$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft File: 59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft (raw, json) Hash identifier: wwkETT7GOPrY7aaimx73klAjHJWSvznw0/bJwSi9iJg= Subject key identifier: D9:CF:E2:97:2A:F1:DA:29:CE:02:C6:D7:C9:77:20:11:F4:7A:A3:72 Authority key identifier: 59:F4:23:4C:AE:EF:A4:6B:3C:B1:62:7D:38:50:2F:B4:BA:6E:FD:90 Certificate issuer: /CN=59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90 Certificate serial: 432AEF5F9E2D5F905CBC5AADC9835F3473711E5F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft Manifest number: BE Signing time: Tue 22 Sep 2026 10:09:05 +0000 Manifest this update: Tue 22 Sep 2026 10:04:05 +0000 Manifest next update: Wed 23 Sep 2026 13:30:05 +0000 Files and hashes: 1: 59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl (hash: gbZU+p9fYwKEsOv+eS8FzxrQACN3XocmYlwwALA5gd4=) 2: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: xUpvUE2ZHUc2DU7j7aFTg7BviyLprNaKf2mKbV8517U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 13:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2a:ef:5f:9e:2d:5f:90:5c:bc:5a:ad:c9:83:5f:34:73:71:1e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90 Validity Not Before: Sep 22 10:04:05 2026 GMT Not After : Sep 23 13:30:05 2026 GMT Subject: CN=D9CFE2972AF1DA29CE02C6D7C9772011F47AA372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:ac:02:db:c1:dd:9b:c7:27:aa:cb:ce:00: 0c:1b:6c:f4:7f:e6:bf:02:41:71:cc:69:ba:c1:07: cd:b3:29:1e:88:ed:72:2c:9e:48:d3:d1:6e:ac:39: fb:06:5c:8a:04:4b:e4:fc:93:de:d8:66:a8:28:ec: 86:09:cc:fe:81:6b:22:72:af:8d:52:58:2d:bb:79: 08:f6:24:51:cb:a9:e3:c5:f3:95:4c:87:7c:11:ac: f6:55:a6:8e:0a:18:fa:bd:c2:93:0d:e8:24:19:10: cd:62:a0:27:91:3a:c4:5a:e5:b9:6c:f7:c2:eb:d1: 86:43:f0:f8:c9:20:b4:7c:ff:1e:43:56:45:cd:87: fc:9c:c1:c1:2b:ee:73:0a:6c:76:ed:f7:c0:ec:c8: 78:7b:a1:52:f8:4b:f5:4b:95:6a:d5:54:8e:fc:d1: ec:1d:e5:a4:f0:48:2f:08:66:17:83:fe:84:75:11: b5:6d:cb:17:f4:8b:5b:c6:65:e7:c0:72:b9:fd:1a: a3:73:15:3e:58:0b:1e:9d:88:ee:c5:f2:af:2b:4e: 8b:a5:12:4e:14:d3:17:5b:83:ba:f3:d4:49:e1:88: 3e:99:b3:92:5b:a1:7e:e8:45:01:8c:c4:cb:a5:54: 8f:00:25:c6:92:d8:ea:5f:d9:03:de:f2:90:06:32: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CF:E2:97:2A:F1:DA:29:CE:02:C6:D7:C9:77:20:11:F4:7A:A3:72 X509v3 Authority Key Identifier: keyid:59:F4:23:4C:AE:EF:A4:6B:3C:B1:62:7D:38:50:2F:B4:BA:6E:FD:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f8:4d:b0:ad:a1:09:98:c8:e0:47:29:bf:68:24:16:67:fe: 8b:31:3a:3a:70:17:a9:de:44:fa:51:03:83:b8:7e:07:1f:5b: e9:e9:51:42:1f:69:36:be:43:89:e2:58:0b:b5:5b:f9:a4:55: f6:b1:19:60:06:d9:24:ea:a4:76:5f:6d:85:6a:e0:e0:79:a9: dd:84:26:1f:f5:91:78:cc:3f:ad:9e:a7:40:75:d6:04:7f:7a: 86:f4:f5:a2:e2:62:56:57:98:01:f3:09:41:74:94:c1:da:f6: 59:3c:31:4e:92:19:a3:09:96:80:4a:ba:a2:47:2a:fa:c8:cd: ee:5e:e6:2d:fc:0f:88:86:2e:81:71:3f:2c:29:27:5c:ec:de: 77:7d:a1:4a:9f:e0:e1:2c:c6:a1:ff:67:1e:5d:db:12:29:b2: d7:99:e3:21:63:7b:ea:44:31:9f:09:13:28:77:76:dd:84:62: 36:44:2c:33:1f:c5:42:70:3b:31:98:31:48:56:51:20:19:77: b5:b9:71:53:57:2d:7d:f8:d0:43:21:d7:7d:ab:cc:f8:28:35: 0c:1b:ab:9e:39:df:5b:54:ba:de:e4:9c:cf:cc:ae:1b:61:fc: e6:e9:91:e7:82:e5:c0:d5:40:d5:be:2d:a9:e6:14:d9:48:81: 47:67:62:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyrvX54tX5BcvFqtyYNfNHNxHl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlGNDIzNENBRUVGQTQ2QjNDQjE2MjdEMzg1MDJGQjRC QTZFRkQ5MDAeFw0yNjA5MjIxMDA0MDVaFw0yNjA5MjMxMzMwMDVaMDMxMTAvBgNV BAMTKEQ5Q0ZFMjk3MkFGMURBMjlDRTAyQzZEN0M5NzcyMDExRjQ3QUEzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1RawC28Hdm8cnqsvOAAwbbPR/ 5r8CQXHMabrBB82zKR6I7XIsnkjT0W6sOfsGXIoES+T8k97YZqgo7IYJzP6BayJy r41SWC27eQj2JFHLqePF85VMh3wRrPZVpo4KGPq9wpMN6CQZEM1ioCeROsRa5bls 98Lr0YZD8PjJILR8/x5DVkXNh/ycwcEr7nMKbHbt98DsyHh7oVL4S/VLlWrVVI78 0ewd5aTwSC8IZheD/oR1EbVtyxf0i1vGZefAcrn9GqNzFT5YCx6diO7F8q8rToul Ek4U0xdbg7rz1EnhiD6Zs5JboX7oRQGMxMulVI8AJcaS2Opf2QPe8pAGMiPXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2c/ilyrx2inOAsbXyXcgEfR6o3IwHwYDVR0j BBgwFoAUWfQjTK7vpGs8sWJ9OFAvtLpu/ZAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJhOThjOGItY2FkOS00OWUxLWIxNzgtMWRhZjNiNjJlZjU5LzAvNTlGNDIzNENB RUVGQTQ2QjNDQjE2MjdEMzg1MDJGQjRCQTZFRkQ5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUY0MjM0Q0FFRUZBNDZCM0NCMTYyN0QzODUwMkZCNEJBNkVG RDkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvNTlGNDIzNENBRUVGQTQ2QjNDQjE2MjdEMzg1MDJG QjRCQTZFRkQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE74TbCtoQmYyOBHKb9oJBZn/osxOjpwF6ne RPpRA4O4fgcfW+npUUIfaTa+Q4niWAu1W/mkVfaxGWAG2STqpHZfbYVq4OB5qd2E Jh/1kXjMP62ep0B11gR/eob09aLiYlZXmAHzCUF0lMHa9lk8MU6SGaMJloBKuqJH KvrIze5e5i38D4iGLoFxPywpJ1zs3nd9oUqf4OEsxqH/Zx5d2xIpsteZ4yFje+pE MZ8JEyh3dt2EYjZELDMfxUJwOzGYMUhWUSAZd7W5cVNXLX340EMh132rzPgoNQwb q54531tUut7knM/Mrhth/ObpkeeC5cDVQNW+LanmFNlIgUdnYlg= -----END CERTIFICATE-----Generated at Tue Sep 22 20:58:13 2026 by rpki-client