
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
File: 59A9AB370F753D82771987E2FD7CA19578E11D07.mft (raw, json)
Hash identifier: ADvZ/tmqrejqe1e2enuBI8jTBs3OieGBdqelrPskDfI=
Subject key identifier: B4:53:88:FA:12:58:E7:47:33:41:F0:ED:28:A3:A8:90:72:69:13:21
Authority key identifier: 59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07
Certificate issuer: /CN=59A9AB370F753D82771987E2FD7CA19578E11D07
Certificate serial: 0C76FE361AC407FD067DC83DD703125855B9BC78
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 02:59:29 +0000
Manifest this update: Tue 21 Jul 2026 02:54:29 +0000
Manifest next update: Wed 22 Jul 2026 06:48:29 +0000
Files and hashes: 1: 3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (hash: UPB/qBUFP9GqScWdxOKoCFaWZdy0EEvs2yjoMI9jaZ0=)
2: 3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa (hash: 97CqSuEAmLm9b7GhTnzhH7E+h2iIk2MyDfPBWHarXus=)
3: 59A9AB370F753D82771987E2FD7CA19578E11D07.crl (hash: MAZE+04ij6ealvx4EF1J8n8tjPeo0/a2nWrc/Zc5ueE=)
4: 3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (hash: fcfvoG+f+IeB/aOvvSuH4jigNm/P9oaHKcA8ozVTJ2c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl
rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:76:fe:36:1a:c4:07:fd:06:7d:c8:3d:d7:03:12:58:55:b9:bc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59A9AB370F753D82771987E2FD7CA19578E11D07
Validity
Not Before: Jul 21 02:54:29 2026 GMT
Not After : Jul 22 06:48:29 2026 GMT
Subject: CN=B45388FA1258E7473341F0ED28A3A89072691321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:fb:27:e0:48:28:51:49:56:00:97:28:7c:
95:7a:15:15:f6:43:b3:1f:7a:95:d2:22:02:3e:d6:
77:30:2c:29:06:e6:6e:26:83:6e:5e:f5:aa:58:5b:
74:53:b4:a0:c5:da:23:24:e5:59:a1:8d:2f:8f:5b:
76:fa:6b:c3:eb:5a:52:be:70:e0:88:c7:4b:4e:c3:
bb:f0:53:a7:c1:ea:bd:66:43:f0:08:37:e7:88:20:
80:3f:ac:89:10:b1:8f:9a:67:5f:26:98:ca:ed:eb:
c0:74:b6:0d:fd:a7:9e:5b:25:ff:1f:84:0e:f6:58:
af:56:f3:b3:ef:d4:98:e2:4b:d8:77:34:38:f5:6a:
f0:71:b0:e2:8b:dd:41:24:f7:21:ad:b4:e2:fc:22:
f1:4a:5c:c6:d3:62:fc:03:a4:d4:a2:74:7d:77:e3:
d8:92:bc:52:cf:d7:a8:2c:38:ef:c6:4e:12:1c:dd:
29:f1:f5:a5:2a:90:d5:02:20:6e:c9:14:2e:14:25:
d8:4f:24:40:a7:9f:d4:2a:a3:e3:f4:2e:b5:4c:96:
8e:a5:54:87:4c:99:05:fc:f1:c2:bf:20:6b:84:7e:
e6:27:fa:8f:72:1f:4b:43:6d:48:52:64:04:2b:4f:
c8:e5:4a:02:66:9f:7a:8d:5c:c5:3e:40:24:bb:49:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:53:88:FA:12:58:E7:47:33:41:F0:ED:28:A3:A8:90:72:69:13:21
X509v3 Authority Key Identifier:
keyid:59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3b:f5:3c:52:0f:ee:bd:68:3b:a1:13:75:23:3b:85:24:a6:
96:d5:e4:a9:ec:58:fc:4e:e2:94:c2:ba:b6:1a:45:ee:13:73:
c8:c9:46:f5:13:50:b9:75:6a:30:a2:7c:ce:14:46:9b:e4:3f:
ae:00:bf:b6:10:ae:58:ea:0a:22:7a:4b:c5:91:24:34:3b:b5:
9c:dd:55:20:d3:96:c5:2b:f9:b5:fe:14:e9:46:36:94:f3:f2:
99:ea:e5:10:6e:34:50:25:46:18:01:95:a7:01:85:83:6c:2b:
46:a9:2d:24:9a:d6:26:5b:67:8b:23:e4:b9:81:df:18:6e:d5:
11:10:5c:cf:0b:0f:16:cb:93:38:8a:cd:7d:f2:f8:66:68:4c:
8a:13:94:48:7c:44:b6:6f:dc:4b:73:e3:cc:34:dd:d8:2d:02:
3b:63:15:5c:55:91:e3:5a:c4:70:f1:52:dc:0e:ff:f0:7f:8e:
bb:a7:91:67:e3:a7:2a:18:d1:8c:61:05:d3:0b:d2:a5:a6:6f:
c4:72:1c:57:5d:9c:16:54:a5:68:d9:9e:7d:94:5a:69:e4:70:
54:40:4a:3e:ec:9c:7b:46:be:7c:dc:d8:0d:ad:28:93:b5:88:
f9:48:16:cd:95:c6:bd:db:cc:f8:25:1a:a0:a3:c1:34:57:c6:
70:79:72:d7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDHb+NhrEB/0Gfcg91wMSWFW5vHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlBOUFCMzcwRjc1M0Q4Mjc3MTk4N0UyRkQ3Q0ExOTU3
OEUxMUQwNzAeFw0yNjA3MjEwMjU0MjlaFw0yNjA3MjIwNjQ4MjlaMDMxMTAvBgNV
BAMTKEI0NTM4OEZBMTI1OEU3NDczMzQxRjBFRDI4QTNBODkwNzI2OTEzMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFG/sn4EgoUUlWAJcofJV6FRX2
Q7MfepXSIgI+1ncwLCkG5m4mg25e9apYW3RTtKDF2iMk5VmhjS+PW3b6a8PrWlK+
cOCIx0tOw7vwU6fB6r1mQ/AIN+eIIIA/rIkQsY+aZ18mmMrt68B0tg39p55bJf8f
hA72WK9W87Pv1JjiS9h3NDj1avBxsOKL3UEk9yGttOL8IvFKXMbTYvwDpNSidH13
49iSvFLP16gsOO/GThIc3Snx9aUqkNUCIG7JFC4UJdhPJECnn9Qqo+P0LrVMlo6l
VIdMmQX88cK/IGuEfuYn+o9yH0tDbUhSZAQrT8jlSgJmn3qNXMU+QCS7SYpZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUtFOI+hJY50czQfDtKKOokHJpEyEwHwYDVR0j
BBgwFoAUWamrNw91PYJ3GYfi/XyhlXjhHQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2M2MGE2YzEtYzA4MS00MzliLWFlOGQtODE0OWI2MzRkNWEyLzAvNTlBOUFCMzcw
Rjc1M0Q4Mjc3MTk4N0UyRkQ3Q0ExOTU3OEUxMUQwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81OUE5QUIzNzBGNzUzRDgyNzcxOTg3RTJGRDdDQTE5NTc4RTEx
RDA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M2MGE2YzEtYzA4MS00MzliLWFl
OGQtODE0OWI2MzRkNWEyLzAvNTlBOUFCMzcwRjc1M0Q4Mjc3MTk4N0UyRkQ3Q0Ex
OTU3OEUxMUQwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEo79TxSD+69aDuhE3UjO4UkppbV5KnsWPxO
4pTCurYaRe4Tc8jJRvUTULl1ajCifM4URpvkP64Av7YQrljqCiJ6S8WRJDQ7tZzd
VSDTlsUr+bX+FOlGNpTz8pnq5RBuNFAlRhgBlacBhYNsK0apLSSa1iZbZ4sj5LmB
3xhu1REQXM8LDxbLkziKzX3y+GZoTIoTlEh8RLZv3Etz48w03dgtAjtjFVxVkeNa
xHDxUtwO//B/jrunkWfjpyoY0YxhBdML0qWmb8RyHFddnBZUpWjZnn2UWmnkcFRA
Sj7snHtGvnzc2A2tKJO1iPlIFs2Vxr3bzPglGqCjwTRXxnB5ctc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 08:37:57 2026 by rpki-client