$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft File: 586C54F03B92F22D9291776AE79350296DB382C8.mft (raw, json) Hash identifier: KRBfY0wvMYudTrsZSFDbiBr7ariG2N5CEEbtR67xSoA= Subject key identifier: 14:7F:6C:E8:13:39:94:71:62:6C:57:B6:B9:85:2B:89:80:C0:91:3B Authority key identifier: 58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8 Certificate issuer: /CN=586C54F03B92F22D9291776AE79350296DB382C8 Certificate serial: 26FEA6CC18D610747D46673283EC57993800CC86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft Manifest number: BD Signing time: Mon 21 Sep 2026 15:05:18 +0000 Manifest this update: Mon 21 Sep 2026 15:00:18 +0000 Manifest next update: Tue 22 Sep 2026 17:55:18 +0000 Files and hashes: 1: 586C54F03B92F22D9291776AE79350296DB382C8.crl (hash: zfXU2CtmUmHeRPXGugr9gb0ebb+8WrQR9GQATcCFM5g=) 2: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 0BJPNvIKBQFSgToHUrV6asLY9+z375bbGV3qDBCnsE0=) 3: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 9FI6xrUmyIDtdYUTIVth+tn1sleSPgc7MLrTjmuupW8=) 4: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: 02NTkzqK/LTvvPzyGLCIQvFXPCqfEGOd/i/Q/MdPoH8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:fe:a6:cc:18:d6:10:74:7d:46:67:32:83:ec:57:99:38:00:cc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586C54F03B92F22D9291776AE79350296DB382C8 Validity Not Before: Sep 21 15:00:18 2026 GMT Not After : Sep 22 17:55:18 2026 GMT Subject: CN=147F6CE813399471626C57B6B9852B8980C0913B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:de:81:05:a9:fc:15:71:2f:2d:63:42:24: 7c:ed:53:43:26:73:71:0d:d0:2c:cf:21:60:ca:7f: ff:e0:62:d2:91:80:54:4f:35:d2:ad:2c:f9:2b:58: c7:3b:54:ae:12:6a:38:6b:08:0c:46:dd:78:bd:32: 7b:2c:52:c8:54:a4:d3:f1:21:7f:03:48:39:5d:42: 17:6c:1b:3b:71:63:4c:ec:c1:a4:a7:06:2b:6a:5b: c7:86:68:9e:9b:f3:62:99:4f:e9:54:c5:4a:4a:e0: c1:e5:5d:69:69:8e:96:2d:b5:6c:31:e0:fd:30:3c: f1:ad:7c:5e:66:36:bb:89:b4:78:a2:4c:bf:4c:8c: e3:1c:14:a0:06:f3:6c:de:16:99:70:f1:d9:d5:9b: 19:1e:9b:67:2e:ba:75:e5:cc:16:84:8a:32:9d:32: 5e:50:8f:2a:36:dc:19:ab:5b:85:cb:e1:ea:33:f9: 6b:61:f7:27:d5:65:ae:ee:70:e5:a2:8f:f6:b9:ef: 7f:3d:c5:de:96:4f:59:a4:d1:bb:6c:0e:fc:e6:0b: a0:a6:ea:7c:40:cd:7a:b7:46:8e:00:1e:d5:67:3e: 18:6c:a6:ea:9e:b1:73:05:3a:d4:5a:08:5b:2d:a7: 18:52:6e:39:f0:ad:55:b6:26:5e:27:c9:92:6b:f5: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7F:6C:E8:13:39:94:71:62:6C:57:B6:B9:85:2B:89:80:C0:91:3B X509v3 Authority Key Identifier: keyid:58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:30:fd:4e:7c:b0:c6:f4:25:03:5b:91:65:76:1f:de:aa:6c: ff:b6:fa:fe:72:15:a5:28:8b:7c:29:d4:a6:d7:e7:08:57:7f: 0c:5d:97:c3:e8:2f:52:15:fd:dd:74:5c:32:36:9a:41:fa:2c: 7b:57:f0:86:4f:b2:28:70:9a:b7:cb:02:7f:8d:4a:dc:4e:e6: 6e:b7:18:32:73:1c:e0:c7:a7:72:38:ab:f9:39:10:a4:70:11: e8:95:7d:b7:6a:0d:de:f1:e1:49:d9:72:dd:2a:76:2e:ec:b4: a3:86:82:31:56:6c:ff:04:3a:4f:16:0c:2b:29:31:1d:f2:b9: 37:50:a5:4e:01:0b:55:49:f7:1f:2a:e7:86:b4:9b:70:f1:60: 5f:36:95:5f:ec:16:84:b8:63:b1:fe:27:bc:94:5e:6c:91:b6: 00:6e:eb:3a:0c:47:4b:a3:54:83:18:3b:11:74:6c:62:25:40: 0c:49:e7:69:65:ec:a2:e8:73:93:41:f6:87:d7:6e:0e:a0:6e: 6c:19:b0:ce:df:af:b3:cd:65:ea:dc:ad:bf:6e:e0:6b:0c:06: 3f:c6:8d:1a:fa:55:5e:f5:0e:1b:a4:59:4e:b0:56:d4:f1:b3: bd:02:3e:cf:10:8a:b9:c0:f4:21:d8:fc:46:ed:f6:6d:e1:27: fe:d0:34:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJv6mzBjWEHR9Rmcyg+xXmTgAzIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2QzU0RjAzQjkyRjIyRDkyOTE3NzZBRTc5MzUwMjk2 REIzODJDODAeFw0yNjA5MjExNTAwMThaFw0yNjA5MjIxNzU1MThaMDMxMTAvBgNV BAMTKDE0N0Y2Q0U4MTMzOTk0NzE2MjZDNTdCNkI5ODUyQjg5ODBDMDkxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/N6BBan8FXEvLWNCJHztU0Mm c3EN0CzPIWDKf//gYtKRgFRPNdKtLPkrWMc7VK4SajhrCAxG3Xi9MnssUshUpNPx IX8DSDldQhdsGztxY0zswaSnBitqW8eGaJ6b82KZT+lUxUpK4MHlXWlpjpYttWwx 4P0wPPGtfF5mNruJtHiiTL9MjOMcFKAG82zeFplw8dnVmxkem2cuunXlzBaEijKd Ml5Qjyo23BmrW4XL4eoz+Wth9yfVZa7ucOWij/a57389xd6WT1mk0btsDvzmC6Cm 6nxAzXq3Ro4AHtVnPhhspuqesXMFOtRaCFstpxhSbjnwrVW2Jl4nyZJr9XBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFH9s6BM5lHFibFe2uYUriYDAkTswHwYDVR0j BBgwFoAUWGxU8DuS8i2SkXdq55NQKW2zgsgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzYyMGI0MjMtZGQ1ZC00NDhmLWJiZDMtMDQ1MzBlYzE3MTVkLzAvNTg2QzU0RjAz QjkyRjIyRDkyOTE3NzZBRTc5MzUwMjk2REIzODJDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODZDNTRGMDNCOTJGMjJEOTI5MTc3NkFFNzkzNTAyOTZEQjM4 MkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvNTg2QzU0RjAzQjkyRjIyRDkyOTE3NzZBRTc5MzUw Mjk2REIzODJDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQw/U58sMb0JQNbkWV2H96qbP+2+v5yFaUo i3wp1KbX5whXfwxdl8PoL1IV/d10XDI2mkH6LHtX8IZPsihwmrfLAn+NStxO5m63 GDJzHODHp3I4q/k5EKRwEeiVfbdqDd7x4UnZct0qdi7stKOGgjFWbP8EOk8WDCsp MR3yuTdQpU4BC1VJ9x8q54a0m3DxYF82lV/sFoS4Y7H+J7yUXmyRtgBu6zoMR0uj VIMYOxF0bGIlQAxJ52ll7KLoc5NB9ofXbg6gbmwZsM7fr7PNZercrb9u4GsMBj/G jRr6VV71DhukWU6wVtTxs70CPs8QirnA9CHY/Ebt9m3hJ/7QNLY= -----END CERTIFICATE-----Generated at Tue Sep 22 06:00:20 2026 by rpki-client