$ rpki-client -vvf rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft File: 59C6DD576568EAA049F24E2205FDFFA34E712D32.mft (raw, json) Hash identifier: 1bYqI/F32Sf/4rXwL2m4DyAPNBjYTFulJGjh+Tdu0jM= Subject key identifier: 56:02:3B:6A:1B:3C:CA:96:09:FE:49:75:35:D5:74:8A:5C:65:11:45 Authority key identifier: 59:C6:DD:57:65:68:EA:A0:49:F2:4E:22:05:FD:FF:A3:4E:71:2D:32 Certificate issuer: /CN=59C6DD576568EAA049F24E2205FDFFA34E712D32 Certificate serial: 3581A238FF1C1CB9A9E0B96803F6B7031CFB05DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:30:01 +0000 Manifest this update: Thu 23 Jul 2026 16:25:01 +0000 Manifest next update: Fri 24 Jul 2026 18:36:01 +0000 Files and hashes: 1: 59C6DD576568EAA049F24E2205FDFFA34E712D32.crl (hash: 5ck2jPLE2O1kEslMq/4uyGGcm1bxlf9VYbTee3WpbbQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.crl rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:81:a2:38:ff:1c:1c:b9:a9:e0:b9:68:03:f6:b7:03:1c:fb:05:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59C6DD576568EAA049F24E2205FDFFA34E712D32 Validity Not Before: Jul 23 16:25:01 2026 GMT Not After : Jul 24 18:36:01 2026 GMT Subject: CN=56023B6A1B3CCA9609FE497535D5748A5C651145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:e4:30:8f:cc:7a:28:ce:c7:e6:66:26:28: 5e:9c:d6:78:65:eb:e1:ea:25:7b:17:e2:60:98:17: 80:50:7b:4a:a2:44:43:4e:2e:28:43:a8:d9:fa:82: bb:d5:4f:77:46:5e:80:96:75:cc:c8:a9:69:59:85: e1:c3:8e:c3:3a:b9:99:7a:93:b7:7b:50:07:f9:57: 6c:2b:49:b2:1b:3b:a3:b0:45:9c:49:59:7a:fb:5a: b8:e0:5b:93:67:e6:2e:7d:96:90:1b:79:09:37:2c: ea:22:10:0d:76:20:55:bd:20:4f:60:f0:b9:18:2c: be:dc:e9:24:78:34:01:50:66:f2:48:72:65:e8:75: 01:b7:3a:1d:a9:17:ff:3f:02:62:e5:d0:a5:65:53: 7e:d1:0b:c3:99:de:7e:d7:2c:fa:da:bd:14:5d:04: 08:99:e8:b6:32:c7:c0:73:ee:76:44:26:12:0e:74: fc:55:9a:79:e5:8a:90:39:4b:5c:25:38:01:a2:7f: 17:20:98:3a:3b:61:72:7c:df:78:93:80:dc:33:d7: 4d:36:e0:0e:13:1f:e1:fe:57:0e:27:1b:f0:bc:24: b1:a9:38:c9:a5:42:60:5b:d3:d7:f5:ec:71:81:de: 2f:f7:2d:28:f9:04:f1:68:84:c9:ac:c5:2e:72:d6: 6a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:02:3B:6A:1B:3C:CA:96:09:FE:49:75:35:D5:74:8A:5C:65:11:45 X509v3 Authority Key Identifier: keyid:59:C6:DD:57:65:68:EA:A0:49:F2:4E:22:05:FD:FF:A3:4E:71:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:be:4e:6e:4d:b3:53:7a:27:88:f9:56:f1:03:24:37:ba:94: dc:17:64:71:de:46:58:ab:54:4f:d9:3c:57:00:23:a9:21:e3: 3d:88:30:e4:7b:a6:ca:b8:bf:aa:c8:c4:03:42:76:43:2f:0d: c5:11:4b:4c:71:c5:fb:69:df:dd:55:b4:07:ba:bc:94:5f:d6: 1d:89:b9:e0:09:f8:af:5d:ba:e0:ca:90:b2:cf:02:c0:bc:1b: f6:08:94:18:65:af:db:02:a2:c7:9d:ee:ae:36:3b:b6:f5:45: 6b:4c:74:a3:50:d2:59:fa:b2:54:de:8e:c8:a9:20:9e:8b:8b: 00:f4:9b:b9:db:74:2d:ab:00:e6:cc:19:18:d8:57:2f:f8:75: 49:a9:89:cb:5d:90:e4:be:b8:20:68:df:ed:1a:9d:66:7f:c3: 06:88:79:58:4b:68:1b:e5:dd:3d:ae:9b:33:b9:db:57:df:0b: fa:a0:71:7e:3f:73:53:c0:49:47:64:2e:2f:51:41:a4:b5:20: 2b:86:f6:01:ee:0f:95:60:16:c2:83:8e:83:51:a2:8b:67:c1: ac:05:6b:06:20:e4:eb:97:ae:c0:1d:6f:fe:e7:ed:86:97:31: 6a:10:5d:21:ce:06:f4:21:bf:80:17:a1:3a:0a:81:81:1f:2b: 34:08:fa:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYGiOP8cHLmp4LloA/a3Axz7Bd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlDNkRENTc2NTY4RUFBMDQ5RjI0RTIyMDVGREZGQTM0 RTcxMkQzMjAeFw0yNjA3MjMxNjI1MDFaFw0yNjA3MjQxODM2MDFaMDMxMTAvBgNV BAMTKDU2MDIzQjZBMUIzQ0NBOTYwOUZFNDk3NTM1RDU3NDhBNUM2NTExNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCeQwj8x6KM7H5mYmKF6c1nhl 6+HqJXsX4mCYF4BQe0qiRENOLihDqNn6grvVT3dGXoCWdczIqWlZheHDjsM6uZl6 k7d7UAf5V2wrSbIbO6OwRZxJWXr7WrjgW5Nn5i59lpAbeQk3LOoiEA12IFW9IE9g 8LkYLL7c6SR4NAFQZvJIcmXodQG3Oh2pF/8/AmLl0KVlU37RC8OZ3n7XLPravRRd BAiZ6LYyx8Bz7nZEJhIOdPxVmnnlipA5S1wlOAGifxcgmDo7YXJ833iTgNwz1002 4A4TH+H+Vw4nG/C8JLGpOMmlQmBb09f17HGB3i/3LSj5BPFohMmsxS5y1mpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVgI7ahs8ypYJ/kl1NdV0ilxlEUUwHwYDVR0j BBgwFoAUWcbdV2Vo6qBJ8k4iBf3/o05xLTIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExM2U3YzQtNzczZi00NzRjLWIwNmQtNjI2MGEzMDZhMGNhLzAvNTlDNkRENTc2 NTY4RUFBMDQ5RjI0RTIyMDVGREZGQTM0RTcxMkQzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUM2REQ1NzY1NjhFQUEwNDlGMjRFMjIwNUZERkZBMzRFNzEy RDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvNTlDNkRENTc2NTY4RUFBMDQ5RjI0RTIyMDVGREZG QTM0RTcxMkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGS+Tm5Ns1N6J4j5VvEDJDe6lNwXZHHeRlir VE/ZPFcAI6kh4z2IMOR7psq4v6rIxANCdkMvDcURS0xxxftp391VtAe6vJRf1h2J ueAJ+K9duuDKkLLPAsC8G/YIlBhlr9sCosed7q42O7b1RWtMdKNQ0ln6slTejsip IJ6LiwD0m7nbdC2rAObMGRjYVy/4dUmpictdkOS+uCBo3+0anWZ/wwaIeVhLaBvl 3T2umzO521ffC/qgcX4/c1PASUdkLi9RQaS1ICuG9gHuD5VgFsKDjoNRootnwawF awYg5OuXrsAdb/7n7YaXMWoQXSHOBvQhv4AXoToKgYEfKzQI+ho= -----END CERTIFICATE-----Generated at Fri Jul 24 02:48:20 2026 by rpki-client