$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft File: 591286FA978EE719A57E5A972B00E176D16D8BD5.mft (raw, json) Hash identifier: 34I5G6bvHKLUoMLt1Fh/sesjT4eLgeO7DaxOR9C6fLw= Subject key identifier: E5:91:A0:01:FF:3E:72:DB:9D:E3:76:70:4E:FD:8F:C7:D3:FC:8F:BC Authority key identifier: 59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5 Certificate issuer: /CN=591286FA978EE719A57E5A972B00E176D16D8BD5 Certificate serial: 0FE01FF07B50CCDA4F369B316C88D630C30605DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft Manifest number: BF Signing time: Tue 22 Sep 2026 03:41:04 +0000 Manifest this update: Tue 22 Sep 2026 03:36:04 +0000 Manifest next update: Wed 23 Sep 2026 04:15:04 +0000 Files and hashes: 1: 591286FA978EE719A57E5A972B00E176D16D8BD5.crl (hash: O6HVJ4W9GA5fdMU+0yI0gyzWyAjIF37+MEaEcMsE2+M=) 2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: SnKbiJCVGtegt8XCckG5YzkpcAALoWkVUsik+AGbmDg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e0:1f:f0:7b:50:cc:da:4f:36:9b:31:6c:88:d6:30:c3:06:05:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591286FA978EE719A57E5A972B00E176D16D8BD5 Validity Not Before: Sep 22 03:36:04 2026 GMT Not After : Sep 23 04:15:04 2026 GMT Subject: CN=E591A001FF3E72DB9DE376704EFD8FC7D3FC8FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:8a:6e:b7:82:90:b6:53:54:5d:b3:c9:a8: 1a:b9:93:6a:50:92:45:04:2e:75:f1:2c:6f:ea:16: b4:0f:62:d3:08:2a:0d:c1:0b:fb:e7:c8:09:49:4a: 03:cd:80:e1:26:5b:e9:35:b1:b2:b5:2c:c0:b2:b9: b0:17:ba:82:ec:5c:76:6b:e2:a2:f4:35:07:c5:a0: f6:e9:c0:05:dd:01:c4:79:4e:d7:d5:13:ff:74:1d: 99:76:5a:63:95:e9:af:80:04:3a:f5:91:e9:84:0b: 32:09:9f:c1:1d:e6:ee:12:de:53:ae:12:d4:98:63: 40:76:3a:95:2c:4e:49:0b:a1:9f:64:ac:97:fe:74: 60:97:c9:9e:23:19:db:67:5d:6b:74:f7:de:68:12: b7:ae:86:8b:cf:6e:8e:09:98:db:41:55:e5:31:bb: 7b:ec:a6:10:03:47:42:14:aa:27:60:5e:a7:8c:e6: c9:c7:41:98:0d:1e:3d:a1:c8:ca:b9:dc:ba:a4:e0: 9c:96:c5:82:88:a4:30:f2:86:f8:4d:0d:0b:c6:e2: 6a:aa:03:c0:16:e7:a1:c7:d4:98:98:64:2b:b3:e8: c5:88:11:62:52:d1:e8:fc:6d:fb:d5:46:4d:52:ca: c9:bc:ff:d3:bd:77:89:3a:95:6a:2c:20:75:51:78: 75:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:91:A0:01:FF:3E:72:DB:9D:E3:76:70:4E:FD:8F:C7:D3:FC:8F:BC X509v3 Authority Key Identifier: keyid:59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6f:c8:ed:61:04:bb:bd:11:fb:7b:30:73:fe:b7:47:66:67: 13:50:c3:3b:9d:6a:74:66:1f:57:59:78:14:7d:3f:5e:25:d5: 19:5f:49:01:4a:ed:7e:a8:02:f6:6b:0d:17:a1:4a:4f:c3:2b: 75:02:0f:f5:38:5e:70:38:a6:16:de:5b:aa:c0:62:ca:32:a1: 9e:d6:80:d6:5e:fb:c6:12:5f:bc:90:14:26:cd:b2:e5:f2:9f: 75:c6:4e:e7:46:f1:b7:3f:86:d8:ad:4c:29:ae:42:ec:e4:00: 43:9d:4e:b8:6c:58:00:35:23:61:de:ee:33:33:00:67:16:2f: fd:f6:b5:62:1d:74:87:8e:b1:22:b8:c3:6c:57:83:20:66:82: 34:7e:53:e1:85:e4:b2:50:5a:44:99:7d:99:00:ed:c0:fe:38: 8d:44:bc:93:5b:4f:3f:07:08:34:ec:7b:ba:20:c0:02:1d:b8: d4:09:dc:c6:ec:45:ee:5c:bb:0e:51:bf:ea:de:7d:57:37:f8: ea:ef:76:6b:62:d2:25:e7:e1:76:d9:5b:bc:36:12:0b:99:a3: df:74:71:f3:25:cb:17:f4:44:e5:c5:c1:f6:ac:ec:86:65:e9: d3:4d:96:28:ce:2d:58:38:4b:ce:c5:2b:a8:09:24:87:fe:08: 61:4e:f4:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+Af8HtQzNpPNpsxbIjWMMMGBdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTkxMjg2RkE5NzhFRTcxOUE1N0U1QTk3MkIwMEUxNzZE MTZEOEJENTAeFw0yNjA5MjIwMzM2MDRaFw0yNjA5MjMwNDE1MDRaMDMxMTAvBgNV BAMTKEU1OTFBMDAxRkYzRTcyREI5REUzNzY3MDRFRkQ4RkM3RDNGQzhGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsToput4KQtlNUXbPJqBq5k2pQ kkUELnXxLG/qFrQPYtMIKg3BC/vnyAlJSgPNgOEmW+k1sbK1LMCyubAXuoLsXHZr 4qL0NQfFoPbpwAXdAcR5TtfVE/90HZl2WmOV6a+ABDr1kemECzIJn8Ed5u4S3lOu EtSYY0B2OpUsTkkLoZ9krJf+dGCXyZ4jGdtnXWt0995oEreuhovPbo4JmNtBVeUx u3vsphADR0IUqidgXqeM5snHQZgNHj2hyMq53Lqk4JyWxYKIpDDyhvhNDQvG4mqq A8AW56HH1JiYZCuz6MWIEWJS0ej8bfvVRk1Sysm8/9O9d4k6lWosIHVReHUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ZGgAf8+ctud43ZwTv2Px9P8j7wwHwYDVR0j BBgwFoAUWRKG+peO5xmlflqXKwDhdtFti9UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFkYzc2NWEtZmY4ZC00YjFmLWE1OWEtMjVmZjdiZDRmNThhLzAvNTkxMjg2RkE5 NzhFRTcxOUE1N0U1QTk3MkIwMEUxNzZEMTZEOEJENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTEyODZGQTk3OEVFNzE5QTU3RTVBOTcyQjAwRTE3NkQxNkQ4 QkQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvNTkxMjg2RkE5NzhFRTcxOUE1N0U1QTk3MkIwMEUx NzZEMTZEOEJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxvyO1hBLu9Eft7MHP+t0dmZxNQwzudanRm H1dZeBR9P14l1RlfSQFK7X6oAvZrDRehSk/DK3UCD/U4XnA4phbeW6rAYsoyoZ7W gNZe+8YSX7yQFCbNsuXyn3XGTudG8bc/htitTCmuQuzkAEOdTrhsWAA1I2He7jMz AGcWL/32tWIddIeOsSK4w2xXgyBmgjR+U+GF5LJQWkSZfZkA7cD+OI1EvJNbTz8H CDTse7ogwAIduNQJ3MbsRe5cuw5Rv+refVc3+Orvdmti0iXn4XbZW7w2EguZo990 cfMlyxf0ROXFwfas7IZl6dNNlijOLVg4S87FK6gJJIf+CGFO9Jo= -----END CERTIFICATE-----Generated at Tue Sep 22 20:21:55 2026 by rpki-client