$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft File: 59406D6B894D2596F895003DEE4D8D96CC43B39F.mft (raw, json) Hash identifier: lbapZ9QOyrmE7dgQZywRO8gf5VuyqURE5bwy+o8QGoM= Subject key identifier: 3A:64:41:C4:F3:99:94:45:36:A3:9C:4F:0D:6C:0E:A6:75:47:D5:53 Authority key identifier: 59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F Certificate issuer: /CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Certificate serial: 4CCF9506360D623AC56BF7D3D26C18F63697D473 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:14:15 +0000 Manifest this update: Mon 20 Jul 2026 14:09:15 +0000 Manifest next update: Tue 21 Jul 2026 14:56:15 +0000 Files and hashes: 1: 3130332e32342e35372e302f32342d3234203d3e203436303532.roa (hash: 2NT3KSaIgnkQK0dsegRvJOGdovq/XdyRI/OHCIdm244=) 2: 323030313a6466303a61383a3a2f34382d3438203d3e203436303532.roa (hash: nM1lR1t5YbRxvlzSB15Qj3P9xptJWT24EGOpflzojVc=) 3: 3130332e32342e35392e302f32342d3234203d3e203436303532.roa (hash: zFIO9wiF748rHmRcjoZ1ZZ07oJftCfa8w4TwQheX8tM=) 4: 3130332e32342e35382e302f32342d3234203d3e203436303532.roa (hash: UA+YdwLCDED5UMDmCG4dNPuGHlL+yaAK93vKKhIdDPg=) 5: 3130332e32342e35362e302f32342d3234203d3e203436303532.roa (hash: hCsETlpD6R/zfRJVkzNBOTiAfvvIYDjPCkGRa8bOeSk=) 6: 3230322e392e38352e302f32342d3234203d3e203436303532.roa (hash: lsGPNQll8lHqimmyJl12NLTMwKg8Yil8iz0vwp/l9l4=) 7: 59406D6B894D2596F895003DEE4D8D96CC43B39F.crl (hash: W+0OjDyoCqgCtcdETJRyVBfwtOv/P6bqicZeJlukfDY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cf:95:06:36:0d:62:3a:c5:6b:f7:d3:d2:6c:18:f6:36:97:d4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Validity Not Before: Jul 20 14:09:15 2026 GMT Not After : Jul 21 14:56:15 2026 GMT Subject: CN=3A6441C4F399944536A39C4F0D6C0EA67547D553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a3:34:3b:b3:78:00:7a:9f:e0:2c:46:0e:18: 38:44:45:07:15:b8:52:38:24:1b:97:c1:62:87:b3: 6e:47:02:1b:ea:8b:a5:38:0c:dd:47:8b:4e:ae:ab: 8c:a5:e3:75:89:0f:ad:f3:9b:11:e3:66:73:9b:cf: fb:ca:90:d5:5c:12:e6:80:fe:b6:cd:ea:cb:b9:25: 2b:1c:57:47:68:4d:f8:05:1a:cd:52:1e:4f:9e:84: 65:4f:b8:21:99:43:ae:af:db:8c:70:30:79:d5:ca: ed:fb:6c:a1:90:f2:b5:ae:a7:2d:0c:5b:86:c9:cb: 68:b7:d9:32:7a:16:e7:5b:99:c4:98:d9:79:4a:26: 17:1f:12:77:d5:35:b5:3e:b6:80:b0:9e:25:fd:15: 8f:1d:19:de:34:27:95:c9:bd:49:ff:e6:ed:12:ef: 52:ba:cf:0c:b0:19:3b:f6:72:fe:e4:10:5d:91:0b: 98:55:d4:19:a3:ce:c1:eb:cc:10:eb:7f:32:ca:85: e6:30:42:35:23:c5:e7:50:98:2f:07:20:b7:5c:a7: c3:09:49:c6:86:7d:c6:88:31:fb:c1:d9:49:2b:15: 5b:b1:27:04:6a:4e:8f:5a:85:ed:6f:a0:b9:85:64: 98:36:d7:81:c6:89:23:34:5b:2d:a9:e7:a0:69:cb: 35:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:64:41:C4:F3:99:94:45:36:A3:9C:4F:0D:6C:0E:A6:75:47:D5:53 X509v3 Authority Key Identifier: keyid:59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ac:2c:bd:8f:b7:8b:f1:7e:e5:96:57:e8:dc:5c:36:bb:48: 90:3f:86:8b:4e:ba:60:da:18:06:bc:92:f1:95:0b:d5:75:a9: ee:ea:87:ba:08:13:62:b8:63:07:a9:78:fe:3f:18:29:8f:a3: dc:ab:a4:50:38:9b:23:25:d0:17:c8:26:bc:c0:0c:21:04:4d: 0a:9e:61:81:e8:bf:fe:4e:5c:79:e3:e5:0b:23:ba:f2:bc:e1: 4d:6b:06:24:be:eb:cd:e0:c8:c4:4a:c5:81:ed:d8:e2:ba:a2: 67:6c:31:54:6a:0c:1e:c5:79:b3:8a:2c:c0:11:82:01:76:a1: ee:04:04:97:c0:c1:d2:a5:d2:eb:74:e4:54:5f:a1:6a:8a:c2: e3:11:98:c8:3c:34:ef:e7:f8:6e:bb:fd:b6:0a:e8:46:16:4b: e5:1c:60:f4:53:ff:cd:f5:fc:54:2c:af:3b:68:87:c4:a1:eb: 9b:6b:8d:5b:06:7b:38:15:34:e7:d3:f8:ed:70:dc:1d:bc:68: 31:c7:34:10:11:f1:ed:9d:dc:7d:dc:9c:bd:9c:bf:74:97:1a: 42:28:af:7f:47:97:71:de:99:2d:b8:5f:3e:73:bd:79:39:36: de:1d:31:cf:2e:7a:a4:6c:06:34:a5:04:dc:eb:c9:0b:52:77: 57:1f:6e:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTM+VBjYNYjrFa/fT0mwY9jaX1HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhEOTZD QzQzQjM5RjAeFw0yNjA3MjAxNDA5MTVaFw0yNjA3MjExNDU2MTVaMDMxMTAvBgNV BAMTKDNBNjQ0MUM0RjM5OTk0NDUzNkEzOUM0RjBENkMwRUE2NzU0N0Q1NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLozQ7s3gAep/gLEYOGDhERQcV uFI4JBuXwWKHs25HAhvqi6U4DN1Hi06uq4yl43WJD63zmxHjZnObz/vKkNVcEuaA /rbN6su5JSscV0doTfgFGs1SHk+ehGVPuCGZQ66v24xwMHnVyu37bKGQ8rWupy0M W4bJy2i32TJ6FudbmcSY2XlKJhcfEnfVNbU+toCwniX9FY8dGd40J5XJvUn/5u0S 71K6zwywGTv2cv7kEF2RC5hV1BmjzsHrzBDrfzLKheYwQjUjxedQmC8HILdcp8MJ ScaGfcaIMfvB2UkrFVuxJwRqTo9ahe1voLmFZJg214HGiSM0Wy2p56BpyzX7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOmRBxPOZlEU2o5xPDWwOpnVH1VMwHwYDVR0j BBgwFoAUWUBta4lNJZb4lQA97k2NlsxDs58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxZWU1ZTItMzM4Yy00ZDIwLTgwN2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4 OTREMjU5NkY4OTUwMDNERUU0RDhEOTZDQzQzQjM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTQwNkQ2Qjg5NEQyNTk2Rjg5NTAwM0RFRTREOEQ5NkNDNDNC MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxZWU1ZTItMzM4Yy00ZDIwLTgw N2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhE OTZDQzQzQjM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKsLL2Pt4vxfuWWV+jcXDa7SJA/hotOumDa GAa8kvGVC9V1qe7qh7oIE2K4YwepeP4/GCmPo9yrpFA4myMl0BfIJrzADCEETQqe YYHov/5OXHnj5QsjuvK84U1rBiS+683gyMRKxYHt2OK6omdsMVRqDB7FebOKLMAR ggF2oe4EBJfAwdKl0ut05FRfoWqKwuMRmMg8NO/n+G67/bYK6EYWS+UcYPRT/831 /FQsrztoh8Sh65trjVsGezgVNOfT+O1w3B28aDHHNBAR8e2d3H3cnL2cv3SXGkIo r39Hl3HemS24Xz5zvXk5Nt4dMc8ueqRsBjSlBNzryQtSd1cfbjc= -----END CERTIFICATE-----Generated at Tue Jul 21 06:42:09 2026 by rpki-client