$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft File: 587FA9FD682D37BC3028319A65BCAECCE276314F.mft (raw, json) Hash identifier: mek8PkFaMtatZ0WF/RXtQVlLPdw4I537jxwOgqssXO4= Subject key identifier: 0A:11:40:CD:3B:F1:65:0E:CD:0E:EA:A9:5A:8A:A0:1E:27:EF:2A:8C Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Certificate issuer: /CN=587FA9FD682D37BC3028319A65BCAECCE276314F Certificate serial: 585DDC47711368326B0594B5B47CBB4450532C71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 02:03:39 +0000 Manifest this update: Wed 29 Jul 2026 01:58:39 +0000 Manifest next update: Thu 30 Jul 2026 05:53:39 +0000 Files and hashes: 1: 587FA9FD682D37BC3028319A65BCAECCE276314F.crl (hash: GPM8IjQHTu/QtWMV1RDpA1NA2iHbV0/WMDtfXr55npk=) 2: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 5zg0GIi7yUDtLBjsDWQRXMmLy9VH8ssv+xs3UioSD6g=) 3: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: 7DRv9+zjmRuZ1Cj6e3MgFUBLnLf0dtLBblIHUDPlQ+w=) 4: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: VSpKbDClpDylxx1rB7LnMubAcuRSyIs4GzhBBvXtPpM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5d:dc:47:71:13:68:32:6b:05:94:b5:b4:7c:bb:44:50:53:2c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Validity Not Before: Jul 29 01:58:39 2026 GMT Not After : Jul 30 05:53:39 2026 GMT Subject: CN=0A1140CD3BF1650ECD0EEAA95A8AA01E27EF2A8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:a7:bc:17:29:5f:a8:57:aa:de:37:62:51: 30:34:e1:64:ee:ec:3c:8d:62:c7:c8:4d:9e:8e:8d: 6b:cc:98:ac:8d:cb:7e:0d:b5:05:b4:70:d6:6d:0d: 24:a7:cd:86:ee:22:89:6f:58:02:c8:95:68:ad:f5: 8b:30:26:b2:21:8a:0f:72:53:b5:80:7c:58:ae:72: ee:02:e0:de:5f:9f:49:93:f8:67:1e:36:ee:c5:80: 4a:1d:bd:7e:c2:39:ec:c9:ac:6d:8f:bf:48:e4:21: c4:df:6d:5e:6c:22:84:c4:ec:03:b0:ad:95:09:7b: 1d:6f:72:2b:90:7c:a1:f0:45:6a:c5:c1:8e:00:7c: 7f:49:ff:c0:ac:88:5b:7a:d5:7a:19:70:b1:20:3d: fb:98:e1:10:bc:f9:8d:cd:85:a7:d3:da:54:f1:16: fb:a3:56:b6:7e:cb:fc:77:e2:a8:3a:20:e7:fb:65: 43:be:41:c3:b0:6a:8b:ab:c5:f6:4b:6d:ae:55:29: c3:aa:37:16:fe:4d:f9:47:07:51:99:15:48:ac:d9: b3:d6:91:0a:b8:9d:ce:22:59:98:33:ff:fa:a6:d9: b4:ad:d2:de:1b:e0:69:d6:e5:f8:5a:9a:8a:5f:a5: c5:c7:c4:78:f9:b7:f9:4a:6b:0c:80:25:8b:9d:0c: 64:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:40:CD:3B:F1:65:0E:CD:0E:EA:A9:5A:8A:A0:1E:27:EF:2A:8C X509v3 Authority Key Identifier: keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:6f:7a:81:ce:63:98:4b:56:59:bb:3c:01:0d:81:56:ef:88: 6f:d0:f7:56:3c:29:4d:33:6f:bd:f7:71:3e:aa:be:1b:15:fa: de:34:c0:d7:cd:2b:37:c2:27:26:09:1a:dc:f2:84:3b:ca:a9: 6e:c2:36:a5:92:5f:4a:85:4e:96:ae:05:4a:5a:96:e9:61:f1: 52:4d:72:9b:11:1f:7d:a3:54:42:a4:b1:e6:63:75:67:2b:43: 11:61:45:32:df:97:90:18:0b:8e:e4:63:88:a7:53:92:20:bf: 2d:08:c7:da:49:e2:83:be:d0:5a:be:e5:0b:7a:2a:49:80:95: fd:41:d9:1d:0c:7b:41:13:4f:b2:f6:31:8d:14:ff:8f:e1:a3: a5:c6:a5:e6:4f:31:f8:6a:9e:d0:3b:66:5a:b0:1f:71:6a:cd: ab:13:9a:a3:ec:29:9f:fb:d8:72:8c:10:c0:ba:47:6c:27:6f: 17:d1:09:29:73:81:31:0f:8b:89:86:eb:1c:1a:bb:7d:48:f9: 28:4d:28:74:8a:f7:6d:3c:db:d0:2d:e7:e6:67:b0:14:79:34: 41:f0:3a:48:19:0b:09:3b:e0:5d:a8:41:e5:bd:34:1d:0a:7a: 93:3b:c3:c9:d8:04:74:30:fa:b1:2b:a5:58:ec:62:e7:fd:d8: 7e:da:11:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWF3cR3ETaDJrBZS1tHy7RFBTLHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NF Mjc2MzE0RjAeFw0yNjA3MjkwMTU4MzlaFw0yNjA3MzAwNTUzMzlaMDMxMTAvBgNV BAMTKDBBMTE0MENEM0JGMTY1MEVDRDBFRUFBOTVBOEFBMDFFMjdFRjJBOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/O6e8FylfqFeq3jdiUTA04WTu 7DyNYsfITZ6OjWvMmKyNy34NtQW0cNZtDSSnzYbuIolvWALIlWit9YswJrIhig9y U7WAfFiucu4C4N5fn0mT+GceNu7FgEodvX7COezJrG2Pv0jkIcTfbV5sIoTE7AOw rZUJex1vciuQfKHwRWrFwY4AfH9J/8CsiFt61XoZcLEgPfuY4RC8+Y3NhafT2lTx FvujVrZ+y/x34qg6IOf7ZUO+QcOwaourxfZLba5VKcOqNxb+TflHB1GZFUis2bPW kQq4nc4iWZgz//qm2bSt0t4b4GnW5fhamopfpcXHxHj5t/lKawyAJYudDGS7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUChFAzTvxZQ7NDuqpWoqgHifvKowwHwYDVR0j BBgwFoAUWH+p/WgtN7wwKDGaZbyuzOJ2MU8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmYTNiNjQtM2M2MS00OGQ1LWFiMGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2 ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NFMjc2MzE0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODdGQTlGRDY4MkQzN0JDMzAyODMxOUE2NUJDQUVDQ0UyNzYz MTRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FF Q0NFMjc2MzE0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9veoHOY5hLVlm7PAENgVbviG/Q91Y8KU0z b733cT6qvhsV+t40wNfNKzfCJyYJGtzyhDvKqW7CNqWSX0qFTpauBUpalulh8VJN cpsRH32jVEKkseZjdWcrQxFhRTLfl5AYC47kY4inU5Igvy0Ix9pJ4oO+0Fq+5Qt6 KkmAlf1B2R0Me0ETT7L2MY0U/4/ho6XGpeZPMfhqntA7ZlqwH3FqzasTmqPsKZ/7 2HKMEMC6R2wnbxfRCSlzgTEPi4mG6xwau31I+ShNKHSK920829At5+ZnsBR5NEHw OkgZCwk74F2oQeW9NB0KepM7w8nYBHQw+rErpVjsYuf92H7aEUM= -----END CERTIFICATE-----Generated at Wed Jul 29 06:37:38 2026 by rpki-client