$ rpki-client -vvf rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft File: 59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft (raw, json) Hash identifier: TIbom1FcwbD0C6LVhohPZxEGPAsa8VtJR3yJHDkxCVU= Subject key identifier: F1:31:D2:B8:50:71:74:86:07:88:41:D5:FF:59:E4:59:79:E9:0A:BC Authority key identifier: 59:F4:23:4C:AE:EF:A4:6B:3C:B1:62:7D:38:50:2F:B4:BA:6E:FD:90 Certificate issuer: /CN=59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90 Certificate serial: 2550FC4C4834E5947BD1912DE2DA5698A5886C0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:22:11 +0000 Manifest this update: Tue 12 May 2026 06:17:11 +0000 Manifest next update: Wed 13 May 2026 06:52:11 +0000 Files and hashes: 1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: xUpvUE2ZHUc2DU7j7aFTg7BviyLprNaKf2mKbV8517U=) 2: 59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl (hash: SuosNVnxHGW5FquGEempjPOZT2CP/4LrcbCnZIJ3SiU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:50:fc:4c:48:34:e5:94:7b:d1:91:2d:e2:da:56:98:a5:88:6c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90 Validity Not Before: May 12 06:17:11 2026 GMT Not After : May 13 06:52:11 2026 GMT Subject: CN=F131D2B850717486078841D5FF59E45979E90ABC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d3:af:b5:3d:3a:73:41:f1:85:a2:da:f0:be: 69:00:f9:57:21:57:90:cb:a6:a4:5c:ec:c0:69:a4: 3c:b6:0b:70:c5:09:a7:4c:73:78:8e:d1:62:7d:ff: c3:3f:9a:0b:8e:4b:de:e6:61:45:56:50:76:20:43: b0:29:d1:98:89:81:ba:f2:a9:9d:e1:c1:44:d0:50: 8c:fd:b6:04:a8:b6:9c:33:a2:4e:d9:47:8f:30:23: 4f:10:3c:5a:01:93:0c:71:ab:db:fe:4f:9d:ea:88: 26:fc:a3:90:09:52:5e:7a:b6:77:25:cd:94:31:a5: cc:20:59:77:57:c3:96:d8:b0:93:1b:ca:bf:38:00: f9:af:cb:d8:ab:ad:f6:a6:41:53:51:22:73:6b:63: 64:91:02:93:97:72:bb:8c:e4:44:c0:7b:5e:1f:b0: 36:0a:88:7e:77:a1:25:09:47:26:74:c2:68:70:43: b9:1b:22:f7:93:42:da:66:fc:20:64:f7:0b:27:6f: 94:1c:1a:bf:77:df:76:a6:c3:ef:6d:7d:b8:82:c3: 36:30:ce:aa:ef:70:af:43:d4:0d:3b:dd:e7:af:d7: 70:c6:11:17:ba:38:f0:d4:97:92:bf:8f:f8:78:13: ce:35:4e:ad:e2:83:77:7d:8e:6a:44:f8:77:60:20: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:31:D2:B8:50:71:74:86:07:88:41:D5:FF:59:E4:59:79:E9:0A:BC X509v3 Authority Key Identifier: keyid:59:F4:23:4C:AE:EF:A4:6B:3C:B1:62:7D:38:50:2F:B4:BA:6E:FD:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e3:7c:63:05:77:a6:b3:c7:e1:46:ea:01:8d:d8:27:cf:7c: b5:1d:7d:56:9c:bc:04:11:56:34:41:3b:d8:d8:10:5c:a8:15: 52:91:bb:08:c4:5c:f0:c2:b0:41:1c:51:70:c7:00:67:39:ce: 4e:97:84:82:36:53:43:18:05:d3:5d:6c:92:c6:d4:d6:7a:49: c6:4f:27:85:5f:51:65:c2:a6:6b:61:34:2a:17:72:41:cc:02: c8:87:e2:87:33:34:e2:0c:cb:4d:3e:e4:9c:7c:ab:13:48:a8: 6c:27:8f:60:6c:ae:49:a9:0c:7d:2f:a1:45:f7:fb:e4:47:8e: 6c:ee:2e:57:48:3e:fb:50:02:af:ad:11:da:33:e8:25:a6:1c: 74:f0:c3:55:3d:41:58:3c:79:f0:4d:a7:06:d9:1c:a7:26:c5: 2f:67:07:77:a8:f0:b9:49:a4:84:12:06:2d:62:92:21:50:ec: a7:a6:58:30:b0:d7:b5:91:0a:20:ab:a7:4d:32:2d:8a:cf:fa: 99:bd:e0:9e:09:36:86:a9:08:c5:ac:5a:2a:32:c3:4a:bc:fc: fb:e6:6a:4c:00:b9:c2:66:0e:e4:02:9e:dd:48:69:c1:b5:37: 31:18:1b:ef:a0:10:b6:c3:8a:15:2b:d5:10:3a:90:56:9a:bb: d7:da:4e:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVD8TEg05ZR70ZEt4tpWmKWIbAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlGNDIzNENBRUVGQTQ2QjNDQjE2MjdEMzg1MDJGQjRC QTZFRkQ5MDAeFw0yNjA1MTIwNjE3MTFaFw0yNjA1MTMwNjUyMTFaMDMxMTAvBgNV BAMTKEYxMzFEMkI4NTA3MTc0ODYwNzg4NDFENUZGNTlFNDU5NzlFOTBBQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ06+1PTpzQfGFotrwvmkA+Vch V5DLpqRc7MBppDy2C3DFCadMc3iO0WJ9/8M/mguOS97mYUVWUHYgQ7Ap0ZiJgbry qZ3hwUTQUIz9tgSotpwzok7ZR48wI08QPFoBkwxxq9v+T53qiCb8o5AJUl56tncl zZQxpcwgWXdXw5bYsJMbyr84APmvy9irrfamQVNRInNrY2SRApOXcruM5ETAe14f sDYKiH53oSUJRyZ0wmhwQ7kbIveTQtpm/CBk9wsnb5QcGr9333amw+9tfbiCwzYw zqrvcK9D1A073eev13DGERe6OPDUl5K/j/h4E841Tq3ig3d9jmpE+HdgICL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8THSuFBxdIYHiEHV/1nkWXnpCrwwHwYDVR0j BBgwFoAUWfQjTK7vpGs8sWJ9OFAvtLpu/ZAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJhOThjOGItY2FkOS00OWUxLWIxNzgtMWRhZjNiNjJlZjU5LzAvNTlGNDIzNENB RUVGQTQ2QjNDQjE2MjdEMzg1MDJGQjRCQTZFRkQ5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUY0MjM0Q0FFRUZBNDZCM0NCMTYyN0QzODUwMkZCNEJBNkVG RDkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvNTlGNDIzNENBRUVGQTQ2QjNDQjE2MjdEMzg1MDJG QjRCQTZFRkQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjjfGMFd6azx+FG6gGN2CfPfLUdfVacvAQR VjRBO9jYEFyoFVKRuwjEXPDCsEEcUXDHAGc5zk6XhII2U0MYBdNdbJLG1NZ6ScZP J4VfUWXCpmthNCoXckHMAsiH4oczNOIMy00+5Jx8qxNIqGwnj2BsrkmpDH0voUX3 ++RHjmzuLldIPvtQAq+tEdoz6CWmHHTww1U9QVg8efBNpwbZHKcmxS9nB3eo8LlJ pIQSBi1ikiFQ7KemWDCw17WRCiCrp00yLYrP+pm94J4JNoapCMWsWioyw0q8/Pvm akwAucJmDuQCnt1IacG1NzEYG++gELbDihUr1RA6kFaau9faThY= -----END CERTIFICATE-----Generated at Tue May 12 22:19:37 2026 by rpki-client