$ rpki-client -vvf rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft File: 586C54F03B92F22D9291776AE79350296DB382C8.mft (raw, json) Hash identifier: mWcA2airIgi3xQOaX+3P6iEU8E1xhGPZPgXy6HtCMns= Subject key identifier: DF:C1:66:5F:A0:A5:4A:3A:65:51:10:34:E6:6C:5B:CE:D5:F1:73:7F Authority key identifier: 58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8 Certificate issuer: /CN=586C54F03B92F22D9291776AE79350296DB382C8 Certificate serial: 2D3C9CA8D95708E1807226A43ED33E35C401F920 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 12:11:28 +0000 Manifest this update: Mon 20 Jul 2026 12:06:28 +0000 Manifest next update: Tue 21 Jul 2026 15:23:28 +0000 Files and hashes: 1: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: 02NTkzqK/LTvvPzyGLCIQvFXPCqfEGOd/i/Q/MdPoH8=) 2: 586C54F03B92F22D9291776AE79350296DB382C8.crl (hash: p+o4iUoon2V1vBuSWSslMQZp023rSjwaRrcCiFnKN6E=) 3: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 0BJPNvIKBQFSgToHUrV6asLY9+z375bbGV3qDBCnsE0=) 4: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 9FI6xrUmyIDtdYUTIVth+tn1sleSPgc7MLrTjmuupW8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3c:9c:a8:d9:57:08:e1:80:72:26:a4:3e:d3:3e:35:c4:01:f9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586C54F03B92F22D9291776AE79350296DB382C8 Validity Not Before: Jul 20 12:06:28 2026 GMT Not After : Jul 21 15:23:28 2026 GMT Subject: CN=DFC1665FA0A54A3A65511034E66C5BCED5F1737F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:79:23:2f:d9:80:b1:ae:cb:03:b3:74:f7: 95:99:b0:6c:4f:99:1d:29:78:93:6b:51:fc:e3:d1: 15:9b:e5:fb:6e:cf:3f:af:49:b8:e6:e1:f3:0c:96: 45:18:84:84:8b:1d:24:47:5b:42:9d:f4:54:34:dc: 0f:a3:d5:9b:15:7c:00:f1:5d:0e:d7:04:9a:48:d9: 7a:6f:73:f7:f8:a1:74:b2:75:ae:02:31:36:a2:ac: 5f:0b:a0:3e:57:19:d3:04:30:4e:38:18:42:a3:db: 5b:08:17:fd:23:8e:5f:93:74:fe:dc:8d:4d:d2:4c: 63:15:3c:46:44:44:76:c0:75:14:ee:74:80:7f:1f: 04:34:89:cb:76:0d:c8:46:60:d6:9b:ff:9d:36:40: d1:b6:37:b0:8c:65:44:f2:e0:96:6b:6e:1f:b6:80: a8:39:f6:40:bb:18:d3:30:be:8b:1f:c8:51:f2:08: 60:d8:b5:99:e7:dc:4d:95:d3:51:db:e6:20:08:85: 90:84:ed:5a:5e:0c:fe:61:7a:f0:ea:89:0b:08:f1: 23:7b:d5:6b:bd:4d:59:b3:f9:1e:47:0e:40:f8:f1: 03:9a:24:79:b2:a2:f7:bb:4d:5c:22:43:4f:1c:12: f7:df:99:c2:87:c5:d6:cd:08:c7:b3:6b:35:42:5e: 46:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C1:66:5F:A0:A5:4A:3A:65:51:10:34:E6:6C:5B:CE:D5:F1:73:7F X509v3 Authority Key Identifier: keyid:58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:88:f4:6c:89:36:1d:b0:b9:2f:0f:3c:c8:1a:b6:86:79:87: 81:5f:fd:79:dc:d9:6d:7e:53:09:9b:ea:fc:1a:dc:81:c6:36: af:f5:43:77:64:09:a7:4a:ad:32:e9:e9:e9:71:30:82:c0:c9: 8f:65:fc:99:c5:48:0b:c0:6d:cb:43:37:da:a8:a6:4c:8f:bd: 25:0a:0e:d0:10:41:8a:30:ff:af:81:81:d0:b2:ba:a9:8a:d1: 51:94:25:9a:96:54:71:6d:2c:d6:a0:52:6a:a5:82:d1:f6:15: 2e:31:b8:27:02:70:96:c7:3c:79:68:68:77:ad:fb:87:40:65: 63:83:15:aa:ec:1a:64:b7:46:a5:d4:49:47:c7:91:22:2c:08: 78:1e:48:d2:7b:06:92:81:b5:27:1b:ad:12:6c:6c:e5:b3:21: ad:44:9b:f1:99:2a:30:30:cb:3e:c4:12:76:eb:95:a2:e5:52: 79:78:88:4b:5c:d5:8d:eb:f3:80:27:b1:d9:01:ab:2f:63:c9: 70:84:1f:c4:13:df:8a:9e:8c:4d:e7:ba:d9:8c:81:6a:60:3c: 29:55:37:41:72:f5:ee:f8:09:57:72:85:97:5f:67:42:6e:a8: 84:f6:cf:e1:85:26:bf:31:6d:df:a6:c6:b0:e3:b0:c3:b7:4b: 1d:9d:b5:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTycqNlXCOGAciakPtM+NcQB+SAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2QzU0RjAzQjkyRjIyRDkyOTE3NzZBRTc5MzUwMjk2 REIzODJDODAeFw0yNjA3MjAxMjA2MjhaFw0yNjA3MjExNTIzMjhaMDMxMTAvBgNV BAMTKERGQzE2NjVGQTBBNTRBM0E2NTUxMTAzNEU2NkM1QkNFRDVGMTczN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKXkjL9mAsa7LA7N095WZsGxP mR0peJNrUfzj0RWb5ftuzz+vSbjm4fMMlkUYhISLHSRHW0Kd9FQ03A+j1ZsVfADx XQ7XBJpI2Xpvc/f4oXSyda4CMTairF8LoD5XGdMEME44GEKj21sIF/0jjl+TdP7c jU3STGMVPEZERHbAdRTudIB/HwQ0ict2DchGYNab/502QNG2N7CMZUTy4JZrbh+2 gKg59kC7GNMwvosfyFHyCGDYtZnn3E2V01Hb5iAIhZCE7VpeDP5hevDqiQsI8SN7 1Wu9TVmz+R5HDkD48QOaJHmyove7TVwiQ08cEvffmcKHxdbNCMezazVCXkZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU38FmX6ClSjplURA05mxbztXxc38wHwYDVR0j BBgwFoAUWGxU8DuS8i2SkXdq55NQKW2zgsgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzYyMGI0MjMtZGQ1ZC00NDhmLWJiZDMtMDQ1MzBlYzE3MTVkLzAvNTg2QzU0RjAz QjkyRjIyRDkyOTE3NzZBRTc5MzUwMjk2REIzODJDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODZDNTRGMDNCOTJGMjJEOTI5MTc3NkFFNzkzNTAyOTZEQjM4 MkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvNTg2QzU0RjAzQjkyRjIyRDkyOTE3NzZBRTc5MzUw Mjk2REIzODJDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+I9GyJNh2wuS8PPMgatoZ5h4Ff/Xnc2W1+ Uwmb6vwa3IHGNq/1Q3dkCadKrTLp6elxMILAyY9l/JnFSAvAbctDN9qopkyPvSUK DtAQQYow/6+BgdCyuqmK0VGUJZqWVHFtLNagUmqlgtH2FS4xuCcCcJbHPHloaHet +4dAZWODFarsGmS3RqXUSUfHkSIsCHgeSNJ7BpKBtScbrRJsbOWzIa1Em/GZKjAw yz7EEnbrlaLlUnl4iEtc1Y3r84AnsdkBqy9jyXCEH8QT34qejE3nutmMgWpgPClV N0Fy9e74CVdyhZdfZ0JuqIT2z+GFJr8xbd+mxrDjsMO3Sx2dtQM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:38 2026 by rpki-client