$ rpki-client -vvf rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft File: 586C54F03B92F22D9291776AE79350296DB382C8.mft (raw, json) Hash identifier: PV4prROQRr9OYC2OJD5gXT898sWlgPEK16udyce6t7k= Subject key identifier: 95:03:AA:6F:35:67:81:DF:39:FC:34:59:3E:0F:E7:98:A5:66:33:C6 Authority key identifier: 58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8 Certificate issuer: /CN=586C54F03B92F22D9291776AE79350296DB382C8 Certificate serial: 55BF000012BCDD196214E25D05EB1331FD505E42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:08:29 +0000 Manifest this update: Thu 23 Jul 2026 15:03:29 +0000 Manifest next update: Fri 24 Jul 2026 16:56:29 +0000 Files and hashes: 1: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: 02NTkzqK/LTvvPzyGLCIQvFXPCqfEGOd/i/Q/MdPoH8=) 2: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 0BJPNvIKBQFSgToHUrV6asLY9+z375bbGV3qDBCnsE0=) 3: 586C54F03B92F22D9291776AE79350296DB382C8.crl (hash: Zj/+hrwYPwHy+8jNrvHnW1dR3OwniiQ1KzL3tJOzen8=) 4: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 9FI6xrUmyIDtdYUTIVth+tn1sleSPgc7MLrTjmuupW8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:bf:00:00:12:bc:dd:19:62:14:e2:5d:05:eb:13:31:fd:50:5e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586C54F03B92F22D9291776AE79350296DB382C8 Validity Not Before: Jul 23 15:03:29 2026 GMT Not After : Jul 24 16:56:29 2026 GMT Subject: CN=9503AA6F356781DF39FC34593E0FE798A56633C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:cf:6b:1c:55:9e:a8:cc:13:86:4c:0b:e9: 86:20:c9:0f:58:ff:4c:0c:77:b9:5a:7b:79:2f:77: e5:22:a1:e4:94:54:93:7b:08:a0:7a:fe:c4:8b:40: 5d:f5:fe:cb:9e:c2:bc:f1:92:75:ff:0a:a4:66:f5: 24:bd:20:34:12:33:d3:51:d6:e8:a1:fe:a4:72:cd: 9c:2f:c9:27:90:42:95:88:7a:c3:b4:c4:73:b9:d5: 74:80:82:97:fa:3e:b4:f0:9a:50:1f:29:72:db:22: 9a:40:bf:04:9d:47:ca:d3:db:04:ee:4c:da:55:50: a7:a1:22:95:e9:84:4e:89:d3:ee:95:74:08:a7:8d: ba:d6:09:23:ca:0f:9b:0d:93:de:a6:88:d9:26:5b: be:15:1d:ee:a5:0e:1c:6d:f8:c7:50:95:02:1c:93: da:a4:24:e4:4f:4c:c0:a4:7d:43:f3:b9:f0:e8:55: 92:88:e1:c4:6c:e9:ee:07:81:e2:0a:09:9e:3e:e9: 77:74:0e:95:26:e0:f5:52:8b:b9:d7:5c:72:bf:a7: d5:f2:4c:1c:2d:95:2e:18:0d:9b:af:1f:23:c0:95: 2b:fb:c9:fa:b3:8d:b2:81:e3:a6:83:c3:d2:dc:da: 33:ae:02:7d:40:62:b0:20:c8:cc:51:0e:45:ee:ca: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:03:AA:6F:35:67:81:DF:39:FC:34:59:3E:0F:E7:98:A5:66:33:C6 X509v3 Authority Key Identifier: keyid:58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6a:a9:e3:76:7b:b5:1f:b6:8b:de:8b:8e:86:b7:22:4a:52: 86:bb:ce:1e:7c:01:73:12:11:99:c0:8b:61:4f:8d:17:a5:4d: 6d:aa:0c:cf:d1:0e:8e:8b:47:a9:56:83:07:bf:53:e3:69:07: b0:99:aa:f7:dd:94:c3:47:d0:74:d9:88:5f:0f:87:f6:b4:ab: 76:bc:60:23:cd:a5:03:5a:80:6d:2e:d0:9b:ca:d9:3a:3e:9f: ce:92:0c:2d:3e:64:99:19:19:07:d0:a0:b2:c6:f8:7f:ac:57: df:8b:7e:d3:15:9b:06:d7:61:48:9e:72:34:bf:d2:60:dc:c9: ef:d8:9d:7d:bd:43:fa:bf:97:4e:13:98:5a:0c:a8:7e:7e:1f: c1:47:27:52:7b:22:df:c0:0d:0a:d6:94:61:60:7f:12:55:9d: e8:6c:a3:0c:03:66:83:0d:ad:86:aa:00:f8:7f:fd:06:75:60: f3:57:59:64:b5:02:1b:50:18:b7:b3:a7:1a:6f:9d:75:e6:64: b8:65:2d:5b:6f:9f:4e:ac:29:75:fc:98:04:d2:de:df:45:9f: 1a:de:c6:bc:dd:9c:77:46:27:88:96:cc:ea:5b:d4:fa:72:c1: f9:f6:f7:f2:3a:d6:39:2d:3f:c4:30:47:3a:cb:56:a9:f1:65: bc:01:8d:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVb8AABK83RliFOJdBesTMf1QXkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2QzU0RjAzQjkyRjIyRDkyOTE3NzZBRTc5MzUwMjk2 REIzODJDODAeFw0yNjA3MjMxNTAzMjlaFw0yNjA3MjQxNjU2MjlaMDMxMTAvBgNV BAMTKDk1MDNBQTZGMzU2NzgxREYzOUZDMzQ1OTNFMEZFNzk4QTU2NjMzQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCous9rHFWeqMwThkwL6YYgyQ9Y /0wMd7lae3kvd+UioeSUVJN7CKB6/sSLQF31/suewrzxknX/CqRm9SS9IDQSM9NR 1uih/qRyzZwvySeQQpWIesO0xHO51XSAgpf6PrTwmlAfKXLbIppAvwSdR8rT2wTu TNpVUKehIpXphE6J0+6VdAinjbrWCSPKD5sNk96miNkmW74VHe6lDhxt+MdQlQIc k9qkJORPTMCkfUPzufDoVZKI4cRs6e4HgeIKCZ4+6Xd0DpUm4PVSi7nXXHK/p9Xy TBwtlS4YDZuvHyPAlSv7yfqzjbKB46aDw9Lc2jOuAn1AYrAgyMxRDkXuysAXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlQOqbzVngd85/DRZPg/nmKVmM8YwHwYDVR0j BBgwFoAUWGxU8DuS8i2SkXdq55NQKW2zgsgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzYyMGI0MjMtZGQ1ZC00NDhmLWJiZDMtMDQ1MzBlYzE3MTVkLzAvNTg2QzU0RjAz QjkyRjIyRDkyOTE3NzZBRTc5MzUwMjk2REIzODJDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODZDNTRGMDNCOTJGMjJEOTI5MTc3NkFFNzkzNTAyOTZEQjM4 MkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvNTg2QzU0RjAzQjkyRjIyRDkyOTE3NzZBRTc5MzUw Mjk2REIzODJDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxqqeN2e7Uftovei46GtyJKUoa7zh58AXMS EZnAi2FPjRelTW2qDM/RDo6LR6lWgwe/U+NpB7CZqvfdlMNH0HTZiF8Ph/a0q3a8 YCPNpQNagG0u0JvK2To+n86SDC0+ZJkZGQfQoLLG+H+sV9+LftMVmwbXYUiecjS/ 0mDcye/YnX29Q/q/l04TmFoMqH5+H8FHJ1J7It/ADQrWlGFgfxJVnehsowwDZoMN rYaqAPh//QZ1YPNXWWS1AhtQGLezpxpvnXXmZLhlLVtvn06sKXX8mATS3t9Fnxre xrzdnHdGJ4iWzOpb1Ppywfn29/I61jktP8QwRzrLVqnxZbwBjZE= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:45 2026 by rpki-client