$ rpki-client -vvf rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft File: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft (raw, json) Hash identifier: wuk5DyjtcYVWM8JyhF/GYkC1eHzMh0BFgkWNxaTJJ/4= Subject key identifier: 42:4F:52:7F:BF:2A:2C:F1:01:69:7A:B3:A1:59:0A:49:DE:B6:C4:30 Authority key identifier: 95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 Certificate issuer: /CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Certificate serial: 3AD62C3BC99C4FE33A864B27EBDAC9BAF5A12F52 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 03:40:21 +0000 Manifest this update: Tue 21 Jul 2026 03:35:21 +0000 Manifest next update: Wed 22 Jul 2026 05:15:21 +0000 Files and hashes: 1: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: t5M4q+wjV6k977kCQYS5NWkmORi7rVl+URL29ZG5i/Y=) 2: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: aLMfdsIVj+NArpBFKbx+R57YG2afPDJAmU3iGMb6+6c=) 3: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: dUcYMxyxr0kR8WWHVwUrDj577thKceAoVrMPKHmFvPk=) 4: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: LXofhMEruHNZkVP/FDGdRjlE9GAdxzBp7sQ6AFEv168=) 5: 9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl (hash: Z414OW3FhsOKIhMXMFt8XscNSedkhwWCSfK/EG9BRL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d6:2c:3b:c9:9c:4f:e3:3a:86:4b:27:eb:da:c9:ba:f5:a1:2f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0 Validity Not Before: Jul 21 03:35:21 2026 GMT Not After : Jul 22 05:15:21 2026 GMT Subject: CN=424F527FBF2A2CF101697AB3A1590A49DEB6C430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:fd:cd:05:42:55:51:52:95:a9:91:c6:56: 2a:2a:0e:46:c6:1d:01:9b:b9:0f:49:1f:22:8c:cd: 1d:54:f3:26:21:9d:52:ef:98:20:94:d9:95:a8:6b: 5a:3d:74:a4:42:5e:ae:22:ea:8a:30:66:64:26:01: 53:5f:4f:7f:36:a6:e6:3f:f4:a9:59:e2:2c:3a:42: 95:e3:9e:66:36:f8:6d:86:cc:10:b1:88:e4:f5:23: bd:97:86:50:ec:65:8e:11:41:f0:b6:09:2e:4e:7f: 09:7c:6c:a1:a0:84:c1:41:48:64:fa:da:32:6d:01: fa:2d:47:c4:53:71:c4:35:f5:02:1f:3c:df:3a:28: b7:3c:13:bd:21:79:e9:88:5a:f6:30:f1:96:4f:72: a7:5c:bd:cb:38:55:ac:25:5e:de:dd:92:f6:75:a2: f2:b4:1b:74:fb:99:b4:65:b5:48:04:b6:c5:9a:59: a4:02:7c:7d:2e:04:63:c1:e7:b3:1d:db:0c:a8:55: 8b:c4:da:bb:a4:05:01:fa:02:c6:a7:23:6f:91:3e: d5:37:96:4d:3d:14:62:28:ef:4d:c7:7e:e5:4f:ca: 55:03:24:e0:85:4b:4d:09:17:d2:10:b0:8d:3a:a6: 33:ed:71:8a:47:6e:7c:9b:3f:21:8a:40:ab:ab:99: 8f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4F:52:7F:BF:2A:2C:F1:01:69:7A:B3:A1:59:0A:49:DE:B6:C4:30 X509v3 Authority Key Identifier: keyid:95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:25:64:85:2d:b1:1e:59:0f:f9:33:0c:ef:69:0b:ef:02:21: 09:2f:df:95:c1:bd:e6:91:49:56:73:13:6a:d2:11:86:8d:99: 53:04:83:45:8f:05:03:2f:c2:d2:ba:88:73:58:84:b4:f8:82: 5a:15:b7:d4:7f:7f:eb:30:77:42:b3:cf:4b:c7:6b:f8:34:36: 16:5b:ca:50:5b:09:9d:ac:e8:fc:91:13:b7:93:fa:26:18:c8: 7d:0d:fd:89:ac:f9:27:bc:18:cf:53:03:eb:6f:cc:dc:1b:e6: 8e:be:47:24:27:de:48:f0:62:b5:1a:6a:2c:94:cb:9f:68:cd: 08:bc:00:55:91:a4:e4:6f:04:4a:75:b2:f4:39:18:c4:ca:d5: 60:5e:a8:c1:47:36:96:16:e8:ed:c4:b3:4e:44:54:de:87:f8: b2:13:64:32:15:8b:df:da:0e:16:24:2c:3d:45:70:18:f3:8c: 35:23:c0:49:66:43:3e:81:30:33:76:8d:5c:fc:c1:a1:34:26: 09:67:00:22:1f:19:d2:35:05:61:b2:e8:7b:6e:08:48:1c:c8: 4c:94:e4:a6:c1:83:f5:86:c8:f1:7d:d7:06:df:98:35:4a:d0: 33:e2:da:f5:35:8f:cf:be:3d:bf:9c:fd:73:1a:06:e4:65:03: 78:d0:3b:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtYsO8mcT+M6hksn69rJuvWhL1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVFMjIy NzY0NTBGMDAeFw0yNjA3MjEwMzM1MjFaFw0yNjA3MjIwNTE1MjFaMDMxMTAvBgNV BAMTKDQyNEY1MjdGQkYyQTJDRjEwMTY5N0FCM0ExNTkwQTQ5REVCNkM0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVNf3NBUJVUVKVqZHGVioqDkbG HQGbuQ9JHyKMzR1U8yYhnVLvmCCU2ZWoa1o9dKRCXq4i6oowZmQmAVNfT382puY/ 9KlZ4iw6QpXjnmY2+G2GzBCxiOT1I72XhlDsZY4RQfC2CS5Ofwl8bKGghMFBSGT6 2jJtAfotR8RTccQ19QIfPN86KLc8E70heemIWvYw8ZZPcqdcvcs4VawlXt7dkvZ1 ovK0G3T7mbRltUgEtsWaWaQCfH0uBGPB57Md2wyoVYvE2rukBQH6AsanI2+RPtU3 lk09FGIo703HfuVPylUDJOCFS00JF9IQsI06pjPtcYpHbnybPyGKQKurmY9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQk9Sf78qLPEBaXqzoVkKSd62xDAwHwYDVR0j BBgwFoAUlYiQXeXaPOt7V15Me0deIidkUPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIwNmNmNTAtYTNkMS00Y2M5LTkyNjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURF NURBM0NFQjdCNTc1RTRDN0I0NzVFMjIyNzY0NTBGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NTg4OTA1REU1REEzQ0VCN0I1NzVFNEM3QjQ3NUUyMjI3NjQ1 MEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvOTU4ODkwNURFNURBM0NFQjdCNTc1RTRDN0I0NzVF MjIyNzY0NTBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8lZIUtsR5ZD/kzDO9pC+8CIQkv35XBveaR SVZzE2rSEYaNmVMEg0WPBQMvwtK6iHNYhLT4gloVt9R/f+swd0Kzz0vHa/g0NhZb ylBbCZ2s6PyRE7eT+iYYyH0N/Yms+Se8GM9TA+tvzNwb5o6+RyQn3kjwYrUaaiyU y59ozQi8AFWRpORvBEp1svQ5GMTK1WBeqMFHNpYW6O3Es05EVN6H+LITZDIVi9/a DhYkLD1FcBjzjDUjwElmQz6BMDN2jVz8waE0JglnACIfGdI1BWGy6HtuCEgcyEyU 5KbBg/WGyPF91wbfmDVK0DPi2vU1j8++Pb+c/XMaBuRlA3jQO7Q= -----END CERTIFICATE-----Generated at Tue Jul 21 06:23:55 2026 by rpki-client