$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft File: 59A9AB370F753D82771987E2FD7CA19578E11D07.mft (raw, json) Hash identifier: QvzRIF/BHUVkchGG8abmEXNX8gJNmDx+hN19dNToqpU= Subject key identifier: 0D:5F:BF:40:2B:C0:98:61:31:22:7C:94:4C:0A:2B:45:47:20:EC:99 Authority key identifier: 59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07 Certificate issuer: /CN=59A9AB370F753D82771987E2FD7CA19578E11D07 Certificate serial: 0512EA0C0DDC08372BEB66D9E135E420B11A2842 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft Manifest number: BD Signing time: Sun 20 Sep 2026 22:19:27 +0000 Manifest this update: Sun 20 Sep 2026 22:14:27 +0000 Manifest next update: Tue 22 Sep 2026 02:08:27 +0000 Files and hashes: 1: 59A9AB370F753D82771987E2FD7CA19578E11D07.crl (hash: XkoUpznSOU7WWlMU9sTy2GmQzaS3e7t9Z/rTvAMv9/k=) 2: 3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa (hash: 97CqSuEAmLm9b7GhTnzhH7E+h2iIk2MyDfPBWHarXus=) 3: 3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (hash: fcfvoG+f+IeB/aOvvSuH4jigNm/P9oaHKcA8ozVTJ2c=) 4: 3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (hash: UPB/qBUFP9GqScWdxOKoCFaWZdy0EEvs2yjoMI9jaZ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:12:ea:0c:0d:dc:08:37:2b:eb:66:d9:e1:35:e4:20:b1:1a:28:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59A9AB370F753D82771987E2FD7CA19578E11D07 Validity Not Before: Sep 20 22:14:27 2026 GMT Not After : Sep 22 02:08:27 2026 GMT Subject: CN=0D5FBF402BC0986131227C944C0A2B454720EC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8d:73:c9:2c:a1:4c:46:d6:d5:e5:92:02:04: dc:47:5d:9c:45:61:01:7f:ad:7d:53:08:95:34:94: e2:3e:cb:cd:e1:31:31:f7:ff:10:96:2f:76:fd:75: f0:0a:ab:a1:06:45:96:87:6c:70:58:fb:3d:30:81: 69:fe:79:d1:79:2a:12:06:fe:13:27:b2:22:e1:12: d7:8b:77:66:21:d2:9b:2f:b5:cb:a1:1e:be:2d:49: 9d:59:46:c4:93:cc:a5:36:0b:f6:b2:78:12:1b:5a: 15:73:25:46:6d:e7:99:d4:8c:a6:37:d5:3a:e5:84: 2d:2b:1b:d7:31:34:9b:02:c6:81:6d:bb:83:b3:24: 7f:10:ee:b1:8b:d0:a8:ed:e9:77:29:39:ae:60:38: 71:73:8e:aa:8a:e2:f8:72:04:fd:8d:d5:0f:9c:e0: 50:7f:19:db:0d:bd:be:f6:bc:a8:fa:52:81:73:18: 49:48:57:ca:f7:01:b6:d0:35:ba:77:11:62:19:5d: a6:60:ed:b5:5c:ff:40:5d:db:f7:38:09:64:24:e6: b5:7e:a9:a2:2b:84:ef:3d:dc:b4:87:4c:d2:ea:71: 05:84:75:54:fe:fa:62:40:99:8b:6c:fe:87:45:f1: f2:1d:1f:0b:01:28:9e:5b:7e:ce:4e:7a:bf:95:11: 8d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5F:BF:40:2B:C0:98:61:31:22:7C:94:4C:0A:2B:45:47:20:EC:99 X509v3 Authority Key Identifier: keyid:59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:65:d6:7d:c3:15:a7:84:99:b8:41:b0:3c:2b:7c:85:d9:a6: f1:9b:2a:fb:44:7b:a0:ea:57:d1:c0:6c:e9:a8:96:43:f5:bc: e5:09:e8:d7:28:30:1f:41:dd:fe:d9:87:64:e1:b7:8b:49:78: ba:45:f1:d4:60:e5:28:8c:ce:fe:98:d0:f3:71:44:2a:64:a8: a8:d0:8d:e2:82:76:0e:8e:2f:dc:22:5f:68:e8:76:3a:2c:a1: 0a:bb:55:7e:33:90:09:e4:bb:72:83:77:ac:7c:0e:42:62:1f: 5b:35:7b:dd:0b:48:2f:9f:f0:18:a5:ba:3c:65:2a:dd:4a:2b: c4:83:ef:44:e5:1d:7f:89:88:cc:70:ad:32:44:28:bc:e1:90: e4:bc:c2:05:8e:52:50:42:14:41:a0:e4:82:4f:e2:0d:fa:65: 68:0c:de:30:2d:b7:8d:7f:bd:ea:d1:78:a1:f2:16:d8:94:3c: 7a:da:e2:04:f0:2f:90:43:32:be:7f:fa:fc:1d:b7:dc:9d:4a: 2e:dd:c5:44:8a:ad:76:68:1d:bd:c6:b8:72:27:43:c4:be:dc: e8:02:0c:79:ca:10:f9:3c:f4:f2:16:b2:89:ed:3b:35:24:fb: 3b:d0:b1:78:95:af:79:e0:ec:68:43:fc:26:ce:61:b4:f0:34: f1:c2:31:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBRLqDA3cCDcr62bZ4TXkILEaKEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlBOUFCMzcwRjc1M0Q4Mjc3MTk4N0UyRkQ3Q0ExOTU3 OEUxMUQwNzAeFw0yNjA5MjAyMjE0MjdaFw0yNjA5MjIwMjA4MjdaMDMxMTAvBgNV BAMTKDBENUZCRjQwMkJDMDk4NjEzMTIyN0M5NDRDMEEyQjQ1NDcyMEVDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdjXPJLKFMRtbV5ZICBNxHXZxF YQF/rX1TCJU0lOI+y83hMTH3/xCWL3b9dfAKq6EGRZaHbHBY+z0wgWn+edF5KhIG /hMnsiLhEteLd2Yh0psvtcuhHr4tSZ1ZRsSTzKU2C/ayeBIbWhVzJUZt55nUjKY3 1TrlhC0rG9cxNJsCxoFtu4OzJH8Q7rGL0Kjt6XcpOa5gOHFzjqqK4vhyBP2N1Q+c 4FB/GdsNvb72vKj6UoFzGElIV8r3AbbQNbp3EWIZXaZg7bVc/0Bd2/c4CWQk5rV+ qaIrhO893LSHTNLqcQWEdVT++mJAmYts/odF8fIdHwsBKJ5bfs5Oer+VEY1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDV+/QCvAmGExInyUTAorRUcg7JkwHwYDVR0j BBgwFoAUWamrNw91PYJ3GYfi/XyhlXjhHQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M2MGE2YzEtYzA4MS00MzliLWFlOGQtODE0OWI2MzRkNWEyLzAvNTlBOUFCMzcw Rjc1M0Q4Mjc3MTk4N0UyRkQ3Q0ExOTU3OEUxMUQwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUE5QUIzNzBGNzUzRDgyNzcxOTg3RTJGRDdDQTE5NTc4RTEx RDA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M2MGE2YzEtYzA4MS00MzliLWFl OGQtODE0OWI2MzRkNWEyLzAvNTlBOUFCMzcwRjc1M0Q4Mjc3MTk4N0UyRkQ3Q0Ex OTU3OEUxMUQwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtl1n3DFaeEmbhBsDwrfIXZpvGbKvtEe6Dq V9HAbOmolkP1vOUJ6NcoMB9B3f7Zh2Tht4tJeLpF8dRg5SiMzv6Y0PNxRCpkqKjQ jeKCdg6OL9wiX2jodjosoQq7VX4zkAnku3KDd6x8DkJiH1s1e90LSC+f8Bilujxl Kt1KK8SD70TlHX+JiMxwrTJEKLzhkOS8wgWOUlBCFEGg5IJP4g36ZWgM3jAtt41/ verReKHyFtiUPHra4gTwL5BDMr5/+vwdt9ydSi7dxUSKrXZoHb3GuHInQ8S+3OgC DHnKEPk89PIWsontOzUk+zvQsXiVr3ng7GhD/CbOYbTwNPHCMUQ= -----END CERTIFICATE-----Generated at Mon Sep 21 20:39:01 2026 by rpki-client