$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft File: 585117D9F8A558479018DDF94830A5C4C66BA76D.mft (raw, json) Hash identifier: BE31ClHUJirOFaojpZpYGLu+GvJNdj4hALtYraBn47Q= Subject key identifier: D4:9A:DD:57:D1:0B:21:81:BA:79:34:82:9A:07:48:58:9D:44:FB:E6 Authority key identifier: 58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D Certificate issuer: /CN=585117D9F8A558479018DDF94830A5C4C66BA76D Certificate serial: 1126CF9F9ABFE70710450428F1F27AB86A53846B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft Manifest number: F6 Signing time: Wed 04 Nov 2026 02:41:22 +0000 Manifest this update: Wed 04 Nov 2026 02:36:22 +0000 Manifest next update: Thu 05 Nov 2026 05:07:22 +0000 Files and hashes: 1: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: DEKb4ykdIazHfvN+oGnSyAdKUSNIiAHPtDoT+tw15P8=) 2: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: eTmPN3t/PaM9CQFDKpglxNKRVsgYw16hoKgfbTOHlZI=) 3: 585117D9F8A558479018DDF94830A5C4C66BA76D.crl (hash: 8O0Hrqfoewj6N0t8mbTdUlxDP4GqqCtqVV9WvRABUYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 05:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:26:cf:9f:9a:bf:e7:07:10:45:04:28:f1:f2:7a:b8:6a:53:84:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585117D9F8A558479018DDF94830A5C4C66BA76D Validity Not Before: Nov 4 02:36:22 2026 GMT Not After : Nov 5 05:07:22 2026 GMT Subject: CN=D49ADD57D10B2181BA7934829A0748589D44FBE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:79:9a:20:0e:fd:c5:8b:02:48:95:52:9e:41: c8:de:8e:49:39:cb:58:74:f2:cc:fa:ae:75:e5:e7: 09:30:6b:2d:bc:53:7b:54:0b:99:76:82:4f:31:78: ac:e8:a0:42:4d:66:2b:55:3b:6a:03:9e:29:a8:19: ed:8d:8e:e9:bb:b6:5c:e1:f2:ea:a1:9f:33:bc:b8: d5:bc:40:dc:14:c4:43:cd:17:08:51:78:d7:bd:2e: ea:50:ea:9c:dc:fd:7f:b4:bd:50:dc:a5:a7:c8:45: 19:1f:58:13:cf:e7:01:a6:03:99:28:6e:a1:89:4a: e9:9f:be:37:18:e8:73:34:03:c9:af:89:f5:00:59: 0a:b6:95:a1:e2:12:42:de:5a:9a:4c:dd:94:be:dc: c9:9c:67:06:79:67:c9:2d:e6:76:2d:a1:53:b7:3d: c4:61:60:41:02:df:a3:d8:94:70:4e:0a:b5:7d:c5: 9d:ad:ef:98:d2:df:65:67:2b:af:28:d2:a1:9d:80: c8:65:9d:ab:22:58:4c:7f:75:21:d0:34:51:ff:cf: 84:87:0b:5f:f1:10:bc:1a:da:24:1d:2b:5e:0a:50: e9:72:7d:f8:8f:e6:f7:47:2f:9b:9d:c2:0f:3a:3e: 4a:b9:db:49:03:69:df:a8:53:1b:dc:8d:69:9b:bf: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9A:DD:57:D1:0B:21:81:BA:79:34:82:9A:07:48:58:9D:44:FB:E6 X509v3 Authority Key Identifier: keyid:58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:45:5c:84:96:c6:64:19:3c:57:b5:4f:7b:ac:5f:e2:16:6d: b2:b7:2b:8f:eb:f4:32:be:c7:c7:de:e1:47:26:fe:64:2d:24: 7b:70:9f:f8:93:34:45:24:2f:c9:b6:4f:64:d2:9b:a8:7f:2e: 11:1d:76:4e:7c:70:88:ad:46:0d:27:09:f6:98:43:8f:0c:b0: f6:b7:72:71:48:c3:de:16:ed:a0:a1:dc:b9:3e:71:ce:cb:8b: 47:d1:a5:62:7f:89:e3:b8:55:6c:83:ca:8c:9a:5e:ab:e8:e3: 0f:e5:9a:61:d5:40:7d:f3:e8:a0:1a:ae:f6:80:2a:aa:e9:fe: bd:50:fd:11:64:05:2d:7d:13:b9:7a:1f:e1:2b:99:18:ad:0e: da:96:91:31:dc:e6:6f:9b:81:b6:4b:7f:20:13:cb:04:99:5c: 9e:17:e9:b9:f9:dc:67:1f:90:fa:3c:c7:02:63:14:3f:96:56: f3:e5:c1:3a:99:58:62:0d:1b:90:c4:be:2a:cf:94:e1:38:8a: da:b4:ff:00:84:d1:fb:64:db:89:14:fd:1b:86:8c:0c:1d:9f: 9c:e9:ae:f0:7b:80:0a:e1:80:0f:18:3f:76:ff:ae:2a:7e:82: b8:17:a8:04:42:da:53:19:44:c2:72:a6:d9:a1:17:ca:f4:08: fc:c8:f9:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUESbPn5q/5wcQRQQo8fJ6uGpThGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1QzRD NjZCQTc2RDAeFw0yNjExMDQwMjM2MjJaFw0yNjExMDUwNTA3MjJaMDMxMTAvBgNV BAMTKEQ0OUFERDU3RDEwQjIxODFCQTc5MzQ4MjlBMDc0ODU4OUQ0NEZCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDleZogDv3FiwJIlVKeQcjejkk5 y1h08sz6rnXl5wkway28U3tUC5l2gk8xeKzooEJNZitVO2oDnimoGe2Njum7tlzh 8uqhnzO8uNW8QNwUxEPNFwhReNe9LupQ6pzc/X+0vVDcpafIRRkfWBPP5wGmA5ko bqGJSumfvjcY6HM0A8mvifUAWQq2laHiEkLeWppM3ZS+3MmcZwZ5Z8kt5nYtoVO3 PcRhYEEC36PYlHBOCrV9xZ2t75jS32VnK68o0qGdgMhlnasiWEx/dSHQNFH/z4SH C1/xELwa2iQdK14KUOlyffiP5vdHL5udwg86Pkq520kDad+oUxvcjWmbv0HLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1JrdV9ELIYG6eTSCmgdIWJ1E++YwHwYDVR0j BBgwFoAUWFEX2filWEeQGN35SDClxMZrp20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhmY2E0MmYtODM2YS00MGVjLWE3NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlG OEE1NTg0NzkwMThEREY5NDgzMEE1QzRDNjZCQTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODUxMTdEOUY4QTU1ODQ3OTAxOERERjk0ODMwQTVDNEM2NkJB NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1 QzRDNjZCQTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1FXISWxmQZPFe1T3usX+IWbbK3K4/r9DK+ x8fe4Ucm/mQtJHtwn/iTNEUkL8m2T2TSm6h/LhEddk58cIitRg0nCfaYQ48MsPa3 cnFIw94W7aCh3Lk+cc7Li0fRpWJ/ieO4VWyDyoyaXqvo4w/lmmHVQH3z6KAarvaA Kqrp/r1Q/RFkBS19E7l6H+ErmRitDtqWkTHc5m+bgbZLfyATywSZXJ4X6bn53Gcf kPo8xwJjFD+WVvPlwTqZWGING5DEvirPlOE4itq0/wCE0ftk24kU/RuGjAwdn5zp rvB7gArhgA8YP3b/rip+grgXqARC2lMZRMJyptmhF8r0CPzI+YQ= -----END CERTIFICATE-----Generated at Thu Nov 5 03:03:23 2026 by rpki-client