$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft File: 59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft (raw, json) Hash identifier: QRJvJkIePq770aLJCbI+1Mc1nt5P4llZmkuC1JGTGSo= Subject key identifier: 59:E6:05:0E:61:12:9F:07:5C:12:D4:22:D2:16:B8:D0:17:D1:7A:30 Authority key identifier: 59:F4:23:4C:AE:EF:A4:6B:3C:B1:62:7D:38:50:2F:B4:BA:6E:FD:90 Certificate issuer: /CN=59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90 Certificate serial: 1F4DD41B5D94C9853D09FCC1E4D71EC10E6068EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 04:45:01 +0000 Manifest this update: Sun 15 Nov 2026 04:40:01 +0000 Manifest next update: Mon 16 Nov 2026 07:40:01 +0000 Files and hashes: 1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: xUpvUE2ZHUc2DU7j7aFTg7BviyLprNaKf2mKbV8517U=) 2: 59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl (hash: AtkBBDTPVkGu96bK4myN3E2huVKoX7610OCtFC/8M0I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4d:d4:1b:5d:94:c9:85:3d:09:fc:c1:e4:d7:1e:c1:0e:60:68:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90 Validity Not Before: Nov 15 04:40:01 2026 GMT Not After : Nov 16 07:40:01 2026 GMT Subject: CN=59E6050E61129F075C12D422D216B8D017D17A30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:11:d6:10:82:33:40:b0:6e:b7:58:59:98: b0:6d:69:0c:bd:e3:f6:6e:59:1a:43:f4:22:09:f8: e8:75:a4:92:f9:4c:25:f8:0f:15:d7:6d:38:f6:3f: a8:5b:85:32:83:32:6d:e9:88:5e:8f:a8:47:c0:5a: ef:a0:a1:0d:07:7d:ce:ea:04:8b:6d:f1:b9:8b:b2: bd:31:49:ce:49:5b:fa:9d:15:ac:95:c9:6f:56:37: 4c:fd:46:84:9a:d4:1a:a5:13:6e:f3:62:dd:c3:75: be:bf:39:d0:a6:b6:7e:0b:c3:87:12:5c:12:08:6f: fc:d7:02:c0:23:6b:c1:22:f2:ec:35:d1:06:72:b1: 72:44:75:30:79:df:03:8b:78:cb:d7:45:e8:6f:36: 8a:bf:34:a4:30:f2:d2:89:ed:ff:31:fc:8c:92:66: 29:24:b9:3b:c1:05:fd:e2:7b:bf:86:c6:9e:2b:5b: 28:64:1e:a5:c0:4a:9e:11:95:8b:0e:69:de:d4:19: 3a:ed:b9:1a:0f:43:f3:fb:37:35:e2:fb:03:94:58: 26:b1:6f:b2:06:04:8a:21:94:65:d3:1a:de:bc:08: 50:13:3e:75:89:ed:2f:b4:05:b0:a2:a2:f9:36:13: bc:c4:0b:f1:9c:03:6c:14:f0:ce:ae:02:83:84:cd: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E6:05:0E:61:12:9F:07:5C:12:D4:22:D2:16:B8:D0:17:D1:7A:30 X509v3 Authority Key Identifier: keyid:59:F4:23:4C:AE:EF:A4:6B:3C:B1:62:7D:38:50:2F:B4:BA:6E:FD:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:0e:20:fa:f5:37:74:20:b7:0a:98:fd:b6:72:63:ec:74:4e: 90:dd:c8:1b:a2:aa:22:c2:af:e5:0c:c5:b0:a6:ff:68:07:57: 47:80:03:b7:93:ad:68:b8:34:d9:b1:19:24:4f:7f:22:01:04: 2f:c5:bd:5c:c6:43:1e:a2:4d:cd:ce:71:6a:93:1c:11:23:18: 9f:64:34:58:4f:08:76:3a:79:5f:33:aa:e6:29:a7:6f:82:19: 13:6b:43:56:86:74:4f:4d:1e:63:4b:a3:32:ba:36:24:49:b1: 17:30:c7:2b:74:92:4a:e1:c8:3c:26:82:37:98:f7:92:09:3c: 6b:47:cc:b5:56:4e:b4:38:82:72:f0:fe:4a:71:a8:ef:ef:10: 38:e0:a7:06:00:20:3e:6c:0f:71:7a:25:ba:58:66:dd:5d:62: 1f:b5:e9:65:a1:d0:35:c5:7e:7e:73:4f:ee:36:4e:a3:5e:67: fc:27:05:2e:08:7c:3a:58:f8:1d:c0:1d:b5:d7:f2:62:e4:87: f9:16:0b:aa:6e:82:4c:96:61:c7:a2:dc:93:63:12:0c:30:51: aa:35:50:de:32:2e:c6:9e:ea:8c:7d:6c:02:6b:b4:f7:34:a4: 7c:5f:46:b2:2c:ef:5a:59:cb:77:c4:f0:a0:22:b4:78:39:3c: 3f:3a:d1:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH03UG12UyYU9CfzB5NcewQ5gaOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlGNDIzNENBRUVGQTQ2QjNDQjE2MjdEMzg1MDJGQjRC QTZFRkQ5MDAeFw0yNjExMTUwNDQwMDFaFw0yNjExMTYwNzQwMDFaMDMxMTAvBgNV BAMTKDU5RTYwNTBFNjExMjlGMDc1QzEyRDQyMkQyMTZCOEQwMTdEMTdBMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXBHWEIIzQLBut1hZmLBtaQy9 4/ZuWRpD9CIJ+Oh1pJL5TCX4DxXXbTj2P6hbhTKDMm3piF6PqEfAWu+goQ0Hfc7q BItt8bmLsr0xSc5JW/qdFayVyW9WN0z9RoSa1BqlE27zYt3Ddb6/OdCmtn4Lw4cS XBIIb/zXAsAja8Ei8uw10QZysXJEdTB53wOLeMvXRehvNoq/NKQw8tKJ7f8x/IyS ZikkuTvBBf3ie7+Gxp4rWyhkHqXASp4RlYsOad7UGTrtuRoPQ/P7NzXi+wOUWCax b7IGBIohlGXTGt68CFATPnWJ7S+0BbCiovk2E7zEC/GcA2wU8M6uAoOEzaK1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWeYFDmESnwdcEtQi0ha40BfRejAwHwYDVR0j BBgwFoAUWfQjTK7vpGs8sWJ9OFAvtLpu/ZAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJhOThjOGItY2FkOS00OWUxLWIxNzgtMWRhZjNiNjJlZjU5LzAvNTlGNDIzNENB RUVGQTQ2QjNDQjE2MjdEMzg1MDJGQjRCQTZFRkQ5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUY0MjM0Q0FFRUZBNDZCM0NCMTYyN0QzODUwMkZCNEJBNkVG RDkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvNTlGNDIzNENBRUVGQTQ2QjNDQjE2MjdEMzg1MDJG QjRCQTZFRkQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUOIPr1N3QgtwqY/bZyY+x0TpDdyBuiqiLC r+UMxbCm/2gHV0eAA7eTrWi4NNmxGSRPfyIBBC/FvVzGQx6iTc3OcWqTHBEjGJ9k NFhPCHY6eV8zquYpp2+CGRNrQ1aGdE9NHmNLozK6NiRJsRcwxyt0kkrhyDwmgjeY 95IJPGtHzLVWTrQ4gnLw/kpxqO/vEDjgpwYAID5sD3F6JbpYZt1dYh+16WWh0DXF fn5zT+42TqNeZ/wnBS4IfDpY+B3AHbXX8mLkh/kWC6pugkyWYcei3JNjEgwwUao1 UN4yLsae6ox9bAJrtPc0pHxfRrIs71pZy3fE8KAitHg5PD860XM= -----END CERTIFICATE-----Generated at Sun Nov 15 18:46:08 2026 by rpki-client