$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft File: 587FA9FD682D37BC3028319A65BCAECCE276314F.mft (raw, json) Hash identifier: w/9Qr8YBTrZ0gWiLdto/cuWlfCA8NQstdOL/sEqTqOM= Subject key identifier: 76:1D:8A:A2:D4:E9:39:1A:38:B9:6F:3F:A8:5E:C1:E7:72:34:D4:D4 Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Certificate issuer: /CN=587FA9FD682D37BC3028319A65BCAECCE276314F Certificate serial: 5DC95FF7806F0EBFDE587253A6FD5FEBAC89F7AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:15:57 +0000 Manifest this update: Thu 23 Jul 2026 21:10:57 +0000 Manifest next update: Fri 24 Jul 2026 23:53:57 +0000 Files and hashes: 1: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 5zg0GIi7yUDtLBjsDWQRXMmLy9VH8ssv+xs3UioSD6g=) 2: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: 7DRv9+zjmRuZ1Cj6e3MgFUBLnLf0dtLBblIHUDPlQ+w=) 3: 587FA9FD682D37BC3028319A65BCAECCE276314F.crl (hash: mRtfqqgk/mEashDSVuy6jMrjGfHHowuKF5pz8oWDC24=) 4: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: VSpKbDClpDylxx1rB7LnMubAcuRSyIs4GzhBBvXtPpM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c9:5f:f7:80:6f:0e:bf:de:58:72:53:a6:fd:5f:eb:ac:89:f7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Validity Not Before: Jul 23 21:10:57 2026 GMT Not After : Jul 24 23:53:57 2026 GMT Subject: CN=761D8AA2D4E9391A38B96F3FA85EC1E77234D4D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fd:10:2f:9e:a0:1a:a6:13:0d:4d:ae:9c:03: fd:ae:a1:ea:fe:a1:ef:e7:1c:86:11:46:2e:a5:58: cf:44:d7:55:e4:10:68:48:d4:7d:73:02:36:1e:d7: 4c:c6:2d:66:86:49:4f:fc:7c:5e:76:3a:62:8a:7d: 06:cb:00:1c:9c:81:07:ad:f0:18:2f:60:9e:1a:a8: 40:75:68:d1:17:2f:33:5a:4f:20:d0:cc:ca:fe:3b: f1:07:21:37:97:f7:51:05:e6:40:f3:dd:90:32:33: 88:c4:16:f8:d9:c2:a0:78:2b:dd:df:ad:39:05:d5: 21:e2:29:99:86:cf:a9:60:11:b1:4a:bd:af:97:af: 7a:c8:12:90:09:e6:66:94:b9:1f:79:dc:da:13:64: 66:dd:9f:2f:bc:d5:85:c7:51:8a:e7:1e:6f:4a:4a: a7:ef:f2:5f:7e:22:64:96:98:48:1c:9f:46:a6:ab: 28:d3:64:af:90:2c:5c:17:e5:c5:c2:6d:26:5f:7b: 5f:04:3d:8d:61:16:e2:6f:8d:51:74:49:86:08:f0: 35:56:17:f4:10:a7:8b:a1:c8:5d:16:0b:e1:e4:cc: 2d:7d:14:a9:b9:8e:74:73:f4:d3:79:ea:93:c9:ad: a3:81:c3:2e:7a:66:2d:e0:84:63:2d:83:7e:67:81: 92:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1D:8A:A2:D4:E9:39:1A:38:B9:6F:3F:A8:5E:C1:E7:72:34:D4:D4 X509v3 Authority Key Identifier: keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:65:03:c8:b0:1f:d4:fa:58:95:a2:b6:53:49:41:21:5f:75: 87:a4:6c:ec:84:e1:36:38:93:d8:08:27:e5:86:0c:03:ca:c8: 3a:c9:f3:32:db:fb:6b:b2:b2:88:6e:0a:a1:c2:12:10:6d:6d: ed:a9:f5:c2:04:be:e4:4b:85:ee:37:25:da:ac:c1:2c:44:dc: 3d:a3:0c:89:3f:df:ed:fa:b1:66:25:69:82:d2:9f:06:fa:34: 1b:b1:ca:ca:fd:63:dc:9e:9d:db:e3:95:3d:65:b3:fb:45:10: dd:49:7b:2b:fb:39:a6:59:46:74:82:27:9c:98:3d:52:23:51: bd:c7:f3:89:30:a8:f8:33:c4:65:57:25:a7:34:0f:b6:f2:05: c0:cd:d6:f4:c1:97:0b:7a:2a:a5:c5:32:c3:e1:de:8d:d0:f5: 27:55:69:96:43:ea:20:6c:8d:ef:30:2e:c2:61:9c:6e:5e:d0: b9:e0:9a:fe:73:d0:25:56:58:7a:29:a8:b7:86:34:a8:48:15: ae:0b:fb:39:1e:17:2e:55:82:c4:84:8a:3e:5d:fc:72:8d:84: d4:b8:2b:5c:1d:60:e0:aa:96:82:a0:cc:ba:d8:1a:1c:63:4b: f5:31:5a:4c:1c:62:f7:fa:db:f5:f8:87:35:c1:90:ec:1f:3a: b8:7a:9c:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXclf94BvDr/eWHJTpv1f66yJ968wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NF Mjc2MzE0RjAeFw0yNjA3MjMyMTEwNTdaFw0yNjA3MjQyMzUzNTdaMDMxMTAvBgNV BAMTKDc2MUQ4QUEyRDRFOTM5MUEzOEI5NkYzRkE4NUVDMUU3NzIzNEQ0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/RAvnqAaphMNTa6cA/2uoer+ oe/nHIYRRi6lWM9E11XkEGhI1H1zAjYe10zGLWaGSU/8fF52OmKKfQbLABycgQet 8BgvYJ4aqEB1aNEXLzNaTyDQzMr+O/EHITeX91EF5kDz3ZAyM4jEFvjZwqB4K93f rTkF1SHiKZmGz6lgEbFKva+Xr3rIEpAJ5maUuR953NoTZGbdny+81YXHUYrnHm9K Sqfv8l9+ImSWmEgcn0amqyjTZK+QLFwX5cXCbSZfe18EPY1hFuJvjVF0SYYI8DVW F/QQp4uhyF0WC+HkzC19FKm5jnRz9NN56pPJraOBwy56Zi3ghGMtg35ngZJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdh2KotTpORo4uW8/qF7B53I01NQwHwYDVR0j BBgwFoAUWH+p/WgtN7wwKDGaZbyuzOJ2MU8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmYTNiNjQtM2M2MS00OGQ1LWFiMGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2 ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NFMjc2MzE0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODdGQTlGRDY4MkQzN0JDMzAyODMxOUE2NUJDQUVDQ0UyNzYz MTRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FF Q0NFMjc2MzE0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9lA8iwH9T6WJWitlNJQSFfdYekbOyE4TY4 k9gIJ+WGDAPKyDrJ8zLb+2uysohuCqHCEhBtbe2p9cIEvuRLhe43JdqswSxE3D2j DIk/3+36sWYlaYLSnwb6NBuxysr9Y9yendvjlT1ls/tFEN1Jeyv7OaZZRnSCJ5yY PVIjUb3H84kwqPgzxGVXJac0D7byBcDN1vTBlwt6KqXFMsPh3o3Q9SdVaZZD6iBs je8wLsJhnG5e0Lngmv5z0CVWWHopqLeGNKhIFa4L+zkeFy5VgsSEij5d/HKNhNS4 K1wdYOCqloKgzLrYGhxjS/UxWkwcYvf62/X4hzXBkOwfOrh6nPM= -----END CERTIFICATE-----Generated at Fri Jul 24 06:20:25 2026 by rpki-client