$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft File: 59A9AB370F753D82771987E2FD7CA19578E11D07.mft (raw, json) Hash identifier: GdhMDgcTNA6nS0yOELSkt00mTFPFk94ZnfOaYBaEJlw= Subject key identifier: BA:C3:8D:1C:18:8A:5C:E6:21:01:3D:77:8A:4D:D3:92:E9:D9:D2:BD Authority key identifier: 59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07 Certificate issuer: /CN=59A9AB370F753D82771987E2FD7CA19578E11D07 Certificate serial: 5D9665002BA5666B4446B312F68C6493135E0E5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:02:13 +0000 Manifest this update: Thu 17 Sep 2026 02:57:13 +0000 Manifest next update: Fri 18 Sep 2026 04:19:13 +0000 Files and hashes: 1: 59A9AB370F753D82771987E2FD7CA19578E11D07.crl (hash: hBAd+3xNJWSKqIQnjOhij555QD75VdTqS1AV7BV5vv4=) 2: 3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (hash: fcfvoG+f+IeB/aOvvSuH4jigNm/P9oaHKcA8ozVTJ2c=) 3: 3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (hash: UPB/qBUFP9GqScWdxOKoCFaWZdy0EEvs2yjoMI9jaZ0=) 4: 3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa (hash: 97CqSuEAmLm9b7GhTnzhH7E+h2iIk2MyDfPBWHarXus=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:96:65:00:2b:a5:66:6b:44:46:b3:12:f6:8c:64:93:13:5e:0e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59A9AB370F753D82771987E2FD7CA19578E11D07 Validity Not Before: Sep 17 02:57:13 2026 GMT Not After : Sep 18 04:19:13 2026 GMT Subject: CN=BAC38D1C188A5CE621013D778A4DD392E9D9D2BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:68:96:ec:8a:2c:21:ba:a7:0d:66:24:77: 4f:b2:89:22:b0:1a:39:57:de:40:a6:2a:e4:5c:1e: d5:ac:c5:f5:cf:87:79:d6:f0:e2:6c:8c:5c:c8:83: 18:1d:6b:aa:2e:e1:2b:6f:92:d1:90:d7:ed:7c:ff: 53:9c:c5:35:e0:70:2a:5c:79:1d:bb:14:3d:e5:ef: 5b:23:58:29:37:fb:40:20:da:ce:12:a2:1d:bb:3f: f4:2f:f7:08:cc:b2:23:75:30:65:f9:38:ec:68:69: ed:74:f7:73:ea:50:f7:62:7a:4e:48:fe:d8:1e:6d: 91:82:92:11:24:5a:88:a1:41:78:20:88:c1:81:6a: 64:a9:21:1d:c1:62:60:f3:cb:b8:97:30:33:d7:4f: 13:72:0e:45:bb:a4:36:b0:bd:09:49:db:87:ba:28: 31:4e:7a:ac:bc:78:c8:a3:c8:c4:42:95:2f:53:02: 9d:af:f3:2e:a9:ba:74:c7:a2:b3:01:18:c5:82:91: 06:64:00:2a:78:24:5b:2a:ba:56:a3:f5:08:9d:b2: 9b:f8:22:fb:49:61:36:e6:b3:be:ac:07:25:59:98: ac:e1:d8:ab:69:a6:56:ca:c1:5d:4f:1c:c8:17:93: 8b:f7:c8:82:9e:87:ac:cb:b3:f8:21:e2:eb:36:6a: ca:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C3:8D:1C:18:8A:5C:E6:21:01:3D:77:8A:4D:D3:92:E9:D9:D2:BD X509v3 Authority Key Identifier: keyid:59:A9:AB:37:0F:75:3D:82:77:19:87:E2:FD:7C:A1:95:78:E1:1D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/59A9AB370F753D82771987E2FD7CA19578E11D07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/59A9AB370F753D82771987E2FD7CA19578E11D07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4d:ee:a9:ee:b3:8f:c0:ec:01:1a:af:58:8e:13:89:53:7d: e4:f2:fb:5a:bf:a1:25:d7:5b:c6:bf:97:ed:1c:1e:cd:9f:1f: 89:30:a8:4a:94:52:d4:b5:c1:59:34:dd:b5:d2:f8:aa:d2:f4: d3:0e:a2:b3:14:87:53:38:61:40:97:2c:60:f6:3c:ba:52:e7: f6:de:24:59:f8:37:62:64:75:b2:b5:98:5f:44:c8:f2:44:a2: 63:e3:17:7f:56:b4:fd:4e:67:56:6f:1f:e5:68:18:22:e0:59: 29:83:5c:69:01:11:c1:36:3f:d7:89:97:f6:95:62:91:b7:3e: 9c:b9:67:9d:ee:40:a5:c4:a5:c6:37:a9:95:4c:23:07:47:5f: 3a:42:95:5e:19:36:3c:93:be:6e:1f:f9:3c:5b:4b:7f:ba:56: 5a:c1:d1:60:30:99:78:df:02:73:6a:5d:2d:65:f1:fe:a2:59: bb:30:e9:58:5b:ee:24:29:de:8e:d6:53:c8:c0:b5:be:fa:65: e0:81:3a:69:67:64:cb:6f:0c:7d:8c:2d:92:20:42:03:b9:d0: c7:37:3e:3b:aa:d6:3e:e9:69:b9:9a:0f:cd:bf:69:c9:5d:5f: de:a8:c3:c9:2d:88:f2:23:c3:93:45:b3:13:ca:9b:d6:a8:01: cd:14:d2:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZZlACulZmtERrMS9oxkkxNeDlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlBOUFCMzcwRjc1M0Q4Mjc3MTk4N0UyRkQ3Q0ExOTU3 OEUxMUQwNzAeFw0yNjA5MTcwMjU3MTNaFw0yNjA5MTgwNDE5MTNaMDMxMTAvBgNV BAMTKEJBQzM4RDFDMTg4QTVDRTYyMTAxM0Q3NzhBNEREMzkyRTlEOUQyQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9u2iW7IosIbqnDWYkd0+yiSKw GjlX3kCmKuRcHtWsxfXPh3nW8OJsjFzIgxgda6ou4StvktGQ1+18/1OcxTXgcCpc eR27FD3l71sjWCk3+0Ag2s4Soh27P/Qv9wjMsiN1MGX5OOxoae1093PqUPdiek5I /tgebZGCkhEkWoihQXggiMGBamSpIR3BYmDzy7iXMDPXTxNyDkW7pDawvQlJ24e6 KDFOeqy8eMijyMRClS9TAp2v8y6punTHorMBGMWCkQZkACp4JFsqulaj9Qidspv4 IvtJYTbms76sByVZmKzh2KtpplbKwV1PHMgXk4v3yIKeh6zLs/gh4us2asoFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUusONHBiKXOYhAT13ik3TkunZ0r0wHwYDVR0j BBgwFoAUWamrNw91PYJ3GYfi/XyhlXjhHQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2M2MGE2YzEtYzA4MS00MzliLWFlOGQtODE0OWI2MzRkNWEyLzAvNTlBOUFCMzcw Rjc1M0Q4Mjc3MTk4N0UyRkQ3Q0ExOTU3OEUxMUQwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81OUE5QUIzNzBGNzUzRDgyNzcxOTg3RTJGRDdDQTE5NTc4RTEx RDA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2M2MGE2YzEtYzA4MS00MzliLWFl OGQtODE0OWI2MzRkNWEyLzAvNTlBOUFCMzcwRjc1M0Q4Mjc3MTk4N0UyRkQ3Q0Ex OTU3OEUxMUQwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJN7qnus4/A7AEar1iOE4lTfeTy+1q/oSXX W8a/l+0cHs2fH4kwqEqUUtS1wVk03bXS+KrS9NMOorMUh1M4YUCXLGD2PLpS5/be JFn4N2JkdbK1mF9EyPJEomPjF39WtP1OZ1ZvH+VoGCLgWSmDXGkBEcE2P9eJl/aV YpG3Ppy5Z53uQKXEpcY3qZVMIwdHXzpClV4ZNjyTvm4f+TxbS3+6VlrB0WAwmXjf AnNqXS1l8f6iWbsw6Vhb7iQp3o7WU8jAtb76ZeCBOmlnZMtvDH2MLZIgQgO50Mc3 Pjuq1j7pabmaD82/acldX96ow8ktiPIjw5NFsxPKm9aoAc0U0sk= -----END CERTIFICATE-----Generated at Thu Sep 17 14:27:00 2026 by rpki-client