$ rpki-client -vvf rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft File: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft (raw, json) Hash identifier: 4Bs5qgjod6p5fsYk2E5HFTR8oBAcDbUECehuX90ANAQ= Subject key identifier: F5:85:55:CA:86:20:D8:82:7A:5A:F3:07:C3:B8:70:D2:24:B8:90:47 Authority key identifier: 95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 Certificate issuer: /CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Certificate serial: 23AB416511CA3D3F5FB603CAA1ECF098BB92350C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:00:15 +0000 Manifest this update: Fri 24 Jul 2026 00:55:15 +0000 Manifest next update: Sat 25 Jul 2026 04:08:15 +0000 Files and hashes: 1: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl (hash: 9X4t1NVsuwMdtZFy5goBxkvgF8CrEMxBL7bScpzbp2U=) 2: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: t5M4q+wjV6k977kCQYS5NWkmORi7rVl+URL29ZG5i/Y=) 3: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: aLMfdsIVj+NArpBFKbx+R57YG2afPDJAmU3iGMb6+6c=) 4: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: LXofhMEruHNZkVP/FDGdRjlE9GAdxzBp7sQ6AFEv168=) 5: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: dUcYMxyxr0kR8WWHVwUrDj577thKceAoVrMPKHmFvPk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ab:41:65:11:ca:3d:3f:5f:b6:03:ca:a1:ec:f0:98:bb:92:35:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Validity Not Before: Jul 24 00:55:15 2026 GMT Not After : Jul 25 04:08:15 2026 GMT Subject: CN=F58555CA8620D8827A5AF307C3B870D224B89047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:85:b7:31:25:36:eb:a2:40:1e:b1:e9:16: 08:f5:e1:01:35:29:1b:ae:e7:6e:8c:77:b8:73:77: f5:ab:d1:cd:28:f0:62:f4:37:47:72:f8:d6:0c:fe: ee:cf:a6:92:dd:d4:e1:70:d8:86:27:95:a5:c4:89: 35:66:27:fe:b2:b7:bf:76:96:a4:c7:85:00:67:f4: e3:e2:a7:94:79:dc:97:68:78:a1:32:8f:b3:70:24: 28:fb:9f:0c:e7:2f:c1:74:e8:6e:b2:fb:d0:0b:09: 2f:2d:fb:6b:21:44:74:91:ce:3c:b3:8b:06:ae:cc: f7:f8:c3:fd:4b:c4:3c:0f:db:b3:6b:e2:2e:b4:40: 53:e5:c6:cd:0c:61:cb:1d:8d:98:9c:50:d2:34:99: 7b:bb:97:26:52:d3:ce:be:ec:e9:62:ba:99:8e:da: 62:ae:bd:7a:d6:c5:e0:c2:d7:b8:48:a7:15:9a:73: 5e:07:a7:19:3a:38:7e:58:b6:62:06:2a:2f:97:1f: 91:47:6e:f4:2d:f0:19:5d:b0:08:de:57:7d:3f:b1: 1b:c6:6b:e7:2c:d1:66:27:22:a4:71:45:1e:7e:14: 9f:ed:0e:bd:3b:b6:93:fe:b0:7c:b1:1c:34:f6:4f: 31:97:a8:bf:7b:67:da:26:72:ec:23:1c:37:80:9f: 90:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:85:55:CA:86:20:D8:82:7A:5A:F3:07:C3:B8:70:D2:24:B8:90:47 X509v3 Authority Key Identifier: keyid:95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:cb:cf:b6:d2:fb:79:c3:d8:43:36:55:47:a0:7f:ab:42:e5: a0:e8:f1:24:52:fd:9f:c6:8a:0a:c3:15:60:54:11:f1:15:c8: 0b:53:cf:a7:a0:35:cd:d1:3f:87:da:19:8a:c9:0e:41:66:87: ee:8a:8a:20:96:da:1e:1d:17:e8:aa:a1:fe:54:d2:00:75:7e: 7c:68:2d:02:f7:4f:58:b6:0a:7d:2c:0d:a4:fa:6f:03:b2:91: d6:18:3c:47:59:c1:ee:f9:9f:20:4e:6e:fa:ba:04:f3:bc:e4: 1d:f4:32:50:af:cc:4e:aa:c6:a0:84:c9:c5:42:ee:5a:eb:79: cd:31:9a:96:82:6c:ac:b2:3a:00:48:98:c8:10:21:a9:c2:bf: 64:69:d6:6a:22:64:bd:2b:d5:da:e4:81:35:44:a7:41:6c:d5: 71:5f:d4:81:fe:5f:e1:95:8e:46:c8:98:e6:1a:36:84:70:82: d3:73:c4:e7:ed:14:be:d7:12:28:82:4a:cd:42:25:7a:f5:36: 8f:da:4d:1c:d3:25:f9:a9:97:ef:e8:d4:4e:60:50:39:82:fd: 41:3f:b0:e9:1f:fa:7f:ae:ab:0c:c5:67:67:d1:d5:a2:2d:a7: 87:25:87:3c:1b:b4:19:84:65:ac:60:42:2c:50:29:f1:36:1b: aa:95:3a:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6tBZRHKPT9ftgPKoezwmLuSNQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVFMjIy NzY0NTBGMDAeFw0yNjA3MjQwMDU1MTVaFw0yNjA3MjUwNDA4MTVaMDMxMTAvBgNV BAMTKEY1ODU1NUNBODYyMEQ4ODI3QTVBRjMwN0MzQjg3MEQyMjRCODkwNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGr4W3MSU266JAHrHpFgj14QE1 KRuu526Md7hzd/Wr0c0o8GL0N0dy+NYM/u7PppLd1OFw2IYnlaXEiTVmJ/6yt792 lqTHhQBn9OPip5R53JdoeKEyj7NwJCj7nwznL8F06G6y+9ALCS8t+2shRHSRzjyz iwauzPf4w/1LxDwP27Nr4i60QFPlxs0MYcsdjZicUNI0mXu7lyZS086+7OliupmO 2mKuvXrWxeDC17hIpxWac14Hpxk6OH5YtmIGKi+XH5FHbvQt8BldsAjeV30/sRvG a+cs0WYnIqRxRR5+FJ/tDr07tpP+sHyxHDT2TzGXqL97Z9omcuwjHDeAn5B9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9YVVyoYg2IJ6WvMHw7hw0iS4kEcwHwYDVR0j BBgwFoAUlYiQXeXaPOt7V15Me0deIidkUPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIwNmNmNTAtYTNkMS00Y2M5LTkyNjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURF NURBM0NFQjdCNTc1RTRDN0I0NzVFMjIyNzY0NTBGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTg4OTA1REU1REEzQ0VCN0I1NzVFNEM3QjQ3NUUyMjI3NjQ1 MEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVF MjIyNzY0NTBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPLz7bS+3nD2EM2VUegf6tC5aDo8SRS/Z/G igrDFWBUEfEVyAtTz6egNc3RP4faGYrJDkFmh+6KiiCW2h4dF+iqof5U0gB1fnxo LQL3T1i2Cn0sDaT6bwOykdYYPEdZwe75nyBObvq6BPO85B30MlCvzE6qxqCEycVC 7lrrec0xmpaCbKyyOgBImMgQIanCv2Rp1moiZL0r1drkgTVEp0Fs1XFf1IH+X+GV jkbImOYaNoRwgtNzxOftFL7XEiiCSs1CJXr1No/aTRzTJfmpl+/o1E5gUDmC/UE/ sOkf+n+uqwzFZ2fR1aItp4clhzwbtBmEZaxgQixQKfE2G6qVOqI= -----END CERTIFICATE-----Generated at Fri Jul 24 07:14:40 2026 by rpki-client