$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft File: 585117D9F8A558479018DDF94830A5C4C66BA76D.mft (raw, json) Hash identifier: WlFG5u6w9yuPM5wxefYH4+e1InJ8qNhpFTYz2Y+OJro= Subject key identifier: B1:A8:63:1C:90:31:A2:CB:CA:E2:7D:2B:85:EC:5A:65:FC:0F:85:78 Authority key identifier: 58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D Certificate issuer: /CN=585117D9F8A558479018DDF94830A5C4C66BA76D Certificate serial: 0835D6CE2C34AB1989E665B474B13842B4707403 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 22:56:55 +0000 Manifest this update: Tue 16 Jun 2026 22:51:55 +0000 Manifest next update: Thu 18 Jun 2026 01:38:55 +0000 Files and hashes: 1: 585117D9F8A558479018DDF94830A5C4C66BA76D.crl (hash: a1BhXjfS9Zi0QEPSNaYjF+tNj3bLqWwhm1qOM2GHGcs=) 2: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: DEKb4ykdIazHfvN+oGnSyAdKUSNIiAHPtDoT+tw15P8=) 3: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: eTmPN3t/PaM9CQFDKpglxNKRVsgYw16hoKgfbTOHlZI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:35:d6:ce:2c:34:ab:19:89:e6:65:b4:74:b1:38:42:b4:70:74:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585117D9F8A558479018DDF94830A5C4C66BA76D Validity Not Before: Jun 16 22:51:55 2026 GMT Not After : Jun 18 01:38:55 2026 GMT Subject: CN=B1A8631C9031A2CBCAE27D2B85EC5A65FC0F8578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:e0:03:ca:4d:91:06:b3:e4:f5:4a:3f:fd: 1c:2a:8f:96:ec:59:d0:a5:0c:ad:d1:89:4b:69:c1: d1:a4:fb:35:66:29:38:ee:3e:85:30:a5:8b:ea:7d: 6a:cc:18:41:66:fe:86:bb:c3:a8:9b:cd:e7:96:c7: 82:7f:42:c8:f3:e1:5b:c1:01:db:b7:fa:a0:11:0f: 40:94:9c:67:d4:4f:da:73:25:d3:a8:bd:ca:8e:7f: 68:10:1a:5a:ac:6a:72:70:07:a8:8e:4f:da:43:33: 2b:89:9a:b5:3a:8d:28:5f:5f:aa:41:b2:b3:ac:6e: c8:cb:58:86:c3:09:16:06:31:de:c6:1c:df:65:20: 97:5e:f9:aa:50:b5:15:ed:7b:8e:f9:d0:44:64:62: 6e:fb:f5:2f:e4:77:01:04:aa:c2:e2:45:48:a4:6a: ec:1c:09:b8:97:60:e1:01:7b:9b:48:7f:e7:e0:21: 85:0c:cb:9f:48:da:9a:8f:63:fe:7c:2e:65:a3:1a: 3c:19:a0:7d:af:4b:d3:7d:a7:cc:67:07:09:5a:13: f6:60:6e:9e:b2:d5:ad:84:ca:b1:9f:46:ef:0b:3c: fb:3a:57:f3:17:4f:1b:3c:29:e8:a4:9e:f2:2e:6d: e1:2a:8c:bd:73:6f:95:67:43:e8:ae:e1:9b:3c:1a: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:63:1C:90:31:A2:CB:CA:E2:7D:2B:85:EC:5A:65:FC:0F:85:78 X509v3 Authority Key Identifier: keyid:58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:af:a2:71:6f:2a:5e:67:17:ee:ac:ec:85:08:1c:c3:8a:77: 2f:8e:7e:c6:84:fb:0b:4e:cc:a4:f2:40:0a:71:17:1d:45:c5: 4a:40:cf:ca:3e:0f:cc:6e:8f:f9:51:8a:9a:25:86:7d:f6:3b: e7:b4:71:e5:31:b6:2b:71:27:cb:c5:cb:96:f5:c4:63:fe:69: 32:7a:9e:de:fe:18:4f:d5:d5:be:eb:a2:c3:44:0e:25:81:dd: 4b:d5:81:ee:56:66:77:0d:e7:aa:a6:d9:37:9e:27:72:6b:13: bb:56:e2:2a:ea:51:ea:52:2b:81:21:86:ce:23:d0:33:f6:eb: 97:53:cd:e3:fe:f5:c2:23:92:0e:73:0a:f2:38:bb:f1:bd:e9: 7c:28:cc:cd:38:bb:f6:2e:f4:ef:70:d1:01:19:c3:b2:83:75: 95:4f:2b:68:9c:59:86:3c:f8:02:48:65:de:38:8b:aa:46:08: 4e:60:6c:a8:97:89:b9:fe:a0:e4:ed:d2:6e:c1:ff:6c:7f:c0: 34:50:90:0b:06:1f:bc:40:4b:b1:88:1e:99:77:0d:b3:93:ce: 06:05:1f:63:57:b9:49:63:7b:8a:77:29:50:8f:10:da:85:be: 34:28:09:b9:6d:92:2d:e9:eb:06:7f:a1:a5:8f:2c:81:27:94: f0:85:c1:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCDXWziw0qxmJ5mW0dLE4QrRwdAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1QzRD NjZCQTc2RDAeFw0yNjA2MTYyMjUxNTVaFw0yNjA2MTgwMTM4NTVaMDMxMTAvBgNV BAMTKEIxQTg2MzFDOTAzMUEyQ0JDQUUyN0QyQjg1RUM1QTY1RkMwRjg1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVOADyk2RBrPk9Uo//Rwqj5bs WdClDK3RiUtpwdGk+zVmKTjuPoUwpYvqfWrMGEFm/oa7w6ibzeeWx4J/Qsjz4VvB Adu3+qARD0CUnGfUT9pzJdOovcqOf2gQGlqsanJwB6iOT9pDMyuJmrU6jShfX6pB srOsbsjLWIbDCRYGMd7GHN9lIJde+apQtRXte4750ERkYm779S/kdwEEqsLiRUik auwcCbiXYOEBe5tIf+fgIYUMy59I2pqPY/58LmWjGjwZoH2vS9N9p8xnBwlaE/Zg bp6y1a2EyrGfRu8LPPs6V/MXTxs8KeiknvIubeEqjL1zb5VnQ+iu4Zs8GvZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsahjHJAxosvK4n0rhexaZfwPhXgwHwYDVR0j BBgwFoAUWFEX2filWEeQGN35SDClxMZrp20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhmY2E0MmYtODM2YS00MGVjLWE3NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlG OEE1NTg0NzkwMThEREY5NDgzMEE1QzRDNjZCQTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODUxMTdEOUY4QTU1ODQ3OTAxOERERjk0ODMwQTVDNEM2NkJB NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1 QzRDNjZCQTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEavonFvKl5nF+6s7IUIHMOKdy+OfsaE+wtO zKTyQApxFx1FxUpAz8o+D8xuj/lRipolhn32O+e0ceUxtitxJ8vFy5b1xGP+aTJ6 nt7+GE/V1b7rosNEDiWB3UvVge5WZncN56qm2TeeJ3JrE7tW4irqUepSK4Ehhs4j 0DP265dTzeP+9cIjkg5zCvI4u/G96XwozM04u/Yu9O9w0QEZw7KDdZVPK2icWYY8 +AJIZd44i6pGCE5gbKiXibn+oOTt0m7B/2x/wDRQkAsGH7xAS7GIHpl3DbOTzgYF H2NXuUlje4p3KVCPENqFvjQoCbltki3p6wZ/oaWPLIEnlPCFwSM= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:19 2026 by rpki-client