$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft File: 587FA9FD682D37BC3028319A65BCAECCE276314F.mft (raw, json) Hash identifier: YrjvBBi5MQ10DOf4PenBzZXsrUGTZj9oERyjB88+zRI= Subject key identifier: EF:D2:10:5C:71:26:93:45:50:DF:49:B5:88:C3:5E:4B:B9:F1:2C:A1 Authority key identifier: 58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F Certificate issuer: /CN=587FA9FD682D37BC3028319A65BCAECCE276314F Certificate serial: 69D2B89B25A8CAA6674BA535E9FD3559E0F82B95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft Manifest number: DB Signing time: Wed 14 Oct 2026 11:29:50 +0000 Manifest this update: Wed 14 Oct 2026 11:24:50 +0000 Manifest next update: Thu 15 Oct 2026 13:30:50 +0000 Files and hashes: 1: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: 7DRv9+zjmRuZ1Cj6e3MgFUBLnLf0dtLBblIHUDPlQ+w=) 2: 587FA9FD682D37BC3028319A65BCAECCE276314F.crl (hash: Rn5vA5Prrqxr2v6dPWqNED0bSE2nuX6YzsbFrkhnAeU=) 3: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: VSpKbDClpDylxx1rB7LnMubAcuRSyIs4GzhBBvXtPpM=) 4: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: 5zg0GIi7yUDtLBjsDWQRXMmLy9VH8ssv+xs3UioSD6g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 13:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d2:b8:9b:25:a8:ca:a6:67:4b:a5:35:e9:fd:35:59:e0:f8:2b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587FA9FD682D37BC3028319A65BCAECCE276314F Validity Not Before: Oct 14 11:24:50 2026 GMT Not After : Oct 15 13:30:50 2026 GMT Subject: CN=EFD2105C7126934550DF49B588C35E4BB9F12CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ae:54:8b:7c:08:24:8a:b5:63:5a:00:25:a3: d6:55:c1:c6:c6:cd:1e:69:97:94:09:d4:57:11:49: ee:7a:83:75:c9:cb:f3:e3:bb:64:08:29:21:23:d2: d4:0e:42:bb:a6:97:de:27:df:68:3a:4a:2e:a8:88: ad:03:31:c9:14:f4:c4:7d:0a:b0:bc:a9:b7:92:d9: 8f:25:99:d5:de:59:bc:15:fc:73:5d:b2:e2:97:8b: 44:54:9b:fb:92:c4:3e:0a:cd:66:9a:f9:33:7d:64: e3:f9:6a:fd:8b:c3:78:db:2f:49:c1:e1:03:a3:63: 1d:19:d3:f1:77:c8:47:9c:f6:f8:6b:4c:d9:f1:41: 78:f9:75:a5:bd:0f:46:ad:52:f5:f9:d1:0e:70:e2: 94:33:1e:cc:b1:c5:50:ca:bd:bf:f1:14:2b:ff:be: 21:e7:18:e8:83:ef:6f:cb:59:c2:7c:b3:f4:6d:f6: 75:a0:6f:8b:3a:73:6b:19:b8:fe:52:ec:b2:35:40: e1:d2:63:63:0a:38:4c:00:dd:c6:ff:5d:82:0d:0d: e3:49:cf:3d:6a:ba:8f:12:53:d2:f2:3c:bd:c3:0e: 0b:3e:ca:a2:70:9f:c3:ac:2c:cc:25:b8:3d:cd:96: c0:22:3a:ff:9f:cf:9e:19:4b:ab:f2:9e:d7:33:75: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D2:10:5C:71:26:93:45:50:DF:49:B5:88:C3:5E:4B:B9:F1:2C:A1 X509v3 Authority Key Identifier: keyid:58:7F:A9:FD:68:2D:37:BC:30:28:31:9A:65:BC:AE:CC:E2:76:31:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/587FA9FD682D37BC3028319A65BCAECCE276314F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/587FA9FD682D37BC3028319A65BCAECCE276314F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:84:8e:d5:60:75:92:6e:da:e0:1d:76:86:14:af:2a:f5:14: b9:25:4b:01:f4:80:06:7e:22:fe:00:b2:8b:ed:35:e8:84:e4: 3d:53:9b:55:86:2a:8f:01:ac:cb:87:81:8c:c2:cd:b4:ed:a7: f5:16:eb:55:d4:d9:4f:86:da:47:e6:b9:89:78:8d:1d:38:7f: 34:21:13:19:60:b5:76:4b:b6:63:8c:31:7f:1c:a8:90:10:7f: a7:df:55:c9:6b:f7:9b:77:22:bf:68:e4:91:53:e8:66:7d:9d: 8c:47:93:ef:a0:c5:94:f9:17:a7:eb:c5:92:5f:a7:d1:97:7b: 91:fb:25:41:c9:66:78:d9:6c:a9:f7:d8:db:7a:29:f4:00:1d: 46:48:c9:94:8e:58:f8:22:34:6b:36:fc:05:f1:b5:d8:48:5b: 48:2a:63:20:55:67:25:c4:4a:87:f9:c5:45:0c:a2:14:5e:08: 28:e4:49:96:07:3c:c4:ad:b7:1c:ab:fa:10:35:66:fb:00:da: f8:dc:03:15:06:35:44:5c:8b:5a:40:ca:2f:8a:b9:08:a4:5a: 86:09:23:f3:95:f2:b7:94:f7:02:81:de:9a:a4:1d:93:c0:b7: da:b5:cd:16:da:13:af:73:49:a0:0e:b7:c5:c2:8f:c7:0a:65: 12:de:06:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadK4myWoyqZnS6U16f01WeD4K5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NF Mjc2MzE0RjAeFw0yNjEwMTQxMTI0NTBaFw0yNjEwMTUxMzMwNTBaMDMxMTAvBgNV BAMTKEVGRDIxMDVDNzEyNjkzNDU1MERGNDlCNTg4QzM1RTRCQjlGMTJDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rlSLfAgkirVjWgAlo9ZVwcbG zR5pl5QJ1FcRSe56g3XJy/Pju2QIKSEj0tQOQruml94n32g6Si6oiK0DMckU9MR9 CrC8qbeS2Y8lmdXeWbwV/HNdsuKXi0RUm/uSxD4KzWaa+TN9ZOP5av2Lw3jbL0nB 4QOjYx0Z0/F3yEec9vhrTNnxQXj5daW9D0atUvX50Q5w4pQzHsyxxVDKvb/xFCv/ viHnGOiD72/LWcJ8s/Rt9nWgb4s6c2sZuP5S7LI1QOHSY2MKOEwA3cb/XYINDeNJ zz1quo8SU9LyPL3DDgs+yqJwn8OsLMwluD3NlsAiOv+fz54ZS6vyntczdfv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU79IQXHEmk0VQ30m1iMNeS7nxLKEwHwYDVR0j BBgwFoAUWH+p/WgtN7wwKDGaZbyuzOJ2MU8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWZmYTNiNjQtM2M2MS00OGQ1LWFiMGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2 ODJEMzdCQzMwMjgzMTlBNjVCQ0FFQ0NFMjc2MzE0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODdGQTlGRDY4MkQzN0JDMzAyODMxOUE2NUJDQUVDQ0UyNzYz MTRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvNTg3RkE5RkQ2ODJEMzdCQzMwMjgzMTlBNjVCQ0FF Q0NFMjc2MzE0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMyEjtVgdZJu2uAddoYUryr1FLklSwH0gAZ+ Iv4AsovtNeiE5D1Tm1WGKo8BrMuHgYzCzbTtp/UW61XU2U+G2kfmuYl4jR04fzQh ExlgtXZLtmOMMX8cqJAQf6ffVclr95t3Ir9o5JFT6GZ9nYxHk++gxZT5F6frxZJf p9GXe5H7JUHJZnjZbKn32Nt6KfQAHUZIyZSOWPgiNGs2/AXxtdhIW0gqYyBVZyXE Sof5xUUMohReCCjkSZYHPMSttxyr+hA1ZvsA2vjcAxUGNURci1pAyi+KuQikWoYJ I/OV8reU9wKB3pqkHZPAt9q1zRbaE69zSaAOt8XCj8cKZRLeBqk= -----END CERTIFICATE-----Generated at Thu Oct 15 00:16:54 2026 by rpki-client