$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft File: 591286FA978EE719A57E5A972B00E176D16D8BD5.mft (raw, json) Hash identifier: hxs4T97UGMs2hLrvzLadFdALeBn5Qkiv/wBwlCGhZ38= Subject key identifier: EF:57:9B:D7:8F:E2:BB:42:3C:F2:7E:DB:F1:A1:D6:52:70:91:62:50 Authority key identifier: 59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5 Certificate issuer: /CN=591286FA978EE719A57E5A972B00E176D16D8BD5 Certificate serial: 78D064C6980C5911F2928E68D1A1F6C6C783815E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:39:32 +0000 Manifest this update: Wed 16 Sep 2026 20:34:32 +0000 Manifest next update: Thu 17 Sep 2026 23:06:32 +0000 Files and hashes: 1: 591286FA978EE719A57E5A972B00E176D16D8BD5.crl (hash: M0FIz9tqGbCkCBRoCT5ZmKUIq/g0wQseIcRUKRLmsLI=) 2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: SnKbiJCVGtegt8XCckG5YzkpcAALoWkVUsik+AGbmDg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d0:64:c6:98:0c:59:11:f2:92:8e:68:d1:a1:f6:c6:c7:83:81:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591286FA978EE719A57E5A972B00E176D16D8BD5 Validity Not Before: Sep 16 20:34:32 2026 GMT Not After : Sep 17 23:06:32 2026 GMT Subject: CN=EF579BD78FE2BB423CF27EDBF1A1D65270916250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:25:2a:34:2d:38:b3:4a:cd:c0:e4:30:ad: 1e:36:a9:33:c9:88:ea:7f:4e:5f:5b:f2:51:e6:94: 9e:a3:87:d6:87:1a:0f:ca:b1:71:83:a9:c9:78:04: 74:5a:cb:7a:7e:1f:52:2f:8f:e6:4f:d1:32:35:da: 4c:c9:86:06:a5:bd:1a:a2:63:ab:6c:60:77:bd:74: e2:81:aa:12:ab:3a:76:05:e9:02:4a:1b:e5:f6:ca: bd:a6:e9:36:3b:bf:35:55:32:7c:cf:54:74:b2:3e: 85:60:1d:79:7e:02:6e:e0:75:e2:6b:c7:bf:1b:64: fa:e1:5d:25:6b:dc:4c:a5:77:6a:65:72:76:89:bb: 95:7b:89:ab:20:68:2b:9a:1c:15:2c:a9:15:30:db: cc:09:35:0c:d3:3f:13:c7:e4:da:c4:c3:42:af:b9: 0e:db:04:e7:c9:eb:aa:ea:ec:19:6e:fa:3b:c9:5c: 0b:49:83:36:94:8a:00:44:b9:a2:98:f0:5a:65:e2: 95:d3:09:53:b0:f7:db:bd:fc:32:50:19:eb:85:40: 3a:36:65:a0:eb:2b:cc:96:ec:59:56:76:f1:b8:cf: 99:53:cf:88:3a:b6:f8:6e:b5:eb:3d:b8:91:a6:e1: 2e:4e:0b:26:94:9c:f0:27:26:81:33:c5:d5:97:12: b3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:57:9B:D7:8F:E2:BB:42:3C:F2:7E:DB:F1:A1:D6:52:70:91:62:50 X509v3 Authority Key Identifier: keyid:59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b1:c2:33:38:de:07:3b:65:3c:1f:7f:db:64:8b:40:d1:4c: 60:97:e3:12:c3:ce:e9:e2:fd:51:58:26:87:0e:e4:3c:20:c3: bc:d7:f0:ad:b1:b1:6e:68:21:bf:e0:68:14:5f:72:c7:e1:93: 2f:99:e4:0e:27:18:ef:8f:9c:d6:0e:e8:c0:e6:40:d7:71:ae: db:1b:ef:5d:c0:57:d0:8b:11:48:ce:13:4c:3a:45:28:42:41: ae:d6:97:84:f4:c6:de:9f:f2:28:e9:5a:f6:62:21:cd:f0:92: 26:72:0d:34:7a:33:d5:42:02:aa:7b:a9:0a:bf:d3:ba:b2:ca: 76:ce:c2:ea:c3:c2:e1:f2:f9:df:0a:70:6a:fc:3e:37:cf:9b: fd:95:3f:6e:81:77:8c:cc:36:8f:9b:86:9e:14:d1:ca:5b:7c: 35:63:4e:04:15:5b:1a:41:e0:e2:1f:98:80:3f:76:83:dc:a9: a6:2c:ec:c1:50:72:0e:6e:8a:79:37:36:05:c9:76:05:cf:e0: 53:ab:e4:af:05:a0:48:a4:2d:ad:f7:1b:4d:15:87:72:62:19: fe:21:ac:46:96:13:26:26:0e:d6:80:1d:b7:f9:47:75:86:f1: 1b:4d:f7:fa:85:af:a7:ea:b1:4b:f3:96:fe:63:1a:48:ce:d3: 3b:39:03:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNBkxpgMWRHyko5o0aH2xseDgV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTkxMjg2RkE5NzhFRTcxOUE1N0U1QTk3MkIwMEUxNzZE MTZEOEJENTAeFw0yNjA5MTYyMDM0MzJaFw0yNjA5MTcyMzA2MzJaMDMxMTAvBgNV BAMTKEVGNTc5QkQ3OEZFMkJCNDIzQ0YyN0VEQkYxQTFENjUyNzA5MTYyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANiUqNC04s0rNwOQwrR42qTPJ iOp/Tl9b8lHmlJ6jh9aHGg/KsXGDqcl4BHRay3p+H1Ivj+ZP0TI12kzJhgalvRqi Y6tsYHe9dOKBqhKrOnYF6QJKG+X2yr2m6TY7vzVVMnzPVHSyPoVgHXl+Am7gdeJr x78bZPrhXSVr3Eyld2plcnaJu5V7iasgaCuaHBUsqRUw28wJNQzTPxPH5NrEw0Kv uQ7bBOfJ66rq7Blu+jvJXAtJgzaUigBEuaKY8Fpl4pXTCVOw99u9/DJQGeuFQDo2 ZaDrK8yW7FlWdvG4z5lTz4g6tvhutes9uJGm4S5OCyaUnPAnJoEzxdWXErNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU71eb14/iu0I88n7b8aHWUnCRYlAwHwYDVR0j BBgwFoAUWRKG+peO5xmlflqXKwDhdtFti9UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFkYzc2NWEtZmY4ZC00YjFmLWE1OWEtMjVmZjdiZDRmNThhLzAvNTkxMjg2RkE5 NzhFRTcxOUE1N0U1QTk3MkIwMEUxNzZEMTZEOEJENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTEyODZGQTk3OEVFNzE5QTU3RTVBOTcyQjAwRTE3NkQxNkQ4 QkQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvNTkxMjg2RkE5NzhFRTcxOUE1N0U1QTk3MkIwMEUx NzZEMTZEOEJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuxwjM43gc7ZTwff9tki0DRTGCX4xLDzuni /VFYJocO5Dwgw7zX8K2xsW5oIb/gaBRfcsfhky+Z5A4nGO+PnNYO6MDmQNdxrtsb 713AV9CLEUjOE0w6RShCQa7Wl4T0xt6f8ijpWvZiIc3wkiZyDTR6M9VCAqp7qQq/ 07qyynbOwurDwuHy+d8KcGr8PjfPm/2VP26Bd4zMNo+bhp4U0cpbfDVjTgQVWxpB 4OIfmIA/doPcqaYs7MFQcg5uink3NgXJdgXP4FOr5K8FoEikLa33G00Vh3JiGf4h rEaWEyYmDtaAHbf5R3WG8RtN9/qFr6fqsUvzlv5jGkjO0zs5A3Y= -----END CERTIFICATE-----Generated at Thu Sep 17 12:33:59 2026 by rpki-client