$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft File: 585117D9F8A558479018DDF94830A5C4C66BA76D.mft (raw, json) Hash identifier: 1IUpJY91o5gw7Glr70/rXfDSRDlTftfRmgUawmLP/t8= Subject key identifier: 57:0F:54:19:32:39:08:18:68:26:A1:95:EE:06:40:9E:46:11:53:84 Authority key identifier: 58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D Certificate issuer: /CN=585117D9F8A558479018DDF94830A5C4C66BA76D Certificate serial: 1AC9A56D4D53AB28914596A63296F167EBCF1530 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 16:19:42 +0000 Manifest this update: Tue 02 Jun 2026 16:14:42 +0000 Manifest next update: Wed 03 Jun 2026 17:27:42 +0000 Files and hashes: 1: 585117D9F8A558479018DDF94830A5C4C66BA76D.crl (hash: hxTLU8wh+FGCYVZvQFWkbSM/4XIBGl3y9K+KFCsiLt0=) 2: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: eTmPN3t/PaM9CQFDKpglxNKRVsgYw16hoKgfbTOHlZI=) 3: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: DEKb4ykdIazHfvN+oGnSyAdKUSNIiAHPtDoT+tw15P8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 17:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c9:a5:6d:4d:53:ab:28:91:45:96:a6:32:96:f1:67:eb:cf:15:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585117D9F8A558479018DDF94830A5C4C66BA76D Validity Not Before: Jun 2 16:14:42 2026 GMT Not After : Jun 3 17:27:42 2026 GMT Subject: CN=570F5419323908186826A195EE06409E46115384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:45:f9:07:cc:b4:39:f9:44:e7:39:4e:d6: 74:2d:e3:2c:6f:05:66:90:f4:99:d7:00:c0:f3:ec: 0c:e4:3a:cb:e6:de:41:02:88:03:f7:8e:7c:f4:b9: c1:75:96:da:d6:39:9f:9e:31:57:c1:61:59:58:2d: 43:a1:13:e6:94:50:54:fb:e4:7d:77:c4:42:d9:6c: 9b:13:c9:67:3f:c4:92:b2:6d:07:ad:25:aa:05:50: 32:46:9d:28:d8:ec:b9:fc:38:12:df:37:3d:0f:69: 77:aa:24:80:55:ee:a0:07:0d:31:12:8f:39:7f:7c: 9c:29:33:88:fa:32:0f:ca:d5:7e:7a:46:99:fe:ad: 8e:5b:36:02:2a:3e:cc:e3:1b:d1:46:e5:3b:03:15: 53:c5:31:b7:9d:cb:ac:0b:23:e3:8c:09:79:6d:3b: c7:05:80:bf:5f:14:0a:af:75:0a:c3:5b:cf:04:70: 0a:4f:84:32:26:6b:53:29:de:91:18:36:db:7d:b9: 42:d6:af:e6:53:6c:77:cb:df:e1:f9:a2:0d:4b:8c: 5b:ff:a7:d1:9a:65:36:cc:30:07:e0:9f:86:29:de: fb:43:8c:de:69:1e:54:dd:09:8c:4c:d1:5a:34:a8: c2:7b:81:76:76:0d:ab:bb:47:44:7e:e6:7d:ab:9c: ad:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0F:54:19:32:39:08:18:68:26:A1:95:EE:06:40:9E:46:11:53:84 X509v3 Authority Key Identifier: keyid:58:51:17:D9:F8:A5:58:47:90:18:DD:F9:48:30:A5:C4:C6:6B:A7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/585117D9F8A558479018DDF94830A5C4C66BA76D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/585117D9F8A558479018DDF94830A5C4C66BA76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:11:ce:b2:70:d7:35:62:f8:54:2f:78:bb:db:e0:46:f4:76: 22:c2:60:7c:9f:bc:5d:8e:02:95:4b:44:bb:ee:88:fe:4a:12: d8:dc:e9:ca:2d:50:82:cf:73:df:88:ae:b8:b2:49:b6:41:df: ff:42:68:73:47:d5:4f:66:ac:9b:a9:05:8e:4b:62:58:49:6c: 6c:89:e2:d5:dc:48:8d:f1:ce:7d:33:e5:5a:0e:6c:4d:b4:58: 49:4e:0a:b7:16:3c:29:e4:3b:94:79:d1:4d:05:c6:6a:b0:8b: 35:6f:43:c8:ed:f6:e9:1e:b1:42:cc:3f:b2:1e:81:0e:4f:d5: f3:46:53:13:36:fe:a4:ed:42:ab:38:cf:39:0d:71:50:e9:05: ab:ae:ec:8e:f5:55:d7:c2:30:f8:a5:df:8b:1b:08:82:aa:ab: 62:4d:9b:f9:11:7b:8f:a2:f0:bf:de:f5:fe:cf:ab:62:3c:90: e0:8e:42:ff:d3:db:d4:c6:dc:d4:d0:e1:e6:a9:96:99:80:66: c4:2f:ca:df:c3:2c:2e:63:ec:c9:02:c4:2c:9d:53:d9:f8:ae: 91:5b:ac:63:5f:b3:db:3c:a5:2b:d1:b0:f1:29:21:b9:8a:76: 46:4d:2e:62:42:55:74:ea:69:c7:85:a0:f4:89:2b:aa:52:66: 39:0d:d2:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsmlbU1TqyiRRZamMpbxZ+vPFTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1QzRD NjZCQTc2RDAeFw0yNjA2MDIxNjE0NDJaFw0yNjA2MDMxNzI3NDJaMDMxMTAvBgNV BAMTKDU3MEY1NDE5MzIzOTA4MTg2ODI2QTE5NUVFMDY0MDlFNDYxMTUzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1TEX5B8y0OflE5zlO1nQt4yxv BWaQ9JnXAMDz7AzkOsvm3kECiAP3jnz0ucF1ltrWOZ+eMVfBYVlYLUOhE+aUUFT7 5H13xELZbJsTyWc/xJKybQetJaoFUDJGnSjY7Ln8OBLfNz0PaXeqJIBV7qAHDTES jzl/fJwpM4j6Mg/K1X56Rpn+rY5bNgIqPszjG9FG5TsDFVPFMbedy6wLI+OMCXlt O8cFgL9fFAqvdQrDW88EcApPhDIma1Mp3pEYNtt9uULWr+ZTbHfL3+H5og1LjFv/ p9GaZTbMMAfgn4Yp3vtDjN5pHlTdCYxM0Vo0qMJ7gXZ2Dau7R0R+5n2rnK1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVw9UGTI5CBhoJqGV7gZAnkYRU4QwHwYDVR0j BBgwFoAUWFEX2filWEeQGN35SDClxMZrp20wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjhmY2E0MmYtODM2YS00MGVjLWE3NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlG OEE1NTg0NzkwMThEREY5NDgzMEE1QzRDNjZCQTc2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODUxMTdEOUY4QTU1ODQ3OTAxOERERjk0ODMwQTVDNEM2NkJB NzZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvNTg1MTE3RDlGOEE1NTg0NzkwMThEREY5NDgzMEE1 QzRDNjZCQTc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFERzrJw1zVi+FQveLvb4Eb0diLCYHyfvF2O ApVLRLvuiP5KEtjc6cotUILPc9+IrriySbZB3/9CaHNH1U9mrJupBY5LYlhJbGyJ 4tXcSI3xzn0z5VoObE20WElOCrcWPCnkO5R50U0FxmqwizVvQ8jt9ukesULMP7Ie gQ5P1fNGUxM2/qTtQqs4zzkNcVDpBauu7I71VdfCMPil34sbCIKqq2JNm/kRe4+i 8L/e9f7Pq2I8kOCOQv/T29TG3NTQ4eaplpmAZsQvyt/DLC5j7MkCxCydU9n4rpFb rGNfs9s8pSvRsPEpIbmKdkZNLmJCVXTqaceFoPSJK6pSZjkN0kA= -----END CERTIFICATE-----Generated at Wed Jun 3 04:07:48 2026 by rpki-client