$ rpki-client -vvf rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft File: 59C6DD576568EAA049F24E2205FDFFA34E712D32.mft (raw, json) Hash identifier: 3/xe7xVJ8u9aWOK0kR0FXUYOQmCl4iOIzxVmsOoV8OM= Subject key identifier: E0:3D:C1:80:61:7B:31:C9:28:67:9B:37:FD:45:1F:D5:CC:E9:FE:F3 Authority key identifier: 59:C6:DD:57:65:68:EA:A0:49:F2:4E:22:05:FD:FF:A3:4E:71:2D:32 Certificate issuer: /CN=59C6DD576568EAA049F24E2205FDFFA34E712D32 Certificate serial: 7CF1758CC92345CE21D0FBDE809B5993FC9E5E21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 22:58:40 +0000 Manifest this update: Fri 19 Jun 2026 22:53:40 +0000 Manifest next update: Sun 21 Jun 2026 01:05:40 +0000 Files and hashes: 1: 59C6DD576568EAA049F24E2205FDFFA34E712D32.crl (hash: dsyhZrc5/Sq/V8vu8s5a2bQpf26fhaVhJh+CCD9TFQ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.crl rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:f1:75:8c:c9:23:45:ce:21:d0:fb:de:80:9b:59:93:fc:9e:5e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59C6DD576568EAA049F24E2205FDFFA34E712D32 Validity Not Before: Jun 19 22:53:40 2026 GMT Not After : Jun 21 01:05:40 2026 GMT Subject: CN=E03DC180617B31C928679B37FD451FD5CCE9FEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:8e:4a:de:5d:a3:d8:46:61:a4:af:51:0f: 7a:d7:d8:a4:c2:6c:c1:86:0c:d0:b3:e9:78:b4:f0: 58:50:e6:25:27:5c:f3:fd:1a:b5:53:cc:44:4e:cd: 9a:2e:03:a2:86:d3:d2:7b:9e:71:54:8e:2a:18:4c: 77:ce:96:75:47:c2:7b:3e:cc:8f:d7:33:fb:94:1e: 4f:b1:50:f1:f7:33:70:00:6e:b2:4c:61:49:df:b4: c5:5b:55:87:91:81:32:4d:fa:29:22:24:ff:2f:2b: 8e:0f:9b:1e:5c:c5:63:16:b3:aa:2f:dc:89:4b:1f: 27:c4:c2:fc:29:df:63:ad:45:58:b5:4c:97:3c:31: 5e:cc:0d:5d:42:e2:00:03:c4:bf:a8:06:08:f9:01: be:a4:b6:e3:42:91:b5:10:83:62:d1:cb:67:aa:91: 04:a3:a4:6d:4a:4a:2c:5e:6f:69:82:da:f9:7a:8c: 7e:4a:42:5b:b3:d2:0a:a9:f7:1d:f8:06:30:e1:43: 14:41:87:e4:5e:87:0c:a1:14:13:fe:ee:f9:a3:e5: 5c:05:f4:ae:50:14:59:89:ce:22:86:28:6a:dc:bf: 95:a7:b7:83:69:f8:a4:68:dd:62:61:06:3e:d9:ba: 75:e9:d0:03:ea:25:90:ca:f7:1c:ae:99:49:62:7d: dc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3D:C1:80:61:7B:31:C9:28:67:9B:37:FD:45:1F:D5:CC:E9:FE:F3 X509v3 Authority Key Identifier: keyid:59:C6:DD:57:65:68:EA:A0:49:F2:4E:22:05:FD:FF:A3:4E:71:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59C6DD576568EAA049F24E2205FDFFA34E712D32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/59C6DD576568EAA049F24E2205FDFFA34E712D32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:54:f3:88:2e:fb:ef:a3:f5:9b:fa:8c:60:10:70:c6:f1:71: 66:c0:f0:e8:90:93:ff:02:c5:f5:32:3e:22:76:40:7c:f9:af: 50:f5:62:35:f5:89:a5:a7:b4:1d:93:3a:b1:5a:87:39:31:cc: 37:3c:e8:42:3e:00:54:64:dd:41:02:b8:e1:72:90:7a:ba:3e: 7a:07:a7:4f:df:27:78:5c:37:fd:3b:f5:1e:d5:12:38:47:19: 38:e2:7d:ed:80:8b:80:53:ef:03:35:18:00:cf:cb:1a:21:1e: 12:48:45:29:bd:64:f2:6e:b3:19:73:83:20:2a:f2:3c:34:31: 0d:ef:32:ac:6f:92:0d:c7:ac:ff:5f:62:81:db:26:01:c8:ae: 9d:1f:b5:3d:63:15:8b:fe:49:23:b6:5c:83:d0:ec:25:94:01: df:0b:91:29:e8:ea:ca:fa:c5:e4:76:c7:8e:15:a8:5d:93:6f: a5:28:49:02:44:88:9a:29:52:cc:b0:c8:fe:30:03:1d:17:50: 5e:5a:64:10:e8:ba:27:e2:19:1d:41:67:0c:15:03:65:5f:17: 85:4d:64:bf:47:75:c4:3b:a2:7e:ec:e6:db:fb:64:65:b2:cb: 7b:17:35:92:f7:5b:af:a4:ed:a3:fc:4b:a7:6f:7d:9a:74:b1: 56:f6:f0:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPF1jMkjRc4h0PvegJtZk/yeXiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlDNkRENTc2NTY4RUFBMDQ5RjI0RTIyMDVGREZGQTM0 RTcxMkQzMjAeFw0yNjA2MTkyMjUzNDBaFw0yNjA2MjEwMTA1NDBaMDMxMTAvBgNV BAMTKEUwM0RDMTgwNjE3QjMxQzkyODY3OUIzN0ZENDUxRkQ1Q0NFOUZFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KY5K3l2j2EZhpK9RD3rX2KTC bMGGDNCz6Xi08FhQ5iUnXPP9GrVTzEROzZouA6KG09J7nnFUjioYTHfOlnVHwns+ zI/XM/uUHk+xUPH3M3AAbrJMYUnftMVbVYeRgTJN+ikiJP8vK44Pmx5cxWMWs6ov 3IlLHyfEwvwp32OtRVi1TJc8MV7MDV1C4gADxL+oBgj5Ab6ktuNCkbUQg2LRy2eq kQSjpG1KSixeb2mC2vl6jH5KQluz0gqp9x34BjDhQxRBh+RehwyhFBP+7vmj5VwF 9K5QFFmJziKGKGrcv5Wnt4Np+KRo3WJhBj7ZunXp0APqJZDK9xyumUlifdwHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4D3BgGF7MckoZ5s3/UUf1czp/vMwHwYDVR0j BBgwFoAUWcbdV2Vo6qBJ8k4iBf3/o05xLTIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTExM2U3YzQtNzczZi00NzRjLWIwNmQtNjI2MGEzMDZhMGNhLzAvNTlDNkRENTc2 NTY4RUFBMDQ5RjI0RTIyMDVGREZGQTM0RTcxMkQzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUM2REQ1NzY1NjhFQUEwNDlGMjRFMjIwNUZERkZBMzRFNzEy RDMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvNTlDNkRENTc2NTY4RUFBMDQ5RjI0RTIyMDVGREZG QTM0RTcxMkQzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9U84gu+++j9Zv6jGAQcMbxcWbA8OiQk/8C xfUyPiJ2QHz5r1D1YjX1iaWntB2TOrFahzkxzDc86EI+AFRk3UECuOFykHq6PnoH p0/fJ3hcN/079R7VEjhHGTjife2Ai4BT7wM1GADPyxohHhJIRSm9ZPJusxlzgyAq 8jw0MQ3vMqxvkg3HrP9fYoHbJgHIrp0ftT1jFYv+SSO2XIPQ7CWUAd8LkSno6sr6 xeR2x44VqF2Tb6UoSQJEiJopUsywyP4wAx0XUF5aZBDouifiGR1BZwwVA2VfF4VN ZL9HdcQ7on7s5tv7ZGWyy3sXNZL3W6+k7aP8S6dvfZp0sVb28F8= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:41 2026 by rpki-client