$ rpki-client -vvf rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft File: 591286FA978EE719A57E5A972B00E176D16D8BD5.mft (raw, json) Hash identifier: u1NC/8uOPTC19zfIeVAt6ijD7wTiY4pK222qulCz07E= Subject key identifier: 38:A3:34:E9:EE:49:AA:5A:68:B1:72:CD:81:4A:86:6C:1F:B9:3E:AA Authority key identifier: 59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5 Certificate issuer: /CN=591286FA978EE719A57E5A972B00E176D16D8BD5 Certificate serial: 5BC5A40FFC074A11FB0D9ED7EE781BCCBE454B02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft Manifest number: 13 Signing time: Sat 16 May 2026 03:10:09 +0000 Manifest this update: Sat 16 May 2026 03:05:09 +0000 Manifest next update: Sun 17 May 2026 05:45:09 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: SnKbiJCVGtegt8XCckG5YzkpcAALoWkVUsik+AGbmDg=) 2: 591286FA978EE719A57E5A972B00E176D16D8BD5.crl (hash: rzX8+w+5IGAMyeE9CkS5FRaQ/X2UylPaNfyKwmhlG1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 05:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c5:a4:0f:fc:07:4a:11:fb:0d:9e:d7:ee:78:1b:cc:be:45:4b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591286FA978EE719A57E5A972B00E176D16D8BD5 Validity Not Before: May 16 03:05:09 2026 GMT Not After : May 17 05:45:09 2026 GMT Subject: CN=38A334E9EE49AA5A68B172CD814A866C1FB93EAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:15:2c:d7:4e:53:90:d0:1e:22:ba:cd:e5:d1: a5:0c:00:6e:81:c5:fd:35:d5:2f:61:75:36:5f:4f: 37:b9:c3:d7:fc:e7:c0:b6:80:f6:42:39:62:3c:0b: 2d:57:46:3b:fd:e5:2c:c4:24:76:e3:07:76:50:10: f2:c5:8f:67:92:43:0e:48:b5:80:bc:b9:e4:0b:74: 7c:26:2a:cd:30:4b:0b:5a:d5:d7:16:11:ff:45:77: 1e:9a:17:7b:4d:44:d3:56:9f:1e:e0:3e:aa:51:8c: ee:a0:6b:89:d1:de:15:f6:e8:90:a4:99:2d:ce:92: fb:d9:47:ea:ae:22:7b:69:68:33:ee:00:ff:67:2b: c5:1a:0b:4c:65:a7:39:a9:1a:83:28:52:cd:d7:48: 4f:5e:fc:61:de:02:20:53:a3:2d:3d:10:3f:9b:c4: 0d:28:1b:38:a1:37:37:dd:39:53:83:8e:ab:75:4b: 77:2a:d7:5f:0f:ce:c5:77:92:32:ad:00:91:f3:ff: 1a:12:e2:5f:bf:b5:7a:24:be:c8:6e:c0:37:82:39: c3:02:7f:7a:f2:9c:7c:e0:46:43:4c:5f:98:ae:1b: a6:8b:11:d5:eb:12:cb:15:b3:fe:c0:e3:ba:71:f4: 4d:5c:35:3f:f7:62:01:57:78:4f:87:53:bc:77:9f: 61:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A3:34:E9:EE:49:AA:5A:68:B1:72:CD:81:4A:86:6C:1F:B9:3E:AA X509v3 Authority Key Identifier: keyid:59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9e:b1:d5:ec:f6:31:12:19:95:c8:65:96:cf:a7:e8:46:67: b8:11:29:6c:20:4b:9f:d2:6e:88:50:c7:87:89:9e:6c:4e:df: 0e:df:88:5b:52:02:c1:e7:a5:94:f2:e7:d0:f5:f5:fc:78:bf: b4:3e:42:8b:85:f2:f4:85:5c:95:cb:9b:c9:ab:f2:97:c6:2b: cd:27:5b:7e:9c:79:51:96:ad:dc:76:30:f4:44:48:59:cc:61: 87:01:45:d8:7b:32:a0:81:a3:a7:50:48:4e:87:a8:aa:bd:85: 50:98:f4:ce:d1:f5:cc:73:c0:e3:03:67:f0:c5:3e:1a:1b:8d: df:b4:a2:18:d5:07:55:9f:00:c7:84:c6:0f:50:42:1b:be:84: 05:25:10:95:06:9d:ff:f2:00:7f:00:79:0d:23:74:0c:c6:e9: 89:d5:eb:a6:5e:6e:17:1a:f3:50:44:6b:c9:71:49:5d:b8:5d: b8:96:ee:23:84:17:eb:65:86:0d:77:b7:cf:19:ad:51:d6:8a: 88:c7:20:6d:ca:f2:06:5c:9e:57:7f:a3:33:46:a6:d4:2a:4a: 88:a9:30:05:f4:f9:4a:20:ab:63:93:0d:1b:da:d5:cc:37:44: 37:94:a8:23:bb:38:6d:0d:ac:98:d0:fd:8a:88:dc:20:0d:23: 01:d7:0d:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8WkD/wHShH7DZ7X7ngbzL5FSwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTkxMjg2RkE5NzhFRTcxOUE1N0U1QTk3MkIwMEUxNzZE MTZEOEJENTAeFw0yNjA1MTYwMzA1MDlaFw0yNjA1MTcwNTQ1MDlaMDMxMTAvBgNV BAMTKDM4QTMzNEU5RUU0OUFBNUE2OEIxNzJDRDgxNEE4NjZDMUZCOTNFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FSzXTlOQ0B4ius3l0aUMAG6B xf011S9hdTZfTze5w9f858C2gPZCOWI8Cy1XRjv95SzEJHbjB3ZQEPLFj2eSQw5I tYC8ueQLdHwmKs0wSwta1dcWEf9Fdx6aF3tNRNNWnx7gPqpRjO6ga4nR3hX26JCk mS3OkvvZR+quIntpaDPuAP9nK8UaC0xlpzmpGoMoUs3XSE9e/GHeAiBToy09ED+b xA0oGzihNzfdOVODjqt1S3cq118PzsV3kjKtAJHz/xoS4l+/tXokvshuwDeCOcMC f3rynHzgRkNMX5iuG6aLEdXrEssVs/7A47px9E1cNT/3YgFXeE+HU7x3n2HrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOKM06e5JqlposXLNgUqGbB+5PqowHwYDVR0j BBgwFoAUWRKG+peO5xmlflqXKwDhdtFti9UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWFkYzc2NWEtZmY4ZC00YjFmLWE1OWEtMjVmZjdiZDRmNThhLzAvNTkxMjg2RkE5 NzhFRTcxOUE1N0U1QTk3MkIwMEUxNzZEMTZEOEJENS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTEyODZGQTk3OEVFNzE5QTU3RTVBOTcyQjAwRTE3NkQxNkQ4 QkQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvNTkxMjg2RkE5NzhFRTcxOUE1N0U1QTk3MkIwMEUx NzZEMTZEOEJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuesdXs9jESGZXIZZbPp+hGZ7gRKWwgS5/S bohQx4eJnmxO3w7fiFtSAsHnpZTy59D19fx4v7Q+QouF8vSFXJXLm8mr8pfGK80n W36ceVGWrdx2MPRESFnMYYcBRdh7MqCBo6dQSE6HqKq9hVCY9M7R9cxzwOMDZ/DF Phobjd+0ohjVB1WfAMeExg9QQhu+hAUlEJUGnf/yAH8AeQ0jdAzG6YnV66Zebhca 81BEa8lxSV24XbiW7iOEF+tlhg13t88ZrVHWiojHIG3K8gZcnld/ozNGptQqSoip MAX0+Uogq2OTDRva1cw3RDeUqCO7OG0NrJjQ/YqI3CANIwHXDX8= -----END CERTIFICATE-----Generated at Sat May 16 20:32:05 2026 by rpki-client