$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft File: 587FA9FD682D37BC3028319A65BCAECCE276314F.mft (raw, json) Hash identifier: RXRVtqQuOEm8Wbsd5tPkYHjJdw4L2HYGyVNVniZ8YnQ= Subject key identifier: 54:C5:DF:37:09:2C:B0:7D:53:D3:C6:02:4E:A9:9F:C9:4B:F8:E7:0F Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Certificate issuer: /CN=587FA9FD682D37BC3028319A65BCAECCE276314F Certificate serial: 0B2C239FB434CED0F94198DB74A55E677E062B13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 04:24:24 +0000 Manifest this update: Sat 13 Jun 2026 04:19:24 +0000 Manifest next update: Sun 14 Jun 2026 07:01:24 +0000 Files and hashes: 1: 587FA9FD682D37BC3028319A65BCAECCE276314F.crl (hash: SOUYFw8Pdsj9f9kHrU3o2qISNVSZUySdJm85sT3wTlg=) 2: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: VSpKbDClpDylxx1rB7LnMubAcuRSyIs4GzhBBvXtPpM=) 3: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 5zg0GIi7yUDtLBjsDWQRXMmLy9VH8ssv+xs3UioSD6g=) 4: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: 7DRv9+zjmRuZ1Cj6e3MgFUBLnLf0dtLBblIHUDPlQ+w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 07:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2c:23:9f:b4:34:ce:d0:f9:41:98:db:74:a5:5e:67:7e:06:2b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Validity Not Before: Jun 13 04:19:24 2026 GMT Not After : Jun 14 07:01:24 2026 GMT Subject: CN=54C5DF37092CB07D53D3C6024EA99FC94BF8E70F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:6c:e0:a9:77:77:c3:14:f5:d4:d0:60:5a: ea:77:db:4a:56:ab:a1:ba:ab:8f:c9:ff:b4:20:25: c8:e5:e2:80:71:88:63:b0:ad:07:af:6d:97:78:a5: 92:8a:42:9f:b3:f5:39:1f:b8:e9:81:7d:12:98:d6: 8f:c5:ea:c1:95:8f:8b:ba:77:03:23:86:37:d0:b7: e2:15:72:d5:fb:9d:5f:2b:f8:27:cc:81:4d:03:70: c9:ee:2c:b5:e4:2a:63:11:15:19:11:c9:a4:96:bd: fd:dc:3f:c8:50:1c:e0:b5:fa:c5:c6:7d:3b:eb:20: 9f:a9:34:ba:23:2c:25:d2:71:88:ad:ba:55:28:b6: 3f:c1:1e:3f:ff:75:eb:d3:35:bd:73:8c:68:68:eb: 6e:45:8f:c5:00:aa:a0:6c:6d:19:e7:5c:52:c6:28: 47:6b:ff:04:b5:9a:71:c6:e4:e1:3b:80:d3:92:cb: 61:64:69:06:5e:47:68:9a:fb:c1:5a:bd:c2:79:7c: de:0d:df:ba:01:65:88:c4:d9:8b:46:1a:53:1b:e4: b5:a4:2b:81:34:ea:84:92:a1:f2:e5:86:5a:38:07: af:85:5e:b0:7f:a8:8b:d5:29:e2:c6:72:e8:82:65: ae:2b:79:0c:8f:77:1c:e7:cc:b6:75:c0:a3:e6:f2: a8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C5:DF:37:09:2C:B0:7D:53:D3:C6:02:4E:A9:9F:C9:4B:F8:E7:0F X509v3 Authority Key Identifier: keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:06:ef:17:c2:58:2e:ae:17:fc:f4:91:98:af:c3:70:3e:e0: 7a:4f:eb:b9:3e:a4:4f:fd:4e:de:41:81:a8:05:72:04:19:75: 9f:92:05:89:44:77:d7:a6:95:0f:75:bf:94:25:54:e3:73:b3: 3e:fc:17:db:6e:e7:9f:cf:2c:2b:5e:1c:57:9e:15:0b:e7:70: 54:63:79:02:d2:01:01:89:db:11:c4:6e:2e:98:ed:57:45:a9: 17:ce:80:4d:a5:1c:ca:64:ec:9b:97:40:f8:de:4d:bd:0d:6d: 30:42:fb:c3:94:a2:e7:d9:4f:ca:cd:0f:cc:7f:31:4f:91:3c: 68:65:d6:8b:ce:d4:d0:6f:8c:cb:34:0b:e4:f1:9e:46:e4:26: ee:75:24:df:69:f4:d4:2f:a4:5c:d8:3b:0a:e0:ab:cb:2c:02: 07:a7:51:d4:fb:e2:37:cc:f2:b0:30:d3:57:35:98:cd:66:15: f9:02:c9:23:c7:fa:d9:2f:85:e8:83:e4:6e:48:3c:e0:0b:cf: 49:24:61:ca:3e:46:e1:b8:fc:ed:0c:d3:20:72:3a:fd:53:bf: 00:e9:65:33:9b:10:ad:b9:b8:e8:03:21:87:57:bb:6e:fd:c9: 04:92:e0:6c:ab:3c:65:d3:a8:d2:9a:02:a0:68:bb:e4:c3:eb: ee:3a:30:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCywjn7Q0ztD5QZjbdKVeZ34GKxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NF Mjc2MzE0RjAeFw0yNjA2MTMwNDE5MjRaFw0yNjA2MTQwNzAxMjRaMDMxMTAvBgNV BAMTKDU0QzVERjM3MDkyQ0IwN0Q1M0QzQzYwMjRFQTk5RkM5NEJGOEU3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVGzgqXd3wxT11NBgWup320pW q6G6q4/J/7QgJcjl4oBxiGOwrQevbZd4pZKKQp+z9TkfuOmBfRKY1o/F6sGVj4u6 dwMjhjfQt+IVctX7nV8r+CfMgU0DcMnuLLXkKmMRFRkRyaSWvf3cP8hQHOC1+sXG fTvrIJ+pNLojLCXScYitulUotj/BHj//devTNb1zjGho625Fj8UAqqBsbRnnXFLG KEdr/wS1mnHG5OE7gNOSy2FkaQZeR2ia+8FavcJ5fN4N37oBZYjE2YtGGlMb5LWk K4E06oSSofLlhlo4B6+FXrB/qIvVKeLGcuiCZa4reQyPdxznzLZ1wKPm8qi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVMXfNwkssH1T08YCTqmfyUv45w8wHwYDVR0j BBgwFoAUWH+p/WgtN7wwKDGaZbyuzOJ2MU8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmYTNiNjQtM2M2MS00OGQ1LWFiMGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2 ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NFMjc2MzE0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODdGQTlGRDY4MkQzN0JDMzAyODMxOUE2NUJDQUVDQ0UyNzYz MTRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FF Q0NFMjc2MzE0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8G7xfCWC6uF/z0kZivw3A+4HpP67k+pE/9 Tt5BgagFcgQZdZ+SBYlEd9emlQ91v5QlVONzsz78F9tu55/PLCteHFeeFQvncFRj eQLSAQGJ2xHEbi6Y7VdFqRfOgE2lHMpk7JuXQPjeTb0NbTBC+8OUoufZT8rND8x/ MU+RPGhl1ovO1NBvjMs0C+TxnkbkJu51JN9p9NQvpFzYOwrgq8ssAgenUdT74jfM 8rAw01c1mM1mFfkCySPH+tkvheiD5G5IPOALz0kkYco+RuG4/O0M0yByOv1TvwDp ZTObEK25uOgDIYdXu279yQSS4GyrPGXTqNKaAqBou+TD6+46MOw= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:37 2026 by rpki-client