTyp0Hr3I= Subject key identifier: 3C:D8:95:F5:C9:D2:71:A0:43:17:BC:A7:6F:75:CF:B0:E8:F7:9B:11 Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Certificate issuer: /CN=587FA9FD682D37BC3028319A65BCAECCE276314F Certificate serial: 6B63C48D033800459B8A33E7FEEFE69915B45358 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:19:46 +0000 Manifest this update: Tue 12 May 2026 08:14:46 +0000 Manifest next update: Wed 13 May 2026 09:45:46 +0000 Files and hashes: 1: 587FA9FD682D37BC3028319A65BCAECCE276314F.crl (hash: iT+Wmfb6Ac4aSbf7u54ZnJYdUlIyVMZO2E/1FHfFSBU=) 2: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: 7DRv9+zjmRuZ1Cj6e3MgFUBLnLf0dtLBblIHUDPlQ+w=) 3: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 5zg0GIi7yUDtLBjsDWQRXMmLy9VH8ssv+xs3UioSD6g=) 4: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: VSpKbDClpDylxx1rB7LnMubAcuRSyIs4GzhBBvXtPpM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:63:c4:8d:03:38:00:45:9b:8a:33:e7:fe:ef:e6:99:15:b4:53:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Validity Not Before: May 12 08:14:46 2026 GMT Not After : May 13 09:45:46 2026 GMT Subject: CN=3CD895F5C9D271A04317BCA76F75CFB0E8F79B11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:03:21:5c:cd:d9:7c:b1:85:e1:64:e7:0a: a0:fd:ac:d7:c2:d1:0a:4b:9b:df:86:ce:5d:b3:45: c8:8b:79:9d:84:e9:50:bd:d7:00:4d:57:37:9a:70: 30:7e:3b:87:68:13:c0:4d:1c:0a:a5:7f:38:3f:be: 6b:10:b6:d9:6e:45:14:ab:c8:2a:dd:a9:80:c3:d6: 55:45:c3:d7:a3:8a:e2:63:59:8d:25:6c:b1:a2:7f: 49:d4:81:a3:ce:f4:93:b4:8a:a4:73:f9:cf:9b:98: 22:86:e4:ab:5d:62:98:d6:16:8d:65:42:81:7c:a7: 99:bb:aa:ac:1b:36:bc:60:6a:87:0a:95:43:fa:91: af:0c:59:4e:ba:cd:f8:83:42:dd:87:44:e2:0f:60: 31:8c:cc:02:33:d5:2e:44:5c:00:4a:21:ec:71:f0: d9:85:3f:fd:e2:6b:0c:b1:98:7f:17:1c:df:f3:45: 2b:63:ae:38:c4:5a:ad:dc:ec:0d:24:fc:88:f4:d6: 17:76:4e:7f:73:df:8c:49:7f:60:03:e5:ff:73:24: 64:14:7c:d2:28:d7:2a:c2:0c:57:c1:8b:bf:f0:b0: b7:b1:bf:75:4b:22:3f:53:91:2c:0e:4c:6b:4b:ee: f4:d2:96:fe:90:24:38:90:43:50:21:51:ae:bc:c7: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D8:95:F5:C9:D2:71:A0:43:17:BC:A7:6F:75:CF:B0:E8:F7:9B:11 X509v3 Authority Key Identifier: keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:52:51:cf:90:ba:c8:0d:40:99:4a:70:66:0f:bb:70:f4:9e: 01:20:ea:f9:4c:7a:2b:bf:74:e0:c6:eb:60:4a:79:17:56:96: 6f:fd:c7:0b:5a:0a:e9:c8:7d:2c:74:79:e2:c4:ea:f3:f9:a6: 32:09:a9:b7:60:f2:7a:d7:fb:c8:9a:8d:02:2b:b8:9d:38:75: 25:e3:b4:b5:c6:ec:b4:e3:3b:9c:3b:e3:7c:4e:dd:d7:2e:92: ee:e5:a9:c9:6c:54:8b:58:1e:7e:ba:34:f0:62:09:11:2d:e2: 34:45:30:7b:70:23:a8:b5:43:0a:a9:e9:4a:5c:b1:1b:09:6b: 87:6d:6f:a0:f8:74:da:c7:03:b1:1e:27:e6:5e:2f:9e:e6:88: 4d:ef:8d:54:d5:38:48:bd:1d:42:4e:8b:31:a4:45:9b:bb:26: b4:2a:c4:c2:dd:ce:9a:12:31:87:15:9a:b6:5e:4b:13:7c:1c: 56:44:f7:e9:55:00:2f:ff:f0:e5:dc:5c:8e:00:fb:29:c7:48: 68:2a:95:4f:34:40:43:7d:41:91:8d:e2:de:12:1f:43:a4:df: 45:c6:30:d2:da:3d:e1:69:2c:5f:89:20:5a:2c:13:ab:55:29: 0b:66:48:c4:13:47:5f:b7:64:7c:bf:d4:d5:3e:3c:55:85:fd: 22:0f:1b:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2PEjQM4AEWbijPn/u/mmRW0U1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NF Mjc2MzE0RjAeFw0yNjA1MTIwODE0NDZaFw0yNjA1MTMwOTQ1NDZaMDMxMTAvBgNV BAMTKDNDRDg5NUY1QzlEMjcxQTA0MzE3QkNBNzZGNzVDRkIwRThGNzlCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XAMhXM3ZfLGF4WTnCqD9rNfC 0QpLm9+Gzl2zRciLeZ2E6VC91wBNVzeacDB+O4doE8BNHAqlfzg/vmsQttluRRSr yCrdqYDD1lVFw9ejiuJjWY0lbLGif0nUgaPO9JO0iqRz+c+bmCKG5KtdYpjWFo1l QoF8p5m7qqwbNrxgaocKlUP6ka8MWU66zfiDQt2HROIPYDGMzAIz1S5EXABKIexx 8NmFP/3iawyxmH8XHN/zRStjrjjEWq3c7A0k/Ij01hd2Tn9z34xJf2AD5f9zJGQU fNIo1yrCDFfBi7/wsLexv3VLIj9TkSwOTGtL7vTSlv6QJDiQQ1AhUa68x4arAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPNiV9cnScaBDF7ynb3XPsOj3mxEwHwYDVR0j BBgwFoAUWH+p/WgtN7wwKDGaZbyuzOJ2MU8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmYTNiNjQtM2M2MS00OGQ1LWFiMGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2 ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NFMjc2MzE0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODdGQTlGRDY4MkQzN0JDMzAyODMxOUE2NUJDQUVDQ0UyNzYz MTRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FF Q0NFMjc2MzE0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhSUc+QusgNQJlKcGYPu3D0ngEg6vlMeiu/ dODG62BKeRdWlm/9xwtaCunIfSx0eeLE6vP5pjIJqbdg8nrX+8iajQIruJ04dSXj tLXG7LTjO5w743xO3dcuku7lqclsVItYHn66NPBiCREt4jRFMHtwI6i1Qwqp6Upc sRsJa4dtb6D4dNrHA7EeJ+ZeL57miE3vjVTVOEi9HUJOizGkRZu7JrQqxMLdzpoS MYcVmrZeSxN8HFZE9+lVAC//8OXcXI4A+ynHSGgqlU80QEN9QZGN4t4SH0Ok30XG MNLaPeFpLF+JIFosE6tVKQtmSMQTR1+3ZHy/1NU+PFWF/SIPGys= -----END CERTIFICATE-----Generated at Tue May 12 23:20:49 2026 by rpki-client