$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft File: 591286FA978EE719A57E5A972B00E176D16D8BD5.mft (raw, json) Hash identifier: ZSLuHM2dcWWXYcqHqDCIMAjBqh4AOG9uMtx/lpg46So= Subject key identifier: 7D:A1:53:18:3A:CE:3E:BA:02:C5:56:FE:90:7F:F4:37:13:42:77:6F Authority key identifier: 59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5 Certificate issuer: /CN=591286FA978EE719A57E5A972B00E176D16D8BD5 Certificate serial: 3D33B49BBE6A89C4EC4C7F7C9C72ED9CB0EB3B22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:14:40 +0000 Manifest this update: Thu 24 Sep 2026 07:09:40 +0000 Manifest next update: Fri 25 Sep 2026 07:38:40 +0000 Files and hashes: 1: 591286FA978EE719A57E5A972B00E176D16D8BD5.crl (hash: kmiL7mom9A8rBdG904C3FLLkcC/YC5mXI8sH7O4XCfU=) 2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: SnKbiJCVGtegt8XCckG5YzkpcAALoWkVUsik+AGbmDg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:33:b4:9b:be:6a:89:c4:ec:4c:7f:7c:9c:72:ed:9c:b0:eb:3b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591286FA978EE719A57E5A972B00E176D16D8BD5 Validity Not Before: Sep 24 07:09:40 2026 GMT Not After : Sep 25 07:38:40 2026 GMT Subject: CN=7DA153183ACE3EBA02C556FE907FF4371342776F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e0:0f:a1:8b:7d:26:7b:25:61:09:44:b6:3c: e5:a5:c7:0e:af:7f:a2:58:b0:8b:22:c5:38:57:17: df:6c:64:e0:03:b7:17:fe:6b:83:4a:7f:22:58:62: 1a:41:f9:e2:b7:70:85:7c:d0:a9:76:86:28:15:0c: fd:a7:bf:98:79:9c:c8:23:15:b1:38:cb:3b:2d:fb: d7:72:6e:46:73:e4:d7:f0:a9:3c:f3:90:bf:9a:16: ec:8d:e8:d2:d8:95:1c:82:a2:1c:5a:f3:4a:36:77: 2e:3a:e2:27:59:e7:4f:c8:ae:51:92:5c:46:53:81: a4:9c:97:58:dd:e9:cf:17:4e:30:2a:64:48:2b:13: cf:f6:0d:25:52:b8:ed:b9:8e:a7:d3:ca:b2:b7:c4: cd:4b:1f:d0:c8:9c:09:eb:79:db:5f:6a:e9:eb:61: 17:fd:d9:dc:92:a3:00:25:38:46:97:23:3a:73:04: cb:f7:47:f3:57:5a:aa:8d:8f:b0:a1:2c:f3:28:2f: 7b:ca:1c:66:0e:49:32:b1:4f:5a:3e:f6:91:bd:92: e0:7b:08:94:e5:1b:95:da:87:f2:8f:c4:7d:a3:da: 32:e9:98:e8:81:5d:7d:27:8d:73:5a:0a:1f:6e:f4: c9:07:f0:84:50:03:b8:6f:2d:cc:88:c7:d1:b2:58: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A1:53:18:3A:CE:3E:BA:02:C5:56:FE:90:7F:F4:37:13:42:77:6F X509v3 Authority Key Identifier: keyid:59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:22:8b:31:78:b7:62:6a:3d:84:e3:fe:86:4b:e0:a6:62:81: 80:37:6f:0d:a5:f1:71:5a:72:1c:6d:21:cc:07:04:84:a2:b5: 14:08:0a:7f:17:8c:1f:83:c0:d0:3c:9a:c8:ee:a7:1f:06:3d: 57:f3:5d:ad:00:d6:55:4e:4d:4c:64:3c:f0:97:e2:b6:2d:c7: 79:28:d0:e4:aa:c6:fa:fc:2d:2e:9a:51:d1:ab:75:be:64:5e: 2e:7f:17:8b:f6:ca:81:62:12:8c:1b:91:68:77:fb:ba:d7:ed: fc:17:26:52:2e:2f:11:e8:d8:21:8e:3e:5d:4c:a7:3d:3b:83: bb:91:0b:25:3a:a9:4e:00:3e:d7:f5:00:9c:2d:4f:02:63:de: 96:a8:1e:3c:7b:17:e6:b9:c4:14:3c:55:98:a8:4b:b8:f3:ac: d5:75:45:4f:20:e2:28:ac:bf:7b:6e:a7:12:98:43:52:53:60: 11:b2:49:f5:d3:20:60:c4:53:39:39:8e:1d:82:17:51:52:39: 48:22:85:3d:cd:90:6d:34:57:64:c2:a7:a1:77:3b:5f:cb:0e: d5:e6:f6:9e:2a:76:44:f2:4e:37:bf:d8:45:9e:ee:51:b7:b9: bc:0b:92:cc:ff:d5:29:64:4f:ab:cc:e5:13:0c:7c:02:22:1a: 29:17:82:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPTO0m75qicTsTH98nHLtnLDrOyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTkxMjg2RkE5NzhFRTcxOUE1N0U1QTk3MkIwMEUxNzZE MTZEOEJENTAeFw0yNjA5MjQwNzA5NDBaFw0yNjA5MjUwNzM4NDBaMDMxMTAvBgNV BAMTKDdEQTE1MzE4M0FDRTNFQkEwMkM1NTZGRTkwN0ZGNDM3MTM0Mjc3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU4A+hi30meyVhCUS2POWlxw6v f6JYsIsixThXF99sZOADtxf+a4NKfyJYYhpB+eK3cIV80Kl2higVDP2nv5h5nMgj FbE4yzst+9dybkZz5NfwqTzzkL+aFuyN6NLYlRyCohxa80o2dy464idZ50/IrlGS XEZTgaScl1jd6c8XTjAqZEgrE8/2DSVSuO25jqfTyrK3xM1LH9DInAnredtfaunr YRf92dySowAlOEaXIzpzBMv3R/NXWqqNj7ChLPMoL3vKHGYOSTKxT1o+9pG9kuB7 CJTlG5Xah/KPxH2j2jLpmOiBXX0njXNaCh9u9MkH8IRQA7hvLcyIx9GyWLdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfaFTGDrOProCxVb+kH/0NxNCd28wHwYDVR0j BBgwFoAUWRKG+peO5xmlflqXKwDhdtFti9UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFkYzc2NWEtZmY4ZC00YjFmLWE1OWEtMjVmZjdiZDRmNThhLzAvNTkxMjg2RkE5 NzhFRTcxOUE1N0U1QTk3MkIwMEUxNzZEMTZEOEJENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTEyODZGQTk3OEVFNzE5QTU3RTVBOTcyQjAwRTE3NkQxNkQ4 QkQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvNTkxMjg2RkE5NzhFRTcxOUE1N0U1QTk3MkIwMEUx NzZEMTZEOEJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0iizF4t2JqPYTj/oZL4KZigYA3bw2l8XFa chxtIcwHBISitRQICn8XjB+DwNA8msjupx8GPVfzXa0A1lVOTUxkPPCX4rYtx3ko 0OSqxvr8LS6aUdGrdb5kXi5/F4v2yoFiEowbkWh3+7rX7fwXJlIuLxHo2CGOPl1M pz07g7uRCyU6qU4APtf1AJwtTwJj3paoHjx7F+a5xBQ8VZioS7jzrNV1RU8g4iis v3tupxKYQ1JTYBGySfXTIGDEUzk5jh2CF1FSOUgihT3NkG00V2TCp6F3O1/LDtXm 9p4qdkTyTje/2EWe7lG3ubwLksz/1SlkT6vM5RMMfAIiGikXguA= -----END CERTIFICATE-----Generated at Thu Sep 24 20:45:45 2026 by rpki-client