$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft File: 586C54F03B92F22D9291776AE79350296DB382C8.mft (raw, json) Hash identifier: caSfMS2Rw/zzE1GjSYSlBXcIlebf5KA/thUSV+f/+2k= Subject key identifier: 2C:7F:38:F6:19:03:9B:56:33:C2:1A:4C:86:D2:7C:48:0D:3A:1E:0A Authority key identifier: 58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8 Certificate issuer: /CN=586C54F03B92F22D9291776AE79350296DB382C8 Certificate serial: 20673FF1199CAC5025504E0C9BE476E5B164BA6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 00:13:59 +0000 Manifest this update: Thu 17 Sep 2026 00:08:59 +0000 Manifest next update: Fri 18 Sep 2026 01:54:59 +0000 Files and hashes: 1: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 9FI6xrUmyIDtdYUTIVth+tn1sleSPgc7MLrTjmuupW8=) 2: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: 02NTkzqK/LTvvPzyGLCIQvFXPCqfEGOd/i/Q/MdPoH8=) 3: 586C54F03B92F22D9291776AE79350296DB382C8.crl (hash: PZ0klWjS2kVwBigl/huuBZtnMA13z73zMZc7uaPSfIk=) 4: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 0BJPNvIKBQFSgToHUrV6asLY9+z375bbGV3qDBCnsE0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:67:3f:f1:19:9c:ac:50:25:50:4e:0c:9b:e4:76:e5:b1:64:ba:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586C54F03B92F22D9291776AE79350296DB382C8 Validity Not Before: Sep 17 00:08:59 2026 GMT Not After : Sep 18 01:54:59 2026 GMT Subject: CN=2C7F38F619039B5633C21A4C86D27C480D3A1E0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:7e:e9:70:5e:78:07:26:36:10:7f:91:a5: 3d:99:ad:61:72:74:7c:f4:08:f4:a5:7d:fc:89:8a: e9:94:ea:95:5d:8f:60:6d:d4:41:d9:1b:72:43:0d: 63:8b:29:3b:89:9e:8d:96:1d:10:54:0f:bf:bb:a9: 07:b5:4a:22:80:ff:08:7f:1a:89:0f:bf:17:2f:2e: b3:c7:14:40:9c:b1:02:93:94:fe:b7:cf:a0:b2:1d: d7:08:c6:59:42:4c:73:64:70:95:86:42:ee:0b:eb: 2c:0a:a9:3c:78:40:12:d1:5d:38:40:93:ad:ec:58: 13:c9:8f:95:a3:7f:47:e1:cf:fd:47:8d:a7:3f:4d: 37:d6:46:0b:43:14:e0:42:db:8c:1c:7c:d9:f9:71: 6a:21:a7:73:2b:c0:fd:28:7b:c5:00:97:c7:2e:69: ea:6d:be:d9:94:41:2c:a4:14:50:63:41:24:80:03: 80:14:21:bd:f1:65:ca:b0:2f:e2:52:84:59:77:35: 77:ca:0a:8b:b0:0b:d8:8f:8e:ef:dd:13:38:fc:a7: df:37:8d:7d:e0:49:a5:ea:0f:98:a3:2a:2c:65:42: 59:83:53:45:7c:97:9e:ea:da:49:43:81:83:38:e2: cc:bb:9e:a2:39:da:c2:2d:71:4d:86:8e:b0:af:c2: 64:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7F:38:F6:19:03:9B:56:33:C2:1A:4C:86:D2:7C:48:0D:3A:1E:0A X509v3 Authority Key Identifier: keyid:58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fd:01:d2:95:21:cd:fb:dc:9a:0b:ec:04:06:3b:85:5d:b7: 70:dc:aa:b1:2e:70:74:ad:db:6d:ea:a0:ff:d5:66:44:b5:93: 77:05:95:34:88:62:80:7c:5e:ab:2e:bc:65:41:fe:81:64:75: f9:ce:a2:ff:d8:4a:78:39:1a:bf:5b:56:36:93:54:d8:6f:b3: 0d:4f:21:19:86:ce:fb:85:89:09:ee:9b:2c:aa:d0:cf:8b:39: 37:fd:41:47:07:c7:d2:0a:dd:5e:cd:38:91:16:ae:d5:0f:0c: 6a:bb:33:86:56:07:cb:26:10:5e:9e:5e:6d:4a:7f:55:a5:8d: 60:1e:32:a6:b0:62:b4:95:82:b9:9d:ee:52:83:ff:8b:04:8e: 67:c4:84:ea:ff:90:41:ef:f9:70:dc:7e:73:83:38:26:d1:04: 58:33:0d:21:f7:c2:aa:83:69:9e:be:e9:95:57:f9:1a:87:c2: 32:7d:6e:7e:ba:b4:08:48:48:32:01:f4:22:ad:7c:bd:76:12: 19:01:44:e5:57:78:9d:cd:7b:75:83:e0:17:32:b8:e1:f6:2c: 34:17:e1:d4:32:b6:b1:8c:dd:0a:fe:55:bb:8d:b0:89:cb:99: e8:e3:39:86:c4:14:7d:75:82:05:3b:78:02:25:b9:94:78:ea: 5c:70:23:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGc/8RmcrFAlUE4Mm+R25bFkumowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2QzU0RjAzQjkyRjIyRDkyOTE3NzZBRTc5MzUwMjk2 REIzODJDODAeFw0yNjA5MTcwMDA4NTlaFw0yNjA5MTgwMTU0NTlaMDMxMTAvBgNV BAMTKDJDN0YzOEY2MTkwMzlCNTYzM0MyMUE0Qzg2RDI3QzQ4MEQzQTFFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPX7pcF54ByY2EH+RpT2ZrWFy dHz0CPSlffyJiumU6pVdj2Bt1EHZG3JDDWOLKTuJno2WHRBUD7+7qQe1SiKA/wh/ GokPvxcvLrPHFECcsQKTlP63z6CyHdcIxllCTHNkcJWGQu4L6ywKqTx4QBLRXThA k63sWBPJj5Wjf0fhz/1Hjac/TTfWRgtDFOBC24wcfNn5cWohp3MrwP0oe8UAl8cu aeptvtmUQSykFFBjQSSAA4AUIb3xZcqwL+JShFl3NXfKCouwC9iPju/dEzj8p983 jX3gSaXqD5ijKixlQlmDU0V8l57q2klDgYM44sy7nqI52sItcU2GjrCvwmSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULH849hkDm1YzwhpMhtJ8SA06HgowHwYDVR0j BBgwFoAUWGxU8DuS8i2SkXdq55NQKW2zgsgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzYyMGI0MjMtZGQ1ZC00NDhmLWJiZDMtMDQ1MzBlYzE3MTVkLzAvNTg2QzU0RjAz QjkyRjIyRDkyOTE3NzZBRTc5MzUwMjk2REIzODJDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81ODZDNTRGMDNCOTJGMjJEOTI5MTc3NkFFNzkzNTAyOTZEQjM4 MkM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvNTg2QzU0RjAzQjkyRjIyRDkyOTE3NzZBRTc5MzUw Mjk2REIzODJDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF39AdKVIc373JoL7AQGO4Vdt3DcqrEucHSt 223qoP/VZkS1k3cFlTSIYoB8XqsuvGVB/oFkdfnOov/YSng5Gr9bVjaTVNhvsw1P IRmGzvuFiQnumyyq0M+LOTf9QUcHx9IK3V7NOJEWrtUPDGq7M4ZWB8smEF6eXm1K f1WljWAeMqawYrSVgrmd7lKD/4sEjmfEhOr/kEHv+XDcfnODOCbRBFgzDSH3wqqD aZ6+6ZVX+RqHwjJ9bn66tAhISDIB9CKtfL12EhkBROVXeJ3Ne3WD4BcyuOH2LDQX 4dQytrGM3Qr+VbuNsInLmejjOYbEFH11ggU7eAIluZR46lxwI+Y= -----END CERTIFICATE-----Generated at Thu Sep 17 10:57:07 2026 by rpki-client