$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft File: 585117D9F8A558479018DDF94830A5C4C66BA76D.mft (raw, json) Hash identifier: kvSfT7ltUmTJhFLA1uWcdaRqgUfnYRZlJeeBbspZKgs= Subject key identifier: 0B:1A:34:16:39:CB:9E:99:D7:9B:E9:16:1F:59:7F:3F:48:50:CE:D4 Authority key identifier: 58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D Certificate issuer: /CN=585117D9F8A558479018DDF94830A5C4C66BA76D Certificate serial: 32E63E1B0115F4B44B470DC2196A45A47298E859 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:06:57 +0000 Manifest this update: Tue 12 May 2026 03:01:57 +0000 Manifest next update: Wed 13 May 2026 07:01:57 +0000 Files and hashes: 1: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: eTmPN3t/PaM9CQFDKpglxNKRVsgYw16hoKgfbTOHlZI=) 2: 585117D9F8A558479018DDF94830A5C4C66BA76D.crl (hash: WZoU9TJ9b+nl93Eu4gk7BHLnDTQ49uXz5x9QzOpk8AY=) 3: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: DEKb4ykdIazHfvN+oGnSyAdKUSNIiAHPtDoT+tw15P8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e6:3e:1b:01:15:f4:b4:4b:47:0d:c2:19:6a:45:a4:72:98:e8:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585117D9F8A558479018DDF94830A5C4C66BA76D Validity Not Before: May 12 03:01:57 2026 GMT Not After : May 13 07:01:57 2026 GMT Subject: CN=0B1A341639CB9E99D79BE9161F597F3F4850CED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:47:94:02:9d:bb:ec:8b:95:ee:fb:73:a7: 2d:25:15:16:65:fd:ee:02:7d:ab:39:88:6b:c5:9a: 4e:75:bf:ea:2a:3c:a0:f8:2c:29:04:85:fc:c7:3e: 62:48:84:71:47:40:7d:f9:e2:41:07:a8:8f:d1:25: 23:ed:4f:78:1b:6c:6c:4f:bc:e7:96:f5:fd:2e:9e: 72:1f:26:31:d1:f9:62:fe:81:c2:2e:19:e9:0f:c3: 52:fe:9b:0b:de:65:24:df:5b:89:ae:d2:dc:d9:0f: ca:80:de:7f:98:c4:d7:71:9b:e7:c4:67:38:94:cf: 6f:32:34:de:21:48:0d:f2:6b:30:6a:c6:a5:93:11: 23:13:26:a1:2a:95:03:0e:3d:72:dc:7d:5e:73:3c: 58:47:e7:e2:1f:10:fe:77:6c:5f:7d:a4:1c:07:d0: f4:ce:20:77:ee:a3:8f:e2:a9:21:13:52:fa:df:3a: 03:76:44:bc:0b:16:cb:d0:83:81:58:0c:44:20:bf: 97:09:55:00:cc:f8:59:15:45:d9:e0:0b:d8:f5:9b: dd:57:37:ce:06:18:55:93:d3:a3:e1:84:df:17:d8: d4:67:72:d3:95:6e:3a:73:c4:b1:77:48:8d:db:29: 08:fe:49:4a:9f:73:a9:1a:17:91:f9:b6:7b:5f:09: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1A:34:16:39:CB:9E:99:D7:9B:E9:16:1F:59:7F:3F:48:50:CE:D4 X509v3 Authority Key Identifier: keyid:58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e0:9f:78:70:d5:63:e8:97:d5:d5:68:65:b2:9e:9a:df:44: cb:fe:8d:c6:70:6a:10:65:6f:ea:5d:f1:c0:e7:12:c9:c7:b0: f0:ed:23:ea:58:92:aa:b0:d3:e4:c8:21:3e:2c:ef:38:26:ad: 5a:e2:9d:8d:ad:f5:3d:cf:f7:a1:65:63:57:55:b4:87:26:a9: a7:af:cd:4a:46:ee:7e:82:56:43:1c:cb:59:b4:97:3b:70:d1: 5c:32:f5:2e:af:21:90:45:77:f7:55:01:4b:85:91:53:dd:dc: 50:22:ee:b8:d0:51:a1:a5:95:6c:99:f4:06:88:b5:0e:f6:29: 0c:1f:de:a5:02:43:91:61:fa:ce:57:c7:2e:d7:51:76:ea:23: d0:a0:49:14:a7:0b:7e:31:6d:06:ab:a9:df:53:2d:27:3f:19: e8:7e:e8:c0:55:0b:0b:3b:1d:67:a2:7c:8d:bf:b5:38:90:c0: c0:5d:73:79:71:63:96:8b:f7:67:6c:a4:43:aa:07:ce:4f:e7: 43:89:22:4b:42:be:f4:6c:d8:3a:80:41:8d:55:7c:1a:a5:f5: 1b:42:64:59:f4:26:da:1c:fa:e9:fb:2c:83:b5:05:12:10:c7: 9b:2f:7e:7b:41:24:67:8e:3b:54:3e:5d:15:93:d0:5e:9c:c4: 72:48:50:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuY+GwEV9LRLRw3CGWpFpHKY6FkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1QzRD NjZCQTc2RDAeFw0yNjA1MTIwMzAxNTdaFw0yNjA1MTMwNzAxNTdaMDMxMTAvBgNV BAMTKDBCMUEzNDE2MzlDQjlFOTlENzlCRTkxNjFGNTk3RjNGNDg1MENFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQqEeUAp277IuV7vtzpy0lFRZl /e4Cfas5iGvFmk51v+oqPKD4LCkEhfzHPmJIhHFHQH354kEHqI/RJSPtT3gbbGxP vOeW9f0unnIfJjHR+WL+gcIuGekPw1L+mwveZSTfW4mu0tzZD8qA3n+YxNdxm+fE ZziUz28yNN4hSA3yazBqxqWTESMTJqEqlQMOPXLcfV5zPFhH5+IfEP53bF99pBwH 0PTOIHfuo4/iqSETUvrfOgN2RLwLFsvQg4FYDEQgv5cJVQDM+FkVRdngC9j1m91X N84GGFWT06PhhN8X2NRnctOVbjpzxLF3SI3bKQj+SUqfc6kaF5H5tntfCeAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCxo0FjnLnpnXm+kWH1l/P0hQztQwHwYDVR0j BBgwFoAUWFEX2filWEeQGN35SDClxMZrp20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhmY2E0MmYtODM2YS00MGVjLWE3NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlG OEE1NTg0NzkwMThEREY5NDgzMEE1QzRDNjZCQTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODUxMTdEOUY4QTU1ODQ3OTAxOERERjk0ODMwQTVDNEM2NkJB NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1 QzRDNjZCQTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7gn3hw1WPol9XVaGWynprfRMv+jcZwahBl b+pd8cDnEsnHsPDtI+pYkqqw0+TIIT4s7zgmrVrinY2t9T3P96FlY1dVtIcmqaev zUpG7n6CVkMcy1m0lztw0Vwy9S6vIZBFd/dVAUuFkVPd3FAi7rjQUaGllWyZ9AaI tQ72KQwf3qUCQ5Fh+s5Xxy7XUXbqI9CgSRSnC34xbQarqd9TLSc/Geh+6MBVCws7 HWeifI2/tTiQwMBdc3lxY5aL92dspEOqB85P50OJIktCvvRs2DqAQY1VfBql9RtC ZFn0Jtoc+un7LIO1BRIQx5svfntBJGeOO1Q+XRWT0F6cxHJIUNE= -----END CERTIFICATE-----Generated at Tue May 12 23:20:36 2026 by rpki-client