$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft File: 59A9AB370F753D82771987E2FD7CA19578E11D07.mft (raw, json) Hash identifier: VsNgpaHWxSnqzJdVzEOBWWiDYgOSL9SHXcrNzRcfCPk= Subject key identifier: CD:D3:9B:9C:BD:68:55:5F:9E:AF:CA:B1:F9:B0:48:82:F9:4A:2A:E8 Authority key identifier: 59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07 Certificate issuer: /CN=59A9AB370F753D82771987E2FD7CA19578E11D07 Certificate serial: 1430557B6F06A3C7C09B3B2B6C3356A5653C3969 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 05:58:19 +0000 Manifest this update: Wed 23 Sep 2026 05:53:19 +0000 Manifest next update: Thu 24 Sep 2026 07:27:19 +0000 Files and hashes: 1: 59A9AB370F753D82771987E2FD7CA19578E11D07.crl (hash: E4x2W/SFPkJoZDb3XlQahWM30lRmBdnxFrCUWzcRHwI=) 2: 3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (hash: UPB/qBUFP9GqScWdxOKoCFaWZdy0EEvs2yjoMI9jaZ0=) 3: 3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa (hash: 97CqSuEAmLm9b7GhTnzhH7E+h2iIk2MyDfPBWHarXus=) 4: 3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (hash: fcfvoG+f+IeB/aOvvSuH4jigNm/P9oaHKcA8ozVTJ2c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:30:55:7b:6f:06:a3:c7:c0:9b:3b:2b:6c:33:56:a5:65:3c:39:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59A9AB370F753D82771987E2FD7CA19578E11D07 Validity Not Before: Sep 23 05:53:19 2026 GMT Not After : Sep 24 07:27:19 2026 GMT Subject: CN=CDD39B9CBD68555F9EAFCAB1F9B04882F94A2AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:4a:ed:96:95:73:96:8d:8b:d3:33:1b:db: 7f:63:ad:f3:c6:bd:d7:e8:bc:8f:bc:aa:8d:31:c7: 99:73:32:ce:b2:f7:b7:32:e3:69:f5:71:7e:7b:88: 70:a0:33:1d:bd:97:21:0c:43:90:d1:61:e9:b3:de: 0f:ca:48:7d:11:be:77:67:56:5d:7b:cf:7a:c5:30: 9a:38:21:e0:1c:b1:ac:28:be:12:ef:ac:ab:93:39: 66:d8:d6:3f:f3:1d:2f:af:84:c0:e1:8f:46:7b:85: 4c:37:1e:51:ba:dd:6c:ad:31:de:53:16:9d:b2:b5: 65:1e:95:6e:b1:d1:60:0e:87:5b:fd:50:63:c3:0b: 9c:96:71:1e:7e:c6:e3:9d:60:9b:8e:3c:98:8d:c2: 00:c2:97:16:80:21:57:95:63:71:65:5f:66:d4:8a: 37:3b:dd:6d:bd:08:87:54:1d:be:95:b8:e1:5d:4f: 8f:82:40:ac:45:aa:17:70:40:01:8e:0a:76:d6:da: 77:df:74:e3:b8:92:41:d2:f4:a8:b6:31:71:b9:24: ec:ff:53:18:07:58:73:4f:e4:84:51:8d:28:ad:37: d2:fe:d1:b8:e2:95:5b:e2:60:fe:b4:1a:d2:e2:04: f7:6e:5d:e3:70:5b:92:49:ec:11:20:4c:43:f8:c9: ae:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D3:9B:9C:BD:68:55:5F:9E:AF:CA:B1:F9:B0:48:82:F9:4A:2A:E8 X509v3 Authority Key Identifier: keyid:59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:7e:f6:43:0a:a9:dd:90:4c:d9:62:d4:83:25:48:43:58:f8: 72:ee:e9:ce:42:b5:4d:ab:09:7b:a6:4e:e4:9c:df:b8:2c:81: f0:8c:bb:c8:e7:bb:0f:4d:00:d8:db:64:2f:94:9d:5a:9c:0f: 08:7b:ea:97:8d:37:4e:2c:8e:36:2a:2d:6c:76:a1:30:10:8f: 85:0a:14:a2:5d:8e:04:64:83:3c:45:c9:fd:2f:12:49:2d:d3: cc:5c:c6:fe:55:64:3c:1a:45:b3:a0:b8:4d:af:75:c5:e4:c1: 77:f1:2c:bd:a7:80:aa:5c:ce:0a:11:73:4a:a9:02:48:47:5f: a6:a6:95:1b:26:44:04:d1:79:8e:50:4c:1c:d2:f5:e5:2a:44: 96:40:86:98:aa:f0:58:65:97:5c:12:7d:7b:e6:01:d2:c9:71: 57:6a:38:bf:99:3a:b9:ab:30:bd:21:28:bf:6e:4d:10:38:e5: 40:48:de:1d:cb:50:0b:3c:ce:20:02:35:0c:eb:67:82:d9:20: 4f:79:be:d5:33:be:66:56:9c:29:3d:ba:80:d6:8d:39:55:74: 70:3c:e5:48:04:fb:01:de:37:08:09:50:f2:06:50:41:61:a9: e5:7b:ce:29:42:60:aa:5f:6d:2b:6d:1c:c4:01:d3:10:d5:eb: 00:fb:a0:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDBVe28Go8fAmzsrbDNWpWU8OWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlBOUFCMzcwRjc1M0Q4Mjc3MTk4N0UyRkQ3Q0ExOTU3 OEUxMUQwNzAeFw0yNjA5MjMwNTUzMTlaFw0yNjA5MjQwNzI3MTlaMDMxMTAvBgNV BAMTKENERDM5QjlDQkQ2ODU1NUY5RUFGQ0FCMUY5QjA0ODgyRjk0QTJBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/0rtlpVzlo2L0zMb239jrfPG vdfovI+8qo0xx5lzMs6y97cy42n1cX57iHCgMx29lyEMQ5DRYemz3g/KSH0Rvndn Vl17z3rFMJo4IeAcsawovhLvrKuTOWbY1j/zHS+vhMDhj0Z7hUw3HlG63WytMd5T Fp2ytWUelW6x0WAOh1v9UGPDC5yWcR5+xuOdYJuOPJiNwgDClxaAIVeVY3FlX2bU ijc73W29CIdUHb6VuOFdT4+CQKxFqhdwQAGOCnbW2nffdOO4kkHS9Ki2MXG5JOz/ UxgHWHNP5IRRjSitN9L+0bjilVviYP60GtLiBPduXeNwW5JJ7BEgTEP4ya75AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzdObnL1oVV+er8qx+bBIgvlKKugwHwYDVR0j BBgwFoAUWamrNw91PYJ3GYfi/XyhlXjhHQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M2MGE2YzEtYzA4MS00MzliLWFlOGQtODE0OWI2MzRkNWEyLzAvNTlBOUFCMzcw Rjc1M0Q4Mjc3MTk4N0UyRkQ3Q0ExOTU3OEUxMUQwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUE5QUIzNzBGNzUzRDgyNzcxOTg3RTJGRDdDQTE5NTc4RTEx RDA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M2MGE2YzEtYzA4MS00MzliLWFl OGQtODE0OWI2MzRkNWEyLzAvNTlBOUFCMzcwRjc1M0Q4Mjc3MTk4N0UyRkQ3Q0Ex OTU3OEUxMUQwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJl+9kMKqd2QTNli1IMlSENY+HLu6c5CtU2r CXumTuSc37gsgfCMu8jnuw9NANjbZC+UnVqcDwh76peNN04sjjYqLWx2oTAQj4UK FKJdjgRkgzxFyf0vEkkt08xcxv5VZDwaRbOguE2vdcXkwXfxLL2ngKpczgoRc0qp AkhHX6amlRsmRATReY5QTBzS9eUqRJZAhpiq8Fhll1wSfXvmAdLJcVdqOL+ZOrmr ML0hKL9uTRA45UBI3h3LUAs8ziACNQzrZ4LZIE95vtUzvmZWnCk9uoDWjTlVdHA8 5UgE+wHeNwgJUPIGUEFhqeV7zilCYKpfbSttHMQB0xDV6wD7oGc= -----END CERTIFICATE-----Generated at Thu Sep 24 00:56:53 2026 by rpki-client