$ rpki-client -vvf repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft File: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft (raw, json) Hash identifier: NxM6w/k6sEqzuDlRICpbMCy/bXllsYUiAhy6wW+HaLg= Subject key identifier: 1A:39:81:7C:45:A6:74:C2:09:7E:1C:0D:E1:6B:AD:9E:EB:C2:34:A8 Authority key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF Certificate issuer: /CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Certificate serial: 59BE2566651E35447D6191BCB4B4ADA6C41484B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft Manifest number: 052F Signing time: Fri 17 Apr 2026 05:32:12 +0000 Manifest this update: Fri 17 Apr 2026 05:27:12 +0000 Manifest next update: Mon 20 Apr 2026 07:29:12 +0000 Files and hashes: 1: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl (hash: LkKhIrl0RhUkGixlNsGrggH/srdkvDartcoKJyHgkXI=) 2: 323030313a6466303a336538303a3a2f34382d3438203d3e20313338383531.roa (hash: z4oYCZWDew+XBZrkivYPBIEa8esU/2et9t2LDZPakkY=) 3: 3130332e3133382e3132372e302f32342d3234203d3e20313338383531.roa (hash: 8uluz9oQUOC33A/yP5J6qEWwFa5BN6LUXooNJ8KA6Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 07:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:be:25:66:65:1e:35:44:7d:61:91:bc:b4:b4:ad:a6:c4:14:84:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Validity Not Before: Apr 17 05:27:12 2026 GMT Not After : Apr 20 07:29:12 2026 GMT Subject: CN=1A39817C45A674C2097E1C0DE16BAD9EEBC234A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:ec:46:61:a6:e9:23:8a:cd:b4:d1:bb:e2: db:32:ff:fb:19:84:79:f2:6d:0b:8d:8f:b8:7b:5c: e8:b4:75:ae:75:fd:ba:bc:a5:ee:4c:55:e4:93:9b: 42:0f:20:1e:54:c8:88:c0:8c:b0:86:c5:b6:76:fa: 9a:d0:dd:12:cf:eb:1f:80:55:91:db:54:f7:2e:4a: 96:07:83:68:8a:51:91:1a:84:bf:a5:97:e5:12:ba: b9:0c:ae:92:9e:f3:09:b1:9f:ff:e1:ee:c6:c9:17: e7:ca:8d:ec:f2:d3:ec:fc:b5:f9:97:07:23:26:f2: 9b:f8:89:65:a6:a3:58:50:c9:c1:3a:53:51:38:9f: a5:98:ab:18:0c:f5:32:e0:32:8c:b6:4f:d4:e1:bb: e3:89:af:86:43:bf:fc:37:a9:b3:65:41:ad:8f:7d: b0:40:4d:f5:67:f9:3c:b9:41:e9:d0:af:20:8e:94: b0:5e:1e:68:05:c1:4b:8c:1e:63:a2:5a:35:da:94: c0:ed:40:86:6b:ce:c6:0f:91:0a:e3:55:57:66:63: c2:ee:f2:f4:55:4e:dc:72:43:fa:d9:bc:47:ba:c7: 4c:b9:46:eb:8f:cb:9a:e5:ed:20:b2:2d:95:f6:7f: a7:c6:92:43:48:a2:d8:f0:61:59:2f:84:66:ee:fb: b0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:39:81:7C:45:A6:74:C2:09:7E:1C:0D:E1:6B:AD:9E:EB:C2:34:A8 X509v3 Authority Key Identifier: keyid:58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:04:b9:34:1b:b3:7d:3e:72:ea:a1:6c:f2:b9:24:aa:7e:2a: a3:8f:a1:af:89:2a:01:e3:98:36:ff:a8:b0:b4:bf:25:35:c4: 8e:8f:93:5d:cd:ec:d7:bd:60:9b:d4:d0:d5:30:74:d8:7b:81: 3e:df:6f:1b:05:e8:73:0b:87:c2:2e:d0:51:f4:bc:f8:bb:50: e2:1d:d7:21:5f:dd:b6:db:68:69:a7:7d:54:93:f1:8e:3c:6c: bf:14:0d:92:be:67:5a:78:ef:f6:f5:01:55:1a:7f:87:34:43: e3:d1:1f:52:d3:32:8f:63:0e:da:2d:fe:10:74:2e:c3:3d:7c: 29:82:93:ed:88:04:da:76:06:12:e3:39:92:c7:40:6f:e3:3f: 92:ed:d2:e1:5b:a7:25:56:24:11:5f:20:c2:b5:6b:46:c3:d3: ca:66:0d:45:66:9a:6d:2d:6f:b6:85:4d:6e:4e:47:1f:f7:61: 03:03:99:81:bd:20:1d:e3:e4:21:37:d7:34:ed:df:3b:95:f1: 07:92:4f:7f:97:f0:cf:00:ad:5b:33:62:8f:b0:e1:6f:06:32: d0:a9:27:e9:50:15:03:e3:61:2b:ec:3a:6c:3e:92:90:74:fe: 21:8d:b1:ee:80:93:40:fe:3c:2f:d3:07:fd:a3:8e:e6:b5:e0: 19:2f:14:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWb4lZmUeNUR9YZG8tLStpsQUhLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIw M0Q1MzVERjAeFw0yNjA0MTcwNTI3MTJaFw0yNjA0MjAwNzI5MTJaMDMxMTAvBgNV BAMTKDFBMzk4MTdDNDVBNjc0QzIwOTdFMUMwREUxNkJBRDlFRUJDMjM0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2+xGYabpI4rNtNG74tsy//sZ hHnybQuNj7h7XOi0da51/bq8pe5MVeSTm0IPIB5UyIjAjLCGxbZ2+prQ3RLP6x+A VZHbVPcuSpYHg2iKUZEahL+ll+USurkMrpKe8wmxn//h7sbJF+fKjezy0+z8tfmX ByMm8pv4iWWmo1hQycE6U1E4n6WYqxgM9TLgMoy2T9Thu+OJr4ZDv/w3qbNlQa2P fbBATfVn+Ty5QenQryCOlLBeHmgFwUuMHmOiWjXalMDtQIZrzsYPkQrjVVdmY8Lu 8vRVTtxyQ/rZvEe6x0y5RuuPy5rl7SCyLZX2f6fGkkNIotjwYVkvhGbu+7CLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGjmBfEWmdMIJfhwN4WutnuvCNKgwHwYDVR0j BBgwFoAUWG/o0n/01r1PqDn8WIRKSwPVNd8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzA3MmRiNy0wMTI3LTQ1NjQtOGQyMC1iY2VkNTI1YTE0YjgvMC81ODZGRThEMjdG RjRENkJENEZBODM5RkM1ODg0NEE0QjAzRDUzNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRBNEIwM0Q1 MzVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmMwNzJkYjctMDEyNy00NTY0LThk MjAtYmNlZDUyNWExNGI4LzAvNTg2RkU4RDI3RkY0RDZCRDRGQTgzOUZDNTg4NDRB NEIwM0Q1MzVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoEuTQbs30+cuqhbPK5JKp+KqOPoa+JKgHj mDb/qLC0vyU1xI6Pk13N7Ne9YJvU0NUwdNh7gT7fbxsF6HMLh8Iu0FH0vPi7UOId 1yFf3bbbaGmnfVST8Y48bL8UDZK+Z1p47/b1AVUaf4c0Q+PRH1LTMo9jDtot/hB0 LsM9fCmCk+2IBNp2BhLjOZLHQG/jP5Lt0uFbpyVWJBFfIMK1a0bD08pmDUVmmm0t b7aFTW5ORx/3YQMDmYG9IB3j5CE31zTt3zuV8QeST3+X8M8ArVszYo+w4W8GMtCp J+lQFQPjYSvsOmw+kpB0/iGNse6Ak0D+PC/TB/2jjua14BkvFCE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:36:51 2026 by rpki-client