$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft File: 59406D6B894D2596F895003DEE4D8D96CC43B39F.mft (raw, json) Hash identifier: K3p3pK6YRafTxB6/5nREGj7xsRxj6nkIBr9XxrUYUU4= Subject key identifier: 43:7B:1A:B1:83:99:F8:11:1F:96:66:F6:47:D1:55:4E:17:01:C6:F4 Authority key identifier: 59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F Certificate issuer: /CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Certificate serial: 17A951397D952A541D7D3BC54C760EC283527EA3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 12:39:37 +0000 Manifest this update: Tue 16 Jun 2026 12:34:37 +0000 Manifest next update: Wed 17 Jun 2026 15:57:37 +0000 Files and hashes: 1: 3130332e32342e35392e302f32342d3234203d3e203436303532.roa (hash: zFIO9wiF748rHmRcjoZ1ZZ07oJftCfa8w4TwQheX8tM=) 2: 59406D6B894D2596F895003DEE4D8D96CC43B39F.crl (hash: AmcCgCr5wp/v+FwRRdvQNub7YN9qjXhjrJb1E7NZc+w=) 3: 323030313a6466303a61383a3a2f34382d3438203d3e203436303532.roa (hash: nM1lR1t5YbRxvlzSB15Qj3P9xptJWT24EGOpflzojVc=) 4: 3230322e392e38352e302f32342d3234203d3e203436303532.roa (hash: lsGPNQll8lHqimmyJl12NLTMwKg8Yil8iz0vwp/l9l4=) 5: 3130332e32342e35382e302f32342d3234203d3e203436303532.roa (hash: UA+YdwLCDED5UMDmCG4dNPuGHlL+yaAK93vKKhIdDPg=) 6: 3130332e32342e35362e302f32342d3234203d3e203436303532.roa (hash: hCsETlpD6R/zfRJVkzNBOTiAfvvIYDjPCkGRa8bOeSk=) 7: 3130332e32342e35372e302f32342d3234203d3e203436303532.roa (hash: 2NT3KSaIgnkQK0dsegRvJOGdovq/XdyRI/OHCIdm244=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 15:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a9:51:39:7d:95:2a:54:1d:7d:3b:c5:4c:76:0e:c2:83:52:7e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Validity Not Before: Jun 16 12:34:37 2026 GMT Not After : Jun 17 15:57:37 2026 GMT Subject: CN=437B1AB18399F8111F9666F647D1554E1701C6F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:84:df:5e:9f:6f:bb:94:b2:a7:91:dc:b0: 4f:a2:9d:cd:a4:cb:36:14:8d:08:b2:97:7f:83:49: ca:9e:70:c8:93:c0:5b:9f:ee:e6:70:23:fc:18:43: ce:ef:36:fd:90:f9:96:61:a1:76:b2:6b:8e:2e:09: ba:cc:1b:63:af:ac:68:1e:fb:9b:23:91:b4:4c:bb: 9a:02:ca:48:13:9a:5a:1e:7b:4a:64:88:90:ab:ff: 2e:fa:6d:96:b9:e9:57:13:16:f1:8b:2c:3b:e4:2d: dd:75:c4:2f:c3:42:4a:9a:11:22:61:16:21:14:aa: 49:37:06:fb:e5:e2:ef:32:f9:35:59:10:56:8a:d8: 71:6f:db:92:4e:6a:2c:20:34:63:1f:14:cd:98:34: 8c:8c:27:fc:33:15:0c:84:23:d1:9e:a9:7f:8d:31: 8b:2e:c2:e8:ff:5e:1a:1c:9b:39:f1:f5:4a:c9:df: bd:08:9c:ed:87:43:65:ac:f0:2f:f0:66:28:44:b6: 55:73:bd:c9:9e:1e:3c:fc:d0:ee:12:01:cf:90:23: 11:e9:a3:ef:60:f9:32:4b:5f:92:b4:de:df:40:c7: ed:fc:be:39:6e:3a:d2:e9:4e:46:c4:6f:86:cf:1d: 15:dd:13:60:0d:5e:e0:58:82:af:d9:da:9a:07:fd: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7B:1A:B1:83:99:F8:11:1F:96:66:F6:47:D1:55:4E:17:01:C6:F4 X509v3 Authority Key Identifier: keyid:59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:22:e8:bf:22:c4:ca:c7:6c:8f:73:36:6b:89:36:03:b1:8f: 82:e6:53:73:42:dc:6d:60:4d:5a:3d:fb:b5:2c:cc:93:73:5b: f3:f6:59:d1:2a:eb:a8:ca:36:e9:36:ef:57:eb:ba:f0:ec:ac: 52:39:7e:5b:85:a5:be:a3:2e:cf:98:49:bb:29:fa:12:9b:a5: f2:35:dc:2c:ca:95:fc:d9:80:26:22:e0:b3:3b:16:cf:c2:68: 19:2a:3c:85:e0:95:50:10:7c:e3:88:73:05:1d:0e:bd:f6:86: e8:8f:93:c0:ce:f4:f5:d6:a9:f0:70:ce:9e:8d:32:ae:2d:22: 4a:04:32:5a:22:08:08:c8:7d:95:78:cb:de:e7:d1:23:0b:99: b9:72:88:5b:b3:ee:92:72:5a:f6:2b:20:a1:46:fa:8e:42:01: f8:1c:91:ab:0a:bd:32:3c:21:20:6f:dd:80:73:db:62:b1:10: f5:d9:84:a2:0c:1e:a3:e3:1c:27:a6:e2:cb:9f:9a:4f:0a:53: 3b:bf:25:76:12:06:df:01:84:7e:c0:7b:1b:13:b4:6a:0f:c4: 01:f2:1b:de:61:3b:b4:18:da:b0:6a:e5:bc:92:71:ea:3d:85: 00:77:6c:00:6f:e0:ab:17:4a:1f:2d:c5:8b:5f:2a:fa:d4:2b: 87:26:c0:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6lROX2VKlQdfTvFTHYOwoNSfqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhEOTZD QzQzQjM5RjAeFw0yNjA2MTYxMjM0MzdaFw0yNjA2MTcxNTU3MzdaMDMxMTAvBgNV BAMTKDQzN0IxQUIxODM5OUY4MTExRjk2NjZGNjQ3RDE1NTRFMTcwMUM2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/ITfXp9vu5Syp5HcsE+inc2k yzYUjQiyl3+DScqecMiTwFuf7uZwI/wYQ87vNv2Q+ZZhoXaya44uCbrMG2OvrGge +5sjkbRMu5oCykgTmloee0pkiJCr/y76bZa56VcTFvGLLDvkLd11xC/DQkqaESJh FiEUqkk3Bvvl4u8y+TVZEFaK2HFv25JOaiwgNGMfFM2YNIyMJ/wzFQyEI9GeqX+N MYsuwuj/Xhocmznx9UrJ370InO2HQ2Ws8C/wZihEtlVzvcmeHjz80O4SAc+QIxHp o+9g+TJLX5K03t9Ax+38vjluOtLpTkbEb4bPHRXdE2ANXuBYgq/Z2poH/d/1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ3sasYOZ+BEflmb2R9FVThcBxvQwHwYDVR0j BBgwFoAUWUBta4lNJZb4lQA97k2NlsxDs58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxZWU1ZTItMzM4Yy00ZDIwLTgwN2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4 OTREMjU5NkY4OTUwMDNERUU0RDhEOTZDQzQzQjM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTQwNkQ2Qjg5NEQyNTk2Rjg5NTAwM0RFRTREOEQ5NkNDNDNC MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxZWU1ZTItMzM4Yy00ZDIwLTgw N2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhE OTZDQzQzQjM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYi6L8ixMrHbI9zNmuJNgOxj4LmU3NC3G1g TVo9+7UszJNzW/P2WdEq66jKNuk271fruvDsrFI5fluFpb6jLs+YSbsp+hKbpfI1 3CzKlfzZgCYi4LM7Fs/CaBkqPIXglVAQfOOIcwUdDr32huiPk8DO9PXWqfBwzp6N Mq4tIkoEMloiCAjIfZV4y97n0SMLmblyiFuz7pJyWvYrIKFG+o5CAfgckasKvTI8 ISBv3YBz22KxEPXZhKIMHqPjHCem4sufmk8KUzu/JXYSBt8BhH7AexsTtGoPxAHy G95hO7QY2rBq5bySceo9hQB3bABv4KsXSh8txYtfKvrUK4cmwKY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:29 2026 by rpki-client