$ rpki-client -vvf rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft File: 59C6DD576568EAA049F24E2205FDFFA34E712D32.mft (raw, json) Hash identifier: eIQxWBDOT81iIVjzP3Ma2gYC2GI5k1+tsYjVKBr+EIE= Subject key identifier: F3:8B:B1:6F:71:E9:1F:15:45:85:6F:25:BA:67:90:E1:A4:53:9F:CC Authority key identifier: 59:C6:DD:57:65:68:EA:A0:49:F2:4E:22:05:FD:FF:A3:4E:71:2D:32 Certificate issuer: /CN=59C6DD576568EAA049F24E2205FDFFA34E712D32 Certificate serial: 717BC9791232E148886B6C40979FA7D550236383 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft Manifest number: 0E Signing time: Tue 12 May 2026 18:23:38 +0000 Manifest this update: Tue 12 May 2026 18:18:38 +0000 Manifest next update: Wed 13 May 2026 21:28:38 +0000 Files and hashes: 1: 59C6DD576568EAA049F24E2205FDFFA34E712D32.crl (hash: 6+fGtv4LRb5ZPonMMpXOP+kZr9n1nckpAKdFKS2YQ+g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.crl rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7b:c9:79:12:32:e1:48:88:6b:6c:40:97:9f:a7:d5:50:23:63:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59C6DD576568EAA049F24E2205FDFFA34E712D32 Validity Not Before: May 12 18:18:38 2026 GMT Not After : May 13 21:28:38 2026 GMT Subject: CN=F38BB16F71E91F1545856F25BA6790E1A4539FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:e4:f0:ae:99:9a:69:03:ef:19:d8:eb:9d: 41:3e:bf:63:20:6d:48:f3:66:7f:49:37:67:08:a1: 81:fb:d3:01:cb:84:ad:2f:66:a0:a5:59:49:6d:6d: 00:a6:48:4a:d3:2b:06:a8:1d:b1:cf:25:9c:0b:f6: c4:f2:c0:63:ab:85:a0:a2:5c:58:ea:17:d2:f8:f1: 0e:e9:9a:73:47:e9:ea:33:6f:cc:55:71:c9:47:24: 5a:2f:8a:8b:65:fb:61:03:74:8f:24:6e:87:30:80: fe:ed:b1:12:1e:a4:54:18:ad:dd:65:69:1e:e4:47: db:e1:76:a5:3f:b1:22:d7:40:b9:c9:4a:54:c9:05: 4d:71:2d:a0:53:20:2c:92:c2:01:f6:65:45:4f:03: 63:f7:d5:84:64:b9:14:5b:85:80:c0:3d:ee:c7:70: 2a:cf:b1:73:07:3b:19:61:41:14:80:29:28:99:62: 67:7b:77:dd:f5:20:ee:26:75:b1:32:2f:2f:fe:3d: 16:42:db:65:3f:6c:11:ac:c6:a9:de:9d:cf:18:97: 1d:8b:49:80:d4:d3:58:de:09:c4:2f:ac:72:c5:2c: d1:31:f6:ff:39:51:36:d6:77:44:f3:a0:fe:71:a0: 61:94:da:41:2f:84:d9:28:3a:3e:be:03:d4:92:6a: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8B:B1:6F:71:E9:1F:15:45:85:6F:25:BA:67:90:E1:A4:53:9F:CC X509v3 Authority Key Identifier: keyid:59:C6:DD:57:65:68:EA:A0:49:F2:4E:22:05:FD:FF:A3:4E:71:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a0:0e:e5:0a:24:bf:12:7c:aa:ad:b1:88:60:62:aa:39:72: 26:c6:15:75:97:37:28:8c:0d:db:a4:20:3a:72:7a:45:f7:4c: 63:33:27:da:2b:76:d8:6b:41:7e:5b:b0:51:5e:c8:1c:7b:6e: d7:b9:3e:fc:ab:e3:8e:5e:73:56:66:da:a2:04:98:3d:be:95: 46:a5:f9:15:c2:90:c4:1a:77:e7:56:be:8b:65:46:31:45:fc: e7:cc:43:78:7e:22:73:4d:d6:f4:47:39:61:2a:03:7d:bb:86: 13:fb:e1:75:6f:67:fa:34:18:91:79:a1:b2:6b:41:2c:ad:a1: 45:69:9f:3c:e2:26:44:1f:61:61:fd:ca:a8:0f:d2:80:ff:c4: 5c:d9:3b:6a:00:92:65:f5:8c:5a:80:56:81:b2:c1:03:0c:ba: 09:8a:32:4d:fc:03:cf:73:a1:b2:90:ea:87:10:8c:f1:db:43: 03:2e:be:11:a3:99:75:47:f9:29:b2:23:dc:67:ea:f4:69:66: 5a:5a:51:9b:61:97:17:34:dd:e2:17:ed:54:60:2b:1d:54:28: 03:5b:6a:94:a1:0f:8f:0a:65:f7:3f:4c:de:1e:d6:4f:a3:1e: da:bb:35:ea:3f:81:7f:43:e4:73:a9:fb:2e:9c:1e:82:c5:95: af:8a:84:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcXvJeRIy4UiIa2xAl5+n1VAjY4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlDNkRENTc2NTY4RUFBMDQ5RjI0RTIyMDVGREZGQTM0 RTcxMkQzMjAeFw0yNjA1MTIxODE4MzhaFw0yNjA1MTMyMTI4MzhaMDMxMTAvBgNV BAMTKEYzOEJCMTZGNzFFOTFGMTU0NTg1NkYyNUJBNjc5MEUxQTQ1MzlGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3eeTwrpmaaQPvGdjrnUE+v2Mg bUjzZn9JN2cIoYH70wHLhK0vZqClWUltbQCmSErTKwaoHbHPJZwL9sTywGOrhaCi XFjqF9L48Q7pmnNH6eozb8xVcclHJFoviotl+2EDdI8kbocwgP7tsRIepFQYrd1l aR7kR9vhdqU/sSLXQLnJSlTJBU1xLaBTICySwgH2ZUVPA2P31YRkuRRbhYDAPe7H cCrPsXMHOxlhQRSAKSiZYmd7d931IO4mdbEyLy/+PRZC22U/bBGsxqnenc8Ylx2L SYDU01jeCcQvrHLFLNEx9v85UTbWd0TzoP5xoGGU2kEvhNkoOj6+A9SSatOtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU84uxb3HpHxVFhW8lumeQ4aRTn8wwHwYDVR0j BBgwFoAUWcbdV2Vo6qBJ8k4iBf3/o05xLTIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExM2U3YzQtNzczZi00NzRjLWIwNmQtNjI2MGEzMDZhMGNhLzAvNTlDNkRENTc2 NTY4RUFBMDQ5RjI0RTIyMDVGREZGQTM0RTcxMkQzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUM2REQ1NzY1NjhFQUEwNDlGMjRFMjIwNUZERkZBMzRFNzEy RDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvNTlDNkRENTc2NTY4RUFBMDQ5RjI0RTIyMDVGREZG QTM0RTcxMkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+gDuUKJL8SfKqtsYhgYqo5cibGFXWXNyiM DdukIDpyekX3TGMzJ9ordthrQX5bsFFeyBx7bte5Pvyr445ec1Zm2qIEmD2+lUal +RXCkMQad+dWvotlRjFF/OfMQ3h+InNN1vRHOWEqA327hhP74XVvZ/o0GJF5obJr QSytoUVpnzziJkQfYWH9yqgP0oD/xFzZO2oAkmX1jFqAVoGywQMMugmKMk38A89z obKQ6ocQjPHbQwMuvhGjmXVH+SmyI9xn6vRpZlpaUZthlxc03eIX7VRgKx1UKANb apShD48KZfc/TN4e1k+jHtq7Neo/gX9D5HOp+y6cHoLFla+KhCg= -----END CERTIFICATE-----Generated at Wed May 13 01:34:14 2026 by rpki-client