$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft File: 59A9AB370F753D82771987E2FD7CA19578E11D07.mft (raw, json) Hash identifier: ZfYWKvCWVUijzjTtWQ80hRll/SHI9CajMYWu05ek+SM= Subject key identifier: 21:F8:87:51:C8:92:FE:19:5A:AB:A3:72:28:2C:C2:8C:D6:48:A4:00 Authority key identifier: 59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07 Certificate issuer: /CN=59A9AB370F753D82771987E2FD7CA19578E11D07 Certificate serial: A3700B983A1BD9695138392FE5EFAB37DB82C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:43:07 +0000 Manifest this update: Tue 12 May 2026 03:38:07 +0000 Manifest next update: Wed 13 May 2026 04:59:07 +0000 Files and hashes: 1: 59A9AB370F753D82771987E2FD7CA19578E11D07.crl (hash: /tGeCzR7iRtjz+t7CNyvbWdO+F0w5i6ym0NspKoc6B0=) 2: 3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa (hash: 97CqSuEAmLm9b7GhTnzhH7E+h2iIk2MyDfPBWHarXus=) 3: 3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (hash: UPB/qBUFP9GqScWdxOKoCFaWZdy0EEvs2yjoMI9jaZ0=) 4: 3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (hash: fcfvoG+f+IeB/aOvvSuH4jigNm/P9oaHKcA8ozVTJ2c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a3:70:0b:98:3a:1b:d9:69:51:38:39:2f:e5:ef:ab:37:db:82:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59A9AB370F753D82771987E2FD7CA19578E11D07 Validity Not Before: May 12 03:38:07 2026 GMT Not After : May 13 04:59:07 2026 GMT Subject: CN=21F88751C892FE195AABA372282CC28CD648A400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:6d:62:5f:f4:6a:ea:4b:d1:ce:6e:3a:49: ae:40:ab:80:29:2d:c6:3e:88:23:90:db:2d:58:3c: a5:b5:68:7e:0c:a7:1f:16:f0:96:ed:10:47:1a:f9: 6d:46:e3:0d:21:b3:99:fe:0a:d0:70:ff:cd:d4:43: b2:7c:2b:54:c4:9a:6c:f3:2c:39:01:65:5d:ec:f3: c8:96:eb:92:fa:83:90:54:7b:df:d0:85:e2:74:46: 2e:b0:7b:4e:39:32:54:14:58:a1:77:bb:ac:89:01: c9:fb:ca:6c:95:71:08:c1:a8:0c:7b:62:98:c1:85: a5:7e:aa:69:bf:1d:d1:d1:41:5d:f0:36:a4:6d:d6: ed:b4:a4:96:d2:7e:47:1b:c6:14:e4:33:77:f2:a5: d6:87:66:ee:33:e4:4e:85:4b:9d:df:4f:44:7a:98: c3:4b:27:d3:9d:bf:8e:7b:b0:7b:20:05:73:87:5e: 43:8c:b7:b8:76:bd:fa:eb:20:db:5e:cb:6b:ca:1d: 4b:b5:3e:5d:08:bc:12:d8:db:ef:74:52:8c:9d:ad: ee:51:52:90:5c:24:f1:4c:59:95:cc:ff:90:5e:2c: d7:29:7c:3d:24:6a:9c:0a:57:ba:a4:9a:45:fa:13: f8:5e:f0:a1:0a:13:1b:96:2e:16:b5:d9:38:28:d2: 7d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F8:87:51:C8:92:FE:19:5A:AB:A3:72:28:2C:C2:8C:D6:48:A4:00 X509v3 Authority Key Identifier: keyid:59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:5f:92:a0:61:c7:5c:96:f8:5d:33:03:03:0c:f7:63:8f:d9: d4:ed:82:47:40:a9:e2:21:aa:fa:be:ea:9c:ef:b2:1a:c2:dc: be:4a:04:30:56:bf:cd:45:d1:ed:24:03:fa:ae:a7:82:f6:98: bd:6a:a6:09:ac:46:38:17:b2:f1:25:41:4c:d4:e4:34:da:da: 60:c3:88:3b:45:04:47:3f:03:38:79:3a:22:d4:dd:3b:ed:9e: a2:dc:f3:23:a7:a7:11:07:e1:eb:1d:47:9d:57:f3:2d:da:42: 4c:45:02:82:aa:af:07:8f:3c:1e:27:9d:c7:ba:51:03:5b:34: c9:85:f3:13:f0:25:51:79:7e:d2:c2:f0:a0:53:c8:82:ac:f9: a1:a5:76:06:95:2f:a7:1f:f0:95:a3:31:e7:17:09:11:4f:ae: f8:59:0e:28:f4:02:7e:55:51:f1:ea:f8:77:e3:67:8e:92:41: dd:2a:4a:3a:9f:41:8a:fb:f5:20:24:cf:cb:7a:75:e3:08:5f: de:d4:03:fe:63:b2:0b:ab:00:0a:b5:13:21:43:a9:9a:5c:0f: 8f:cd:29:d7:52:c3:2e:a1:23:1e:e3:27:b6:13:91:d1:51:73: 4c:b3:1b:eb:a9:cd:e3:2c:c8:75:37:cb:38:5d:e9:fd:27:ac: c4:13:e3:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKNwC5g6G9lpUTg5L+XvqzfbgsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlBOUFCMzcwRjc1M0Q4Mjc3MTk4N0UyRkQ3Q0ExOTU3 OEUxMUQwNzAeFw0yNjA1MTIwMzM4MDdaFw0yNjA1MTMwNDU5MDdaMDMxMTAvBgNV BAMTKDIxRjg4NzUxQzg5MkZFMTk1QUFCQTM3MjI4MkNDMjhDRDY0OEE0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1W1iX/Rq6kvRzm46Sa5Aq4Ap LcY+iCOQ2y1YPKW1aH4Mpx8W8JbtEEca+W1G4w0hs5n+CtBw/83UQ7J8K1TEmmzz LDkBZV3s88iW65L6g5BUe9/QheJ0Ri6we045MlQUWKF3u6yJAcn7ymyVcQjBqAx7 YpjBhaV+qmm/HdHRQV3wNqRt1u20pJbSfkcbxhTkM3fypdaHZu4z5E6FS53fT0R6 mMNLJ9Odv457sHsgBXOHXkOMt7h2vfrrINtey2vKHUu1Pl0IvBLY2+90Uoydre5R UpBcJPFMWZXM/5BeLNcpfD0kapwKV7qkmkX6E/he8KEKExuWLha12Tgo0n1rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIfiHUciS/hlaq6NyKCzCjNZIpAAwHwYDVR0j BBgwFoAUWamrNw91PYJ3GYfi/XyhlXjhHQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M2MGE2YzEtYzA4MS00MzliLWFlOGQtODE0OWI2MzRkNWEyLzAvNTlBOUFCMzcw Rjc1M0Q4Mjc3MTk4N0UyRkQ3Q0ExOTU3OEUxMUQwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUE5QUIzNzBGNzUzRDgyNzcxOTg3RTJGRDdDQTE5NTc4RTEx RDA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M2MGE2YzEtYzA4MS00MzliLWFl OGQtODE0OWI2MzRkNWEyLzAvNTlBOUFCMzcwRjc1M0Q4Mjc3MTk4N0UyRkQ3Q0Ex OTU3OEUxMUQwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJfkqBhx1yW+F0zAwMM92OP2dTtgkdAqeIh qvq+6pzvshrC3L5KBDBWv81F0e0kA/qup4L2mL1qpgmsRjgXsvElQUzU5DTa2mDD iDtFBEc/Azh5OiLU3TvtnqLc8yOnpxEH4esdR51X8y3aQkxFAoKqrwePPB4nnce6 UQNbNMmF8xPwJVF5ftLC8KBTyIKs+aGldgaVL6cf8JWjMecXCRFPrvhZDij0An5V UfHq+HfjZ46SQd0qSjqfQYr79SAkz8t6deMIX97UA/5jsgurAAq1EyFDqZpcD4/N KddSwy6hIx7jJ7YTkdFRc0yzG+upzeMsyHU3yzhd6f0nrMQT4xc= -----END CERTIFICATE-----Generated at Tue May 12 22:19:30 2026 by rpki-client