$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft File: 59406D6B894D2596F895003DEE4D8D96CC43B39F.mft (raw, json) Hash identifier: ElkincQyfSW74iR9CqxJma3JveyyXwDc2X3ok82gHUg= Subject key identifier: 5E:1E:A1:3C:9F:6B:BB:03:A2:B3:A3:A6:CE:84:9B:1A:05:29:64:AA Authority key identifier: 59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F Certificate issuer: /CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Certificate serial: 24E8969B881EEEB0A1B4B0B42A2A489DAF77B0E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:00:55 +0000 Manifest this update: Thu 23 Jul 2026 12:55:55 +0000 Manifest next update: Fri 24 Jul 2026 16:13:55 +0000 Files and hashes: 1: 3130332e32342e35372e302f32342d3234203d3e203436303532.roa (hash: 2NT3KSaIgnkQK0dsegRvJOGdovq/XdyRI/OHCIdm244=) 2: 59406D6B894D2596F895003DEE4D8D96CC43B39F.crl (hash: LbZ+pqFLfbx5wPa9dj+iqYkphm8lrSQi7RfMQmO8S6w=) 3: 3130332e32342e35382e302f32342d3234203d3e203436303532.roa (hash: UA+YdwLCDED5UMDmCG4dNPuGHlL+yaAK93vKKhIdDPg=) 4: 3230322e392e38352e302f32342d3234203d3e203436303532.roa (hash: lsGPNQll8lHqimmyJl12NLTMwKg8Yil8iz0vwp/l9l4=) 5: 3130332e32342e35362e302f32342d3234203d3e203436303532.roa (hash: hCsETlpD6R/zfRJVkzNBOTiAfvvIYDjPCkGRa8bOeSk=) 6: 323030313a6466303a61383a3a2f34382d3438203d3e203436303532.roa (hash: nM1lR1t5YbRxvlzSB15Qj3P9xptJWT24EGOpflzojVc=) 7: 3130332e32342e35392e302f32342d3234203d3e203436303532.roa (hash: zFIO9wiF748rHmRcjoZ1ZZ07oJftCfa8w4TwQheX8tM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e8:96:9b:88:1e:ee:b0:a1:b4:b0:b4:2a:2a:48:9d:af:77:b0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Validity Not Before: Jul 23 12:55:55 2026 GMT Not After : Jul 24 16:13:55 2026 GMT Subject: CN=5E1EA13C9F6BBB03A2B3A3A6CE849B1A052964AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:01:4d:dc:c2:a5:73:6a:2b:42:88:16:48: a3:19:c2:b3:70:bc:ac:e9:5e:99:a9:7f:61:8d:35: 69:89:3e:08:ed:68:63:6d:fa:b3:e2:c5:83:db:ee: 90:62:fc:66:c0:8b:36:69:c9:0a:e6:10:1c:3a:be: f2:04:ff:4f:26:e2:03:ca:8b:f8:86:9c:83:92:f4: 85:57:09:57:70:0c:36:58:c7:fd:12:0e:ce:62:e1: 98:21:05:b8:cd:99:8a:ab:b3:10:62:a1:8b:c9:bd: af:85:07:20:7d:8d:dd:08:3b:4a:52:07:a0:56:ca: 3c:be:bf:61:2a:21:53:45:8d:99:b7:b4:be:94:45: 3d:03:52:02:7a:be:82:d7:df:79:28:2d:ff:b0:44: 76:5d:49:46:c3:4e:9b:f4:a0:47:73:27:a1:51:29: 29:7b:1d:f2:c8:79:46:15:25:2f:81:dc:32:3a:be: fa:92:fc:e9:71:3d:bf:f4:3d:33:2b:57:6d:88:f0: 47:aa:b9:e4:12:a4:e3:44:fa:ab:03:ba:3a:d6:d5: 56:68:71:51:0c:79:5f:d6:de:3b:e7:9f:cd:ed:e7: 2e:81:2f:e4:ab:56:76:a8:09:ef:08:3c:04:03:b3: 38:d5:c6:72:5d:92:52:99:bc:11:3a:b8:1d:2e:d6: 0d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1E:A1:3C:9F:6B:BB:03:A2:B3:A3:A6:CE:84:9B:1A:05:29:64:AA X509v3 Authority Key Identifier: keyid:59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5e:4f:02:27:4a:ff:62:e0:28:d8:4d:9e:dd:1a:18:0e:4c: 27:cd:ef:55:d7:be:01:59:49:2b:f4:e1:23:3a:a3:df:39:27: a3:bd:e3:a5:90:36:d9:06:11:dd:35:c9:8d:be:72:a7:ac:6f: c3:97:da:c9:7f:d6:02:f4:77:06:6f:c2:76:6c:05:a1:59:c9: 98:fa:f3:c3:11:0b:d8:f7:b5:95:42:cc:0f:6b:8e:c3:90:71: 41:ed:45:c3:f8:53:6b:61:d7:cb:f0:6c:b9:c2:76:79:b7:0a: 6b:7d:d8:b6:b3:04:91:e5:11:0b:93:c5:32:be:02:d3:2c:28: 30:4f:ac:6e:8f:9d:7c:35:d0:89:32:5a:91:84:e7:62:83:41: 92:f2:c1:79:9c:07:b8:97:19:be:bd:f3:50:58:94:f5:73:bd: df:3c:10:93:74:0f:8a:41:68:ed:f1:90:8f:30:15:0b:9d:a6: a7:74:91:81:c4:c7:03:64:9c:88:e4:94:92:4a:06:9a:7a:e0: 6f:2e:bd:f7:57:bb:51:7c:70:fa:e6:63:64:89:12:da:64:a1: 37:d2:14:79:ae:b1:ff:b1:99:86:72:67:dc:35:26:14:1e:37: 6f:a4:70:c6:c3:23:15:3b:06:f7:b8:7e:69:9d:77:e2:3d:54: fc:0b:49:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJOiWm4ge7rChtLC0KipIna93sOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhEOTZD QzQzQjM5RjAeFw0yNjA3MjMxMjU1NTVaFw0yNjA3MjQxNjEzNTVaMDMxMTAvBgNV BAMTKDVFMUVBMTNDOUY2QkJCMDNBMkIzQTNBNkNFODQ5QjFBMDUyOTY0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWaAFN3MKlc2orQogWSKMZwrNw vKzpXpmpf2GNNWmJPgjtaGNt+rPixYPb7pBi/GbAizZpyQrmEBw6vvIE/08m4gPK i/iGnIOS9IVXCVdwDDZYx/0SDs5i4ZghBbjNmYqrsxBioYvJva+FByB9jd0IO0pS B6BWyjy+v2EqIVNFjZm3tL6URT0DUgJ6voLX33koLf+wRHZdSUbDTpv0oEdzJ6FR KSl7HfLIeUYVJS+B3DI6vvqS/OlxPb/0PTMrV22I8EequeQSpONE+qsDujrW1VZo cVEMeV/W3jvnn83t5y6BL+SrVnaoCe8IPAQDszjVxnJdklKZvBE6uB0u1g1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXh6hPJ9ruwOis6OmzoSbGgUpZKowHwYDVR0j BBgwFoAUWUBta4lNJZb4lQA97k2NlsxDs58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxZWU1ZTItMzM4Yy00ZDIwLTgwN2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4 OTREMjU5NkY4OTUwMDNERUU0RDhEOTZDQzQzQjM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTQwNkQ2Qjg5NEQyNTk2Rjg5NTAwM0RFRTREOEQ5NkNDNDNC MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxZWU1ZTItMzM4Yy00ZDIwLTgw N2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhE OTZDQzQzQjM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5eTwInSv9i4CjYTZ7dGhgOTCfN71XXvgFZ SSv04SM6o985J6O946WQNtkGEd01yY2+cqesb8OX2sl/1gL0dwZvwnZsBaFZyZj6 88MRC9j3tZVCzA9rjsOQcUHtRcP4U2th18vwbLnCdnm3Cmt92LazBJHlEQuTxTK+ AtMsKDBPrG6PnXw10IkyWpGE52KDQZLywXmcB7iXGb6981BYlPVzvd88EJN0D4pB aO3xkI8wFQudpqd0kYHExwNknIjklJJKBpp64G8uvfdXu1F8cPrmY2SJEtpkoTfS FHmusf+xmYZyZ9w1JhQeN2+kcMbDIxU7Bve4fmmdd+I9VPwLSdE= -----END CERTIFICATE-----Generated at Fri Jul 24 07:35:48 2026 by rpki-client