$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft File: 59C6DD576568EAA049F24E2205FDFFA34E712D32.mft (raw, json) Hash identifier: y80CEP+kZHufdsTT3lyFEZIkgJItb9SsSIjVPz9WsVc= Subject key identifier: 8D:5C:62:F5:8B:16:5E:FE:8A:E4:F0:F9:9E:50:5D:AF:8B:3C:96:61 Authority key identifier: 59:C6:DD:57:65:68:EA:A0:49:F2:4E:22:05:FD:FF:A3:4E:71:2D:32 Certificate issuer: /CN=59C6DD576568EAA049F24E2205FDFFA34E712D32 Certificate serial: 2E8B0AD8D57A78B23F03BFC60DA06751AB9FCB35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 20:51:17 +0000 Manifest this update: Thu 24 Sep 2026 20:46:17 +0000 Manifest next update: Sat 26 Sep 2026 00:35:17 +0000 Files and hashes: 1: 59C6DD576568EAA049F24E2205FDFFA34E712D32.crl (hash: Nhk59jAinhu87OpqeUgjv+UuVr8A9VB5/FuWnabs2mQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.crl rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8b:0a:d8:d5:7a:78:b2:3f:03:bf:c6:0d:a0:67:51:ab:9f:cb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59C6DD576568EAA049F24E2205FDFFA34E712D32 Validity Not Before: Sep 24 20:46:17 2026 GMT Not After : Sep 26 00:35:17 2026 GMT Subject: CN=8D5C62F58B165EFE8AE4F0F99E505DAF8B3C9661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:23:f3:ce:1e:d5:98:43:9b:68:a2:ae:04: a0:c0:a0:bc:19:80:07:4f:c3:58:df:a0:7d:87:26: 7e:23:a9:37:ea:46:49:4b:91:b2:2e:d0:82:da:a4: 86:49:2e:ac:c0:50:cc:a2:42:7a:3b:83:10:c2:a4: da:34:74:91:f3:33:c1:f6:11:e8:91:0c:c5:70:cf: dc:12:31:da:e8:be:12:5d:31:0c:b7:b0:7c:c9:f9: d2:c6:9b:58:83:43:93:c6:df:67:9c:d2:75:9c:fd: e4:98:02:cd:22:26:de:0f:c1:79:72:28:cd:8c:80: 69:62:3b:8f:4a:6e:9b:6a:7a:21:8f:2c:e7:6b:c5: 16:a4:ad:6d:32:c5:d0:d5:15:dd:34:f8:66:f5:11: b8:92:0f:bf:f4:62:f9:26:74:ce:4d:d9:d0:9e:dd: 47:6b:a7:74:f0:3d:08:4d:8f:2f:33:09:5b:22:3c: b9:07:70:89:18:75:49:b4:c3:5c:c9:53:0e:9d:ad: f8:3f:7c:35:e8:29:89:34:d8:a8:9f:7c:2d:e6:96: 0b:28:d8:86:ef:4c:c8:03:5c:5d:ab:47:5a:7a:95: 40:06:1b:2c:5b:de:57:34:9e:20:c8:50:27:89:88: dd:6a:51:33:9b:58:16:2d:bd:2e:4a:07:29:fc:11: 33:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5C:62:F5:8B:16:5E:FE:8A:E4:F0:F9:9E:50:5D:AF:8B:3C:96:61 X509v3 Authority Key Identifier: keyid:59:C6:DD:57:65:68:EA:A0:49:F2:4E:22:05:FD:FF:A3:4E:71:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:4f:b3:9e:39:eb:6f:b6:f9:38:6c:13:c3:9c:47:7b:be:46: f5:ea:a2:7d:f0:32:97:68:d7:4b:7c:e5:85:70:e1:c1:8a:6e: 8d:a3:cb:56:1f:6a:4f:5f:b2:fe:e7:89:dd:6f:63:01:60:85: 7f:62:7a:6b:5a:73:b3:50:c2:0f:96:cb:be:fa:41:03:18:97: e4:a2:a7:4e:5b:4e:d2:79:2e:4f:d4:17:6d:51:96:64:de:b4: 24:80:9f:30:a3:41:07:84:68:71:aa:e4:e0:2f:58:f2:bf:99: 54:f0:77:d3:01:7c:3c:19:6c:2a:41:b3:f5:dc:de:79:d6:45: c7:c4:6d:4f:7a:89:58:3e:f4:7a:53:2f:cd:b6:60:ff:ab:1a: 50:e2:55:69:46:e9:3d:10:37:29:da:26:0b:5f:bb:74:27:0d: 28:da:09:c9:f3:fc:1e:a6:cc:45:37:6d:0d:c4:79:6a:23:07: ae:35:e6:fd:b7:c1:29:53:e9:8b:bb:7f:de:80:34:b3:c4:45: d0:ee:91:4a:0e:21:e4:83:03:af:66:6d:f0:b7:1a:19:04:a8: 02:86:13:64:52:8b:67:aa:19:7d:78:a9:51:c0:a9:d1:e7:4f: 18:6b:85:83:5e:9d:7d:c5:b0:df:48:83:93:70:ed:95:d9:b5: 4d:30:8b:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULosK2NV6eLI/A7/GDaBnUaufyzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlDNkRENTc2NTY4RUFBMDQ5RjI0RTIyMDVGREZGQTM0 RTcxMkQzMjAeFw0yNjA5MjQyMDQ2MTdaFw0yNjA5MjYwMDM1MTdaMDMxMTAvBgNV BAMTKDhENUM2MkY1OEIxNjVFRkU4QUU0RjBGOTlFNTA1REFGOEIzQzk2NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgyiPzzh7VmEObaKKuBKDAoLwZ gAdPw1jfoH2HJn4jqTfqRklLkbIu0ILapIZJLqzAUMyiQno7gxDCpNo0dJHzM8H2 EeiRDMVwz9wSMdrovhJdMQy3sHzJ+dLGm1iDQ5PG32ec0nWc/eSYAs0iJt4PwXly KM2MgGliO49KbptqeiGPLOdrxRakrW0yxdDVFd00+Gb1EbiSD7/0YvkmdM5N2dCe 3Udrp3TwPQhNjy8zCVsiPLkHcIkYdUm0w1zJUw6drfg/fDXoKYk02KiffC3mlgso 2IbvTMgDXF2rR1p6lUAGGyxb3lc0niDIUCeJiN1qUTObWBYtvS5KByn8ETMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjVxi9YsWXv6K5PD5nlBdr4s8lmEwHwYDVR0j BBgwFoAUWcbdV2Vo6qBJ8k4iBf3/o05xLTIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExM2U3YzQtNzczZi00NzRjLWIwNmQtNjI2MGEzMDZhMGNhLzAvNTlDNkRENTc2 NTY4RUFBMDQ5RjI0RTIyMDVGREZGQTM0RTcxMkQzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUM2REQ1NzY1NjhFQUEwNDlGMjRFMjIwNUZERkZBMzRFNzEy RDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvNTlDNkRENTc2NTY4RUFBMDQ5RjI0RTIyMDVGREZG QTM0RTcxMkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZPs54562+2+ThsE8OcR3u+RvXqon3wMpdo 10t85YVw4cGKbo2jy1Yfak9fsv7nid1vYwFghX9iemtac7NQwg+Wy776QQMYl+Si p05bTtJ5Lk/UF21RlmTetCSAnzCjQQeEaHGq5OAvWPK/mVTwd9MBfDwZbCpBs/Xc 3nnWRcfEbU96iVg+9HpTL822YP+rGlDiVWlG6T0QNynaJgtfu3QnDSjaCcnz/B6m zEU3bQ3EeWojB6415v23wSlT6Yu7f96ANLPERdDukUoOIeSDA69mbfC3GhkEqAKG E2RSi2eqGX14qVHAqdHnTxhrhYNenX3FsN9Ig5Nw7ZXZtU0wi2g= -----END CERTIFICATE-----Generated at Fri Sep 25 00:33:05 2026 by rpki-client