$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft File: 59406D6B894D2596F895003DEE4D8D96CC43B39F.mft (raw, json) Hash identifier: WUuZkWcj16Jcmpxrvbon8N+XbEH0nxBfx6l6OBqWJqY= Subject key identifier: 83:C5:9E:D9:83:4F:DA:C0:9A:A4:DF:AA:5A:9A:0F:CF:19:D5:2C:B9 Authority key identifier: 59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F Certificate issuer: /CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Certificate serial: 4A71D2211BC30FB0F90643F9AC361A9BD936149E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:07:54 +0000 Manifest this update: Mon 21 Sep 2026 01:02:54 +0000 Manifest next update: Tue 22 Sep 2026 01:40:54 +0000 Files and hashes: 1: 59406D6B894D2596F895003DEE4D8D96CC43B39F.crl (hash: tap9Q6zhH+QLmWNWdgP92qMMLCDehEYAbplFVJ0nWPA=) 2: 3130332e32342e35362e302f32342d3234203d3e203436303532.roa (hash: hCsETlpD6R/zfRJVkzNBOTiAfvvIYDjPCkGRa8bOeSk=) 3: 3230322e392e38352e302f32342d3234203d3e203436303532.roa (hash: lsGPNQll8lHqimmyJl12NLTMwKg8Yil8iz0vwp/l9l4=) 4: 323030313a6466303a61383a3a2f34382d3438203d3e203436303532.roa (hash: nM1lR1t5YbRxvlzSB15Qj3P9xptJWT24EGOpflzojVc=) 5: 3130332e32342e35392e302f32342d3234203d3e203436303532.roa (hash: zFIO9wiF748rHmRcjoZ1ZZ07oJftCfa8w4TwQheX8tM=) 6: 3130332e32342e35372e302f32342d3234203d3e203436303532.roa (hash: 2NT3KSaIgnkQK0dsegRvJOGdovq/XdyRI/OHCIdm244=) 7: 3130332e32342e35382e302f32342d3234203d3e203436303532.roa (hash: UA+YdwLCDED5UMDmCG4dNPuGHlL+yaAK93vKKhIdDPg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:71:d2:21:1b:c3:0f:b0:f9:06:43:f9:ac:36:1a:9b:d9:36:14:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Validity Not Before: Sep 21 01:02:54 2026 GMT Not After : Sep 22 01:40:54 2026 GMT Subject: CN=83C59ED9834FDAC09AA4DFAA5A9A0FCF19D52CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:24:1b:48:6e:07:67:6f:4f:99:e2:e6:f3:09: 03:81:57:f8:b6:b6:b6:b3:41:aa:72:15:a2:d7:4f: d6:f2:e3:10:30:81:e3:4b:63:a2:fd:c8:2a:a2:90: 7b:91:9c:3d:c6:f8:96:da:50:7c:80:0e:6f:cf:c8: ea:c5:8d:3d:e9:89:09:de:fd:6a:49:f0:a0:7b:ca: 4b:74:ea:3e:dd:44:37:ac:91:91:99:0e:b6:fc:59: 32:8b:73:e2:d6:81:49:69:6b:60:9c:68:02:25:f4: 82:b7:06:1f:d8:60:78:53:c4:12:f7:e5:53:da:e4: 0a:4b:b1:bc:d4:2d:54:8c:63:54:d0:ab:3c:6a:b6: 5c:4c:8b:37:84:2f:65:a2:b5:40:93:89:45:af:c7: 8b:c6:9f:08:46:8d:73:ee:09:81:8a:99:af:2d:92: 93:59:30:37:65:58:4a:fc:6a:9d:e2:ae:a1:30:24: 4d:50:ef:39:d7:a8:9f:b1:68:fc:3d:39:a9:fc:db: 95:1c:86:41:bf:35:90:b8:9d:7a:b3:3c:88:3a:70: b7:fa:81:8d:3d:14:c4:6f:e6:5e:37:bc:46:ba:bf: be:fc:34:b0:79:fe:9d:50:51:85:55:ee:a7:28:61: 5e:05:14:cb:6c:12:5b:bb:55:7d:89:c5:47:07:0d: e1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C5:9E:D9:83:4F:DA:C0:9A:A4:DF:AA:5A:9A:0F:CF:19:D5:2C:B9 X509v3 Authority Key Identifier: keyid:59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3f:f4:ac:7b:b2:d7:4d:24:24:3b:99:f7:7f:48:35:5a:d4: 86:f3:7c:6b:d3:10:42:12:85:0a:a9:4d:16:7a:74:a2:7b:fc: ea:d0:84:e9:d5:ff:c6:a0:8f:ee:78:4c:c0:cc:51:9e:a7:8c: de:57:2a:9a:18:ed:82:44:7c:b8:82:d7:f5:e0:5c:cb:34:81: b4:67:45:40:2c:ba:12:97:94:cb:2c:47:9e:32:ed:28:67:73: 7b:46:f2:66:2e:09:b6:b0:34:76:cb:09:da:37:ae:20:2a:cd: b6:bb:06:b4:29:b0:e8:c9:14:13:58:a5:46:0c:b6:42:36:af: 7f:d6:fe:bd:fb:d4:35:05:8f:63:67:a1:ea:67:bc:28:42:50: 0d:ec:9c:b1:85:a8:32:de:dd:9b:ed:ce:fb:46:4b:f7:b9:e6: 67:9f:ba:1b:e1:c0:37:c5:bb:8f:c1:08:97:68:e4:2c:d7:47: d6:a6:16:f9:9c:f6:d1:0e:9f:aa:75:c1:b5:2b:13:ce:c0:9a: 47:ae:3c:b3:44:a9:1d:75:c4:c1:1d:ee:1b:76:45:1a:ee:70: 0e:46:43:10:86:97:a1:bc:87:14:47:d6:27:f8:ed:34:5a:79: 33:0c:7d:30:1d:02:53:98:4a:36:69:ba:08:8d:66:8c:38:b5: 80:1f:29:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnHSIRvDD7D5BkP5rDYam9k2FJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhEOTZD QzQzQjM5RjAeFw0yNjA5MjEwMTAyNTRaFw0yNjA5MjIwMTQwNTRaMDMxMTAvBgNV BAMTKDgzQzU5RUQ5ODM0RkRBQzA5QUE0REZBQTVBOUEwRkNGMTlENTJDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVJBtIbgdnb0+Z4ubzCQOBV/i2 trazQapyFaLXT9by4xAwgeNLY6L9yCqikHuRnD3G+JbaUHyADm/PyOrFjT3piQne /WpJ8KB7ykt06j7dRDeskZGZDrb8WTKLc+LWgUlpa2CcaAIl9IK3Bh/YYHhTxBL3 5VPa5ApLsbzULVSMY1TQqzxqtlxMizeEL2WitUCTiUWvx4vGnwhGjXPuCYGKma8t kpNZMDdlWEr8ap3irqEwJE1Q7znXqJ+xaPw9Oan825UchkG/NZC4nXqzPIg6cLf6 gY09FMRv5l43vEa6v778NLB5/p1QUYVV7qcoYV4FFMtsElu7VX2JxUcHDeGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg8We2YNP2sCapN+qWpoPzxnVLLkwHwYDVR0j BBgwFoAUWUBta4lNJZb4lQA97k2NlsxDs58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxZWU1ZTItMzM4Yy00ZDIwLTgwN2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4 OTREMjU5NkY4OTUwMDNERUU0RDhEOTZDQzQzQjM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTQwNkQ2Qjg5NEQyNTk2Rjg5NTAwM0RFRTREOEQ5NkNDNDNC MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxZWU1ZTItMzM4Yy00ZDIwLTgw N2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhE OTZDQzQzQjM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0/9Kx7stdNJCQ7mfd/SDVa1IbzfGvTEEIS hQqpTRZ6dKJ7/OrQhOnV/8agj+54TMDMUZ6njN5XKpoY7YJEfLiC1/XgXMs0gbRn RUAsuhKXlMssR54y7Shnc3tG8mYuCbawNHbLCdo3riAqzba7BrQpsOjJFBNYpUYM tkI2r3/W/r371DUFj2NnoepnvChCUA3snLGFqDLe3ZvtzvtGS/e55mefuhvhwDfF u4/BCJdo5CzXR9amFvmc9tEOn6p1wbUrE87AmkeuPLNEqR11xMEd7ht2RRrucA5G QxCGl6G8hxRH1if47TRaeTMMfTAdAlOYSjZpugiNZow4tYAfKWM= -----END CERTIFICATE-----Generated at Mon Sep 21 10:42:12 2026 by rpki-client