$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft File: 587FA9FD682D37BC3028319A65BCAECCE276314F.mft (raw, json) Hash identifier: EE0UDd8eQiVYs0wCUybth+cKZeIOrvTL2M0wFn6Np4o= Subject key identifier: 9C:F1:12:EE:9D:81:92:93:F8:F8:C4:57:93:68:51:FC:4E:10:C1:F9 Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Certificate issuer: /CN=587FA9FD682D37BC3028319A65BCAECCE276314F Certificate serial: 08DC8D46D70C6BE52C1A22D6D16A9FB4D4E84A5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft Manifest number: BC Signing time: Sun 20 Sep 2026 23:15:39 +0000 Manifest this update: Sun 20 Sep 2026 23:10:39 +0000 Manifest next update: Tue 22 Sep 2026 02:08:39 +0000 Files and hashes: 1: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: 7DRv9+zjmRuZ1Cj6e3MgFUBLnLf0dtLBblIHUDPlQ+w=) 2: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: VSpKbDClpDylxx1rB7LnMubAcuRSyIs4GzhBBvXtPpM=) 3: 587FA9FD682D37BC3028319A65BCAECCE276314F.crl (hash: e20XfC1Yh2StdOfCEfgNL7keF2ji92oLL2ZzMESsHYU=) 4: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 5zg0GIi7yUDtLBjsDWQRXMmLy9VH8ssv+xs3UioSD6g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:dc:8d:46:d7:0c:6b:e5:2c:1a:22:d6:d1:6a:9f:b4:d4:e8:4a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Validity Not Before: Sep 20 23:10:39 2026 GMT Not After : Sep 22 02:08:39 2026 GMT Subject: CN=9CF112EE9D819293F8F8C457936851FC4E10C1F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:ee:9d:67:37:75:4a:9f:e3:d2:95:aa:29: a0:08:39:a2:76:16:a3:37:5d:f8:c7:5e:e8:46:76: 37:df:ca:ed:ad:d2:4d:18:33:af:9a:63:fe:08:e7: 26:a5:f4:a9:1f:fe:67:5d:fa:6e:b6:20:19:13:ce: 9d:35:83:ce:db:33:55:f9:9d:6c:99:9f:34:b4:27: b8:53:60:ea:90:0a:9f:1e:98:e0:0d:3a:46:da:8b: c0:c3:c2:4a:e0:bc:5d:e0:ff:29:fb:8b:0b:2c:b8: cc:7c:c0:d4:0b:0d:a4:c1:99:05:e1:9c:18:3b:04: 2c:0f:fe:fe:0c:e7:5b:04:36:65:34:a6:c2:95:b3: 05:62:34:ad:e4:55:06:50:e6:81:d6:3f:ac:85:fe: dd:3a:3e:c0:75:68:a7:2b:65:64:58:31:b8:fe:9b: 63:37:b0:77:c3:35:55:b6:d3:76:06:54:d2:f6:d3: b4:0e:3f:58:f6:ef:33:cb:a0:0a:81:ef:16:09:07: 8f:3d:62:3a:21:90:25:1a:65:5c:2d:77:b0:12:b2: 11:25:d7:92:4f:2b:7c:8f:46:46:15:a9:37:b7:ac: e1:90:ca:45:79:d8:96:2f:25:02:ef:73:da:fd:90: 9f:34:6d:e9:45:10:be:8a:d5:b3:10:59:97:61:d9: 26:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F1:12:EE:9D:81:92:93:F8:F8:C4:57:93:68:51:FC:4E:10:C1:F9 X509v3 Authority Key Identifier: keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:6f:6d:5c:0e:72:38:86:69:cc:46:25:5e:37:7d:d6:43:19: 60:f2:ea:13:7d:18:88:45:ae:ba:02:45:b8:9d:59:0b:43:9e: 55:72:da:42:a4:95:47:b0:8a:57:77:22:ca:83:e4:85:c0:54: e2:17:72:a4:58:4b:d7:0b:36:bb:54:18:30:6b:99:f2:49:12: 95:53:97:cb:a3:c8:f5:da:a5:f4:b3:02:15:fc:5b:ac:ce:6c: b0:e4:83:67:26:88:47:48:70:da:d0:70:35:3e:68:f4:b4:12: 16:7e:98:a3:1d:6e:b9:6d:c8:78:7c:8f:17:e0:83:4c:6d:06: 71:82:86:4b:66:b1:c6:2d:cd:aa:27:9d:98:f1:0b:9e:58:7f: ca:4a:96:b3:be:6d:13:c0:18:d8:51:f0:e7:12:fa:28:0b:fe: 37:51:a0:14:6f:7d:9b:53:31:5b:76:50:a9:3f:49:85:a1:92: ae:4d:c5:f7:f7:6a:55:23:5e:b5:32:19:89:9e:be:ab:14:fe: 7c:d5:72:17:d1:a9:6d:fe:b1:c5:31:5a:4f:7c:8e:38:0e:31: c3:48:ee:8e:dd:3f:e7:39:da:74:66:8f:51:1d:0e:74:fb:04: 90:8d:32:65:98:ca:58:97:32:c6:5f:4c:41:e7:f8:3c:bc:fc: 8d:92:d1:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCNyNRtcMa+UsGiLW0WqftNToSl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NF Mjc2MzE0RjAeFw0yNjA5MjAyMzEwMzlaFw0yNjA5MjIwMjA4MzlaMDMxMTAvBgNV BAMTKDlDRjExMkVFOUQ4MTkyOTNGOEY4QzQ1NzkzNjg1MUZDNEUxMEMxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxH+6dZzd1Sp/j0pWqKaAIOaJ2 FqM3XfjHXuhGdjffyu2t0k0YM6+aY/4I5yal9Kkf/mdd+m62IBkTzp01g87bM1X5 nWyZnzS0J7hTYOqQCp8emOANOkbai8DDwkrgvF3g/yn7iwssuMx8wNQLDaTBmQXh nBg7BCwP/v4M51sENmU0psKVswViNK3kVQZQ5oHWP6yF/t06PsB1aKcrZWRYMbj+ m2M3sHfDNVW203YGVNL207QOP1j27zPLoAqB7xYJB489YjohkCUaZVwtd7ASshEl 15JPK3yPRkYVqTe3rOGQykV52JYvJQLvc9r9kJ80belFEL6K1bMQWZdh2SanAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnPES7p2BkpP4+MRXk2hR/E4QwfkwHwYDVR0j BBgwFoAUWH+p/WgtN7wwKDGaZbyuzOJ2MU8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmYTNiNjQtM2M2MS00OGQ1LWFiMGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2 ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NFMjc2MzE0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODdGQTlGRDY4MkQzN0JDMzAyODMxOUE2NUJDQUVDQ0UyNzYz MTRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FF Q0NFMjc2MzE0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOhvbVwOcjiGacxGJV43fdZDGWDy6hN9GIhF rroCRbidWQtDnlVy2kKklUewild3IsqD5IXAVOIXcqRYS9cLNrtUGDBrmfJJEpVT l8ujyPXapfSzAhX8W6zObLDkg2cmiEdIcNrQcDU+aPS0EhZ+mKMdbrltyHh8jxfg g0xtBnGChktmscYtzaonnZjxC55Yf8pKlrO+bRPAGNhR8OcS+igL/jdRoBRvfZtT MVt2UKk/SYWhkq5Nxff3alUjXrUyGYmevqsU/nzVchfRqW3+scUxWk98jjgOMcNI 7o7dP+c52nRmj1EdDnT7BJCNMmWYyliXMsZfTEHn+Dy8/I2S0fA= -----END CERTIFICATE-----Generated at Mon Sep 21 17:40:12 2026 by rpki-client