$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: 1RTQLvSTWnp75GfUHN+nutvuwaoL4R6JHKX+3A8TOBE= Subject key identifier: 7E:96:5E:F7:58:BF:D7:DB:DE:25:A4:92:97:9E:40:9E:E1:0C:77:D7 Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 2F1913F72C0074654F2DA1B74F3A1697A2504549 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 0567 Signing time: Fri 17 Apr 2026 05:31:46 +0000 Manifest this update: Fri 17 Apr 2026 05:26:46 +0000 Manifest next update: Mon 20 Apr 2026 08:41:46 +0000 Files and hashes: 1: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: zYQUx+ql30PPLkUcmDWdEwPKMJFZU5b5VUJfAZqzXL8=) 2: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: kt4OC+ctlpZEQoiJvsfyP21taG3O9+eWY+1MOKXKBaA=) 3: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: G0VeuaYXS/KgF8/ez14lbGq6IneUYgvcmaO4bAZiGEU=) 4: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: 1EZSjvRP2SRnr2FbtmEkuDAZWdhz/ERYDxYK2+TR5jA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:19:13:f7:2c:00:74:65:4f:2d:a1:b7:4f:3a:16:97:a2:50:45:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: Apr 17 05:26:46 2026 GMT Not After : Apr 20 08:41:46 2026 GMT Subject: CN=7E965EF758BFD7DBDE25A492979E409EE10C77D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:5b:ae:d0:fd:35:ab:ca:a0:33:7d:d7:c0: 09:bc:60:cd:07:da:10:3b:ed:84:5e:08:5c:ad:4a: a8:fa:ff:bd:66:d7:1e:c4:03:f1:2d:4a:6f:da:f9: ca:aa:aa:c2:58:ef:70:34:b7:a3:d1:2b:a8:6c:2a: e6:3f:7d:a3:78:ed:54:24:77:cb:04:ab:57:a8:54: 5a:b1:fd:d4:66:08:cf:0a:40:f9:10:78:7c:82:fd: 96:5b:d3:35:e8:59:07:7b:ef:85:71:c2:73:b0:cd: 00:13:c6:c5:75:00:af:0c:f6:d9:9a:f9:d7:52:fc: 45:44:52:78:5c:f1:26:93:7f:ec:9c:04:82:1c:3c: 4f:fe:3d:e3:7f:67:33:d4:ba:e3:a9:4d:4c:3d:20: 49:34:fb:ff:c0:36:8b:94:b2:01:73:d5:ff:e2:81: 34:32:01:2e:40:8e:b3:3f:b4:6c:2d:26:6e:78:0f: f0:b2:8f:5d:89:4b:40:44:b2:60:8c:9f:87:a0:37: d3:b7:be:44:5e:c8:d4:35:bb:01:fb:99:c7:c2:69: f5:85:81:76:06:1d:07:db:d7:0e:14:83:33:cf:0d: 45:8d:cf:d7:ea:9f:06:0e:5e:43:95:cf:ff:98:92: 26:01:ab:fd:b8:ff:a4:5a:de:26:16:55:59:7c:ce: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:96:5E:F7:58:BF:D7:DB:DE:25:A4:92:97:9E:40:9E:E1:0C:77:D7 X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:0d:e1:fa:f6:c3:94:d2:46:e4:22:83:f8:e9:ad:4e:e4:db: fe:50:27:f7:0a:5c:96:77:25:a5:9d:b7:d9:2d:a8:5c:4c:e1: 32:ff:a8:6f:ad:15:76:72:d3:5f:2c:28:b4:f4:99:ac:29:42: e7:a7:5a:7a:71:37:49:73:6c:17:8c:d4:dd:f3:67:45:13:85: 66:83:0c:a3:14:9d:24:ee:ee:e6:72:cd:55:f7:5f:09:c0:57: 36:07:e6:98:8d:a9:17:c9:95:3f:89:8e:b2:37:a5:fa:80:2f: 9b:97:0b:6e:02:84:37:ca:3b:fc:d0:67:bb:b4:b2:6f:20:fb: fc:5c:10:52:90:85:3b:9e:fc:a4:d1:97:02:12:50:47:fb:bd: ab:80:06:3c:57:ad:24:d9:2c:f0:47:ad:5a:f6:a7:a5:f5:dc: f8:90:eb:a5:e0:88:eb:4f:aa:7d:e9:49:35:bd:27:0b:9e:77: 55:e5:03:70:91:d7:d5:c7:b7:98:f8:ee:77:e5:ff:90:e4:2f: dc:9a:da:1d:71:32:55:46:9f:c7:dc:60:a2:64:2f:5f:3d:0e: 1c:7a:63:d2:92:13:51:b9:c2:8d:7b:22:aa:eb:70:bf:76:3d: 6e:99:d1:f8:ba:43:c4:7a:b7:b9:9c:93:03:45:b7:d2:fa:62: 84:d8:03:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULxkT9ywAdGVPLaG3TzoWl6JQRUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNjA0MTcwNTI2NDZaFw0yNjA0MjAwODQxNDZaMDMxMTAvBgNV BAMTKDdFOTY1RUY3NThCRkQ3REJERTI1QTQ5Mjk3OUU0MDlFRTEwQzc3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDT1uu0P01q8qgM33XwAm8YM0H 2hA77YReCFytSqj6/71m1x7EA/EtSm/a+cqqqsJY73A0t6PRK6hsKuY/faN47VQk d8sEq1eoVFqx/dRmCM8KQPkQeHyC/ZZb0zXoWQd774VxwnOwzQATxsV1AK8M9tma +ddS/EVEUnhc8SaTf+ycBIIcPE/+PeN/ZzPUuuOpTUw9IEk0+//ANouUsgFz1f/i gTQyAS5AjrM/tGwtJm54D/Cyj12JS0BEsmCMn4egN9O3vkReyNQ1uwH7mcfCafWF gXYGHQfb1w4UgzPPDUWNz9fqnwYOXkOVz/+YkiYBq/24/6Ra3iYWVVl8zsRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfpZe91i/19veJaSSl55AnuEMd9cwHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcN4fr2w5TSRuQig/jprU7k2/5QJ/cKXJZ3 JaWdt9ktqFxM4TL/qG+tFXZy018sKLT0mawpQuenWnpxN0lzbBeM1N3zZ0UThWaD DKMUnSTu7uZyzVX3XwnAVzYH5piNqRfJlT+JjrI3pfqAL5uXC24ChDfKO/zQZ7u0 sm8g+/xcEFKQhTue/KTRlwISUEf7vauABjxXrSTZLPBHrVr2p6X13PiQ66XgiOtP qn3pSTW9Jwued1XlA3CR19XHt5j47nfl/5DkL9ya2h1xMlVGn8fcYKJkL189Dhx6 Y9KSE1G5wo17IqrrcL92PW6Z0fi6Q8R6t7mckwNFt9L6YoTYA+w= -----END CERTIFICATE-----Generated at Fri Apr 17 18:57:57 2026 by rpki-client