$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft File: 585117D9F8A558479018DDF94830A5C4C66BA76D.mft (raw, json) Hash identifier: DPlD3uKi81ePo+DeRY/Lmkc+/nR7fxh1oWb5hgYFM6M= Subject key identifier: 99:D1:86:2B:FE:ED:5A:D2:4F:11:D8:BA:58:20:2C:5F:B7:6D:2D:0E Authority key identifier: 58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D Certificate issuer: /CN=585117D9F8A558479018DDF94830A5C4C66BA76D Certificate serial: 4B09AC6D110E45F5605F5360F00F12E8CA057654 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft Manifest number: BC Signing time: Mon 21 Sep 2026 02:24:28 +0000 Manifest this update: Mon 21 Sep 2026 02:19:28 +0000 Manifest next update: Tue 22 Sep 2026 04:24:28 +0000 Files and hashes: 1: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: eTmPN3t/PaM9CQFDKpglxNKRVsgYw16hoKgfbTOHlZI=) 2: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: DEKb4ykdIazHfvN+oGnSyAdKUSNIiAHPtDoT+tw15P8=) 3: 585117D9F8A558479018DDF94830A5C4C66BA76D.crl (hash: pjVS9ndttO6bPj3YBywR8DOxvPSP5EOPdXs3mwCcUIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:09:ac:6d:11:0e:45:f5:60:5f:53:60:f0:0f:12:e8:ca:05:76:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585117D9F8A558479018DDF94830A5C4C66BA76D Validity Not Before: Sep 21 02:19:28 2026 GMT Not After : Sep 22 04:24:28 2026 GMT Subject: CN=99D1862BFEED5AD24F11D8BA58202C5FB76D2D0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a4:7a:65:a4:b9:aa:2e:d9:c9:03:f4:4b:ab: b6:36:28:74:41:b4:59:d4:fb:ce:f2:fa:68:b4:d9: 51:87:2a:8b:65:c7:9c:41:2e:3b:02:c8:a2:44:28: d4:04:3d:61:a1:80:73:e8:ed:9c:e9:bd:b7:8e:9e: b9:11:63:72:7e:de:e3:11:1c:44:37:27:47:af:0b: bb:40:9f:a2:88:64:cf:9e:db:2b:52:78:dd:b8:1f: 20:a4:fc:a2:0b:bd:cb:a4:86:20:73:ab:a4:e0:b0: 18:cc:4c:04:7d:0f:b5:1d:08:db:e3:db:49:79:69: ac:34:56:7a:0d:97:23:7b:c2:e6:41:fd:52:91:4b: a4:d9:44:33:3e:7b:46:ba:71:ce:b7:5d:a1:23:b7: b6:ee:99:2b:30:f4:8e:95:ac:45:ba:d5:51:74:24: 55:4e:45:25:73:3d:fa:22:be:0c:26:95:5f:b4:d6: 19:a1:6c:e6:ba:89:23:af:ae:29:b6:90:c5:9f:a6: a7:25:13:dd:63:2f:c1:72:58:d7:3b:c2:99:60:40: 28:3d:b3:d9:b6:03:48:26:09:df:e6:f0:9b:26:59: 9a:df:9d:a7:67:56:13:32:ba:7d:81:1c:4b:ba:e3: fa:08:2a:0a:57:26:d2:f0:3c:67:0c:e4:5a:db:9c: 04:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D1:86:2B:FE:ED:5A:D2:4F:11:D8:BA:58:20:2C:5F:B7:6D:2D:0E X509v3 Authority Key Identifier: keyid:58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:58:68:73:55:6e:67:00:20:19:5b:17:03:1c:41:96:88:33: 59:ab:d8:1e:38:fe:20:5f:3e:d1:18:87:23:d1:f2:4f:d1:6a: a8:be:e8:df:c9:aa:8d:aa:ec:13:7b:ea:0f:d4:4c:60:86:f6: 38:dc:b3:68:59:3c:04:97:3c:e9:0b:62:32:47:cd:54:14:c9: 2e:cb:64:ec:b8:4a:16:95:79:52:b7:c5:80:54:fe:9c:15:1b: d7:05:8a:76:78:95:61:6d:96:cf:81:af:6c:52:ad:03:ca:6c: bb:ec:db:b2:98:72:98:85:a5:2b:26:9f:2e:a5:1d:de:1f:bd: 7d:72:c8:d1:b9:8f:f5:d8:6e:00:bd:c4:77:8e:94:4e:22:aa: 4f:38:42:6c:02:75:ca:01:01:88:a9:ed:e9:9a:dd:df:8b:92: dc:25:8c:c8:7d:04:be:29:fe:5c:15:16:af:b0:0b:7a:cc:57: 14:23:87:14:ba:f3:a8:45:85:12:66:01:80:15:7f:8b:07:73: 3f:2e:e4:96:d1:c2:17:7a:b3:8a:8c:83:56:e6:6a:ec:8e:5a: cc:1b:51:98:a8:c6:34:bc:da:01:42:b4:7b:f1:13:4d:10:f6: 9e:db:77:c3:1b:7e:38:b6:f5:31:a8:6c:93:1c:56:3c:f1:57: 45:85:06:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwmsbREORfVgX1Ng8A8S6MoFdlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1QzRD NjZCQTc2RDAeFw0yNjA5MjEwMjE5MjhaFw0yNjA5MjIwNDI0MjhaMDMxMTAvBgNV BAMTKDk5RDE4NjJCRkVFRDVBRDI0RjExRDhCQTU4MjAyQzVGQjc2RDJEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDipHplpLmqLtnJA/RLq7Y2KHRB tFnU+87y+mi02VGHKotlx5xBLjsCyKJEKNQEPWGhgHPo7ZzpvbeOnrkRY3J+3uMR HEQ3J0evC7tAn6KIZM+e2ytSeN24HyCk/KILvcukhiBzq6TgsBjMTAR9D7UdCNvj 20l5aaw0VnoNlyN7wuZB/VKRS6TZRDM+e0a6cc63XaEjt7bumSsw9I6VrEW61VF0 JFVORSVzPfoivgwmlV+01hmhbOa6iSOvrim2kMWfpqclE91jL8FyWNc7wplgQCg9 s9m2A0gmCd/m8JsmWZrfnadnVhMyun2BHEu64/oIKgpXJtLwPGcM5FrbnAQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmdGGK/7tWtJPEdi6WCAsX7dtLQ4wHwYDVR0j BBgwFoAUWFEX2filWEeQGN35SDClxMZrp20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhmY2E0MmYtODM2YS00MGVjLWE3NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlG OEE1NTg0NzkwMThEREY5NDgzMEE1QzRDNjZCQTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODUxMTdEOUY4QTU1ODQ3OTAxOERERjk0ODMwQTVDNEM2NkJB NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1 QzRDNjZCQTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRYaHNVbmcAIBlbFwMcQZaIM1mr2B44/iBf PtEYhyPR8k/Raqi+6N/Jqo2q7BN76g/UTGCG9jjcs2hZPASXPOkLYjJHzVQUyS7L ZOy4ShaVeVK3xYBU/pwVG9cFinZ4lWFtls+Br2xSrQPKbLvs27KYcpiFpSsmny6l Hd4fvX1yyNG5j/XYbgC9xHeOlE4iqk84QmwCdcoBAYip7ema3d+LktwljMh9BL4p /lwVFq+wC3rMVxQjhxS686hFhRJmAYAVf4sHcz8u5JbRwhd6s4qMg1bmauyOWswb UZioxjS82gFCtHvxE00Q9p7bd8Mbfji29TGobJMcVjzxV0WFBso= -----END CERTIFICATE-----Generated at Mon Sep 21 20:57:22 2026 by rpki-client