$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft File: 59C6DD576568EAA049F24E2205FDFFA34E712D32.mft (raw, json) Hash identifier: YFcHwowotfnbKFY6NF1s4pK443C6rXrI7rrKlQaduLA= Subject key identifier: 4D:29:93:37:6B:B7:3E:61:0A:29:39:7A:E8:95:09:46:7B:58:4A:A6 Authority key identifier: 59:C6:DD:57:65:68:EA:A0:49:F2:4E:22:05:FD:FF:A3:4E:71:2D:32 Certificate issuer: /CN=59C6DD576568EAA049F24E2205FDFFA34E712D32 Certificate serial: 4434ADB59DEDF50CF746311F059D2AB136F6487F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft Manifest number: BE Signing time: Mon 21 Sep 2026 21:02:35 +0000 Manifest this update: Mon 21 Sep 2026 20:57:35 +0000 Manifest next update: Tue 22 Sep 2026 23:58:35 +0000 Files and hashes: 1: 59C6DD576568EAA049F24E2205FDFFA34E712D32.crl (hash: J6mKcQwmTM8+0eYTWCMSVIgPKp/PfnjyC0uwewzebps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.crl rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:34:ad:b5:9d:ed:f5:0c:f7:46:31:1f:05:9d:2a:b1:36:f6:48:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59C6DD576568EAA049F24E2205FDFFA34E712D32 Validity Not Before: Sep 21 20:57:35 2026 GMT Not After : Sep 22 23:58:35 2026 GMT Subject: CN=4D2993376BB73E610A29397AE89509467B584AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:dc:db:58:75:b4:79:a1:9c:c9:65:b0:a1: dc:29:6d:2c:10:ee:f8:06:18:e7:92:f9:bd:bf:7c: c8:5d:ad:14:e2:1a:9e:25:ec:8e:2f:a9:19:d6:37: 19:1d:80:25:5a:13:08:c8:d5:e5:f7:46:83:e5:46: cb:ee:54:4d:0c:4c:b9:34:7a:99:ac:b0:94:ba:4e: 0d:8c:84:f6:0e:47:34:9c:c5:f0:bd:fb:4a:d8:fc: 4e:56:1c:1a:98:a1:f6:06:49:e7:e8:b8:1b:74:17: 37:0d:0a:fb:7d:00:7d:41:ad:1a:9c:69:0a:9c:f7: 4f:fd:75:cf:19:37:dc:07:6d:b1:75:5d:01:0b:47: 5a:21:f5:12:8c:28:a2:89:40:a3:97:c4:a6:d7:60: 6a:0c:de:45:ca:5f:fc:f9:b7:70:cb:06:de:71:27: 2e:28:38:f2:f3:66:3e:c9:77:0e:cf:e8:ad:b8:e3: c7:1c:3d:7a:bc:27:e4:d2:80:75:80:8c:73:23:1a: c4:4e:16:07:4c:3a:4f:ec:6b:88:3c:95:d1:94:b4: bf:e3:83:25:0e:2d:6e:09:13:4b:ed:80:40:51:b2: 6d:39:23:e3:71:2b:94:2a:af:cd:24:cf:79:3c:97: 4b:4b:bd:28:4e:b0:6f:0f:ce:0d:48:b9:67:77:01: c4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:29:93:37:6B:B7:3E:61:0A:29:39:7A:E8:95:09:46:7B:58:4A:A6 X509v3 Authority Key Identifier: keyid:59:C6:DD:57:65:68:EA:A0:49:F2:4E:22:05:FD:FF:A3:4E:71:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:62:b0:aa:08:4f:66:63:05:a5:31:f1:e0:ff:62:ff:dd:34: 2c:c4:06:ba:fe:fe:4a:ce:71:83:d8:5a:bc:0e:3f:ff:ba:ad: b1:4e:0a:20:d8:ba:7f:f4:98:68:ad:95:99:0c:ca:68:8e:96: db:2c:5e:6c:8a:a0:d1:72:22:b2:f0:c7:bf:5f:60:b9:df:54: fb:fc:70:34:44:d1:06:9c:03:a2:49:2d:10:e8:2c:4f:3f:d0: 7d:0f:d0:60:52:8f:38:56:9d:6c:e0:cb:6a:b3:f0:21:a2:e7: 79:c3:0c:f7:a4:82:2c:a6:28:fb:e8:59:bf:26:a7:ee:32:ca: b7:19:3c:b2:e3:32:bc:7d:22:96:c0:d9:ca:1e:9a:40:d0:1a: f7:57:74:bf:86:4a:71:fa:c3:39:68:cd:27:b1:e8:9b:48:ed: b9:0f:b8:a4:ec:97:32:3e:d3:4a:ee:48:46:69:37:e0:f8:7d: 9a:37:32:39:ea:67:d5:bc:a4:c1:fe:db:f8:a8:4b:5e:e7:07: 1e:64:1b:c7:5e:28:e5:b2:72:02:6c:50:ee:69:62:60:d4:50: 95:85:6d:29:53:30:28:9d:1e:9e:b3:b4:57:25:5e:4c:33:6e: cd:b5:1e:88:e4:a2:55:07:17:18:b8:fd:bd:ed:ee:21:42:68: 62:d7:7e:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDSttZ3t9Qz3RjEfBZ0qsTb2SH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlDNkRENTc2NTY4RUFBMDQ5RjI0RTIyMDVGREZGQTM0 RTcxMkQzMjAeFw0yNjA5MjEyMDU3MzVaFw0yNjA5MjIyMzU4MzVaMDMxMTAvBgNV BAMTKDREMjk5MzM3NkJCNzNFNjEwQTI5Mzk3QUU4OTUwOTQ2N0I1ODRBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqWNzbWHW0eaGcyWWwodwpbSwQ 7vgGGOeS+b2/fMhdrRTiGp4l7I4vqRnWNxkdgCVaEwjI1eX3RoPlRsvuVE0MTLk0 epmssJS6Tg2MhPYORzScxfC9+0rY/E5WHBqYofYGSefouBt0FzcNCvt9AH1BrRqc aQqc90/9dc8ZN9wHbbF1XQELR1oh9RKMKKKJQKOXxKbXYGoM3kXKX/z5t3DLBt5x Jy4oOPLzZj7Jdw7P6K2448ccPXq8J+TSgHWAjHMjGsROFgdMOk/sa4g8ldGUtL/j gyUOLW4JE0vtgEBRsm05I+NxK5Qqr80kz3k8l0tLvShOsG8Pzg1IuWd3AcS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTSmTN2u3PmEKKTl66JUJRntYSqYwHwYDVR0j BBgwFoAUWcbdV2Vo6qBJ8k4iBf3/o05xLTIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExM2U3YzQtNzczZi00NzRjLWIwNmQtNjI2MGEzMDZhMGNhLzAvNTlDNkRENTc2 NTY4RUFBMDQ5RjI0RTIyMDVGREZGQTM0RTcxMkQzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUM2REQ1NzY1NjhFQUEwNDlGMjRFMjIwNUZERkZBMzRFNzEy RDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvNTlDNkRENTc2NTY4RUFBMDQ5RjI0RTIyMDVGREZG QTM0RTcxMkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9isKoIT2ZjBaUx8eD/Yv/dNCzEBrr+/krO cYPYWrwOP/+6rbFOCiDYun/0mGitlZkMymiOltssXmyKoNFyIrLwx79fYLnfVPv8 cDRE0QacA6JJLRDoLE8/0H0P0GBSjzhWnWzgy2qz8CGi53nDDPekgiymKPvoWb8m p+4yyrcZPLLjMrx9IpbA2coemkDQGvdXdL+GSnH6wzlozSex6JtI7bkPuKTslzI+ 00ruSEZpN+D4fZo3MjnqZ9W8pMH+2/ioS17nBx5kG8deKOWycgJsUO5pYmDUUJWF bSlTMCidHp6ztFclXkwzbs21HojkolUHFxi4/b3t7iFCaGLXflc= -----END CERTIFICATE-----Generated at Tue Sep 22 12:32:33 2026 by rpki-client