$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft File: 59406D6B894D2596F895003DEE4D8D96CC43B39F.mft (raw, json) Hash identifier: IJWGxcVV69kuv2cwgUHItAk5D8acSY+GFjGx9OXrzck= Subject key identifier: 89:F2:C5:23:73:41:2C:C5:CB:55:D4:E8:82:38:25:FC:30:B3:45:A2 Authority key identifier: 59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F Certificate issuer: /CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Certificate serial: 017B4FE1D4DD0C453F4638696D6AF56A35C9DA21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 01:42:51 +0000 Manifest this update: Thu 24 Sep 2026 01:37:51 +0000 Manifest next update: Fri 25 Sep 2026 05:09:51 +0000 Files and hashes: 1: 3230322e392e38352e302f32342d3234203d3e203436303532.roa (hash: lsGPNQll8lHqimmyJl12NLTMwKg8Yil8iz0vwp/l9l4=) 2: 59406D6B894D2596F895003DEE4D8D96CC43B39F.crl (hash: Zjb0kFNUHWN5dKeUQhW22b9RxUGbGfQpiTdLvF1AVW0=) 3: 3130332e32342e35372e302f32342d3234203d3e203436303532.roa (hash: 2NT3KSaIgnkQK0dsegRvJOGdovq/XdyRI/OHCIdm244=) 4: 323030313a6466303a61383a3a2f34382d3438203d3e203436303532.roa (hash: nM1lR1t5YbRxvlzSB15Qj3P9xptJWT24EGOpflzojVc=) 5: 3130332e32342e35392e302f32342d3234203d3e203436303532.roa (hash: zFIO9wiF748rHmRcjoZ1ZZ07oJftCfa8w4TwQheX8tM=) 6: 3130332e32342e35362e302f32342d3234203d3e203436303532.roa (hash: hCsETlpD6R/zfRJVkzNBOTiAfvvIYDjPCkGRa8bOeSk=) 7: 3130332e32342e35382e302f32342d3234203d3e203436303532.roa (hash: UA+YdwLCDED5UMDmCG4dNPuGHlL+yaAK93vKKhIdDPg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7b:4f:e1:d4:dd:0c:45:3f:46:38:69:6d:6a:f5:6a:35:c9:da:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Validity Not Before: Sep 24 01:37:51 2026 GMT Not After : Sep 25 05:09:51 2026 GMT Subject: CN=89F2C52373412CC5CB55D4E8823825FC30B345A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:04:e7:0e:f2:04:4a:78:cb:81:47:37:d7: 48:e4:d5:20:cb:84:b2:13:f3:a2:87:ec:a3:93:f6: 53:12:0a:38:9e:d5:e0:4b:b4:7e:8a:af:08:25:54: c8:d9:da:39:a4:bd:cf:03:48:ff:98:66:31:0d:56: 95:1e:8c:e9:ac:c0:d5:07:8d:1f:10:53:00:cc:36: bb:27:d8:9c:cb:34:48:e5:99:88:29:46:85:ac:da: 5c:e5:ff:93:a3:03:6d:c5:bd:6b:60:45:c3:56:0f: 49:0f:42:b5:21:58:1b:57:d7:45:c6:07:f2:e2:43: 67:a2:3f:32:13:32:fd:bd:55:4c:12:f8:70:e5:92: de:39:33:cf:b5:bb:22:65:06:0a:b9:4a:ee:23:53: 7b:bb:71:c1:9c:54:29:d6:40:67:4b:56:ae:1b:93: 6b:a2:8b:cb:64:99:85:f7:72:41:d2:64:34:aa:c3: d0:28:9b:23:c7:92:2e:14:5a:a0:6e:72:a2:61:ef: 9d:f9:25:27:60:8d:8c:4b:0b:08:f8:43:e1:36:04: 70:d8:9a:78:3b:65:15:2c:a5:db:9b:96:1b:37:ce: a9:a0:48:5e:56:15:f4:5c:46:45:5f:68:c6:03:ce: 2b:6b:fe:e8:82:8f:83:2b:14:7a:64:bc:8a:e5:ad: b4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F2:C5:23:73:41:2C:C5:CB:55:D4:E8:82:38:25:FC:30:B3:45:A2 X509v3 Authority Key Identifier: keyid:59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:54:1a:89:c0:66:2a:eb:55:75:25:b1:40:4c:9c:ad:a6:2e: 4c:ed:e4:1c:d6:e7:3d:83:2a:c1:94:27:e9:1e:5b:4e:33:3c: 95:f4:7c:77:0d:5b:02:fc:8b:dd:cf:0a:34:ae:e8:e2:a4:69: 92:84:a7:5c:02:ba:97:62:ea:93:56:5b:dc:40:27:e7:d2:c1: 19:e0:16:91:09:52:13:0b:d5:40:64:e2:cb:2b:bf:e1:1d:ed: 33:f7:41:5d:ff:2d:9a:6c:dd:8e:27:0a:b7:ca:c5:b8:99:22: aa:8b:81:6d:9f:39:44:d1:56:fd:7d:9c:cc:ee:6d:4f:36:f6: 6e:ea:ca:a4:a9:d4:e4:4c:73:09:d1:eb:eb:8b:86:eb:d5:db: ea:a3:a9:83:df:4c:4c:77:1a:89:a2:7e:e1:16:eb:b1:c6:b0: 56:26:08:1e:0d:40:77:e2:b7:7e:14:d4:95:cd:f1:a4:e4:ae: 45:78:f0:61:a3:95:70:6f:f2:c2:0f:c3:b9:21:13:33:26:21: e7:78:7a:39:bc:0c:47:e6:d6:d9:31:5b:ae:22:8c:0f:89:0d: 76:77:3b:c6:68:a2:07:28:86:92:e4:aa:93:f9:8b:e8:d2:10: 3f:57:9c:0a:a0:06:b6:e7:ad:f4:c8:73:c4:57:88:fd:0d:58: 84:63:ac:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXtP4dTdDEU/RjhpbWr1ajXJ2iEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhEOTZD QzQzQjM5RjAeFw0yNjA5MjQwMTM3NTFaFw0yNjA5MjUwNTA5NTFaMDMxMTAvBgNV BAMTKDg5RjJDNTIzNzM0MTJDQzVDQjU1RDRFODgyMzgyNUZDMzBCMzQ1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6gTnDvIESnjLgUc310jk1SDL hLIT86KH7KOT9lMSCjie1eBLtH6KrwglVMjZ2jmkvc8DSP+YZjENVpUejOmswNUH jR8QUwDMNrsn2JzLNEjlmYgpRoWs2lzl/5OjA23FvWtgRcNWD0kPQrUhWBtX10XG B/LiQ2eiPzITMv29VUwS+HDlkt45M8+1uyJlBgq5Su4jU3u7ccGcVCnWQGdLVq4b k2uii8tkmYX3ckHSZDSqw9AomyPHki4UWqBucqJh7535JSdgjYxLCwj4Q+E2BHDY mng7ZRUspdublhs3zqmgSF5WFfRcRkVfaMYDzitr/uiCj4MrFHpkvIrlrbSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUifLFI3NBLMXLVdTogjgl/DCzRaIwHwYDVR0j BBgwFoAUWUBta4lNJZb4lQA97k2NlsxDs58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxZWU1ZTItMzM4Yy00ZDIwLTgwN2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4 OTREMjU5NkY4OTUwMDNERUU0RDhEOTZDQzQzQjM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTQwNkQ2Qjg5NEQyNTk2Rjg5NTAwM0RFRTREOEQ5NkNDNDNC MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxZWU1ZTItMzM4Yy00ZDIwLTgw N2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhE OTZDQzQzQjM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVUGonAZirrVXUlsUBMnK2mLkzt5BzW5z2D KsGUJ+keW04zPJX0fHcNWwL8i93PCjSu6OKkaZKEp1wCupdi6pNWW9xAJ+fSwRng FpEJUhML1UBk4ssrv+Ed7TP3QV3/LZps3Y4nCrfKxbiZIqqLgW2fOUTRVv19nMzu bU829m7qyqSp1ORMcwnR6+uLhuvV2+qjqYPfTEx3GomifuEW67HGsFYmCB4NQHfi t34U1JXN8aTkrkV48GGjlXBv8sIPw7khEzMmIed4ejm8DEfm1tkxW64ijA+JDXZ3 O8ZoogcohpLkqpP5i+jSED9XnAqgBrbnrfTIc8RXiP0NWIRjrAo= -----END CERTIFICATE-----Generated at Thu Sep 24 21:17:36 2026 by rpki-client