$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft File: 587FA9FD682D37BC3028319A65BCAECCE276314F.mft (raw, json) Hash identifier: UlfehrdgVPbmcWSJSYm9L6yKfJb3rEvisAf5pJVBZcw= Subject key identifier: 1C:EA:83:40:4F:65:E0:2B:50:D7:E1:E6:8D:37:3E:7A:7D:49:BE:62 Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Certificate issuer: /CN=587FA9FD682D37BC3028319A65BCAECCE276314F Certificate serial: 747C6E597B5D1E0AC98138F5746CE9817B52BC0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft Manifest number: 05 Signing time: Tue 05 May 2026 09:12:10 +0000 Manifest this update: Tue 05 May 2026 09:07:10 +0000 Manifest next update: Wed 06 May 2026 13:07:10 +0000 Files and hashes: 1: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 5zg0GIi7yUDtLBjsDWQRXMmLy9VH8ssv+xs3UioSD6g=) 2: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: 7DRv9+zjmRuZ1Cj6e3MgFUBLnLf0dtLBblIHUDPlQ+w=) 3: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: VSpKbDClpDylxx1rB7LnMubAcuRSyIs4GzhBBvXtPpM=) 4: 587FA9FD682D37BC3028319A65BCAECCE276314F.crl (hash: Ng84gP84l+q1ZcOpsajfk+92dHfoYqUq2tTwYkavSos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7c:6e:59:7b:5d:1e:0a:c9:81:38:f5:74:6c:e9:81:7b:52:bc:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Validity Not Before: May 5 09:07:10 2026 GMT Not After : May 6 13:07:10 2026 GMT Subject: CN=1CEA83404F65E02B50D7E1E68D373E7A7D49BE62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c7:f0:0b:13:e1:ec:24:8b:c2:4d:06:a2:fc: 02:d7:e8:1a:b4:64:c9:e6:50:31:60:f0:9f:d1:39: 36:d4:2a:d0:77:0e:b7:e1:46:6c:45:3d:a6:02:ed: 6f:a7:48:71:14:9f:f1:64:2f:ae:d2:54:c8:7b:1f: ce:d3:b7:7a:0e:ac:1c:70:ff:52:49:3a:42:76:71: 63:3e:4c:b3:21:83:cc:10:59:84:6f:d6:64:20:69: b4:a6:97:65:65:68:3d:a2:e2:21:c8:85:66:4f:a4: dc:29:fc:fd:9d:46:84:f1:2c:9e:b0:52:76:0e:4a: 7d:af:4f:4d:49:b8:0d:73:97:0f:ff:1d:8a:ce:64: d5:a7:0b:50:1e:2e:bc:e4:46:a5:26:20:0e:20:9d: af:51:fe:fb:1c:62:22:27:0c:db:d9:6b:98:a5:fe: 27:a4:be:3a:8a:bb:b9:9e:13:5d:0b:f5:89:91:45: 4b:db:e8:aa:f0:ff:b3:72:44:e5:65:b3:11:b4:22: 91:ee:8b:00:a4:da:fc:ba:11:d3:cf:e6:39:23:ac: 5d:38:4d:2d:9a:a5:f9:f0:d4:cc:c4:a2:bd:5f:a7: 5a:9f:8b:2e:1b:4a:0a:14:c3:8d:ee:10:25:1f:6f: 52:72:09:9c:4c:77:9e:e5:f7:be:19:db:40:e2:ee: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EA:83:40:4F:65:E0:2B:50:D7:E1:E6:8D:37:3E:7A:7D:49:BE:62 X509v3 Authority Key Identifier: keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:21:8e:54:28:ee:d2:ed:99:9c:2b:bb:cc:d1:36:45:3a:74: bd:82:c0:17:3c:ec:33:ad:a4:75:a4:a0:c2:d6:19:5c:1e:d0: 3c:9a:17:bd:ea:53:95:ae:f0:af:a2:b3:55:47:48:41:f8:7b: cf:b3:ab:0c:47:76:25:45:a7:13:2e:0d:30:d4:a0:c3:52:26: 74:fd:c6:2c:aa:59:03:60:86:28:9f:6c:e1:03:f7:4e:28:19: 10:d7:30:76:15:b5:6a:d5:2f:73:4b:8f:6e:4c:c2:d0:f6:17: 4e:42:b3:3c:a4:42:8d:8a:54:0e:44:a8:be:c3:fa:7d:2d:39: 99:6e:dd:3c:61:23:89:5e:94:02:d3:ba:b1:9f:9f:93:e0:7a: 7d:20:7a:e4:f6:7d:03:92:56:70:0e:e9:22:ab:c5:f4:39:e7: aa:4e:3d:c2:93:86:66:c9:b2:7a:84:c4:0c:83:d8:9f:34:76: 03:f2:fa:2f:25:9e:3f:ba:82:7b:5d:8a:a0:f9:65:ae:f2:42: ed:40:b0:b5:f5:b5:19:8d:24:f3:b8:b4:00:92:df:e6:e6:52: 2b:f7:d6:b4:e8:de:1f:c5:d3:9b:e9:35:4f:3d:0e:72:31:e4: 8f:c4:f6:5a:a4:cd:a3:42:dc:c3:96:ab:20:20:15:2e:13:eb: d7:cc:47:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHxuWXtdHgrJgTj1dGzpgXtSvAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NF Mjc2MzE0RjAeFw0yNjA1MDUwOTA3MTBaFw0yNjA1MDYxMzA3MTBaMDMxMTAvBgNV BAMTKDFDRUE4MzQwNEY2NUUwMkI1MEQ3RTFFNjhEMzczRTdBN0Q0OUJFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTx/ALE+HsJIvCTQai/ALX6Bq0 ZMnmUDFg8J/ROTbUKtB3DrfhRmxFPaYC7W+nSHEUn/FkL67SVMh7H87Tt3oOrBxw /1JJOkJ2cWM+TLMhg8wQWYRv1mQgabSml2VlaD2i4iHIhWZPpNwp/P2dRoTxLJ6w UnYOSn2vT01JuA1zlw//HYrOZNWnC1AeLrzkRqUmIA4gna9R/vscYiInDNvZa5il /iekvjqKu7meE10L9YmRRUvb6Krw/7NyROVlsxG0IpHuiwCk2vy6EdPP5jkjrF04 TS2apfnw1MzEor1fp1qfiy4bSgoUw43uECUfb1JyCZxMd57l974Z20Di7t87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHOqDQE9l4CtQ1+HmjTc+en1JvmIwHwYDVR0j BBgwFoAUWH+p/WgtN7wwKDGaZbyuzOJ2MU8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmYTNiNjQtM2M2MS00OGQ1LWFiMGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2 ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NFMjc2MzE0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODdGQTlGRDY4MkQzN0JDMzAyODMxOUE2NUJDQUVDQ0UyNzYz MTRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FF Q0NFMjc2MzE0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANohjlQo7tLtmZwru8zRNkU6dL2CwBc87DOt pHWkoMLWGVwe0DyaF73qU5Wu8K+is1VHSEH4e8+zqwxHdiVFpxMuDTDUoMNSJnT9 xiyqWQNghiifbOED904oGRDXMHYVtWrVL3NLj25MwtD2F05CszykQo2KVA5EqL7D +n0tOZlu3TxhI4lelALTurGfn5Pgen0geuT2fQOSVnAO6SKrxfQ556pOPcKThmbJ snqExAyD2J80dgPy+i8lnj+6gntdiqD5Za7yQu1AsLX1tRmNJPO4tACS3+bmUiv3 1rTo3h/F05vpNU89DnIx5I/E9lqkzaNC3MOWqyAgFS4T69fMRzM= -----END CERTIFICATE-----Generated at Tue May 5 14:06:38 2026 by rpki-client