$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft File: 59406D6B894D2596F895003DEE4D8D96CC43B39F.mft (raw, json) Hash identifier: 4lWwO0P6qEHzWySVPaZYVEJTaZmB4jui5w6pc3Euz4c= Subject key identifier: F4:41:02:7A:70:42:FA:9A:8F:57:94:AD:56:51:FE:FD:41:28:D7:5B Authority key identifier: 59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F Certificate issuer: /CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Certificate serial: 01A2D0EDA623069CE760DDA0C5E29AAF0731D0A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:17:26 +0000 Manifest this update: Thu 17 Sep 2026 07:12:26 +0000 Manifest next update: Fri 18 Sep 2026 07:18:26 +0000 Files and hashes: 1: 3130332e32342e35382e302f32342d3234203d3e203436303532.roa (hash: UA+YdwLCDED5UMDmCG4dNPuGHlL+yaAK93vKKhIdDPg=) 2: 3130332e32342e35392e302f32342d3234203d3e203436303532.roa (hash: zFIO9wiF748rHmRcjoZ1ZZ07oJftCfa8w4TwQheX8tM=) 3: 3230322e392e38352e302f32342d3234203d3e203436303532.roa (hash: lsGPNQll8lHqimmyJl12NLTMwKg8Yil8iz0vwp/l9l4=) 4: 323030313a6466303a61383a3a2f34382d3438203d3e203436303532.roa (hash: nM1lR1t5YbRxvlzSB15Qj3P9xptJWT24EGOpflzojVc=) 5: 59406D6B894D2596F895003DEE4D8D96CC43B39F.crl (hash: oP/LxZlKL+ilTJ5QsP49go/Z2EexwCK+B+B/Ca/t6wM=) 6: 3130332e32342e35362e302f32342d3234203d3e203436303532.roa (hash: hCsETlpD6R/zfRJVkzNBOTiAfvvIYDjPCkGRa8bOeSk=) 7: 3130332e32342e35372e302f32342d3234203d3e203436303532.roa (hash: 2NT3KSaIgnkQK0dsegRvJOGdovq/XdyRI/OHCIdm244=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a2:d0:ed:a6:23:06:9c:e7:60:dd:a0:c5:e2:9a:af:07:31:d0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59406D6B894D2596F895003DEE4D8D96CC43B39F Validity Not Before: Sep 17 07:12:26 2026 GMT Not After : Sep 18 07:18:26 2026 GMT Subject: CN=F441027A7042FA9A8F5794AD5651FEFD4128D75B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:62:9d:19:ae:26:35:e3:7a:fc:52:bf:97: 0f:1a:99:8f:7e:70:eb:76:d0:3e:50:50:38:e5:63: 1a:dd:dc:9a:5e:56:ae:7f:c3:d5:d5:cf:d0:76:f2: e3:bf:a8:24:80:aa:bb:40:87:ae:e8:75:fc:c9:01: e6:77:d3:5c:b8:56:b2:e3:9b:cd:f9:b9:7e:58:c6: a1:99:e0:fa:29:59:5b:44:5e:2a:6d:19:65:df:cd: ae:0e:ba:31:a4:40:b5:25:e3:12:34:a5:0f:0f:49: 85:9e:ea:9c:95:77:0a:6a:af:b3:0a:17:38:5e:64: 0f:a7:44:47:8d:f7:dc:ed:28:2d:15:02:89:bf:2f: 6b:57:10:c5:34:08:da:40:a0:07:1f:c4:ae:e7:4d: bb:32:e5:af:7b:21:be:19:6a:44:29:01:f9:ec:a4: 14:0f:93:4c:e6:0d:26:38:8d:b9:ce:30:99:6b:ec: 0a:21:b1:af:b7:aa:20:63:95:ba:8c:35:d0:b4:f7: a3:1a:74:56:5a:64:e7:c0:74:62:9a:29:86:ca:70: 83:47:ba:dd:51:c2:81:a9:fb:dc:8e:f4:64:d7:c2: 68:52:92:70:1f:e7:36:ec:22:cb:14:11:d7:83:40: 37:95:7b:63:f6:a2:26:b6:30:44:26:1e:90:63:a6: e4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:41:02:7A:70:42:FA:9A:8F:57:94:AD:56:51:FE:FD:41:28:D7:5B X509v3 Authority Key Identifier: keyid:59:40:6D:6B:89:4D:25:96:F8:95:00:3D:EE:4D:8D:96:CC:43:B3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59406D6B894D2596F895003DEE4D8D96CC43B39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/59406D6B894D2596F895003DEE4D8D96CC43B39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:83:f0:6d:5d:90:0f:21:97:28:29:17:65:83:d6:12:31:5f: a6:eb:1e:45:ca:2e:be:a5:9c:fc:d2:74:91:83:6a:05:47:6b: b0:95:fa:9c:01:98:eb:ec:e1:f6:a5:b9:fa:ba:88:e6:0f:d5: 61:79:76:ce:5d:38:ba:72:68:e3:2a:17:22:75:8d:f5:f7:ce: d1:4e:d2:a2:e6:3c:85:56:92:11:98:9b:a3:78:f2:6a:5d:d1: 5b:40:44:22:3c:87:2f:12:82:b3:42:25:7f:bc:ea:ae:a8:c4: 29:c4:83:0f:f8:84:86:c8:4e:ab:c8:d5:3c:03:cc:d7:b2:11: ed:86:de:86:49:3a:a2:06:d8:38:c0:da:31:0a:96:6b:60:9b: 47:8f:3b:97:39:b5:86:fe:37:8c:e8:b5:f3:99:19:09:ce:c0: 50:2f:2e:48:bd:be:a9:06:bd:93:74:63:0b:e2:2a:b6:51:03: 49:ea:7f:0f:77:54:18:15:b6:7a:e1:cd:09:27:f1:c2:bf:ba: 92:63:e4:73:f8:27:40:1a:19:7c:5a:1b:58:57:a1:48:84:90: dc:ba:26:82:c0:14:13:87:11:07:77:e1:ea:c7:81:85:dc:c5: d9:cd:92:ff:a8:90:48:15:61:bd:85:b9:ef:7f:43:3a:bc:8f: 0c:78:de:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaLQ7aYjBpznYN2gxeKarwcx0KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhEOTZD QzQzQjM5RjAeFw0yNjA5MTcwNzEyMjZaFw0yNjA5MTgwNzE4MjZaMDMxMTAvBgNV BAMTKEY0NDEwMjdBNzA0MkZBOUE4RjU3OTRBRDU2NTFGRUZENDEyOEQ3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEo2KdGa4mNeN6/FK/lw8amY9+ cOt20D5QUDjlYxrd3JpeVq5/w9XVz9B28uO/qCSAqrtAh67odfzJAeZ301y4VrLj m835uX5YxqGZ4PopWVtEXiptGWXfza4OujGkQLUl4xI0pQ8PSYWe6pyVdwpqr7MK FzheZA+nREeN99ztKC0VAom/L2tXEMU0CNpAoAcfxK7nTbsy5a97Ib4ZakQpAfns pBQPk0zmDSY4jbnOMJlr7Aohsa+3qiBjlbqMNdC096MadFZaZOfAdGKaKYbKcINH ut1RwoGp+9yO9GTXwmhSknAf5zbsIssUEdeDQDeVe2P2oia2MEQmHpBjpuSJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9EECenBC+pqPV5StVlH+/UEo11swHwYDVR0j BBgwFoAUWUBta4lNJZb4lQA97k2NlsxDs58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQxZWU1ZTItMzM4Yy00ZDIwLTgwN2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4 OTREMjU5NkY4OTUwMDNERUU0RDhEOTZDQzQzQjM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OTQwNkQ2Qjg5NEQyNTk2Rjg5NTAwM0RFRTREOEQ5NkNDNDNC MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQxZWU1ZTItMzM4Yy00ZDIwLTgw N2UtZTUwYjc1NTgzZGI4LzAvNTk0MDZENkI4OTREMjU5NkY4OTUwMDNERUU0RDhE OTZDQzQzQjM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiD8G1dkA8hlygpF2WD1hIxX6brHkXKLr6l nPzSdJGDagVHa7CV+pwBmOvs4falufq6iOYP1WF5ds5dOLpyaOMqFyJ1jfX3ztFO 0qLmPIVWkhGYm6N48mpd0VtARCI8hy8SgrNCJX+86q6oxCnEgw/4hIbITqvI1TwD zNeyEe2G3oZJOqIG2DjA2jEKlmtgm0ePO5c5tYb+N4zotfOZGQnOwFAvLki9vqkG vZN0YwviKrZRA0nqfw93VBgVtnrhzQkn8cK/upJj5HP4J0AaGXxaG1hXoUiEkNy6 JoLAFBOHEQd34erHgYXcxdnNkv+okEgVYb2Fue9/Qzq8jwx43qo= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:32 2026 by rpki-client