$ rpki-client -vvf rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft File: 59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft (raw, json) Hash identifier: Hy3zyy+mC/B/H1Ox+Q1Z4+JTIyI02nXHzinnDBAbXsQ= Subject key identifier: B1:B3:71:47:A2:72:69:00:56:91:06:F5:0D:0B:A7:3E:49:A1:C9:F9 Authority key identifier: 59:F4:23:4C:AE:EF:A4:6B:3C:B1:62:7D:38:50:2F:B4:BA:6E:FD:90 Certificate issuer: /CN=59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90 Certificate serial: 2B81FC05544FB196C47F44A7516143E145D71D83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 20:06:06 +0000 Manifest this update: Mon 20 Jul 2026 20:01:06 +0000 Manifest next update: Tue 21 Jul 2026 22:03:06 +0000 Files and hashes: 1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: xUpvUE2ZHUc2DU7j7aFTg7BviyLprNaKf2mKbV8517U=) 2: 59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl (hash: juefEli11vOwEqi4ZGXCHi9Xb5zNW06l2GgbknEIhqw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:81:fc:05:54:4f:b1:96:c4:7f:44:a7:51:61:43:e1:45:d7:1d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90 Validity Not Before: Jul 20 20:01:06 2026 GMT Not After : Jul 21 22:03:06 2026 GMT Subject: CN=B1B37147A2726900569106F50D0BA73E49A1C9F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:21:54:d3:ce:91:74:c0:0a:1e:9c:e5:46: a4:e2:1e:48:36:a3:a7:ef:89:30:ae:17:f7:fc:f5: c0:7d:d1:a3:c1:2d:3d:df:9e:ec:13:ad:dc:63:56: 75:8a:3f:ac:b9:6d:b9:0e:ef:54:a8:fd:7e:81:33: 3d:1b:38:7c:5c:82:0d:be:98:3d:97:3c:d2:67:57: 21:b6:92:ae:4a:94:01:1c:67:ba:ff:bb:2c:c3:56: f7:62:03:c5:fd:93:67:b8:df:48:0f:b3:89:98:ad: 2e:53:58:69:39:d1:61:60:90:33:bd:08:6d:00:9f: c9:38:1a:64:12:61:c9:0b:d0:c4:69:00:60:dc:33: f3:9a:20:8e:45:89:c0:cd:87:28:bf:72:12:7e:9c: 57:1a:06:16:03:9a:4e:30:1f:0c:54:ed:ee:73:09: 6c:2b:47:96:d2:4d:61:3b:eb:57:98:fe:ad:d7:b7: 1d:48:82:9f:b3:5c:82:26:df:0d:51:8f:81:6f:c3: 87:12:64:94:da:63:20:80:55:25:84:bb:5e:f2:49: 9d:21:ea:7b:d9:aa:81:da:1a:89:58:ad:f6:b3:ab: d6:2a:b1:2d:82:cd:5e:16:6a:a3:11:cd:fc:a1:ec: b0:b8:31:18:88:2b:33:8e:94:1f:d5:1d:ca:c2:a7: fc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B3:71:47:A2:72:69:00:56:91:06:F5:0D:0B:A7:3E:49:A1:C9:F9 X509v3 Authority Key Identifier: keyid:59:F4:23:4C:AE:EF:A4:6B:3C:B1:62:7D:38:50:2F:B4:BA:6E:FD:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/59F4234CAEEFA46B3CB1627D38502FB4BA6EFD90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:06:01:8d:31:ee:43:d0:00:52:60:2a:a7:32:f7:e7:27:5d: 92:99:57:77:3b:5a:5a:30:fd:57:f6:a4:16:97:32:c6:a1:9c: 42:9f:2c:d9:9c:9c:3b:b2:cf:68:d2:bd:24:1f:69:92:20:8e: d6:db:9d:5d:78:4d:e8:12:88:5c:a8:b2:d0:d0:bf:21:53:84: 3b:9b:0c:2e:07:03:f4:4e:fd:0e:60:21:fb:87:26:8a:32:c6: 74:66:5b:8f:d8:a3:f7:1c:b6:c4:5a:65:aa:57:e2:5e:ff:f1: 40:48:72:06:24:0a:51:cf:b8:77:9d:1e:a4:18:fc:10:fb:f6: 69:b3:04:67:55:e7:5f:98:55:a8:91:49:f1:a6:fa:43:5a:fd: 61:cd:d9:c6:8d:a3:22:47:d4:45:26:f6:c5:c0:30:7d:53:e8: 2a:3e:77:00:e9:92:21:8c:00:b1:73:bf:2d:54:c3:5a:23:38: 58:dd:90:92:f1:bc:e9:9a:c3:9a:7d:c3:54:c3:26:6a:b8:93: c4:d0:a0:4f:63:03:d1:20:44:b4:33:ea:0c:30:f1:8d:65:90: 85:a8:90:4e:c2:8a:aa:05:41:e3:d5:22:71:80:4d:d0:ae:24: 47:20:7d:11:5a:03:1b:63:40:b2:b7:96:b8:ad:e0:7d:a9:18: 1d:69:c4:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4H8BVRPsZbEf0SnUWFD4UXXHYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlGNDIzNENBRUVGQTQ2QjNDQjE2MjdEMzg1MDJGQjRC QTZFRkQ5MDAeFw0yNjA3MjAyMDAxMDZaFw0yNjA3MjEyMjAzMDZaMDMxMTAvBgNV BAMTKEIxQjM3MTQ3QTI3MjY5MDA1NjkxMDZGNTBEMEJBNzNFNDlBMUM5RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kCFU086RdMAKHpzlRqTiHkg2 o6fviTCuF/f89cB90aPBLT3fnuwTrdxjVnWKP6y5bbkO71So/X6BMz0bOHxcgg2+ mD2XPNJnVyG2kq5KlAEcZ7r/uyzDVvdiA8X9k2e430gPs4mYrS5TWGk50WFgkDO9 CG0An8k4GmQSYckL0MRpAGDcM/OaII5FicDNhyi/chJ+nFcaBhYDmk4wHwxU7e5z CWwrR5bSTWE761eY/q3Xtx1Igp+zXIIm3w1Rj4Fvw4cSZJTaYyCAVSWEu17ySZ0h 6nvZqoHaGolYrfazq9YqsS2CzV4WaqMRzfyh7LC4MRiIKzOOlB/VHcrCp/z3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsbNxR6JyaQBWkQb1DQunPkmhyfkwHwYDVR0j BBgwFoAUWfQjTK7vpGs8sWJ9OFAvtLpu/ZAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzJhOThjOGItY2FkOS00OWUxLWIxNzgtMWRhZjNiNjJlZjU5LzAvNTlGNDIzNENB RUVGQTQ2QjNDQjE2MjdEMzg1MDJGQjRCQTZFRkQ5MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUY0MjM0Q0FFRUZBNDZCM0NCMTYyN0QzODUwMkZCNEJBNkVG RDkwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvNTlGNDIzNENBRUVGQTQ2QjNDQjE2MjdEMzg1MDJG QjRCQTZFRkQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8GAY0x7kPQAFJgKqcy9+cnXZKZV3c7Wlow /Vf2pBaXMsahnEKfLNmcnDuyz2jSvSQfaZIgjtbbnV14TegSiFyostDQvyFThDub DC4HA/RO/Q5gIfuHJooyxnRmW4/Yo/cctsRaZapX4l7/8UBIcgYkClHPuHedHqQY /BD79mmzBGdV51+YVaiRSfGm+kNa/WHN2caNoyJH1EUm9sXAMH1T6Co+dwDpkiGM ALFzvy1Uw1ojOFjdkJLxvOmaw5p9w1TDJmq4k8TQoE9jA9EgRLQz6gww8Y1lkIWo kE7CiqoFQePVInGATdCuJEcgfRFaAxtjQLK3lrit4H2pGB1pxLw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:31 2026 by rpki-client