$ rpki-client -vvf rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft File: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft (raw, json) Hash identifier: UWx2F9SePr2qBYq7ru1+pr/mNNnOF4TGyc2FJylgE68= Subject key identifier: D3:41:D6:3A:10:35:10:EF:C2:A9:71:18:64:60:DB:05:36:BA:65:01 Authority key identifier: 95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 Certificate issuer: /CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Certificate serial: 6FA9EBB01FBD05A4EE7861ABF9D8D1FE6A6508BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:09:49 +0000 Manifest this update: Tue 12 May 2026 19:04:49 +0000 Manifest next update: Wed 13 May 2026 22:32:49 +0000 Files and hashes: 1: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl (hash: MnNcVfNB/YF0UhcdX8vSAt67oGXHnpUJ+TId6YsUeCg=) 2: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: LXofhMEruHNZkVP/FDGdRjlE9GAdxzBp7sQ6AFEv168=) 3: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: aLMfdsIVj+NArpBFKbx+R57YG2afPDJAmU3iGMb6+6c=) 4: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: dUcYMxyxr0kR8WWHVwUrDj577thKceAoVrMPKHmFvPk=) 5: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: t5M4q+wjV6k977kCQYS5NWkmORi7rVl+URL29ZG5i/Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a9:eb:b0:1f:bd:05:a4:ee:78:61:ab:f9:d8:d1:fe:6a:65:08:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Validity Not Before: May 12 19:04:49 2026 GMT Not After : May 13 22:32:49 2026 GMT Subject: CN=D341D63A103510EFC2A971186460DB0536BA6501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:a8:57:79:b7:88:3e:61:c5:83:ad:35:bd: 58:9f:5d:4b:5d:e1:2c:aa:f9:ce:de:bf:0a:58:29: ff:7b:c6:19:18:2c:08:7e:0c:77:62:b6:73:c1:28: 28:ae:1a:12:17:4f:27:71:48:e6:36:0c:e7:64:df: e2:6b:92:b7:ff:aa:c5:3e:bf:d9:4f:2c:5b:94:8d: 23:50:86:52:8a:7b:88:b6:9c:71:07:db:e5:36:66: 68:a7:66:8c:04:10:56:df:4b:35:a2:26:e4:a5:0e: fd:92:f2:2e:c1:5a:e0:b7:2f:34:60:32:d1:15:83: 7a:d7:b4:85:aa:f1:8e:3f:11:2a:c1:9f:39:cd:73: 1b:56:6e:51:10:91:5a:d1:3a:2e:84:ef:5a:d5:9e: c8:86:a4:33:3c:ca:2d:b8:db:da:f8:82:5f:11:59: fb:8c:71:3d:1c:e6:52:92:cd:df:e1:f3:7b:6b:b7: a9:27:34:57:8b:47:78:1f:bd:1c:ce:77:a1:55:57: 89:ee:9e:d4:0b:9c:20:67:48:66:76:65:b4:c1:f3: b9:3e:71:ab:fd:5a:43:02:83:fe:36:a2:3d:de:42: 4a:25:b1:26:ae:41:7e:30:f4:78:67:15:f3:a2:d6: 16:5a:a6:67:72:8a:07:6b:d4:e0:85:4a:bf:df:c7: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:D6:3A:10:35:10:EF:C2:A9:71:18:64:60:DB:05:36:BA:65:01 X509v3 Authority Key Identifier: keyid:95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e9:4c:5b:5e:60:63:29:04:ac:69:0e:14:9b:b6:1e:d9:76: e5:2e:b0:8c:ff:ec:65:bf:d7:36:7d:c6:ea:50:e4:9a:9e:02: 80:b0:71:e8:a2:b6:a0:37:ea:49:75:8a:a9:c6:a8:d8:a8:02: 4d:33:31:73:db:5a:c4:97:4c:42:61:5b:47:de:6d:c0:9e:be: c2:48:57:a2:d0:cc:2c:e4:14:aa:96:4d:63:e4:06:38:42:0f: 12:5c:43:da:b0:4e:21:e8:82:35:06:e7:93:ba:16:60:1e:45: 47:e6:10:58:9e:ac:e5:b6:4b:20:d5:c5:01:f8:39:6f:94:09: 2f:29:bd:2b:52:6c:36:72:41:45:3b:03:61:7b:f3:d6:dc:94: 0f:26:de:b2:e3:cf:cf:f9:4c:28:45:80:ca:ed:eb:69:c1:b5: a3:7a:26:8b:6c:be:b7:ae:d7:36:94:ec:a4:b4:cf:e3:c3:cc: 6b:ad:b1:a4:5e:7b:c2:63:8a:d1:de:24:96:67:f2:1b:1a:cf: 91:36:0d:57:5f:8d:5a:96:7f:7f:50:bd:6e:91:0f:4c:8f:83: c3:6c:52:12:8f:47:63:ae:57:24:7c:2c:87:44:b3:ca:a4:f2: bf:90:52:c0:04:27:09:20:66:34:81:a3:1f:b5:32:3d:41:56: b2:25:86:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6nrsB+9BaTueGGr+djR/mplCLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVFMjIy NzY0NTBGMDAeFw0yNjA1MTIxOTA0NDlaFw0yNjA1MTMyMjMyNDlaMDMxMTAvBgNV BAMTKEQzNDFENjNBMTAzNTEwRUZDMkE5NzExODY0NjBEQjA1MzZCQTY1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+ahXebeIPmHFg601vVifXUtd 4Syq+c7evwpYKf97xhkYLAh+DHditnPBKCiuGhIXTydxSOY2DOdk3+Jrkrf/qsU+ v9lPLFuUjSNQhlKKe4i2nHEH2+U2ZminZowEEFbfSzWiJuSlDv2S8i7BWuC3LzRg MtEVg3rXtIWq8Y4/ESrBnznNcxtWblEQkVrROi6E71rVnsiGpDM8yi2429r4gl8R WfuMcT0c5lKSzd/h83trt6knNFeLR3gfvRzOd6FVV4nuntQLnCBnSGZ2ZbTB87k+ cav9WkMCg/42oj3eQkolsSauQX4w9HhnFfOi1hZapmdyigdr1OCFSr/fxyJbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU00HWOhA1EO/CqXEYZGDbBTa6ZQEwHwYDVR0j BBgwFoAUlYiQXeXaPOt7V15Me0deIidkUPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIwNmNmNTAtYTNkMS00Y2M5LTkyNjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURF NURBM0NFQjdCNTc1RTRDN0I0NzVFMjIyNzY0NTBGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTg4OTA1REU1REEzQ0VCN0I1NzVFNEM3QjQ3NUUyMjI3NjQ1 MEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVF MjIyNzY0NTBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/pTFteYGMpBKxpDhSbth7ZduUusIz/7GW/ 1zZ9xupQ5JqeAoCwceiitqA36kl1iqnGqNioAk0zMXPbWsSXTEJhW0febcCevsJI V6LQzCzkFKqWTWPkBjhCDxJcQ9qwTiHogjUG55O6FmAeRUfmEFierOW2SyDVxQH4 OW+UCS8pvStSbDZyQUU7A2F789bclA8m3rLjz8/5TChFgMrt62nBtaN6Jotsvreu 1zaU7KS0z+PDzGutsaRee8JjitHeJJZn8hsaz5E2DVdfjVqWf39QvW6RD0yPg8Ns UhKPR2OuVyR8LIdEs8qk8r+QUsAEJwkgZjSBox+1Mj1BVrIlhic= -----END CERTIFICATE-----Generated at Wed May 13 05:44:34 2026 by rpki-client