$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft File: 587FA9FD682D37BC3028319A65BCAECCE276314F.mft (raw, json) Hash identifier: P0sBsy9Ljv1+CeOklVKwB9R/AkNZ5z1IyCnoT200fCU= Subject key identifier: F4:B2:07:F4:BE:D8:1A:2E:9F:A3:66:F6:B1:19:F0:C9:D5:2B:EC:F8 Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Certificate issuer: /CN=587FA9FD682D37BC3028319A65BCAECCE276314F Certificate serial: 416F9D917A80B0D4DE7EBBF6E62F31F58CF0A636 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 22:57:55 +0000 Manifest this update: Sat 14 Nov 2026 22:52:55 +0000 Manifest next update: Mon 16 Nov 2026 00:57:55 +0000 Files and hashes: 1: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: 7DRv9+zjmRuZ1Cj6e3MgFUBLnLf0dtLBblIHUDPlQ+w=) 2: 587FA9FD682D37BC3028319A65BCAECCE276314F.crl (hash: xn/Fhl+u+pEd0nZt1mPzpvX9QzFAhOJ3gkt6IZcLOhI=) 3: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: VSpKbDClpDylxx1rB7LnMubAcuRSyIs4GzhBBvXtPpM=) 4: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 5zg0GIi7yUDtLBjsDWQRXMmLy9VH8ssv+xs3UioSD6g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6f:9d:91:7a:80:b0:d4:de:7e:bb:f6:e6:2f:31:f5:8c:f0:a6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Validity Not Before: Nov 14 22:52:55 2026 GMT Not After : Nov 16 00:57:55 2026 GMT Subject: CN=F4B207F4BED81A2E9FA366F6B119F0C9D52BECF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:a6:36:eb:74:0d:ad:09:2c:54:01:48:84: 14:ed:d7:56:2e:e7:95:22:48:3d:3c:1f:c7:ca:30: 92:71:f4:4a:0c:7a:44:49:84:34:18:52:e6:31:af: 9d:00:14:61:26:71:fd:49:87:f7:6d:63:22:0b:74: 19:95:aa:37:f9:1d:01:f7:a4:9b:cc:54:07:a0:f6: b1:a6:cf:5c:d8:cc:7a:42:5b:2c:80:44:57:cd:3d: 7b:10:53:00:e6:13:25:30:05:fb:1d:42:7e:44:f2: fe:9c:21:74:92:81:d2:41:ce:5e:81:00:4e:45:da: 30:ab:f8:0b:b0:9d:01:89:36:cd:43:eb:12:b0:1c: 80:98:93:90:5c:32:62:82:b8:f2:c9:e3:73:6e:a5: 83:54:04:57:28:e2:50:aa:c7:0c:a7:a2:63:d5:19: 1d:fb:ee:f1:63:d0:c8:97:a0:c6:02:37:52:64:cc: 16:a1:5a:1e:7b:fc:33:b8:50:02:8f:70:1b:48:11: c4:cd:54:82:71:b2:6e:27:b2:1c:72:70:f9:3c:27: 0f:fc:78:ba:8e:7f:89:7c:49:d8:03:31:0b:40:03: 89:2b:93:a0:5a:31:c1:64:9f:19:eb:9c:2b:1c:b2: 2c:8a:87:63:1d:94:d6:b9:4f:e9:6d:e3:0c:bf:05: 5f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B2:07:F4:BE:D8:1A:2E:9F:A3:66:F6:B1:19:F0:C9:D5:2B:EC:F8 X509v3 Authority Key Identifier: keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f1:48:c6:0e:d1:04:e5:76:42:8f:0f:9e:9b:71:96:71:a8: 8c:97:78:b0:b6:58:4e:ae:9b:51:c6:de:c2:c1:0f:a3:2d:8e: 90:64:33:8a:f7:5b:c0:05:b8:83:de:7d:98:68:06:91:ee:96: 5f:08:fa:df:ee:bd:fa:d3:e4:38:a2:f1:12:a4:92:cb:33:2a: c7:54:54:b2:17:e1:ef:1f:d8:85:19:ed:51:d3:a4:e2:92:c1: 2a:db:b0:bb:71:f1:00:65:06:52:51:37:79:68:a4:4c:93:19: 1b:40:ee:07:57:5a:70:f7:ba:ba:5e:87:45:a5:fb:01:78:fa: 86:07:f7:f9:70:fa:69:f5:b0:4a:34:fc:9a:8f:5b:e8:1c:37: 29:3b:1d:28:e1:f8:0b:81:bf:42:21:3c:83:bc:6c:5f:e8:86: b8:1e:09:62:1b:21:46:64:e0:02:03:1f:16:5d:40:a0:e5:4a: 60:f8:47:a2:b3:b8:38:d6:a8:8f:8d:16:b3:c0:b3:24:95:8b: 37:05:d0:96:ed:06:f9:f4:ed:b1:58:eb:9c:75:8a:7e:ae:1e: d2:b7:41:fd:59:cd:ca:bd:c0:b0:eb:01:19:5d:e1:10:76:cb: 06:b3:ef:37:de:dc:a3:7a:4a:c3:31:ce:51:6e:b3:65:92:6f: 26:bd:08:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQW+dkXqAsNTefrv25i8x9YzwpjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NF Mjc2MzE0RjAeFw0yNjExMTQyMjUyNTVaFw0yNjExMTYwMDU3NTVaMDMxMTAvBgNV BAMTKEY0QjIwN0Y0QkVEODFBMkU5RkEzNjZGNkIxMTlGMEM5RDUyQkVDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2E6Y263QNrQksVAFIhBTt11Yu 55UiSD08H8fKMJJx9EoMekRJhDQYUuYxr50AFGEmcf1Jh/dtYyILdBmVqjf5HQH3 pJvMVAeg9rGmz1zYzHpCWyyARFfNPXsQUwDmEyUwBfsdQn5E8v6cIXSSgdJBzl6B AE5F2jCr+AuwnQGJNs1D6xKwHICYk5BcMmKCuPLJ43NupYNUBFco4lCqxwynomPV GR377vFj0MiXoMYCN1JkzBahWh57/DO4UAKPcBtIEcTNVIJxsm4nshxycPk8Jw/8 eLqOf4l8SdgDMQtAA4krk6BaMcFknxnrnCscsiyKh2MdlNa5T+lt4wy/BV+vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9LIH9L7YGi6fo2b2sRnwydUr7PgwHwYDVR0j BBgwFoAUWH+p/WgtN7wwKDGaZbyuzOJ2MU8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmYTNiNjQtM2M2MS00OGQ1LWFiMGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2 ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NFMjc2MzE0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODdGQTlGRDY4MkQzN0JDMzAyODMxOUE2NUJDQUVDQ0UyNzYz MTRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FF Q0NFMjc2MzE0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALjxSMYO0QTldkKPD56bcZZxqIyXeLC2WE6u m1HG3sLBD6MtjpBkM4r3W8AFuIPefZhoBpHull8I+t/uvfrT5Dii8RKkksszKsdU VLIX4e8f2IUZ7VHTpOKSwSrbsLtx8QBlBlJRN3lopEyTGRtA7gdXWnD3urpeh0Wl +wF4+oYH9/lw+mn1sEo0/JqPW+gcNyk7HSjh+AuBv0IhPIO8bF/ohrgeCWIbIUZk 4AIDHxZdQKDlSmD4R6KzuDjWqI+NFrPAsySVizcF0JbtBvn07bFY65x1in6uHtK3 Qf1Zzcq9wLDrARld4RB2ywaz7zfe3KN6SsMxzlFus2WSbya9CAc= -----END CERTIFICATE-----Generated at Sun Nov 15 01:27:28 2026 by rpki-client