$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft File: 59C6DD576568EAA049F24E2205FDFFA34E712D32.mft (raw, json) Hash identifier: HUdDXiK+IZGDWgj2yJQygytAwarYluiAQZQHWlgQiXo= Subject key identifier: 90:05:45:01:68:DC:54:25:C6:7B:00:92:58:20:BE:D4:53:6C:B5:87 Authority key identifier: 59:C6:DD:57:65:68:EA:A0:49:F2:4E:22:05:FD:FF:A3:4E:71:2D:32 Certificate issuer: /CN=59C6DD576568EAA049F24E2205FDFFA34E712D32 Certificate serial: 4F1A189945684C3B0C0399D0033D64053E8B4D19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 15:53:43 +0000 Manifest this update: Wed 16 Sep 2026 15:48:43 +0000 Manifest next update: Thu 17 Sep 2026 19:47:43 +0000 Files and hashes: 1: 59C6DD576568EAA049F24E2205FDFFA34E712D32.crl (hash: zNfYU7ZkCg9ZILcuE+ethQKHz/P/ws0CxFqcRRMMTd0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.crl rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1a:18:99:45:68:4c:3b:0c:03:99:d0:03:3d:64:05:3e:8b:4d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59C6DD576568EAA049F24E2205FDFFA34E712D32 Validity Not Before: Sep 16 15:48:43 2026 GMT Not After : Sep 17 19:47:43 2026 GMT Subject: CN=9005450168DC5425C67B00925820BED4536CB587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:bb:af:d4:83:6e:f9:ae:cc:a9:83:0a:a3: 3f:78:ee:3c:70:d1:3b:69:0c:a2:12:9d:3d:fb:d6: 46:ce:d4:ec:d0:03:ca:7a:54:66:50:8b:1d:ab:db: 4d:57:2e:29:07:ae:91:0a:95:c2:24:70:d2:52:9e: c0:6f:0b:66:18:40:2f:11:bc:cd:ac:54:7d:8f:ad: 81:3f:2e:b7:76:67:de:6f:26:19:d4:a2:27:2d:24: a7:33:80:78:8b:5a:47:c4:df:3c:a1:93:33:99:f9: 6b:5b:3d:36:90:19:f1:17:95:e0:99:8a:1d:90:5c: 91:1a:f3:5e:c7:a1:70:b0:99:b4:59:7e:d8:93:78: 52:ad:92:2c:84:47:e4:90:bc:bf:82:4c:4c:3b:82: 5c:20:dd:a2:20:aa:b8:27:44:25:60:41:6c:97:66: 8a:63:1a:9b:7a:c0:e5:45:03:a9:0a:1f:f4:b7:ad: 3e:b5:17:46:6f:58:6b:4a:4e:51:cd:6a:ef:10:19: 09:34:2e:1e:cf:ee:81:e2:de:2d:9c:32:ff:03:ab: e8:86:13:75:d7:17:12:76:05:82:80:e7:3c:a3:7a: 67:e8:b4:c6:86:0d:e3:bb:8d:f3:5e:a2:41:04:02: da:63:df:62:3b:66:4e:2e:b9:26:16:45:8f:5b:0a: cb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:45:01:68:DC:54:25:C6:7B:00:92:58:20:BE:D4:53:6C:B5:87 X509v3 Authority Key Identifier: keyid:59:C6:DD:57:65:68:EA:A0:49:F2:4E:22:05:FD:FF:A3:4E:71:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4e:97:9c:4a:39:80:e1:ad:86:d0:f1:96:23:88:d4:3f:a5: 78:22:6d:59:74:07:e3:35:44:71:16:73:47:81:5c:a3:4e:26: c4:8a:9e:65:9b:48:a6:46:d3:97:35:35:ec:16:44:2e:9b:6d: a5:ad:6d:79:60:34:be:76:6c:29:4c:3a:2e:87:66:d8:0d:c4: 22:72:20:95:21:0e:67:18:01:13:a9:c7:5f:0b:6a:db:10:21: fd:09:f5:2d:f5:ba:5a:c8:be:f9:3a:2d:cb:d3:3e:2b:d5:43: 33:8b:56:7e:ca:35:3a:33:ec:bd:43:ee:fc:59:23:0c:ff:54: 19:98:2b:b9:f0:ff:92:d8:34:ca:26:8c:49:a4:f9:12:2c:65: f8:ce:6e:73:97:1a:97:f1:5f:1a:f6:1d:37:12:28:a2:75:b1: 39:62:4a:0f:e5:cc:13:e7:b5:65:85:1a:f5:c3:2a:4b:27:7d: f2:a4:b2:37:b8:2e:a3:f1:d2:94:c7:78:ae:08:26:b9:e7:d1: 97:fd:01:8c:bf:f3:a4:ff:3a:1f:fd:43:a3:af:c9:98:7e:de: 0a:5c:ed:11:5f:33:e6:90:00:79:0d:b1:ff:78:bc:85:1f:bf: 02:18:5b:69:00:a7:69:80:d4:b6:cd:d0:bb:80:18:ef:33:50: ad:a3:8e:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxoYmUVoTDsMA5nQAz1kBT6LTRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlDNkRENTc2NTY4RUFBMDQ5RjI0RTIyMDVGREZGQTM0 RTcxMkQzMjAeFw0yNjA5MTYxNTQ4NDNaFw0yNjA5MTcxOTQ3NDNaMDMxMTAvBgNV BAMTKDkwMDU0NTAxNjhEQzU0MjVDNjdCMDA5MjU4MjBCRUQ0NTM2Q0I1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2d7uv1INu+a7MqYMKoz947jxw 0TtpDKISnT371kbO1OzQA8p6VGZQix2r201XLikHrpEKlcIkcNJSnsBvC2YYQC8R vM2sVH2PrYE/Lrd2Z95vJhnUoictJKczgHiLWkfE3zyhkzOZ+WtbPTaQGfEXleCZ ih2QXJEa817HoXCwmbRZftiTeFKtkiyER+SQvL+CTEw7glwg3aIgqrgnRCVgQWyX ZopjGpt6wOVFA6kKH/S3rT61F0ZvWGtKTlHNau8QGQk0Lh7P7oHi3i2cMv8Dq+iG E3XXFxJ2BYKA5zyjemfotMaGDeO7jfNeokEEAtpj32I7Zk4uuSYWRY9bCssZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkAVFAWjcVCXGewCSWCC+1FNstYcwHwYDVR0j BBgwFoAUWcbdV2Vo6qBJ8k4iBf3/o05xLTIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExM2U3YzQtNzczZi00NzRjLWIwNmQtNjI2MGEzMDZhMGNhLzAvNTlDNkRENTc2 NTY4RUFBMDQ5RjI0RTIyMDVGREZGQTM0RTcxMkQzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUM2REQ1NzY1NjhFQUEwNDlGMjRFMjIwNUZERkZBMzRFNzEy RDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvNTlDNkRENTc2NTY4RUFBMDQ5RjI0RTIyMDVGREZG QTM0RTcxMkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZOl5xKOYDhrYbQ8ZYjiNQ/pXgibVl0B+M1 RHEWc0eBXKNOJsSKnmWbSKZG05c1NewWRC6bbaWtbXlgNL52bClMOi6HZtgNxCJy IJUhDmcYAROpx18LatsQIf0J9S31ulrIvvk6LcvTPivVQzOLVn7KNToz7L1D7vxZ Iwz/VBmYK7nw/5LYNMomjEmk+RIsZfjObnOXGpfxXxr2HTcSKKJ1sTliSg/lzBPn tWWFGvXDKksnffKksje4LqPx0pTHeK4IJrnn0Zf9AYy/86T/Oh/9Q6OvyZh+3gpc 7RFfM+aQAHkNsf94vIUfvwIYW2kAp2mA1LbN0LuAGO8zUK2jjuY= -----END CERTIFICATE-----Generated at Thu Sep 17 09:21:47 2026 by rpki-client