$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft File: 585117D9F8A558479018DDF94830A5C4C66BA76D.mft (raw, json) Hash identifier: rmdNOCBqFXNnf3Fwr69Q1A79NajtlQ2frIZJ8i2e2DQ= Subject key identifier: 70:D0:20:B1:62:ED:11:39:12:75:E1:55:0F:EE:C1:90:A5:B7:BB:25 Authority key identifier: 58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D Certificate issuer: /CN=585117D9F8A558479018DDF94830A5C4C66BA76D Certificate serial: 590F342827B0359F146D8375BC3CDB956538B819 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 20:25:43 +0000 Manifest this update: Thu 24 Sep 2026 20:20:43 +0000 Manifest next update: Fri 25 Sep 2026 21:53:43 +0000 Files and hashes: 1: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: eTmPN3t/PaM9CQFDKpglxNKRVsgYw16hoKgfbTOHlZI=) 2: 585117D9F8A558479018DDF94830A5C4C66BA76D.crl (hash: J35b6wi/3YBYuBocTb7H1bJJIFlLH2sqv02WqlhzKJM=) 3: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: DEKb4ykdIazHfvN+oGnSyAdKUSNIiAHPtDoT+tw15P8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0f:34:28:27:b0:35:9f:14:6d:83:75:bc:3c:db:95:65:38:b8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585117D9F8A558479018DDF94830A5C4C66BA76D Validity Not Before: Sep 24 20:20:43 2026 GMT Not After : Sep 25 21:53:43 2026 GMT Subject: CN=70D020B162ED11391275E1550FEEC190A5B7BB25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:e6:7a:40:f2:28:09:ac:c9:50:09:98:5c: 74:95:1c:3d:75:d2:1b:a5:38:58:fb:1e:16:d1:3e: b8:ef:22:54:8c:cd:a3:8f:57:06:db:c7:7a:07:13: ac:05:0b:a6:76:44:e6:e4:e6:0f:85:86:07:8a:3b: 87:fe:5e:a0:d2:b6:fd:6c:57:2b:b5:be:5f:fc:1c: 33:7a:d2:c5:66:a7:de:5f:33:18:85:ff:1c:8d:9a: 02:f6:f6:18:5d:a8:89:0c:a0:12:be:ab:61:71:27: a2:50:b6:b8:b1:83:41:1e:1d:96:ba:a1:30:c4:7b: 96:55:75:e2:1f:2b:37:d0:33:00:d6:0b:b6:56:58: f7:ed:e6:e6:90:6a:85:0b:84:65:c2:a8:d3:b0:33: 93:85:2d:d0:3b:ec:30:df:9c:67:31:d0:b1:fe:05: 96:6c:da:fc:aa:f6:18:54:f1:72:94:1e:65:65:f4: 7d:3e:e6:52:0f:75:66:ab:8a:8e:a9:62:c8:b0:a4: 4a:60:b2:a2:e8:1e:f8:d9:17:c0:ab:4a:be:8f:5e: c6:4a:fd:d0:73:79:6b:90:22:b4:be:ae:2f:ea:1d: 0f:ff:9a:2b:d3:21:2a:d8:0f:45:63:26:dd:49:e4: 8e:2a:73:cf:51:1c:c9:4b:22:8e:e0:53:75:e0:5d: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D0:20:B1:62:ED:11:39:12:75:E1:55:0F:EE:C1:90:A5:B7:BB:25 X509v3 Authority Key Identifier: keyid:58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:16:75:00:d3:78:a2:87:88:99:63:85:aa:a3:98:74:7f:77: d9:4b:42:02:04:1a:de:34:4b:fa:48:89:72:92:75:d4:d7:ed: 99:99:30:25:a2:6d:2f:bf:9f:13:52:fe:e1:f9:db:56:05:fc: 5c:f6:e1:88:4a:2f:36:15:e3:a0:42:6b:9e:41:ea:7f:29:5a: be:a7:20:2f:2b:48:2d:14:33:38:b1:99:00:ba:be:ae:ed:63: 4e:a3:cf:b2:48:f2:3d:7a:a9:56:32:2a:bf:f8:68:90:55:c6: 97:ff:42:1c:c6:82:00:e4:7c:ab:9d:94:5e:72:a0:1f:71:08: a6:30:02:0a:30:a5:89:ac:b9:3e:1e:eb:34:ce:a2:6f:b5:96: c2:fd:02:9e:28:ff:03:b6:56:ac:f9:d9:d1:4c:b2:5a:4b:80: 4f:99:d8:ab:68:63:fd:81:bb:66:f5:05:14:76:66:2f:06:36: 3f:f6:a0:f0:ad:15:60:9f:6f:52:22:ba:ce:f4:96:b6:4e:ef: 89:18:c0:aa:57:6c:44:b3:b6:6b:7a:f9:57:8e:0a:ed:35:c2: ce:e8:a7:16:b5:65:6d:67:6f:e1:c9:15:a5:76:af:36:28:ae: f8:2d:43:e6:8e:e4:8a:5e:5d:75:07:ca:07:93:8b:47:a4:2b: 6e:90:5d:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQ80KCewNZ8UbYN1vDzblWU4uBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1QzRD NjZCQTc2RDAeFw0yNjA5MjQyMDIwNDNaFw0yNjA5MjUyMTUzNDNaMDMxMTAvBgNV BAMTKDcwRDAyMEIxNjJFRDExMzkxMjc1RTE1NTBGRUVDMTkwQTVCN0JCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4veZ6QPIoCazJUAmYXHSVHD11 0hulOFj7HhbRPrjvIlSMzaOPVwbbx3oHE6wFC6Z2RObk5g+FhgeKO4f+XqDStv1s Vyu1vl/8HDN60sVmp95fMxiF/xyNmgL29hhdqIkMoBK+q2FxJ6JQtrixg0EeHZa6 oTDEe5ZVdeIfKzfQMwDWC7ZWWPft5uaQaoULhGXCqNOwM5OFLdA77DDfnGcx0LH+ BZZs2vyq9hhU8XKUHmVl9H0+5lIPdWario6pYsiwpEpgsqLoHvjZF8CrSr6PXsZK /dBzeWuQIrS+ri/qHQ//mivTISrYD0VjJt1J5I4qc89RHMlLIo7gU3XgXTE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcNAgsWLtETkSdeFVD+7BkKW3uyUwHwYDVR0j BBgwFoAUWFEX2filWEeQGN35SDClxMZrp20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhmY2E0MmYtODM2YS00MGVjLWE3NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlG OEE1NTg0NzkwMThEREY5NDgzMEE1QzRDNjZCQTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODUxMTdEOUY4QTU1ODQ3OTAxOERERjk0ODMwQTVDNEM2NkJB NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1 QzRDNjZCQTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkWdQDTeKKHiJljhaqjmHR/d9lLQgIEGt40 S/pIiXKSddTX7ZmZMCWibS+/nxNS/uH521YF/Fz24YhKLzYV46BCa55B6n8pWr6n IC8rSC0UMzixmQC6vq7tY06jz7JI8j16qVYyKr/4aJBVxpf/QhzGggDkfKudlF5y oB9xCKYwAgowpYmsuT4e6zTOom+1lsL9Ap4o/wO2Vqz52dFMslpLgE+Z2KtoY/2B u2b1BRR2Zi8GNj/2oPCtFWCfb1Iius70lrZO74kYwKpXbESztmt6+VeOCu01ws7o pxa1ZW1nb+HJFaV2rzYorvgtQ+aO5IpeXXUHygeTi0ekK26QXX0= -----END CERTIFICATE-----Generated at Fri Sep 25 02:34:34 2026 by rpki-client