$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft File: 587FA9FD682D37BC3028319A65BCAECCE276314F.mft (raw, json) Hash identifier: R9uA+DqHNgyo7iSjCxBeNakruoiDEQQNmP60iIeZf6A= Subject key identifier: EA:84:36:36:0E:0B:E1:27:86:99:AB:6A:20:2B:B9:15:F1:ED:B4:68 Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Certificate issuer: /CN=587FA9FD682D37BC3028319A65BCAECCE276314F Certificate serial: 0DD40954D40C583F21F8C1FF409565E6522EBBCB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 03:03:26 +0000 Manifest this update: Sat 20 Jun 2026 02:58:26 +0000 Manifest next update: Sun 21 Jun 2026 03:04:26 +0000 Files and hashes: 1: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: 7DRv9+zjmRuZ1Cj6e3MgFUBLnLf0dtLBblIHUDPlQ+w=) 2: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 5zg0GIi7yUDtLBjsDWQRXMmLy9VH8ssv+xs3UioSD6g=) 3: 587FA9FD682D37BC3028319A65BCAECCE276314F.crl (hash: DuNpHJnixGU9qVd2BPYlXyU/xJSGX2RxB/2BCXSbL84=) 4: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: VSpKbDClpDylxx1rB7LnMubAcuRSyIs4GzhBBvXtPpM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d4:09:54:d4:0c:58:3f:21:f8:c1:ff:40:95:65:e6:52:2e:bb:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Validity Not Before: Jun 20 02:58:26 2026 GMT Not After : Jun 21 03:04:26 2026 GMT Subject: CN=EA8436360E0BE1278699AB6A202BB915F1EDB468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:3c:46:fa:82:72:e0:b7:93:e4:03:59:59: ab:e0:56:21:75:0a:a9:08:8d:51:58:c3:01:57:d5: 0b:e0:40:59:27:ef:b6:f3:d3:0f:de:5c:27:71:ce: 1c:7e:5c:12:d4:09:4c:59:d6:10:90:3e:ee:c2:8a: b4:a6:80:d5:89:08:95:cb:d3:5d:f3:91:62:ac:b1: 90:11:f2:d9:2f:ac:46:b0:00:ce:64:15:26:d0:fb: 9c:9f:34:ea:a5:91:56:0a:56:b9:37:8a:74:ed:30: 3e:74:fe:20:f9:26:89:55:61:18:2c:ea:f7:25:c6: 57:1d:ac:df:e7:f4:ac:17:39:82:48:d0:e6:39:a6: b7:49:b4:82:f9:8b:5b:bd:ae:fa:a0:ab:67:e8:0d: bb:bc:f1:b4:e5:18:8e:4f:57:ac:df:67:2a:fb:c2: 4a:89:98:11:df:19:07:88:00:52:c4:32:b7:58:5e: 7b:11:2d:e2:96:08:ad:bf:70:a0:4a:2b:b0:66:bc: c0:a7:6b:97:c1:fc:2d:74:3f:9d:5c:50:39:53:2f: c8:e3:39:32:91:2d:86:d1:04:a3:41:5b:56:ae:2f: 4a:3d:a7:ab:8b:92:e0:61:ab:48:f1:4e:03:be:c6: f2:98:68:ed:68:9a:74:7b:81:78:04:f1:47:d2:5a: a1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:84:36:36:0E:0B:E1:27:86:99:AB:6A:20:2B:B9:15:F1:ED:B4:68 X509v3 Authority Key Identifier: keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0c:ec:d6:32:e0:d1:10:45:fb:81:a8:c8:5f:8f:27:b1:25: 91:d5:47:17:da:fc:89:2e:eb:c0:50:c8:a5:41:d9:65:b7:8c: f2:b9:9f:dd:43:ab:04:f4:28:17:24:bf:0b:3a:4c:ce:84:b0: df:0a:c6:05:b9:e6:40:c4:6d:10:0c:53:a2:44:87:68:bd:27: 21:de:c0:7f:f7:5f:30:32:5f:92:6d:a7:a3:e3:df:df:41:46: 9e:fc:68:9e:f4:5c:86:3e:d9:73:74:f8:cf:74:5c:2b:06:a5: af:2a:db:58:79:53:0c:85:b2:d2:08:19:fe:0a:14:bd:76:26: 47:15:1b:4e:bc:91:28:22:97:b2:0d:c5:48:0a:4e:b1:92:68: 82:a7:32:69:1f:d5:44:a4:89:bd:aa:5d:a8:32:ed:f4:bb:80: 7b:3f:c5:2d:89:dd:c6:36:b2:7f:21:dc:3e:20:f5:05:9d:a5: 9a:45:d5:13:c3:d3:6b:b3:da:21:df:fc:8c:90:e2:0d:e0:81: cc:96:2b:30:be:71:07:2b:05:5b:7f:7a:a9:eb:a5:35:68:ff: ee:62:e1:dd:64:17:f6:d6:28:64:ca:4e:01:cb:f0:60:8f:24: 63:4a:c3:47:7a:da:26:8f:ea:d3:9a:c3:b9:20:ab:f4:c8:3a: 0d:c3:10:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDdQJVNQMWD8h+MH/QJVl5lIuu8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NF Mjc2MzE0RjAeFw0yNjA2MjAwMjU4MjZaFw0yNjA2MjEwMzA0MjZaMDMxMTAvBgNV BAMTKEVBODQzNjM2MEUwQkUxMjc4Njk5QUI2QTIwMkJCOTE1RjFFREI0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmozxG+oJy4LeT5ANZWavgViF1 CqkIjVFYwwFX1QvgQFkn77bz0w/eXCdxzhx+XBLUCUxZ1hCQPu7CirSmgNWJCJXL 013zkWKssZAR8tkvrEawAM5kFSbQ+5yfNOqlkVYKVrk3inTtMD50/iD5JolVYRgs 6vclxlcdrN/n9KwXOYJI0OY5prdJtIL5i1u9rvqgq2foDbu88bTlGI5PV6zfZyr7 wkqJmBHfGQeIAFLEMrdYXnsRLeKWCK2/cKBKK7BmvMCna5fB/C10P51cUDlTL8jj OTKRLYbRBKNBW1auL0o9p6uLkuBhq0jxTgO+xvKYaO1omnR7gXgE8UfSWqFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6oQ2Ng4L4SeGmatqICu5FfHttGgwHwYDVR0j BBgwFoAUWH+p/WgtN7wwKDGaZbyuzOJ2MU8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmYTNiNjQtM2M2MS00OGQ1LWFiMGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2 ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NFMjc2MzE0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODdGQTlGRDY4MkQzN0JDMzAyODMxOUE2NUJDQUVDQ0UyNzYz MTRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FF Q0NFMjc2MzE0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQM7NYy4NEQRfuBqMhfjyexJZHVRxfa/Iku 68BQyKVB2WW3jPK5n91DqwT0KBckvws6TM6EsN8KxgW55kDEbRAMU6JEh2i9JyHe wH/3XzAyX5Jtp6Pj399BRp78aJ70XIY+2XN0+M90XCsGpa8q21h5UwyFstIIGf4K FL12JkcVG068kSgil7INxUgKTrGSaIKnMmkf1USkib2qXagy7fS7gHs/xS2J3cY2 sn8h3D4g9QWdpZpF1RPD02uz2iHf/IyQ4g3ggcyWKzC+cQcrBVt/eqnrpTVo/+5i 4d1kF/bWKGTKTgHL8GCPJGNKw0d62iaP6tOaw7kgq/TIOg3DEGM= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:29 2026 by rpki-client