$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft File: 587FA9FD682D37BC3028319A65BCAECCE276314F.mft (raw, json) Hash identifier: QhP0+X6uzdQeOr9KisMgxQufT9Nw37+yq6V26cf/Xmw= Subject key identifier: FB:9A:0D:36:48:C5:D5:BA:EA:BE:F3:83:39:DF:98:CB:DD:E4:11:C3 Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Certificate issuer: /CN=587FA9FD682D37BC3028319A65BCAECCE276314F Certificate serial: 773FEB560EE73D5215311DD6D34DA96B4F7D9FA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft Manifest number: 91 Signing time: Wed 19 Aug 2026 17:45:28 +0000 Manifest this update: Wed 19 Aug 2026 17:40:28 +0000 Manifest next update: Thu 20 Aug 2026 19:11:28 +0000 Files and hashes: 1: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: 7DRv9+zjmRuZ1Cj6e3MgFUBLnLf0dtLBblIHUDPlQ+w=) 2: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: VSpKbDClpDylxx1rB7LnMubAcuRSyIs4GzhBBvXtPpM=) 3: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 5zg0GIi7yUDtLBjsDWQRXMmLy9VH8ssv+xs3UioSD6g=) 4: 587FA9FD682D37BC3028319A65BCAECCE276314F.crl (hash: RGgejtmQ1HexExBxqXkRj42+n+4BwiUozorPP/3gIL8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 19:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:3f:eb:56:0e:e7:3d:52:15:31:1d:d6:d3:4d:a9:6b:4f:7d:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Validity Not Before: Aug 19 17:40:28 2026 GMT Not After : Aug 20 19:11:28 2026 GMT Subject: CN=FB9A0D3648C5D5BAEABEF38339DF98CBDDE411C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:4a:02:d4:5b:bd:fa:92:a9:66:fc:44:1e: 71:78:d7:f6:d4:ec:aa:7d:a3:57:a5:14:5a:98:81: df:d8:6a:fa:b9:4a:26:9e:ee:15:96:f8:5a:e4:7c: 19:2f:b9:b6:76:25:07:30:ac:c5:6b:34:9e:f3:b4: 14:25:1e:5d:d5:61:28:2f:50:3f:40:51:d2:ea:63: ad:dc:73:bb:85:d1:a0:cf:98:2c:45:65:02:74:19: af:74:5a:74:c0:80:6d:2c:ab:7d:a5:b5:d7:ad:e8: 38:d7:97:8e:4b:f7:d2:1e:37:dd:4e:f8:3c:af:97: 34:65:74:8c:40:4e:3a:00:7a:60:40:da:ee:ee:22: 27:43:8b:a5:25:68:9c:26:4e:cc:0d:20:5e:8e:8f: 34:9d:c8:cd:b1:92:c1:94:97:6d:57:5b:06:77:e5: 07:38:bd:0f:f5:57:2d:9a:74:48:95:bc:fa:38:67: 2e:f8:e2:4f:e1:62:4a:8d:57:ad:5b:6e:52:29:e6: a0:f3:f7:35:18:25:4a:26:eb:88:47:72:c1:f3:8b: 4a:4d:ca:b3:ee:dd:a4:a5:b5:26:89:24:93:c3:17: ad:69:69:51:8a:bb:60:0a:0e:cb:92:bf:b6:69:59: de:69:b2:98:18:79:ea:f4:61:97:3a:96:2e:46:91: 6c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9A:0D:36:48:C5:D5:BA:EA:BE:F3:83:39:DF:98:CB:DD:E4:11:C3 X509v3 Authority Key Identifier: keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1e:b5:bd:de:4c:1b:8a:af:20:29:9a:53:17:57:59:44:19: 4a:5e:1e:62:66:9b:23:e4:e0:fb:1b:fd:2d:2b:47:4a:9a:45: 91:a4:00:e2:44:55:8a:10:9b:0f:46:be:b3:b5:ad:2a:f8:68: f6:fa:40:cc:02:3e:b5:4d:06:c9:43:2a:db:9c:5b:6e:bb:8e: 05:2d:e6:87:a0:03:95:7d:36:29:a1:8a:f4:53:3c:57:c5:9b: e3:72:8b:b7:07:a4:28:23:74:a4:00:9a:66:e4:22:ba:55:48: d1:26:47:3d:39:6f:e8:24:7f:da:a6:3f:93:b4:14:97:98:2b: 22:a5:1e:42:0b:a6:44:d3:3e:f7:d9:e0:aa:3b:93:d4:8e:51: 00:da:3f:74:5a:ad:30:31:fd:60:f6:ca:1a:97:1f:c7:cd:60: af:df:7e:d8:81:e4:d6:5e:b7:0f:87:76:df:ad:11:41:c7:86: 73:2b:f8:95:c4:81:28:ef:9c:ac:d9:56:dc:88:8b:15:95:be: 07:d4:c9:fe:81:8a:55:11:08:c3:1b:a3:58:8b:82:2d:3b:00: db:52:f9:cb:a2:f5:69:2b:67:fa:6e:1f:24:cd:fe:42:f3:bb: 17:2f:0a:26:eb:4f:a8:51:b2:d4:e4:86:33:6b:c3:75:d0:b7: da:7c:f9:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdz/rVg7nPVIVMR3W002pa099n6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NF Mjc2MzE0RjAeFw0yNjA4MTkxNzQwMjhaFw0yNjA4MjAxOTExMjhaMDMxMTAvBgNV BAMTKEZCOUEwRDM2NDhDNUQ1QkFFQUJFRjM4MzM5REY5OENCRERFNDExQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx50oC1Fu9+pKpZvxEHnF41/bU 7Kp9o1elFFqYgd/Yavq5Siae7hWW+FrkfBkvubZ2JQcwrMVrNJ7ztBQlHl3VYSgv UD9AUdLqY63cc7uF0aDPmCxFZQJ0Ga90WnTAgG0sq32ltdet6DjXl45L99IeN91O +DyvlzRldIxATjoAemBA2u7uIidDi6UlaJwmTswNIF6OjzSdyM2xksGUl21XWwZ3 5Qc4vQ/1Vy2adEiVvPo4Zy744k/hYkqNV61bblIp5qDz9zUYJUom64hHcsHzi0pN yrPu3aSltSaJJJPDF61paVGKu2AKDsuSv7ZpWd5pspgYeer0YZc6li5GkWwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+5oNNkjF1brqvvODOd+Yy93kEcMwHwYDVR0j BBgwFoAUWH+p/WgtN7wwKDGaZbyuzOJ2MU8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmYTNiNjQtM2M2MS00OGQ1LWFiMGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2 ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NFMjc2MzE0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODdGQTlGRDY4MkQzN0JDMzAyODMxOUE2NUJDQUVDQ0UyNzYz MTRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FF Q0NFMjc2MzE0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4etb3eTBuKryApmlMXV1lEGUpeHmJmmyPk 4Psb/S0rR0qaRZGkAOJEVYoQmw9GvrO1rSr4aPb6QMwCPrVNBslDKtucW267jgUt 5oegA5V9NimhivRTPFfFm+Nyi7cHpCgjdKQAmmbkIrpVSNEmRz05b+gkf9qmP5O0 FJeYKyKlHkILpkTTPvfZ4Ko7k9SOUQDaP3RarTAx/WD2yhqXH8fNYK/fftiB5NZe tw+Hdt+tEUHHhnMr+JXEgSjvnKzZVtyIixWVvgfUyf6BilURCMMbo1iLgi07ANtS +cui9WkrZ/puHyTN/kLzuxcvCibrT6hRstTkhjNrw3XQt9p8+WQ= -----END CERTIFICATE-----Generated at Thu Aug 20 07:01:28 2026 by rpki-client